GHSA-6WMF-3R64-VCWV vulnerabilities

Vulnerabilities for packages: pghero-fips, pghero...

CVE-2026-61845 vulnerabilities

Vulnerabilities for packages: pghero-fips, pghero...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, pghero, logstash, kube-logging-operator, pghero-fips, commercial-gitlab-rails-ee, ruby3.3-mail...

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, pghero, logstash, kube-logging-operator, pghero-fips, commercial-gitlab-rails-ee, ruby3.3-mail...

CVE-2026-73648 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, ruby3.4-rails, pghero, ruby3.3-rails, gitlab-rails-ce, pghero-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, ruby4.0-rails, ruby3.2-rails...

CVE-2026-73490 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, ruby3.4-rails, pghero, ruby3.3-rails, gitlab-rails-ce, pghero-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, ruby4.0-rails, ruby3.2-rails...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, ruby3.4-rails, pghero, ruby3.3-rails, gitlab-rails-ce, pghero-fips, commercial-gitlab-rails-ee, gitlab-rails-ce-fips, ruby4.0-rails, ruby3.2-rails...

PgHero - Detect

PgHero products was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PgHero products was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PgHero - Detect', 'description': 'PgHero products was detected....

PgHero Dashboard Exposure Panel - Detect

PgHero Dashboard Exposure panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """PgHero Dashboard Exposure panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PgHero Dashboard Exposure Panel...

EUVD-2020-0642

Malware in sbrugna...

EUVD-2023-0557

Malicious code in bioql PyPI...

CVE-2020-16253

The PgHero gem through 2.6.0 for Ruby allows CSRF...

Information Disclosure

pghero is vulnerable to Information Disclosure. The vulnerability exists because the explain function in homecontroller.rb does not properly handle sensitive information in the error message of query results, allowing an attacker to access sensitive information...

Information Exposure

Overview pghero is a performance dashboard for Postgres. Affected versions of this package are vulnerable to Information Exposure via the explain functionality, due to improper validation of the user query, which might result in data leakage from the query error message. Remediation Upgrade pgher...

PgHero Allows Information Disclosure Through EXPLAIN Feature

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

GHSA-VF99-XW26-86G5 PgHero Allows Information Disclosure Through EXPLAIN Feature

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

CVE-2023-22626

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

Information disclosure

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...

CVE-2023-22626

PgHero (Python/DB admin dashboard for PostgreSQL) prior to 3.1.0 contains a confidentiality flaw where the EXPLAIN path can leak query results via error messages. The root cause is information disclosure in error responses, which may expose database content or, in some cases, file contents on the...

CVE-2023-22626

PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server...