Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-59470-PostgreSQL-Command-Injection — Proof-of-concept exploit for CVE-2025-59470, a command injection vulnerability in PostgreSQL's pg_backup extension, allowing authenticated backup operators to execute arbitrary commands. | Kitploit
Tools/GitHubGitHub/george0papasotiriou/cve-2025-59470-postgresql-command-injection
Vulnerability AnalysisCode AnalysisExploitationPenetration TestingDatabase Security
GitHubgeorge0papasotiriou/cve-2025-59470-postgresql-command-injection

CVE-2025-59470-PostgreSQL-Command-Injection

Proof-of-concept exploit for CVE-2025-59470, a command injection vulnerability in PostgreSQL's pg_backup extension, allowing authenticated backup operators to execute arbitrary commands.

View Repository
127 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3.

Vulnerability Type: Command injection in the pg_backup extension.

Description: The pg_backup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as the PostgreSQL user.

Download Tool