CVE-2025-2945_PgAdmin_PoC

CVE-2025-2945PoC Prueba de concepto para pgAdmin RCE en la Herramienta de Consultas de pgAdmin CVE-2025-2945 – Prueba de Concepto en Python ⚠️ Descargo de responsabilidad Este repositorio contiene una prueba de concepto del exploit para CVE-2025-2945, una vulnerabilidad crítica de ejecución remota...

dnsprobe

Nota - Este proyecto está discontinuado. Las nuevas actualizaciones y correcciones se enviarán a dnsx. DNSProbe es una herramienta construida sobre retryabledns que permite realizar múltiples consultas DNS de su elección con una lista de resolutores proporcionados por el usuario. Recursos Recurso...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This repository contains a proof-of-concept script created for security research and authorized penetration testing involving the vulnerability CVE-2025-2945 , affecting certain versions of pgAdmin4. The issue allows an authenticated pgAdmin user wit...

cve-2025-2945-poc

pgAdmin4 Query Tool Authenticated RCE PoC Standalone python script to exploit pgAdmin4 query tool authenticated RCE vulnerability CVE-2025-2945 in pgAdmin4 version 8.10 - 9.1. Ported from Metasploit module: pgadminquerytoolauthenticated.rb References: https://vulners.com/cve/CVE-2025-2945...

CVE-2025-2945-pgAdmin-RCE

CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS 3.1: 9.9 Critical · Affects: pgAdmin 4 8.10 – 9.1 · Fixed in: 9.2 April 4, 2025 CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code / Eval Injection A proof-of-concept exploit for CVE-2025-2945, an authenticated...

CVE-2026-68578

ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...

PYSEC-2026-451 pgAdmin 4 Vulnerable to Remote Code Execution

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/querytool/download, where the querycommited parameter and /cloud/deploy endpoint, where the highavailability parameter is unsafe...

pgAdmin 4 Vulnerable to Remote Code Execution

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules.The vulnerability is associated with the 2 POST endpoints;/sqleditor/querytool/download, where the querycommited parameter and/cloud/deploy endpoint, where the highavailability parameter isunsafely...

PT-2026-53531

Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/query tool/download, where the query commited parameter and /cloud/deploy endpoint, where the high availability parameter...

Important Photon OS Security Update - PHSA-2026-5.0-0870

Updates of 'jq' packages of Photon OS have been released...

OPENSUSE-SU-2026:10862-1 yq-4.53.2-1.1 on GA media

These are all security issues fixed in the yq-4.53.2-1.1 package on the GA media of openSUSE Tumbleweed...

RHSA-2026:18048 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2026:18045 Red Hat Security Advisory: jq security update

Bulletin has no description...

jq: stack overflow in module loading on mutual `include`

...

jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure

...

Exploit for Code Injection in Pgadmin Pgadmin_4

CVE-2025-2945 — pgAdmin 4 Query Tool Authenticated RCE Proof...

GO-2026-4641 WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora...

CVE-2026-30859

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, mod...

CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

WeKnora 访问控制错误漏洞

WeKnora is an open-source framework based on LLM developed by Tencent. It features deep document understanding using the RAG paradigm, semantic retrieval, and context-aware answers. Prior to version 0.2.12, WeKnora had an access control vulnerability. This vulnerability stemmed from an access...