{"vulnerability": "cve-2025-2945", "sightings": [{"uuid": "9b61f097-5bd1-4da0-a547-52c51c873c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114274261341230556", "content": "", "creation_timestamp": "2025-04-03T13:27:29.839652Z"}, {"uuid": "44397ecf-f7ec-40c1-a923-e38c27760cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114274261341230556", "content": "", "creation_timestamp": "2025-04-03T13:27:29.842610Z"}, {"uuid": "8a2a3f06-5f7b-4a83-97ed-f470a72d8ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llvzoghcn625", "content": "", "creation_timestamp": "2025-04-03T13:40:13.830634Z"}, {"uuid": "6fcf6246-99ae-4858-824d-22b8d1bfc352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114274816670082861", "content": "", "creation_timestamp": "2025-04-03T15:48:43.430653Z"}, {"uuid": "6975b2da-4dc7-4073-aefb-64c368cea55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114274816670082861", "content": "", "creation_timestamp": "2025-04-03T15:48:43.436372Z"}, {"uuid": "47a2bdc1-9954-4958-b463-feccd9f30fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://gist.github.com/py0zz1/a81c0e3222dac3772bf44ae5eb8cfd1e", "content": "", "creation_timestamp": "2025-04-04T18:42:17.000000Z"}, {"uuid": "d92279f9-c430-4420-a739-103ac5f09d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llzd6nf4wb2n", "content": "", "creation_timestamp": "2025-04-04T21:08:20.788848Z"}, {"uuid": "b93e12ba-435e-49fc-8b7c-01b23b2bd2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lm2ksgn4pv2e", "content": "", "creation_timestamp": "2025-04-05T08:57:20.849610Z"}, {"uuid": "3abdace6-4958-4153-ab1a-5b06811c6145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lm2ksgszsl2s", "content": "", "creation_timestamp": "2025-04-05T08:57:21.433023Z"}, {"uuid": "df6a66cf-d4fd-4a8f-8333-fe2aace0894b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lm46lrcgak2m", "content": "", "creation_timestamp": "2025-04-06T00:44:42.429517Z"}, {"uuid": "b0ceefd2-d21a-4a59-9a30-21b9338d7676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmc5fqs5ws2h", "content": "", "creation_timestamp": "2025-04-08T09:18:54.642343Z"}, {"uuid": "a9db6ce1-e1be-43c9-991b-e2e64ff4dcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmdbcyfhpk2b", "content": "", "creation_timestamp": "2025-04-08T20:01:38.608261Z"}, {"uuid": "69613e4d-2069-4e53-9909-7cc354697ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lmdfn6uy3y24", "content": "", "creation_timestamp": "2025-04-08T21:18:54.272080Z"}, {"uuid": "55528168-dfaa-4bb4-981f-9c46bd230117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4cqjp72h", "content": "", "creation_timestamp": "2025-04-11T21:02:27.467966Z"}, {"uuid": "1e308710-0016-4945-b135-11d190ff947d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274opmhd2q", "content": "", "creation_timestamp": "2025-04-17T22:53:32.379763Z"}, {"uuid": "01925957-22f2-497c-b453-2c8e853018d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274p22df2b", "content": "", "creation_timestamp": "2025-04-17T22:53:33.976760Z"}, {"uuid": "930e5ccd-3d60-40ef-8186-bff0d9fc69c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pajc52y", "content": "", "creation_timestamp": "2025-04-17T22:53:35.115241Z"}, {"uuid": "73fea778-edd2-45f6-a30d-ce27c6dee87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pehpi2h", "content": "", "creation_timestamp": "2025-04-17T22:53:35.651521Z"}, {"uuid": "f5ffffc9-9f30-4689-9059-80b66eed9536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274phe252l", "content": "", "creation_timestamp": "2025-04-17T22:53:36.211158Z"}, {"uuid": "3b6bba4e-5739-402e-9db0-7fd4b1683bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29457", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pksl32q", "content": "", "creation_timestamp": "2025-04-17T22:53:36.767946Z"}, {"uuid": "ca338f9a-e29c-4e49-aec7-555b436e1fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274prrq72d", "content": "", "creation_timestamp": "2025-04-17T22:53:37.997184Z"}, {"uuid": "d4aec61a-708c-4d56-affd-ed42fc83bd82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29459", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pvmws2r", "content": "", "creation_timestamp": "2025-04-17T22:53:38.612380Z"}, {"uuid": "3874c5a5-b5c1-4791-b054-21cf8049d038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln274q7dzc2l", "content": "", "creation_timestamp": "2025-04-17T22:53:40.411154Z"}, {"uuid": "d5120b1d-dec7-49a8-9a19-4866769a042e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114621017068916473", "content": "", "creation_timestamp": "2025-06-03T19:12:02.616201Z"}, {"uuid": "7a45afb5-7373-4fa4-b6c4-bb171fe35740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lqpyo4sh7k2s", "content": "", "creation_timestamp": "2025-06-03T19:12:12.651150Z"}, {"uuid": "770e58b6-42e4-4dab-81cf-e393d8dfeac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lqpypkvq7225", "content": "", "creation_timestamp": "2025-06-03T19:14:24.780432Z"}, {"uuid": "6bae4ca4-d68c-4095-bedb-9eae65bcfbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "cfd5fdff-8a37-4f4f-96b8-febb64810359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:39.000000Z"}, {"uuid": "d3188311-1fe0-438a-b871-ee4281b16a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/1337sheets.bsky.social/post/3m6erevc7v72k", "content": "", "creation_timestamp": "2025-11-24T11:55:10.023562Z"}, {"uuid": "32ca03b7-4ae0-4451-81b5-2781708feae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"}, {"uuid": "8e437dfe-71a9-492e-9350-203d6014fe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/allthebuzz.bsky.social/post/3m5wchqv45c2p", "content": "", "creation_timestamp": "2025-11-18T17:51:04.443867Z"}, {"uuid": "e0695a31-1c6c-48e6-abb9-8d9729c53a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m5tsq5wxbi2b", "content": "", "creation_timestamp": "2025-11-17T18:04:04.066516Z"}, {"uuid": "cedd92a2-ea53-4d04-bde6-f898cbd3a7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3m5tsq4uyzn2i", "content": "", "creation_timestamp": "2025-11-17T18:04:06.785456Z"}, {"uuid": "84b74f9c-7f8b-4290-abe2-0d4b9bda4f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/pgadmin_query_tool_authenticated.rb", "content": "", "creation_timestamp": "2025-04-11T08:40:48.000000Z"}, {"uuid": "1dfe41d0-2cef-4903-b06a-c726f77ab42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/ZZSMGR1oNbSq10JiyVgjm46BE0NUVhN8HJco1HY--mJtk-o", "content": "", "creation_timestamp": "2025-06-04T03:00:07.000000Z"}, {"uuid": "f081f36b-8fe6-4bf8-85c2-ffedd91dc806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/79998", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a secopssite\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 9  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-12 13:45:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHackTheBox (HTB) writeups and exploit kits: Silentium, VariaType, Fries, Garfield, Hercules, Kobold, Pirate, CCTV, DevArea, HiddenPath, LockedAway, Interpreter \u2014 CVE-2025-59528, CVE-2025-8110, CVE-2025-2945, CVE-2026-23520, CVE-2025-66034, CVE-2024-25082\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-12T14:00:04.000000Z"}, {"uuid": "23b2e2d9-2ed8-4f45-bf84-ce6722dc3a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/9652", "content": "\ud83c\uddee\ud83c\uddf3 Indian Foreign Trade Compliance and Outsourcing Services Company \"Lucrative Exim Consultants\" System Has Been Owned by #OpsShadowStrike\n\n[ Sites ] https://apid2daws.lucrative-esystem.com/\n\n[ Expl0it ]: \n/.git/ Complete Source Code Exposure,\nPgAdmin Access,\nPgAdmin RCE [CVE-2025-2945]\n\n[ Download ]\nSource code, Database | 2GB+\n\n[ Collaboration ]\nTengkorakCyberCrew \u2022 MalaysiaHacktivist \u2022\nEagleCyberCrew \u2022 CyberActivistMalaysia \u2022 AskarBadai \u2022 TheSweetNight \u2022 Noheartz \n- Jaring - QueenOfTheDarkness - John - D3ath - K16 - KaytoKID - Suh4iryil_31 - krypsec1x1\n\n#AllMuslimHackers\n#SavePalestine\n#StandWithPalestine\n#StandWithIranAttackIsrahell\n#IsraHelIsTerrorist\n#AttackIsrahellAllies\n#hahahahaha\n#DdosAttack\n#Defacement\n#Dataleak\n\n[ Disclaimer ]\nThis content is provided to raise awareness about security \nvulnerabilities.We will not be liable for any damages, loss of data, or \nlegal action arising from the use or misuse of the information in this \nmaterial.intended for educational purposes only.", "creation_timestamp": "2026-04-12T09:13:05.000000Z"}, {"uuid": "6ca37c3a-3281-49cc-bae3-8a7b7896fde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/39550", "content": "\ud83c\uddee\ud83c\uddf3 Indian Foreign Trade Compliance and Outsourcing Services Company \"Lucrative Exim Consultants\" System Has Been Owned by #OpsShadowStrike\n\n[ Sites ] https://apid2daws.lucrative-esystem.com/\n\n[ Expl0it ]: \n/.git/ Complete Source Code Exposure,\nPgAdmin Access,\nPgAdmin RCE [CVE-2025-2945]\n\n[ Download ]\nSource code, Database | 2GB+\n\n[ Collaboration ]\nTengkorakCyberCrew \u2022 MalaysiaHacktivist \u2022\nEagleCyberCrew \u2022 CyberActivistMalaysia \u2022 AskarBadai \u2022 TheSweetNight \u2022 Noheartz \n- Jaring - QueenOfTheDarkness - John - D3ath - K16 - KaytoKID - Suh4iryil_31 - krypsec1x1\n\n#AllMuslimHackers\n#SavePalestine\n#StandWithPalestine\n#StandWithIranAttackIsrahell\n#IsraHelIsTerrorist\n#AttackIsrahellAllies\n#hahahahaha\n#DdosAttack\n#Defacement\n#Dataleak\n\n[ Disclaimer ]\nThis content is provided to raise awareness about security \nvulnerabilities.We will not be liable for any damages, loss of data, or \nlegal action arising from the use or misuse of the information in this \nmaterial.intended for educational purposes only.", "creation_timestamp": "2026-04-12T09:13:05.000000Z"}, {"uuid": "60bf7b42-56d9-4ed4-9658-c48cea5d08a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59303", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExploit and test stand for CVE-2025-2945\nURL\uff1ahttps://github.com/137f/PoC-CVE-2025-48703\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-11T18:50:07.000000Z"}, {"uuid": "88872860-0e96-4956-b1a1-d4c5d5aafb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10196", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2945\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Remote Code Execution security vulnerability in pgAdmin 4  (Query Tool and Cloud Deployment modules).\n\nThe vulnerability is associated with the 2 POST endpoints;\u00a0/sqleditor/query_tool/download, where the query_commited parameter and\u00a0/cloud/deploy endpoint, where the high_availability parameter is\u00a0unsafely passed to the Python eval() function, allowing arbitrary code execution.\n\n\nThis issue affects pgAdmin 4: before 9.2.