472 matches found
CVE-2025-8714-POC
CVE-2025-8714-POC PoC de RCE en PostgreSQL — CVE-2025-8714 PoC de Ejecución Remota de Código en PostgreSQL — CVE-2025-8714 pgdump Reverse Shell Este repositorio presenta una prueba de concepto PoC para la vulnerabilidad crítica CVE-2025-8714 que afecta a versiones PostgreSQL anteriores a: 17.6,...
CVE-2026-116330
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
CVE-2026-116318
SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...
postgresql: postgresql: Arbitrary SQL execution via improper constraint quoting in pg_dump
A flaw was found in PostgreSQL's pgdump utility. An authenticated database user with permission to create objects can trigger a SQL injection vulnerability by defining an inherited column with a child-local constraint whose name requires quoting. When the resulting database dump is restored, this...
postgresql: postgresql: Arbitrary code execution via predictable restriction key in pg_dump restore script
A flaw was found in PostgreSQL. When backing up a database using the pgdump utility with tar-format archives, the generated restore script uses a predictable restriction key. A compromised or malicious database server can exploit this flaw by injecting untrusted data, leading to arbitrary code...
CVE-2026-116330
A flaw was found in PostgreSQL. When backing up a database using the pgdump utility with tar-format archives, the generated restore script uses a predictable restriction key. A compromised or malicious database server can exploit this flaw by injecting untrusted data, leading to arbitrary code...
CVE-2026-116318
A flaw was found in PostgreSQL's pgdump utility. An authenticated database user with permission to create objects can trigger a SQL injection vulnerability by defining an inherited column with a child-local constraint whose name requires quoting. When the resulting database dump is restored, this...
ALPINE-CVE-2026-116330
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
CVE-2026-116330
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
DEBIAN-CVE-2026-116330
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
DEBIAN-CVE-2026-116318
SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...
ALPINE-CVE-2026-116318
SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...
CVE-2026-116318
SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...
CVE-2026-116330
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
CVE-2026-116330 PostgreSQL pg_dump tar restore.sql fails to block psql command injection
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
CVE-2026-116330
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
EUVD-2026-124509
Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...
CVE-2026-116330
PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25 are vulnerable to a psql command injection via the undocumented restore.sql file. The issue stems from the inclusion of untrusted data in the pg_dump tar-format, where a predictable restriction key allows a compromised origin serve...
EUVD-2026-124498
SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...
CVE-2026-116318
SQL injection in PostgreSQL pgdump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions...