Exploit for CVE-2025-2945

pgAdmin4 Query Tool Authenticated RCE PoC Standalone python s...

Exploit for CVE-2025-2945

CVE-2025-2945PoC pgAdmin Proof of Concept pgAdmin Query To...

pgadmin4-9.2-1.1 on GA media (moderate)

pgadmin4-9.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14983-1 Rating: moderate Cross-References: CVE-2024-6238 CVE-2024-9014 CVE-2025-2945 CVE-2025-2946 CVSS scores: CVE-2024-6238 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-9014 SUSE : 8...

CVE-2025-2945

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/querytool/download, where the querycommited parameter and /cloud/deploy endpoint, where the highavailability parameter is unsafe...

CVE-2025-2945

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/querytool/download, where the querycommited parameter and /cloud/deploy endpoint, where the highavailability parameter is unsafe...

CVE-2025-2945

creationtimestamp| type| source ---|---|--- 2025-04-03 12:35:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10196 2025-04-03 13:27:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114274261341230556 2025-04-03 13:27:29+00:00| seen|...

CVE-2025-2945 pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/querytool/download, where the querycommited parameter and /cloud/deploy endpoint, where the highavailability parameter is unsafe...

CVE-2025-2945

CVE-2025-2945 affects pgAdmin 4 (versions 8.10–9.1). An authenticated user can trigger remote code execution by sending a crafted payload via the query_tool/download (query_commited) or cloud/deploy (high_availability) endpoints, which unsafe-pass data to Python eval(). Proofs of concept exist (a...