\n\ud83d\udccf Published: 2025-04-03T12:23:14.792Z\n\ud83d\udccf Modified: 2025-04-03T12:23:14.792Z\n\ud83d\udd17 References:\n1. https://github.com/pgadmin-org/pgadmin4/issues/8603", "creation_timestamp": "2025-04-03T12:35:05.000000Z"}, {"uuid": "5a227dcd-ca6b-4b17-8fcb-debd6239e465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29451", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12372", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29451\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T20:56:57.358Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/xd2v1fxmoopgrfm7", "creation_timestamp": "2025-04-17T21:58:32.000000Z"}, {"uuid": "9294f6e6-2fbc-43b2-b803-8c2e46cb6e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29458", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29458\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:21:30.310Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/qu7zyyxr84qno64e", "creation_timestamp": "2025-04-17T21:58:21.000000Z"}, {"uuid": "fbfc6110-2b70-4ac8-a5a5-d164eab959cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29450", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12369", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29450\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:08:34.219Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/ftlzvxve3t5713c6", "creation_timestamp": "2025-04-17T21:58:30.000000Z"}, {"uuid": "f2a52d04-0440-4269-845b-7d225e69d31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29452", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29452\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:10:25.023Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/dsvvsv8get5i2dzg", "creation_timestamp": "2025-04-17T21:58:29.000000Z"}, {"uuid": "311dee41-ea60-4a04-aa80-3b531a50f3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29454", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29454\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:12:19.985Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/cyql4n0xiubspntl", "creation_timestamp": "2025-04-17T21:58:25.000000Z"}, {"uuid": "74a6549d-7dae-4047-b9bd-065f3d43f4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29459", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29459\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:23:11.210Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/ggnmg5nnu635kvrc", "creation_timestamp": "2025-04-17T21:58:17.000000Z"}, {"uuid": "8ab50dd5-958a-4ed4-8bcc-d4c7561feccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29457", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12360", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29457\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:24:41.101Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/vro4dvxzuiwlg6uv", "creation_timestamp": "2025-04-17T21:58:16.000000Z"}, {"uuid": "feced470-949e-447f-bbdf-ebaf1f3edaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29455", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12366", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29455\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas\" function.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:13:49.803Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/hfonnxwggi2kfgmw", "creation_timestamp": "2025-04-17T21:58:24.000000Z"}, {"uuid": "4f1b9e3f-ee88-45dc-a731-41c71a47a3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12365", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29453\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:15:09.463Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/pgg9q7kdbkggtq08", "creation_timestamp": "2025-04-17T21:58:23.000000Z"}, {"uuid": "7c1edff5-bc64-4a45-a73a-a6779d573fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29456", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29456\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function.\n\ud83d\udccf Published: 2025-04-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T21:20:11.698Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/ckogwt5qwnkd821k", "creation_timestamp": "2025-04-17T21:58:22.000000Z"}, {"uuid": "60cc0d2b-4a7e-4b9d-97fa-d2b72963a155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51396", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPython PoC script for pgAdmin4 Query Tool Authenticated RCE (CVE-2025-2945)\nURL\uff1ahttps://github.com/Cycloctane/cve-2025-2945-poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-13T07:47:58.000000Z"}, {"uuid": "47a9aa8b-aaf2-4f7a-8e10-1057fe0eb707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51394", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPython PoC script for pgAdmin4 Query Tool Authenticated RCE (CVE-2025-2945)\nURL\uff1ahttps://github.com/Cycloctane/cve-2025-2945-poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-13T07:35:40.000000Z"}, {"uuid": "8c4b6aa4-b058-435b-ac3a-dd250b6be8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/162", "content": "\u26a0\ufe0f CVE-2025-2945 \u2014 Remote Code Execution in pgAdmin 4 \u26a0\ufe0f\n\nA critical RCE vulnerability has been discovered in pgAdmin 4, putting thousands of systems at risk!\n\nDetails:\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 CVSS: 9.8 (Critical)\n\u2022 Impact: Full system compromise, sensitive data exposure\n\n\ud83d\udd25 PoC And more detail:\nhttps://py0zz1.tistory.com\n\n\ud83c\udfaf FOFA Stats:\nOver 41,000 exposed results found via FOFA!\n\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f FOFA Dork:\nbody=\"pg-sp-content\" && title=\"pgAdmin 4\"\n\n\ud83d\udd17 FOFA Link:\nhttps://en.fofa.info/result?qbase64...\n\n\u2705 Mitigation:\nUpdate pgAdmin ASAP or restrict public access!\n\n\ud83d\udd25 As a result, an attacker can execute arbitrary Python code by sending a crafted POST request to the vulnerable endpoint.