{"vulnerability": "CVE-2007-3280", "sightings": [{"uuid": "3b5e5bb4-6484-4369-9a86-33f2c9b7c0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3280", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "8ee333c6-e051-42a8-a722-9581c38c5140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3280", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:23.000000Z"}, {"uuid": "d4448d27-b8b7-481f-bc68-1eb46a59d7b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3280", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/postgres/postgres_payload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e4b929aa-7482-43ff-ae27-568a8ae3e180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3280", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/postgres/postgres_payload.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"midnitesnake\", \"egypt \", \"todb \", \"lucipher\"], \"autofilter_ports\": [5432], \"autofilter_services\": [\"postgres\"], \"check\": true, \"default_credential\": false, \"description\": \"On some default Linux installations of PostgreSQL, the\\n          postgres service account may write to the /tmp directory, and\\n          may source UDF Shared Libraries from there as well, allowing\\n          execution of arbitrary code.\\n\\n          This module compiles a Linux shared object file, uploads it to\\n          the target host via the UPDATE pg_largeobject method of binary\\n          injection, and creates a UDF (user defined function) from that\\n          shared object. Because the payload is run as the shared object's\\n          constructor, it does not need to conform to specific Postgres\\n          API versions.\", \"disclosure_date\": \"2007-06-05\", \"fullname\": \"exploit/linux/postgres/postgres_payload\", \"is_install_path\": true, \"mod_time\": \"2026-05-14 11:43:36 +0000\", \"name\": \"PostgreSQL for Linux Payload Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/postgres/postgres_payload.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/postgres/postgres_payload\", \"references\": [\"CVE-2007-3280\", \"URL-https://www.leidecker.info/pgshell/Having_Fun_With_PostgreSQL.txt\"], \"rport\": 5432, \"session_types\": [\"postgresql\"], \"targets\": [\"Linux x86\", \"Linux x86_64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:21.166554Z"}]}