cve_manager

Project Description A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their associated products on a daily schedule. The spreadsheet can then be manually interpreted for risk to your specific organization. Based off of a...

CVE-2019-9193-Postgresql-RCE

usage: CVE-2019-9193.py -h -i IP -p PORT -d DATABASE -c COMMAND -t TIMEOUT -U USER -P PASSWORD example: python3 CVE-2019-9193.py -i 127.0.0.1 -p 5432 -U postgres -c 'id' example 2 : python3 CVE-2019-9193.py -h localhost -p 5432 -U postgres -c 'id' output: + Connecting to PostgreSQL Database on...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution Proof of Concept PostgreSQL Database from version 9.3 to 12.3 latest tested are vulnerable to Authenticated Remote Code Execution. Even if it isn't considered to be a vulnerability itself by the development team, this could b...

postgres-bruteforcer

postgres-bruteforcer About This Go script reads a list of usernames and passwords from a file called creds.txt and tests them against a PostgreSQL database. The script accepts an IP of the PostgreSQL server as a command line argument or a text file of ip's. If an access is granted, the script...

CVE-2026-9082

CVE-2026-9082 / Drupal SA-CORE-2026-004 Proof of Concept Disclaimer: This Proof-of-Concept is for educational and research purposes only. Do not use this software against any system you do not own or have explicit permission to test. The author assumes no liability for misuse or damage caused by...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

mapXplore

mapXplore English mapXplore es una aplicación modular, que importa los datos extraidos de sqlmap, a una base de datos postgres o sqlite. Sus principales caracteristicas son: Importación de información extraida de sqlmap a postgres o sqlite para su posterior consulta. Información sanitizada, lo qu...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

cve-2019-9193

CVE-2019-9193 • CVE-2019-9193 Vulnerability PostgreSQL has a vulnerability that allows arbitrary code execution within the DB's operating system via the “COPY TO / FROM PROGRAM” feature. The attack vector involves users who are “SuperUser” or belong to the “pgexecuteserverprogram” group...

drupal-jsonapi-sqli-scanner

CVE-2026-9082 — SQL-инъекция в Drupal на базе PostgreSQL Массовый сканер и инструмент эксплуатации Неаутентифицированная SQL-инъекция в ядре Drupal PostgreSQL Инъекция ключа массива фильтра JSON:API через злоупотребление именами PDO-плейсхолдеров Обзор CVE-2026-9082 — это чрезвычайно критическая...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 Splunk Pre-Auth RCE Splunk Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to access the /v1/postgres/recovery/backup endpoint of PostgreSQL Sidecar Service to verify if it is accessible or not: 400 response - probably...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2026-2005

CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit PoC exploit for a heap-based buffer overflow in the PostgreSQL pgcrypto extension's PGP session key parsing, leading to arbitrary memory read/write and privilege escalation to superuser. For full technical details, see the Zeroday Cloud...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

heartbleeder

Heartbleeder Testa seus servidores para OpenSSL CVE-2014-0160 também conhecido como Heartbleed. AVISO : Não há garantias sobre a precisão dos resultados, e você deve verificá-los de forma independente, verificando sua compilação OpenSSL. Pull requests são bem-vindos. Uso root@kitploit: $...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS è uno strumento di raccolta di intelligence e data mining per penetration tester. Ha lo scopo di facilitare la raccolta intelligente in modo rapido, autonomo, centralizzato e completo, automatizzando: eseguire strumenti Kali Linux ad es.,...

django_cve_2019_19844_poc

djangocve201919844poc PoC per CVE-2019-19844 Requisiti Python 3.7.x PostgreSQL 9.5 o superiore Configurazione 1. Creare un database ad es. djangocve201919844poc 2. Impostare il nome del database nella variabile d'ambiente DJANGODATABASENAME ad es. export DJANGODATABASENAME=djangocve201919844poc 3...

CVE-2026-9082

Scanner Drupal CVE-2026-9082 Scanner semipassivo que detecta instalações Drupal potencialmente vulneráveis ao CVE-2026-9082 injeção SQL no PostgreSQL. Nenhum payload SQL enviado. Nenhuma solicitação que altere o estado. Versões Vulneráveis Ramo| Afetado| Corrigido ---|---|--- 10.4.x| 8.9.0 —...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...