\n\n\u2014\n\nFollow CyberSec Playground for more 0-day alerts, hacking tips & bug bounty tricks!\n@cybersecplayground\n\n#CyberSecurity #CVE2025 #pgAdmin #RCE #BugBounty #InfoSec #FOFA #CyberSecPlayground", "creation_timestamp": "2025-04-07T10:36:13.000000Z"}, {"uuid": "9b5e0cce-f486-4e45-9ce1-9e7afce91853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29457", "type": "seen", "source": "Telegram/3BZNtwEHVaekOo3CkpQGK-0LA14x-_k_yK6o6xfpB5IrumWR", "content": "", "creation_timestamp": "2025-07-01T00:51:13.000000Z"}, {"uuid": "00fe8391-7a25-411c-9c5b-e4e6d14eaadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/rj2ObYAKKGRmZTk9PYQyTU6MfpOJvGLJV8P7iFc-4Y7ni0w", "content": "", "creation_timestamp": "2025-06-03T21:00:05.000000Z"}, {"uuid": "b4e32d2d-a06c-4599-a0cb-c5b564d4b7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/17801", "content": "\ud83d\udea8CVE-2025-2945: pgAdmin 4 Vulnerable to Remote Code Execution\n\nFOFA Link: https://en.fofa.info/result?qbase64=Ym9keT0icGctc3AtY29udGVudCIgJiYgdGl0bGU9InBnQWRtaW4gNCI%3D\n\nFOFA Query: body=\"pg-sp-content\" && title=\"pgAdmin 4\"\n\nResults: 44,485\n\nAdvisory: https://github.com/advisories/GHSA-g73c-fw68-pwx3\n\nCVSS: 10", "creation_timestamp": "2025-06-03T22:50:38.000000Z"}, {"uuid": "37255900-2bc8-42e4-8aad-49500dfae29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29456", "type": "seen", "source": "https://t.me/cvedetector/23293", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29456 - Apache Personal Management System Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-29456 \nPublished : April 17, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T03:12:07.000000Z"}, {"uuid": "ab362129-85eb-4e34-b5ac-7495717184c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29453", "type": "seen", "source": "https://t.me/cvedetector/23300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29453 - Personal Management System Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-29453 \nPublished : April 17, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T03:12:18.000000Z"}, {"uuid": "c2002ce9-5287-4b18-bb19-a6e320bf3e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29459", "type": "seen", "source": "https://t.me/cvedetector/23296", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29459 - MyBB Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29459 \nPublished : April 17, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T03:12:12.000000Z"}, {"uuid": "d7164144-8255-4bac-9788-cb748d071e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29458", "type": "seen", "source": "https://t.me/cvedetector/23295", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29458 - MyBB Avatar Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29458 \nPublished : April 17, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T03:12:11.000000Z"}, {"uuid": "77a3e614-3912-47a5-92ea-4196865baa26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29457", "type": "seen", "source": "https://t.me/cvedetector/23294", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29457 - MyBB Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-29457 \nPublished : April 17, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T03:12:07.000000Z"}, {"uuid": "06d44700-cc25-4911-8c96-2b1798710e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29455", "type": "seen", "source": "https://t.me/cvedetector/23286", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29455 - Personal Management System Sensitive Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-29455 \nPublished : April 17, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas\" function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T00:41:44.000000Z"}, {"uuid": "2128e7ec-9975-4097-b4e1-5b82e6c62fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29452", "type": "seen", "source": "https://t.me/cvedetector/23285", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29452 - Seo Panel Remote Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-29452 \nPublished : April 17, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T00:41:40.000000Z"}, {"uuid": "eda48ac0-9840-40ea-a861-f098f5f26d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29451", "type": "seen", "source": "https://t.me/cvedetector/23284", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29451 - Seo Panel Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29451 \nPublished : April 17, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T00:41:40.000000Z"}, {"uuid": "25a671a7-350c-43cc-9e2d-e61ba4a6ef75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29454", "type": "seen", "source": "https://t.me/cvedetector/23282", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29454 - Personal Management System File Upload Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29454 \nPublished : April 17, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T00:41:38.000000Z"}, {"uuid": "8b82e40c-26b3-4b24-a008-e83eb388abfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29450", "type": "seen", "source": "https://t.me/cvedetector/23283", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29450 - Twonav Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29450 \nPublished : April 17, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T00:41:39.000000Z"}, {"uuid": "5fdf7718-2aae-4862-8f63-03c6c33df382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/ViralCyber/12114", "content": "\ud83d\udd34 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc RCE \u062f\u0631 pgAdmin4\n\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 \u06cc CVE-2025-2945 \u062f\u0631 pgAdmin 4 \u06af\u0632\u0627\u0631\u0634 \u0648 \u0627\u0635\u0644\u0627\u062d \u0634\u062f\u0647 \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u062f\u0647.