CVE-2024-12356

Unauthenticated Remote Code Execution in BeyondTrust Remote Support and Privileged Remote Access via Argument Injection and a PostgreSQL String-Escape Bypass Ethical Warning: Research, educational, and authorized testing purposes only. Please do not use against systems without permission...

CVE-2025-45346

CVE-2025-45346 – Inyección SQL Basada en Tiempo en Bacula-Web Extracción de Versión de PostgreSQL 📝 Resumen Título de la Vulnerabilidad : Inyección SQL Ciega Basada en Tiempo en Bacula-Web Producto : Bacula-Web Versiones Afectadas : Confirmado en versiones que admiten backend PostgreSQL ID de CVE...

CVE-2025-1094-Exploit

CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repository contains a proof of concept PoC exploit for CVE-2025-1094 , a vulnerability in PostgreSQL that allows an SQL Injection SQLi attack to escalate to Remote Code Execution RCE through WebSocket hijacking. Overview This exploit...

engagement-mgr

Engagement Manager Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and PostgreSQL. The app includes a calendar, engagements, clients, contacts, findings, and operators. Lee Baird @discoverscripts Jay...

CVE-2024-27304-PoC

CVE-2024-27304-PoC references DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp A simple web application with login functionality. Only administrators can log in. This application uses PostgreSQL...

briefr

BRIEFR Self-hosted CVE intelligence for analysts who need answers, not another raw feed Live demo · Documentation · Quick start · Screenshots What is BRIEFR? BRIEFR is a self-hosted CVE intelligence dashboard. It pulls public vulnerability and threat feeds into your PostgreSQL database, then give...

CVE-2025-59470-PostgreSQL-Command-Injection

Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Advanced PostgreSQL SQL Injection Exploitation Tool 🚨 DISCLAIMER FOR AUTHORIZED SECURITY TESTING ONLY Unauthorized use is illegal. Use only on systems you own or have explicit permission to test. ⚡ QUICK START Install & Run git clone...

CVE-2026-51992

CVE-2026-51992 Within ClickHouse, a feature exists that allows a user with the correct permissions to create dictionaries in order to interact with different databases and run specific queries on them. For PostgreSQL, SELECT queries are wrapped in a COPY QUERY TO STDOUT statement before being...

CVE-2026-6471

🐘 CVE-2026-6471 — PostGREShell 🛢️ A critical security vulnerability that has been present in PostgreSQL for 12 years has been discovered! A defensive, non-destructive vulnerability checker for CVE-2026-6471 📌 Overview CVE-2026-6471 is a PostgreSQL authorization vulnerability involving the logical...

cve-2019-9193

CVE-2019-9193 • CVE-2019-9193 Vulnerability PostgreSQL has a vulnerability that allows arbitrary code execution within the DB's operating system via the “COPY TO / FROM PROGRAM” feature. The attack vector involves users who are “SuperUser” or belong to the “pgexecuteserverprogram” group...

cve-2026-6471-postgres-logical-decoding-dlopen

PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...

[SECURITY] Fedora 45 Update: postgresql19-19beta1-6.fc45

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

[SECURITY] Fedora 45 Update: postgresql18-18.3-12.fc45

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

[SECURITY] Fedora 45 Update: postgresql18-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql17-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql17-17.9-10.fc45

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

[SECURITY] Fedora 45 Update: postgresql16-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql16-16.14-5.fc45

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

[SECURITY] Fedora 45 Update: pgmodeler-1.2.2-4.fc45

PostgreSQL Database Modeler, or simply, pgModeler is an open source tool for modeling databases that merges the classical concepts of entity-relationship diagrams with specific features that only PostgreSQL implements. The pgModeler translates the models created by the user to SQL code and apply...