169 matches found
CVE-2025-2945
CVE-2025-2945 - pgAdmin4 認証済みRCEエクスプロイト 作者: G0D150NE バージョン: 2.0.0 CVE: CVE-2025-2945 深刻度: 重大 CVSS 9.9 📌 説明 バージョン 8.10〜9.1 に影響する pgAdmin4 リモートコード実行 RCE の脆弱性に対するエクスプロイトです。 この脆弱性は /sqleditor/querytool/download エンドポイントに存在し、querycommited パラメータがサニタイズされずに Python の eval 関数へ渡されるため、任意のコード実行が可能になります。 ⚡ 機能 ✅...
CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-
CVE-2025-2945 – pgAdmin4 認証済みRCE（PoC） このリポジトリには、pgAdmin4 の特定バージョンに影響する脆弱性 CVE-2025-2945 に関する概念実証（PoC）スクリプト が含まれています。本スクリプトは、セキュリティ研究および許可を得たペネトレーションテストを目的として作成されました。 この問題により、SQLエディタにアクセスできる認証済みpgAdminユーザーが、Query Toolパネルの初期化フローを悪用してリモートコード実行を引き起こすことができます。このPoCは、教育・監査・防御目的のみ で本脆弱性を実証するものです。...
cve-2025-2945-poc
pgAdmin4 Query Tool 認証済みRCE PoC pgAdmin4 バージョン 8.10 - 9.1 の pgAdmin4 クエリツールの認証済みRCE脆弱性 CVE-2025-2945 を悪用するスタンドアロンのPythonスクリプトです。 Metasploitモジュールから移植: pgadminquerytoolauthenticated.rb 参照: https://vulners.com/cve/CVE-2025-2945 https://nvd.nist.gov/vuln/detail/CVE-2025-2945...
GHSA-HJ66-6F7G-4R5V vulnerabilities
Vulnerabilities for packages: kserve-models-web-app, kserve-xgbserver-fips, dbt-bigquery, kubeflow-volumes-web-app, mlrun-fips, openstack-client-2026.1, mcp-atlassian, dagster-fips, k8s-sidecar, pgadmin4, kserve, openstack-keystone-2026.1-fips, jupyter-base-notebook, azureml-inference-server-http...
CVE-2026-49265 vulnerabilities
Vulnerabilities for packages: kserve-models-web-app, kserve-xgbserver-fips, dbt-bigquery, kubeflow-volumes-web-app, mlrun-fips, openstack-client-2026.1, mcp-atlassian, dagster-fips, k8s-sidecar, pgadmin4, kserve, openstack-keystone-2026.1-fips, jupyter-base-notebook, azureml-inference-server-http...
CVE-2026-49264 vulnerabilities
Vulnerabilities for packages: kserve-models-web-app, kserve-xgbserver-fips, dbt-bigquery, kubeflow-volumes-web-app, mlrun-fips, openstack-client-2026.1, mcp-atlassian, dagster-fips, k8s-sidecar, pgadmin4, kserve, openstack-keystone-2026.1-fips, jupyter-base-notebook, azureml-inference-server-http...
GHSA-XPV3-W29H-X7CV vulnerabilities
Vulnerabilities for packages: kserve-models-web-app, kserve-xgbserver-fips, dbt-bigquery, kubeflow-volumes-web-app, mlrun-fips, openstack-client-2026.1, mcp-atlassian, dagster-fips, k8s-sidecar, pgadmin4, kserve, openstack-keystone-2026.1-fips, jupyter-base-notebook, azureml-inference-server-http...
[SECURITY] Fedora 44 Update: pgadmin4-9.18-1.fc44
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
[SECURITY] Fedora 45 Update: pgadmin4-9.18-1.fc45
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
Fedora 43 : pgadmin4 (2026-dddd2792e3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dddd2792e3 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 45 : pgadmin4 (2026-035cf95dc5)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-035cf95dc5 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
ROS-20260921-73-0136
The vulnerability in pgadmin4 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
GHSA-F66Q-9RF6-8795 vulnerabilities
Vulnerabilities for packages: pgadmin4-fips, pgadmin4...
OPENSUSE-SU-2026:11508-1 pgadmin4-9.17-1.1 on GA media
These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-76434
These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...
[SECURITY] Fedora 44 Update: pgadmin4-9.17-1.fc44
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
Fedora 43 : pgadmin4 (2026-bacb14f76f)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bacb14f76f advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 44 : pgadmin4 (2026-f0550055a7)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f0550055a7 advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...