\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc_\u0627\u0645\u0646\u06cc\u062a\u06cc \n#RCE #CVE #pgAdmin4 \n\n\ud83c\udd94 @onhex_ir\n\u27a1\ufe0f ALL Link", "creation_timestamp": "2025-04-08T09:16:32.000000Z"}, {"uuid": "f78e553e-2d94-4e6d-a3a1-4609a2f41c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/qOVghO_wNKFTPf6_ZaAICe1_ZbnhRVylIwy6qB-Pl1YjhP8", "content": "", "creation_timestamp": "2025-04-03T15:30:35.000000Z"}, {"uuid": "9d976aed-3113-4086-a19c-c7f45a9882d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/xVruiKW5Zr5SXn7atQMtA-1VuOA-bRMCviK8i2p0qqHJ8e4", "content": "", "creation_timestamp": "2025-04-07T12:40:06.000000Z"}, {"uuid": "e1242b28-d042-47c1-b882-c5fd4de7020e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2582", "content": "CVE-2025-2945 pgAdmin\n*\nWriteUP + Video + RCE POC", "creation_timestamp": "2025-04-08T18:48:07.000000Z"}, {"uuid": "d6be3b1f-141b-4a26-aff3-d82a40bb3497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1323", "content": "CVE-2025-2945 pgAdmin\n*\nWriteUP + Video + RCE POC\n\n@MrVGunz", "creation_timestamp": "2025-04-09T13:52:57.000000Z"}, {"uuid": "49259f9c-061e-4eca-ac44-60092657557c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/bagl3y_notes/288", "content": "\ud83d\udd34 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f pgAdmin 4 (CVE-2025-2945 - Python eval() RCE \u0432 Query Tool/Cloud Deployment) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435 \u27a1\ufe0f \u0438\u0437 env - \u043a\u0440\u0435\u0434\u044b \u043a pgAdmin, \u043e\u0442\u0442\u0443\u0434\u0430 \u0434\u043e\u0441\u0442\u0430\u0451\u043c \u0435\u0449\u0435 \u043a\u0440\u0435\u0434\u044b, \u0441\u043f\u0440\u0435\u0438\u043c \u0438\u0445 \u043f\u043e SSH \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 svc \u043d\u0430 Docker-\u0445\u043e\u0441\u0442\u0435 \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c NFS-\u0448\u0430\u0440\u0443 \u0441 Docker TLS \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043e\u0442 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0433\u043e CA \u0438 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u043c\u0441\u044f \u043a  Docker API \u27a1\ufe0f \u0447\u0435\u0440\u0435\u0437 privileged container \u0438 bind-mount / \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c root \u043d\u0430 Linux-\u0445\u043e\u0441\u0442\u0435 \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c PWM \u043a\u043e\u043d\u0444\u0438\u0433 \u0441 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u043e\u0433\u043e \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 svc_infra \u27a1\ufe0f \u0443 svc_infra \u0435\u0441\u0442\u044c ReadGMSAPassword \u043d\u0430 gMSA_CA_prod$, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c NTLM gMSA-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0438 \u043b\u043e\u0433\u0438\u043d\u0438\u043c\u0441\u044f \u043f\u043e WinRM \u27a1\ufe0f \u0443 gMSA \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0430 ManageCA/Enroll \u043d\u0430 ADCS, \u043d\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0439 ESC7 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d deny-ACE, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0435\u0439\u043d\u0438\u043c ESC6 (EDITF_ATTRIBUTESUBJECTALTNAME2) + ESC16 (\u0441\u0431\u0440\u043e\u0441 SID security extension) \u0447\u0435\u0440\u0435\u0437 certipy, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0430 Administrator'\u0430\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Windows box \u2014 Fries,  \n       \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \ud83d\udd34Hard\ud83d\udd34\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:25.273002Z"}, {"uuid": "9891854a-0e4f-43ab-b219-379f93742d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/bagl3y_notes/288", "content": "\ud83d\udd34 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f pgAdmin 4 (CVE-2025-2945 - Python eval() RCE \u0432 Query Tool/Cloud Deployment) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435 \u27a1\ufe0f \u0438\u0437 env - \u043a\u0440\u0435\u0434\u044b \u043a pgAdmin, \u043e\u0442\u0442\u0443\u0434\u0430 \u0434\u043e\u0441\u0442\u0430\u0451\u043c \u0435\u0449\u0435 \u043a\u0440\u0435\u0434\u044b, \u0441\u043f\u0440\u0435\u0438\u043c \u0438\u0445 \u043f\u043e SSH \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 svc \u043d\u0430 Docker-\u0445\u043e\u0441\u0442\u0435 \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c NFS-\u0448\u0430\u0440\u0443 \u0441 Docker TLS \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043e\u0442 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0433\u043e CA \u0438 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u043c\u0441\u044f \u043a  Docker API \u27a1\ufe0f \u0447\u0435\u0440\u0435\u0437 privileged container \u0438 bind-mount / \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c root \u043d\u0430 Linux-\u0445\u043e\u0441\u0442\u0435 \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c PWM \u043a\u043e\u043d\u0444\u0438\u0433 \u0441 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u043e\u0433\u043e \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 svc_infra \u27a1\ufe0f \u0443 svc_infra \u0435\u0441\u0442\u044c ReadGMSAPassword \u043d\u0430 gMSA_CA_prod$, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c NTLM gMSA-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0438 \u043b\u043e\u0433\u0438\u043d\u0438\u043c\u0441\u044f \u043f\u043e WinRM \u27a1\ufe0f \u0443 gMSA \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0430 ManageCA/Enroll \u043d\u0430 ADCS, \u043d\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0439 ESC7 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d deny-ACE, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0435\u0439\u043d\u0438\u043c ESC6 (EDITF_ATTRIBUTESUBJECTALTNAME2) + ESC16 (\u0441\u0431\u0440\u043e\u0441 SID security extension) \u0447\u0435\u0440\u0435\u0437 certipy, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0430 Administrator'\u0430\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Windows box \u2014 Fries,  \n       \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \ud83d\udd34Hard\ud83d\udd34\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:40.851211Z"}, {"uuid": "af190535-6e07-4dec-8829-48a59be47c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/WiDJBjqrOJ27O7YsOGd2JJKWoe0Lz6-1jjxrLxSiYfMB4PI", "content": "", "creation_timestamp": "2026-08-12T08:00:03.827732Z"}, {"uuid": "f14baf39-93ec-4cc8-85c3-aabfe8d23524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/purp_sec/467", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-22457 \u2014 \u0441\u043d\u043e\u0432\u0430 Ivanti. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Connect Secure, Policy Secure \u0438 ZTA Gateways, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-31334 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRar, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 Windows \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2024-53868 \u2014 \u0431\u0430\u0433 \u0432 Apache Traffic Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-2825 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 S3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35 CVE-2025-3161 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cisco Webex Meetings. \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2945 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pgAdmin 4, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e eval() Python.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:19.878011Z"}, {"uuid": "d32e37a1-7fed-40c0-bde5-6219b6ee6a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/288", "content": "\ud83d\udd34 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f pgAdmin 4 (CVE-2025-2945 - Python eval() RCE \u0432 Query Tool/Cloud Deployment) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435 \u27a1\ufe0f \u0438\u0437 env - \u043a\u0440\u0435\u0434\u044b \u043a pgAdmin, \u043e\u0442\u0442\u0443\u0434\u0430 \u0434\u043e\u0441\u0442\u0430\u0451\u043c \u0435\u0449\u0435 \u043a\u0440\u0435\u0434\u044b, \u0441\u043f\u0440\u0435\u0438\u043c \u0438\u0445 \u043f\u043e SSH \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 svc \u043d\u0430 Docker-\u0445\u043e\u0441\u0442\u0435 \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c NFS-\u0448\u0430\u0440\u0443 \u0441 Docker TLS \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043e\u0442 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0433\u043e CA \u0438 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u043c\u0441\u044f \u043a  Docker API \u27a1\ufe0f \u0447\u0435\u0440\u0435\u0437 privileged container \u0438 bind-mount / \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c root \u043d\u0430 Linux-\u0445\u043e\u0441\u0442\u0435 \u27a1\ufe0f \u043d\u0430\u0445\u043e\u0434\u0438\u043c PWM \u043a\u043e\u043d\u0444\u0438\u0433 \u0441 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u043e\u0433\u043e \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 svc_infra \u27a1\ufe0f \u0443 svc_infra \u0435\u0441\u0442\u044c ReadGMSAPassword \u043d\u0430 gMSA_CA_prod$, \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u043c NTLM gMSA-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430 \u0438 \u043b\u043e\u0433\u0438\u043d\u0438\u043c\u0441\u044f \u043f\u043e WinRM \u27a1\ufe0f \u0443 gMSA \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0430 ManageCA/Enroll \u043d\u0430 ADCS, \u043d\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0439 ESC7 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d deny-ACE, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0435\u0439\u043d\u0438\u043c ESC6 (EDITF_ATTRIBUTESUBJECTALTNAME2) + ESC16 (\u0441\u0431\u0440\u043e\u0441 SID security extension) \u0447\u0435\u0440\u0435\u0437 certipy, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0430 Administrator'\u0430\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Windows box \u2014 Fries,  \n       \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \ud83d\udd34Hard\ud83d\udd34\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-06T00:00:40.832301Z"}, {"uuid": "4ce37f82-3f84-4c83-a51b-6b4659671fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/WiDJBjqrOJ27O7YsOGd2JJKWoe0Lz6-1jjxrLxSiYfMB4PI", "content": "", "creation_timestamp": "2026-08-13T00:00:44.235199Z"}, {"uuid": "3b5f8bb1-821a-431f-abfb-2256d90641cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/purp_sec/467", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-22457 \u2014 \u0441\u043d\u043e\u0432\u0430 Ivanti. