Lucene search
+L

227 matches found

GithubExploit
GithubExploit
added 2025/11/24 3:28 a.m.315 views

Exploit for CVE-2025-12762

🔐 CVE-2025-12762 — Critical RCE Vulnerability in pgAdmin 4 !...

9.8CVSS7.7AI score0.12384EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/11/19 12:0 a.m.13 views

PT-2025-47490

Name of the Vulnerable Software and Affected Versions Astro versions prior to 5.15.9 Description Astro, a web framework, has an issue when using the Cloudflare adapter @astrojs/cloudflare with output set to 'server'. The image optimization endpoint '/ image' includes a flaw in the isRemoteAllowed...

6.1CVSS5.7AI score0.0025EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/11/17 4:38 p.m.6 views

CVE-2025-12762

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.8CVSS7.8AI score0.12384EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/11/14 12:33 a.m.5 views

SUSE CVE-2025-12762

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.1CVSS7.8AI score0.12384EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2025/11/13 3:30 p.m.8 views

pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.8CVSS7.8AI score0.12384EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/11/13 3:30 p.m.5 views

GHSA-W2P4-P4RH-QCM3 pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.1CVSS7.7AI score0.12384EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/11/13 3:30 p.m.9 views

EUVD-2025-169296

pgAdmin4 vulnerable to Remote Code Execution RCE when running in server mode...

9.1CVSS6.8AI score0.12384EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/13 1:15 p.m.9 views

CVE-2025-12762

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.8CVSS0.12384EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/11/13 1:0 p.m.1 views

CVE-2025-12762 Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.1CVSS7.4AI score0.12384EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/11/13 1:0 p.m.18 views

CVE-2025-12762 Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.1CVSS0.12384EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/13 1:0 p.m.4 views

CVE-2025-12762 Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

pgAdmin versions up to 9.9 are affected by a Remote Code Execution RCE vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical...

9.1CVSS6.4AI score
SaveExploits0References4
CVE
CVE
added 2025/11/13 1:0 p.m.116 views

CVE-2025-12762

CVE-2025-12762 affects pgAdmin 4 up to v9.9 when running in server mode and performing restores from PLAIN-format dumps, enabling remote code execution via injected commands on the host. Public advisories and Nessus/GHSA entries confirm this is a critical RCE with network access, low complexity, ...

9.8CVSS7.3AI score0.12384EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.8 views

pgAdmin 安全漏洞

pgAdmin is pgAdmin open source an open source management and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin 9.9 and earlier versions, which stems from improper handling of PLAIN-format dump files in server mode, and could lead to remote co...

9.8CVSS7.7AI score0.12384EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.10 views

PT-2025-46819

Name of the Vulnerable Software and Affected Versions pgAdmin versions up to 9.9 Description pgAdmin is susceptible to a Remote Code Execution RCE issue that arises when operating in server mode and restoring from PLAIN-format dump files. This flaw allows attackers to inject and execute arbitrary...

9.8CVSS6.4AI score0.12384EPSS
SaveExploits1References55
SUSE CVE
SUSE CVE
added 2025/10/24 11:23 p.m.7 views

SUSE CVE-2025-59163

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

2.1CVSS6.8AI score0.0038EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2002-1634

Malware in sbrugna...

5CVSS6.4AI score0.01078EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2025/08/22 11:49 a.m.3 views

Astra Linux – Vulnerability in OpenVPN

OpenVPN versions 2.6.1 through 2.6.13 in server mode, using TLS-crypt-v2, allow remote attackers to trigger a denial of service by corrupting and replaying network packets during the early handshake phase...

7.5CVSS6AI score0.00815EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/07/07 12:0 a.m.15 views

The vulnerability of the LDAP authentication configuration in Server Mode of the pgAdmin 4 database management tool allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the LDAP authentication configuration in the Server Mode mode of the pgAdmin 4 database management tool is related to improper session fixation due to incorrect access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain...

8CVSS5.5AI score0.00447EPSS
SaveExploits0References8Affected Software2
Redos
Redos
added 2025/07/03 12:0 a.m.8 views

ROS-20250703-01

Vulnerability in Server Mode LDAP authentication configuration of database management tool pgAdmin 4 is related to incorrect session commit as a result of improper access delimitation. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the security restrictions...

8CVSS7.8AI score0.00447EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2025/06/08 12:0 a.m.4 views

VulnCheck KEV: CVE-2023-47105

exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd parameter without authentication...

8.6CVSS6AI score0.01669EPSS
SaveExploits0References1
Rows per page
Query Builder