CVE-2025-2945

CVE-2025-2945 - pgAdmin4 Authenticated RCE Exploit Author: G0D150NE Version: 2.0.0 CVE: CVE-2025-2945 Severity: Critical CVSS 9.9 📌 Description Exploit for pgAdmin4 Remote Code Execution RCE vulnerability affecting versions 8.10 to 9.1. The vulnerability exists in the /sqleditor/querytool/downloa...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This repository contains a proof-of-concept script created for security research and authorized penetration testing involving the vulnerability CVE-2025-2945 , affecting certain versions of pgAdmin4. The issue allows an authenticated pgAdmin user wit...

cve-2025-2945-poc

pgAdmin4 Query Tool Authenticated RCE PoC Standalone python script to exploit pgAdmin4 query tool authenticated RCE vulnerability CVE-2025-2945 in pgAdmin4 version 8.10 - 9.1. Ported from Metasploit module: pgadminquerytoolauthenticated.rb References: https://vulners.com/cve/CVE-2025-2945...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: authentik, dask-kubernetes-fips, kubeflow-pipelines, kubeflow-volumes-web-app, kserve-huggingfaceserver-cuda-13.3, k8s-sidecar, kserve-xgbserver-fips, mcp-atlassian, pgadmin4, ansible-operator, datadog-agent, metaflow-service-fips, jupyter-base-notebook, dagster-fips...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: authentik, dask-kubernetes-fips, kubeflow-pipelines, kubeflow-volumes-web-app, kserve-huggingfaceserver-cuda-13.3, k8s-sidecar, kserve-xgbserver-fips, mcp-atlassian, pgadmin4, ansible-operator, datadog-agent, metaflow-service-fips, jupyter-base-notebook, dagster-fips...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: authentik, dask-kubernetes-fips, kubeflow-pipelines, kubeflow-volumes-web-app, kserve-huggingfaceserver-cuda-13.3, k8s-sidecar, kserve-xgbserver-fips, mcp-atlassian, pgadmin4, ansible-operator, datadog-agent, metaflow-service-fips, jupyter-base-notebook, dagster-fips...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: authentik, dask-kubernetes-fips, kubeflow-pipelines, kubeflow-volumes-web-app, kserve-huggingfaceserver-cuda-13.3, k8s-sidecar, kserve-xgbserver-fips, mcp-atlassian, pgadmin4, ansible-operator, datadog-agent, metaflow-service-fips, jupyter-base-notebook, dagster-fips...

[SECURITY] Fedora 44 Update: pgadmin4-9.18-1.fc44

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

[SECURITY] Fedora 45 Update: pgadmin4-9.18-1.fc45

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Fedora 45 : pgadmin4 (2026-035cf95dc5)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-035cf95dc5 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : pgadmin4 (2026-dddd2792e3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dddd2792e3 advisory. Update to pgadmin-9.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ROS-20260921-73-0136

The vulnerability in pgadmin4 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

GHSA-F66Q-9RF6-8795 vulnerabilities

Vulnerabilities for packages: pgadmin4, pgadmin4-fips...

OPENSUSE-SU-2026:11508-1 pgadmin4-9.17-1.1 on GA media

These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76434

These are all security issues fixed in the pgadmin4-9.17-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 44 Update: pgadmin4-9.17-1.fc44

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Fedora 43 : pgadmin4 (2026-bacb14f76f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bacb14f76f advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 44 : pgadmin4 (2026-f0550055a7)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f0550055a7 advisory. Update to pgadmin-9.17. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...

pgAdmin Detection

Detects pgAdmin4 browser UI and misc/ping endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detect pgAdmin PostgreSQL web console.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.scanner.http.responsevalidation import ishtmlresponse class ModuleScanne...