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Connect Secure, Policy Secure \u0438 ZTA Gateways, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-31334 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRar, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 Windows \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2024-53868 \u2014 \u0431\u0430\u0433 \u0432 Apache Traffic Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-2825 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 S3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35 CVE-2025-3161 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cisco Webex Meetings. \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2945 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pgAdmin 4, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e eval() Python.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:41.199616Z"}, {"uuid": "77d5f2d4-3d31-4a11-8656-b1955e571782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97490", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-2945\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g0d150ne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 20:52:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T22:00:03.681142Z"}, {"uuid": "5848fb79-cc49-4d97-ae99-9fa65f6eca3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97490", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-2945\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g0d150ne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 20:52:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:06.718254Z"}, {"uuid": "5765df7f-0bb5-4f1f-91af-eafd690f41e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/securixy_kz/1137", "content": "\ud83d\udca3 pgAdmin RCE CVE-2025-2945 - \n\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 GUI-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0434\u043b\u044f PostgreSQL.\n\n\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 pgAdmin \u2264 9.1\n\n\ud83e\udde0 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 eval() - \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83c\udfaf \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 endpoints:\n\n/sqleditor/query_tool/download/\n\n/cloud/deploy\n\n\ud83d\udccc \u0423\u0441\u043b\u043e\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\u041d\u0443\u0436\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\nPOST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c\n\n\ud83d\udcc9 \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b:\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c lateral movement \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435: \ud83d\udc49 https://py0zz1.tistory.com/entry/Remote-Code-Execution-Vulnerability-in-pgAdmin-CVE-2025-2945\n\nhttps://www.youtube.com/watch?v=V2WzCmRct7s", "creation_timestamp": "2026-07-12T22:00:07.362626Z"}, {"uuid": "13a6a35b-f6d7-4a8e-86af-630617e08723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/securixy_kz/1137", "content": "\ud83d\udca3 pgAdmin RCE CVE-2025-2945 - \n\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 GUI-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0434\u043b\u044f PostgreSQL.\n\n\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 pgAdmin \u2264 9.1\n\n\ud83e\udde0 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 eval() - \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83c\udfaf \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 endpoints:\n\n/sqleditor/query_tool/download/\n\n/cloud/deploy\n\n\ud83d\udccc \u0423\u0441\u043b\u043e\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\u041d\u0443\u0436\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\nPOST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c\n\n\ud83d\udcc9 \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b:\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c lateral movement \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435: \ud83d\udc49 https://py0zz1.tistory.com/entry/Remote-Code-Execution-Vulnerability-in-pgAdmin-CVE-2025-2945\n\nhttps://www.youtube.com/watch?v=V2WzCmRct7s", "creation_timestamp": "2026-07-13T00:00:18.365494Z"}, {"uuid": "4f2b1669-55a8-4fd1-b06b-1d82f9a21896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/purp_sec/467", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-22457 \u2014 \u0441\u043d\u043e\u0432\u0430 Ivanti. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Connect Secure, Policy Secure \u0438 ZTA Gateways, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-31334 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRar, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 Windows \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mark of the Web \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35 CVE-2024-53868 \u2014 \u0431\u0430\u0433 \u0432 Apache Traffic Server, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-2825 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CrushFTP. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 S3. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0442 \u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35 CVE-2025-3161 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Cisco Webex Meetings. \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\ud83d\udd35 CVE-2025-2945 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pgAdmin 4, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e eval() Python.