17163 matches found
mihari
mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...
CVE-2026-103223
The io.vertx:vertx-pg-client component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] is vulnerable to an out-of-memory crash. The PostgreSQL message decoder fails to validate the 4-byte message length field from the PostgreSQL wire protocol. A mal...
CVE-2026-103223
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...
EUVD-2026-101956
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...
CVE-2026-102463
Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] are vulnerable in the vertx-pg-client component. The DataTypeCodec.binaryDecodeArray function fails to enforce an upper bound on the 32-bit dimension count provided by a PostgreSQL server during binary ar...
CVE-2026-102463
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the binary array decoder in vertx-pg-client DataTypeCodec.binaryDecodeArray allocates a Java array sized by a server-declared 32-bit dimension count with no upper bound. A malicious or compromised PostgreSQL...
EUVD-2026-101958
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the binary array decoder in vertx-pg-client DataTypeCodec.binaryDecodeArray allocates a Java array sized by a server-declared 32-bit dimension count with no upper bound. A malicious or compromised PostgreSQL...
tirreno
tirreno tirreno is a security framework. tirreno tir.ˈrɛ.no helps understand, monitor, and protect your product from threats, fraud, and abuse. While classic cybersecurity focuses on infrastructure and network perimeter, most breaches occur through compromised accounts and application logic abuse...
CVE-2020-7471
CVE-2020-7471 This repository provides the environment and POC for CVE-2020-7471 Potential SQL injection via StringAggdelimiter vulnerability. Affected Django versions 1.11 to 1.11.28 exclusive 2.2 to 2.2.10 exclusive 3.0 to 3.0.3 exclusive The following steps are required before downloading and...
POC-CVE-2025-1094
POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...
django_cve_2019_19844_poc
djangocve201919844poc PoC for CVE-2019-19844 Requirements Python 3.7.x PostgreSQL 9.5 or higher Setup 1. Create databasee.g. djangocve201919844poc 2. Set the database name to the environment variable DJANGODATABASENAMEe.g. export DJANGODATABASENAME=djangocve201919844poc 3. Run pip install -r...
KaliIntelligenceSuite
Kali Intelligence Suite Kali Intelligence Suite KIS is an intelligence gathering and data mining tool for penetration testers. It shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by automatically: executing Kali Linux tools e.g., dnsrecon, gobuster, hydra,...
Apache Superset < 4.0.2 - SQL Injection
An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...
Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection
Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint PhoneAppsHandler.pm. The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An...
Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query
Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...
CVE-2019-9193
EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in specific versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server that is vulnerable to CVE-2019-9193. Features...
zuthaka
A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...
EUVD-2026-101744
Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-backed rate limiting on PostgreSQL where the limit check is not atomic with the counter update. Remote attackers can se...
CVE-2025-1094-PoC-Postgre-SQLi
Analysis of CVE-2025-1094 and Emulation Setup This detailed examination, conducted on March 14, 2025, explores CVE-2025-1094, a hypothetical high-severity SQL injection vulnerability in PostgreSQL, based on the provided emulation setup and proof-of-concept PoC execution. The analysis covers the...