91 matches found
CVE-2025-2945_PgAdmin_PoC
CVE-2025-2945PoC Prueba de concepto para pgAdmin RCE en la Herramienta de Consultas de pgAdmin CVE-2025-2945 – Prueba de Concepto en Python ⚠️ Descargo de responsabilidad Este repositorio contiene una prueba de concepto del exploit para CVE-2025-2945, una vulnerabilidad crítica de ejecución remota...
dnsprobe
Nota - Este proyecto está discontinuado. Las nuevas actualizaciones y correcciones se enviarán a dnsx. DNSProbe es una herramienta construida sobre retryabledns que permite realizar múltiples consultas DNS de su elección con una lista de resolutores proporcionados por el usuario. Recursos Recurso...
CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-
CVE-2025-2945 – RCE autenticado en pgAdmin4 PoC Este repositorio contiene un script de prueba de concepto creado para investigación de seguridad y pruebas de penetración autorizadas que involucran la vulnerabilidad CVE-2025-2945 , que afecta a ciertas versiones de pgAdmin4. El problema permite qu...
CVE-2025-2945-pgAdmin-RCE
CVE-2025-2945 — Ejecución Remota de Código en la Herramienta de Consultas de pgAdmin 4 CVSS 3.1: 9.9 Crítico · Afecta: pgAdmin 4 8.10 – 9.1 · Corregido en: 9.2 4 de abril de 2025 CWE-95 Neutralización Incorrecta de Directivas en Código Evaluado Dinámicamente / Inyección en Eval Una prueba de...
cve-2025-2945-poc
PoC de RCE autenticado en pgAdmin4 Query Tool Script de Python independiente para explotar la vulnerabilidad de RCE autenticado en Query Tool de pgAdmin4 CVE-2025-2945 en pgAdmin4 versión 8.10 - 9.1. Portado desde el módulo de Metasploit: pgadminquerytoolauthenticated.rb Referencias:...
Exploit for Code Injection in Pgadmin Pgadmin_4
CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS...
CVE-2026-68578
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...
CVE-2025-9403 affecting package jq for versions less than 1.7.1-8
CVE-2025-9403 affecting package jq for versions less than 1.7.1-8. A patched version of the package is available...
ROS-20260707-73-0009
The vulnerability in jq is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
pgAdmin 4 Vulnerable to Remote Code Execution
Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules.The vulnerability is associated with the 2 POST endpoints;/sqleditor/querytool/download, where the querycommited parameter and/cloud/deploy endpoint, where the highavailability parameter isunsafely...
PYSEC-2026-451 pgAdmin 4 Vulnerable to Remote Code Execution
Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/querytool/download, where the querycommited parameter and /cloud/deploy endpoint, where the highavailability parameter is unsafe...
PT-2026-53531
Remote Code Execution security vulnerability in pgAdmin 4 Query Tool and Cloud Deployment modules. The vulnerability is associated with the 2 POST endpoints; /sqleditor/query tool/download, where the query commited parameter and /cloud/deploy endpoint, where the high availability parameter...
Important Photon OS Security Update - PHSA-2026-5.0-0870
Updates of 'jq' packages of Photon OS have been released...
OPENSUSE-SU-2026:10862-1 yq-4.53.2-1.1 on GA media
These are all security issues fixed in the yq-4.53.2-1.1 package on the GA media of openSUSE Tumbleweed...
RHSA-2026:18048 Red Hat Security Advisory: jq security update
Bulletin has no description...
RHSA-2026:18045 Red Hat Security Advisory: jq security update
Bulletin has no description...
jq: stack overflow in module loading on mutual `include`
...
jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
...
Exploit for Code Injection in Pgadmin Pgadmin_4
CVE-2025-2945 — pgAdmin 4 Query Tool Authenticated RCE Proof...
GO-2026-4641 WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora...