Another-Metabase-RCE-CVE-2023-38646

Extensión del RCE sin autenticación en Metabase CVE-2023-38646 explicado aquí Esto me ayudó a evitar errores relacionados con "base de datos ya en uso" con H2 y postgre como motores "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl": null,...

postgres-bruteforcer

postgres-bruteforcer About This Go script reads a list of usernames and passwords from a file called creds.txt and tests them against a PostgreSQL database. The script accepts an IP of the PostgreSQL server as a command line argument or a text file of ip's. If an access is granted, the script...

PT-2026-104440

Name of the Vulnerable Software and Affected Versions postgresql-operator charm versions prior to 1189 arm64 and 1190 amd64 in the dev track 14/edge postgresql-operator charm versions prior to 1216 arm64 and 1217 amd64 in the stable track 14/stable Description The postgresql-operator charm utiliz...

DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002

fofa syntax: title="DataEase" poc: "POST /de2api/datasource/validate HTTP/1.1 Host: your-ip Accept-Encoding: gzip, deflate, br, zstd sec-ch-ua: ""Google Chrome"";v=""135"", ""Not-A.Brand"";v=""8"", ""Chromium"";v=""135"" User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML...

Rocky Linux 8.6 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0148)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260148 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0373)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260373 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1706700142)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1706700142 advisory. - In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1055)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261055 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976,...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0565)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260565 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1059)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261059 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-10979, CVE-2024-10976,...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_1169)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261169 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-7348. Tenable has extracted the preceding...

Rocky Linux 8.8 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0890)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260890 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.8. It addresses 9 CVEs: CVE-2023-39417, CVE-2023-5868,...

Rocky Linux 8.8 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0370)

The Rocky Linux 8.8 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260370 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 8.8. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 9.4 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_0564)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260564 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Rocky Linux 9.2 [CIQ] Security Update: postgres-decoderbufs / postgres-decoderbufs-debuginfo / etc (ciqsa-2026_1176)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261176 advisory. This advisory aggregates security fixes for the postgres-decoderbufs SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2025-1094. Tenable has extracted the preceding...

Security Bulletin: EDB Postgres AI Database with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI database products. Hence, IBM strongly recommends upgrading to 18.6 Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

CVE-2026-91154 Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

postgresql:12 security update

An update is available for module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, postgres-decoderbufs, postgresql, pgaudit, module.postgresql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 8 : postgresql:15 (ELSA-2026-69923)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69923 advisory. pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release...

PT-2026-98258

Name of the Vulnerable Software and Affected Versions AWS pgcollection versions 2.0.0 through 2.1.1 Description A type confusion issue exists in this PostgreSQL extension. An authenticated remote user can execute arbitrary code as the postgres operating system user by using crafted SQL statements...