CVE-2025-8714-POC

CVE-2025-8714-POC PostgreSQLにおけるRCEのPoC — CVE-2025-8714 PostgreSQLにおけるリモートコード実行のPoC — CVE-2025-8714 pgdump リバースシェル このリポジトリは、CVE-2025-8714 の深刻な脆弱性に対する概念実証（PoC）を提示します。この脆弱性は、以下のPostgreSQLバージョン以前に影響します: 17.6, 16.10, 15.14, 14.19, 13.22, および18 Beta ...。この脆弱性により、送信元サーバーでスーパーユーザー権限を持つ攻撃者が、pgdump または...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

Unsafe Dependency Resolution

Overview Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the \unrestrict meta-command input expansion in the restore process. An attacker can execute arbitrary code as the client operating system account by injecting malicious input from a compromised origin...