EUVD-2026-83418

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, createpartitiontime reads the writable partconfig.timeencoder text value and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with the documented...

CVE-2026-61781 pg_partman has privilege escalation through SQL injection in create_partition_time()

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, createpartitiontime reads the writable partconfig.timeencoder text value and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with the documented...

CVE-2026-2005

CVE-2026-2005 — Desbordamiento de búfer en el heap de pgcrypto de PostgreSQL Commit objetivo: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Resumen Campo| Detalle ---|--- CVE| CVE-2026-2005 Tipo| Desbordamiento de búfer en el heap Componente| contrib/pgcrypto/pgp-pubdec.c ...

CLEANSTART-2026-UY39386 Security fix for CVE-2023-5870 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5870 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS91347 Security fix for CVE-2023-5869 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5869 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JD37353 Security fix for CVE-2023-5868 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5868 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA69444 Security fix for CVE-2024-0985 applied in: postgresql15 15.6-r0, postgresql16 16.2-r0, postgresql17 16.2-r0, postgresql18 16.2-r0

CVE-2024-0985 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PN72397 Security fix for CVE-2024-7348 applied in: postgresql15 15.8-r0, postgresql16 16.4-r0, postgresql17 16.4-r0, postgresql18 16.4-r0

CVE-2024-7348 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NE41969 Security fix for CVE-2025-8715 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8715 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HH85591 Security fix for CVE-2025-8714 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8714 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LW24877 Security fix for CVE-2025-8713 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8713 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

postgres-bruteforcer

postgres-bruteforcer Acerca de Este script de Go lee una lista de nombres de usuario y contraseñas de un archivo llamado creds.txt y los prueba contra una base de datos PostgreSQL. El script acepta una IP del servidor PostgreSQL como argumento de línea de comandos o un archivo de texto con IPs. S...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

EUVD-2026-82597

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-85878

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

MiracleLinux 9 : [security - high] postgresql:16 (AXSA:2026-1882:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1882:01 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL:...

CVE-2026-85878

CVE-2026-85878 is an improper authorization vulnerability in Azure Database for PostgreSQL that allows an authorized attacker to elevate privileges over a network. Microsoft's CNA rates it CVSS 3.1 9.9 (CRITICAL) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a low-complexity ne...

CVE-2026-53556

SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/previewData endpoint in backend/apps/datasource/crud/datasource.py incorporates the client-controlled tablename value into generated SQL without safe identifier handling...