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:54.196673Z"}, {"uuid": "8bd1e6fb-755c-4b7c-9e37-e7ec3f04db35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1137", "content": "\ud83d\udca3 pgAdmin RCE CVE-2025-2945 - \n\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 GUI-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0434\u043b\u044f PostgreSQL.\n\n\u0410\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 pgAdmin \u2264 9.1\n\n\ud83e\udde0 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 eval() - \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83c\udfaf \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 endpoints:\n\n/sqleditor/query_tool/download/\n\n/cloud/deploy\n\n\ud83d\udccc \u0423\u0441\u043b\u043e\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\u041d\u0443\u0436\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\nPOST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430\u043c\n\n\ud83d\udcc9 \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b:\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c lateral movement \u0432\u043d\u0443\u0442\u0440\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435: \ud83d\udc49 https://py0zz1.tistory.com/entry/Remote-Code-Execution-Vulnerability-in-pgAdmin-CVE-2025-2945\n\nhttps://www.youtube.com/watch?v=V2WzCmRct7s", "creation_timestamp": "2026-07-14T00:01:02.180847Z"}, {"uuid": "b9e95008-929c-44f2-93cf-765a415cd055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99786", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-2945-pgAdmin-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Khashayarnzk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 11:58:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2025-2945 \u2014 pgAdmin 4 authenticated eval() injection RCE, CVSS 9.9\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T14:00:05.591460Z"}, {"uuid": "9f574aad-538a-421a-92ea-becff3a6281e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20815", "content": "\ud83c\uddee\ud83c\uddf3 Indian Foreign Trade Compliance and Outsourcing Services Company \"Lucrative Exim Consultants\" System Has Been Owned by #OpsShadowStrike\n\n[ Sites ] https://apid2daws.lucrative-esystem.com/\n\n[ Expl0it ]: \n/.git/ Complete Source Code Exposure,\nPgAdmin Access,\nPgAdmin RCE [CVE-2025-2945]\n\n[ Download ]\nSource code, Database | 2GB+\n\n[ Collaboration ]\nTengkorakCyberCrew \u2022 MalaysiaHacktivist \u2022\nEagleCyberCrew \u2022 CyberActivistMalaysia \u2022 AskarBadai \u2022 TheSweetNight \u2022 Noheartz \n- Jaring - QueenOfTheDarkness - John - D3ath - K16 - KaytoKID - Suh4iryil_31 - krypsec1x1\n\n#AllMuslimHackers\n#SavePalestine\n#StandWithPalestine\n#StandWithIranAttackIsrahell\n#IsraHelIsTerrorist\n#AttackIsrahellAllies\n#hahahahaha\n#DdosAttack\n#Defacement\n#Dataleak\n\n[ Disclaimer ]\nThis content is provided to raise awareness about security \nvulnerabilities.We will not be liable for any damages, loss of data, or \nlegal action arising from the use or misuse of the information in this \nmaterial.intended for educational purposes only.", "creation_timestamp": "2026-07-19T16:00:06.082419Z"}, {"uuid": "1c09e030-5490-4259-9d23-4cfc1daea79b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/20815", "content": "\ud83c\uddee\ud83c\uddf3 Indian Foreign Trade Compliance and Outsourcing Services Company \"Lucrative Exim Consultants\" System Has Been Owned by #OpsShadowStrike\n\n[ Sites ] https://apid2daws.lucrative-esystem.com/\n\n[ Expl0it ]: \n/.git/ Complete Source Code Exposure,\nPgAdmin Access,\nPgAdmin RCE [CVE-2025-2945]\n\n[ Download ]\nSource code, Database | 2GB+\n\n[ Collaboration ]\nTengkorakCyberCrew \u2022 MalaysiaHacktivist \u2022\nEagleCyberCrew \u2022 CyberActivistMalaysia \u2022 AskarBadai \u2022 TheSweetNight \u2022 Noheartz \n- Jaring - QueenOfTheDarkness - John - D3ath - K16 - KaytoKID - Suh4iryil_31 - krypsec1x1\n\n#AllMuslimHackers\n#SavePalestine\n#StandWithPalestine\n#StandWithIranAttackIsrahell\n#IsraHelIsTerrorist\n#AttackIsrahellAllies\n#hahahahaha\n#DdosAttack\n#Defacement\n#Dataleak\n\n[ Disclaimer ]\nThis content is provided to raise awareness about security \nvulnerabilities.We will not be liable for any damages, loss of data, or \nlegal action arising from the use or misuse of the information in this \nmaterial.intended for educational purposes only.", "creation_timestamp": "2026-07-20T00:00:21.225275Z"}, {"uuid": "3213138a-8fb7-41df-80b9-acb213411b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99786", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-2945-pgAdmin-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Khashayarnzk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 11:58:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2025-2945 \u2014 pgAdmin 4 authenticated eval() injection RCE, CVSS 9.9\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T00:00:10.287212Z"}, {"uuid": "1593f840-de39-4026-9085-f5c30080935e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "seen", "source": "Telegram/6pKREhmGOmiSVookBGUMsY8kbM1rhFO-tEmBOZVn9PhrTWw", "content": "", "creation_timestamp": "2026-07-25T20:00:03.284123Z"}, {"uuid": "914767e6-5565-42a2-802f-3a2f207fc96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2945", "type": "published-proof-of-concept", "source": "Telegram/6pKREhmGOmiSVookBGUMsY8kbM1rhFO-tEmBOZVn9PhrTWw", "content": "", "creation_timestamp": "2026-07-26T00:00:32.567874Z"}]}