Curated security research, vulnerabilities, advisories and tools for practitioners.

#postgresql

Security coverage tagged postgresql.

1.

CVE-2023-25157 PoC: GeoServer jsonArrayContains SQL injection to PostgreSQL RCE

tool | 2026-08-13 21:11 | CVE-2023-25157 | gist.github.com | Original ↗ | .md | #rce | #public-poc | #sql-injection

2.

CVE-2026-17543 PoC: PHP ext-pgsql SQL injection via backslash breakout

tool | 2026-08-06 17:05 | CVE-2026-17543 | github.com | Original ↗ | .md | #public-poc | #data-exposure | #php

3.

Splunk Enterprise Unauthenticated Arbitrary File Operations/RCE (CVE-2026-20253): Overview and Takeaways

vulnerability | 2026-06-15 00:00 | CVE-2026-20253 | netspi.com | Original ↗ | .md | #rce | #postgresql | #poc

4.

CVE-2026-9082: PostgreSQL SQL Injection in Drupal

vulnerability | Critical | Actively exploited | 2026-05-22 09:11 | CVE-2026-9082 | yeswehack.com | Original ↗ | .md | #active-exploitation | #sql-injection | #postgresql

5.

Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service

research | 2026-03-10 14:00 | swarm.ptsecurity.com | Original ↗ | .md | #cloud | #memory-safety | #denial-of-service

6.

Announcing Xint Code

research | 2025-12-16 00:43 | theori.io | Original ↗ | .md | #ai-security | #cloud | #rce

7.

Enhancing JFrog Internal Operations with Near Zero Downtime Migration

blog | 2025-10-08 13:33 | jfrog.com | Original ↗ | .md | #ai-security | #sql-injection | #postgresql

8.

Cooking an SQL Injection Vulnerability in Chef Automate

vulnerability | High | 2025-09-30 12:00 | CVE-2025-8868 | xbow.com | Original ↗ | .md | #vulnerability-research | #devops | #sql-injection

9.

Beyond CVEs: The Exploitation of Everyday Misconfigurations

blog | 2025-09-19 12:00 | wiz.io | Original ↗ | .md | #cloud-security | #postgresql | #misconfiguration

10.

Metabase Community Data Stack Report 2025

blog | 2025-09-03 00:05 | metabase.com | Original ↗ | .md | #ai-security | #postgresql | #metabase

11.

Soco404: Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload

blog | 2025-07-23 12:00 | wiz.io | Original ↗ | .md | #cloud-security | #malware | #postgresql

12.

CPU_HU: Fileless cryptominer targeting exposed PostgreSQL with over 1.5K victims

blog | 2025-03-31 15:13 | wiz.io | Original ↗ | .md | #cloud-security | #postgresql | #database-security

13.

Sensing and blocking JavaScript SQL injection attacks

blog | 2025-03-04 00:00 | aikido.dev | Original ↗ | .md | #sql-injection | #web-security | #waf

14.

Prisma and PostgreSQL vulnerable to NoSQL injection? A surprising security risk explained

blog | 2025-02-14 00:00 | aikido.dev | Original ↗ | .md | #authentication-bypass | #postgresql | #nosql-injection

15.

Bypass Apache Superset restrictions to perform SQL injections

research | 2024-10-09 22:00 | blog.quarkslab.com | Original ↗ | .md | #sql-injection | #postgresql | #vulnerability

16.

MyBB <= 1.8.31: Remote Code Execution Chain

vulnerability | 2023-01-25 13:47 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #sql-injection | #postgresql

17.

Simplified cloud deployment for Burp Suite Enterprise Edition

blog | 2021-03-26 14:40 | portswigger.net | Original ↗ | .md | #cloud | #aws | #product-update