587 matches found
CVE-2025-1094
Я написал этот эксплойт, ссылаясь на PoC, доступный по адресу CVE-2025-1094 CVE‑2025‑1094 | Уязвимость санитизации ввода в PostgreSQL Обзор CVE‑2025‑1094 — это уязвимость санитизации ввода в escape-функциях libpq PostgreSQL и интерактивном инструменте psql. Она вызвана некорректной обработкой...
POC-CVE-2025-1094
POC CVE-2025-1094: SQL-инъекция в PostgreSQL psql Proof of Concept для критической уязвимости SQL-инъекции в клиентской библиотеке PostgreSQL libpq и утилите psql 📋 Содержание 1. Обзор уязвимости 2. Структура каталогов проекта 3. Анализ полезной нагрузки атаки 4. Инструкция по использованию 5...
Astra Linux – Vulnerability in PostgresSQL 11
Improper neutralization of quoting syntax in PostgreSQL’s libpq functions such as PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to exploit SQL injection attacks under certain usage patterns. Specifically, SQL injection requires the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099534)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099534 advisory. Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte...
Unity Linux 20.1070a Security Update: libpq (UTSA-2026-099554)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099554 advisory. Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. Th...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099517)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099517 advisory. Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocati...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099467)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099467 advisory. Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions allows the server superuser ...
Untrusted Search Path
Overview Affected versions of this package are vulnerable to Untrusted Search Path via the amcheck function. An attacker can execute arbitrary functions with the privileges of expression index owners by setting a malicious search path prior to invoking the amcheck function. Remediation Upgrade...
RHSA-2026:50863 Red Hat Security Advisory: libpq security update
Bulletin has no description...
postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory
A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...
RHSA-2026:49909 Red Hat Security Advisory: libpq security update
Bulletin has no description...
RHSA-2026:49908 Red Hat Security Advisory: libpq security update
Bulletin has no description...
RHSA-2026:47090 Red Hat Security Advisory: libpq security update
Bulletin has no description...
Important: Red Hat Security Advisory: libpq security update
An update for libpq is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
RHEL 8 : libpq (RHSA-2026:47090)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47090 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql:...
libpq security update
An update is available for libpq. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpq package provides the PostgreSQL client library, which allows client...
RLSA-2026:44308 Important: libpq security update
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 For more details about the security issues,...
RockyLinux 10 : libpq (RLSA-2026:44391)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:44391 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...
MiracleLinux 9 : postgresql:18 (AXSA:2026-1357:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1357:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...