Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...

postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN

A flaw was found in PostgreSQL psql. During the COPY FROM STDIN operation, untrusted data can be mistakenly interpreted as psql commands if an error injection causes the command to fail prematurely. This could allow an attacker to achieve arbitrary command execution. Successful exploitation...

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow

A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the plperl component when returning a tied hash. This allows a function owner to execute arbitrary code as the operating system user running the database by providing a specially crafted function body. This could lead ...

tirreno

tirreno tirreno는 보안 프레임워크입니다. tirreno tir.ˈrɛ.no는 제품을 위협, 사기 및 남용으로부터 이해, 모니터링 및 보호하는 데 도움을 줍니다. 기존 사이버 보안이 인프라와 네트워크 경계에 초점을 맞추는 반면, 대부분의 침해는 손상된 계정과 방화벽, SIEM, WAF 및 기타 방어 체계를 우회하는 애플리케이션 로직 남용을 통해 발생합니다. tirreno는 위협이 실제로 발생하는 곳, 즉 제품 내부에서 감지합니다. tirreno는 수제로 작성되었으며 의존성이 적고 "로우테크"인 PHP/PostgreS...

CVE-2026-2005

CVE-2026-2005 - Эксплойт переполнения буфера кучи в pgcrypto PostgreSQL Эксплойт PoC для переполнения буфера в куче при парсинге ключа сессии PGP в расширении pgcrypto PostgreSQL, приводящий к произвольному чтению/записи памяти и повышению привилегий до суперпользователя. Полные технические детал...

darwis-taxii

DARWIS TAXII Высокопроизводительный сервер TAXII Trusted Automated eXchange of Indicator Information, написанный на Rust. Порт на Rust EclecticIQ OpenTAXII с полной совместимостью баз данных. Возможности TAXII 1.x — Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 — Полный...

GoEnumerator

О GoEnumerator GoEnumerator — это инструмент, который я пишу ради удовольствия, но также использую для собственной разведки, поэтому я буду продолжать добавлять новые функции, чтобы ускорить первые шаги в любой CTF-разведке или профессиональном пентесте, а также добавлю функции и опции, чтобы...

CVE-2025-1094-PoC-Postgre-SQLi

Анализ CVE-2025-1094 и настройка эмуляции Этот детальный анализ, проведенный 14 марта 2025 года, исследует CVE-2025-1094 — гипотетическую уязвимость SQL-инъекции высокой степени серьезности в PostgreSQL, основанную на предоставленной настройке эмуляции и выполнении доказательства концепции PoC...

CVE-2026-20253

Splunk Enterprise — учебная лаборатория CVE-2026-20253 Splunk Enterprise 10.2.3 · PostgreSQL recovery sidecar · CWE-306 Отсутствие аутентификации для критической функции Авторизованная автономная репродукция, которая моделирует реальный бюллетень безопасности для обучения защите. Она не содержит...

Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection

Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint PhoneAppsHandler.pm. The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An...

Apache Superset < 4.0.2 - SQL Injection

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...

Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query

Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk RCE до аутентификации Инструмент генерации артефактов обнаружения уязвимости Splunk Pre-Auth RCE 1day Обнаружение в действии Инструмент генерации артефактов обнаружения пытается получить доступ к конечной точке /v1/postgres/recovery/backup службы PostgreSQL Sidecar Service,...