Tag: PostgreSQL
PostGREShell bug turns lowly PostgreSQL backup roles into superusers
A 12-year-old PostgreSQL replication bug lets low-privilege backup accounts load code and become superusers.
Authenticated Remote Code Execution Risk in Splunk Enterprise
An unauthenticated attacker can exploit a missing authentication control in Splunk Enterprise's PostgreSQL sidecar to write arbitrary files and execute…
Two-Decade-Old PostgresSQL Flaw Now Targeted by Public Exploit Code
A publicly released exploit targets a heap buffer overflow in PostgreSQL's pgcrypto extension that can give attackers full operating system…