https://poc.intelseclab.com/tags/postgresql/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13780-pgadmin4-regex-bypass-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-13780-pgadmin4-regex-bypass-rce/Critical severity (CVSS 9.1) — web · CVE-2025-13780. Status: Weaponized. Affects: pgAdmin 4. Tags: pgadmin4, postgresql, regex-bypass, command-injection, psql-meta-command, utf8-bom, crlf-injection, rce, python, cwe-77, cwe-88.webCriticalpgadmin4postgresqlregex-bypasscommand-injectionpsql-meta-commandutf8-bomcrlf-injectionrcepythoncwe-77cwe-88https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-2945-pgadmin-eval-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-2945-pgadmin-eval-rce/Critical severity (CVSS 9.9) — web · CVE-2025-2945. Status: Weaponized. Affects: pgAdmin 4 (web-based PostgreSQL administration tool). Tags: pgadmin, postgresql, rce, eval-injection, code-injection, cwe-95, python, authenticated, sqleditor.webCriticalpgadminpostgresqlrceeval-injectioncode-injectioncwe-95pythonauthenticatedsqleditorhttps://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-2005-postgresql-pgcrypto-heapoverflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-2005-postgresql-pgcrypto-heapoverflow/Critical severity — binary · CVE-2026-2005. Status: PoC. Affects: PostgreSQL pgcrypto extension (PGP session-key parsing). Tags: postgresql, pgcrypto, heap-overflow, aslr-bypass, privilege-escalation, pgp, memory-corruption.binaryCriticalpostgresqlpgcryptoheap-overflowaslr-bypassprivilege-escalationpgpmemory-corruptionhttps://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-6664-pgbouncer-integer-overflow/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-6664-pgbouncer-integer-overflow/High severity — network · CVE-2026-6664. Status: PoC. Affects: PgBouncer (PostgreSQL connection pooler). Tags: pgbouncer, postgresql, integer-overflow, sasl, scram, dos, cwe-190.networkHighpgbouncerpostgresqlinteger-overflowsaslscramdoscwe-190https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25212-percona-pmm-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25212-percona-pmm-rce/Critical severity (CVSS 9.9) — web · CVE-2026-25212. Status: PoC. Affects: Percona Monitoring and Management (PMM). Tags: rce, percona-pmm, postgresql, copy-to-program, grafana, privilege-escalation, command-execution.webCriticalrcepercona-pmmpostgresqlcopy-to-programgrafanaprivilege-escalationcommand-executionhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23980-superset-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-23980-superset-sqli/Medium severity (CVSS 6.5) — web · CVE-2026-23980. Status: PoC. Affects: Apache Superset. Tags: apache-superset, sql-injection, error-based-sqli, postgresql, authenticated, api, python, cwe-89.webMediumapache-supersetsql-injectionerror-based-sqlipostgresqlauthenticatedapipythoncwe-89https://poc.intelseclab.com/pocs/network/2026-07-04_postgres-ri-owner-switched-cast-rce/Sat, 04 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-04_postgres-ri-owner-switched-cast-rce/High severity — network · None assigned as of 2026-07-04. Status: PoC. Affects: PostgreSQL (server). Tags: postgresql, privilege-escalation, referential-integrity, implicit-cast, command-execution, database, uncoordinated-disclosure.networkHighpostgresqlprivilege-escalationreferential-integrityimplicit-castcommand-executiondatabaseuncoordinated-disclosurehttps://poc.intelseclab.com/pocs/web/2026-06-28_cve-2026-20253-splunk-preauth-rce/Sun, 28 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-06-28_cve-2026-20253-splunk-preauth-rce/Critical severity — web · CVE-2026-20253. Status: PoC. Affects: Splunk Enterprise. Tags: pre-auth, RCE, PostgreSQL, Splunk, CISA-KEV, lo-export, sidecar, unauthenticated, file-write.webCriticalpre-authRCEPostgreSQLSplunkCISA-KEVlo-exportsidecarunauthenticatedfile-writehttps://poc.intelseclab.com/pocs/web/2026-05-30_drupal-core-postgresql-sql-injection/Sat, 30 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-30_drupal-core-postgresql-sql-injection/Critical severity — web · CVE-2026-9082 / SA-CORE-2026-004. Status: Patched. Affects: Drupal Core. Tags: SQLi, Drupal, PostgreSQL, JSON:API, unauthenticated, data-exfiltration.webCriticalSQLiDrupalPostgreSQLJSON:APIunauthenticateddata-exfiltration