References https://rivers.chaitin.cn/blog/cq94lc10lnechd243lg0 https://www.cnblogs.com/renhaoblog/p/15035230.html https://zhuanlan.zhihu.com/p/573271309 https://cloud.tencent.com/developer/article/2186860 https://www.modb.pro/db/85019 https://blog.csdn.net/qq_51979295/article/details/133688962 https://www.anquanke.com/post/id/86468 https://blog.csdn.net/jihaichen/article/details/124434657 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/database/PostgreSQL-%E9%AB%98%E6%9D%83%E9%99%90%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2019-9193.md https://developer.aliyun.com/article/278946 https://zhuanlan.zhihu.com/p/668522924 https://blog.nashtechglobal.com/postgresql-security-how-weak-passwords-and-unencrypted-connections-invite-hackers/ https://www.aquasec.com/blog/pg_mem-a-malware-hidden-in-the-postgres-processes/
Related VulnerabilitiesPoCCVE-2026-9082: Drupal Core - Anonymous SQL Injection via PostgreSQL Entity QueryPoCpostgres-history-exposure: PostgreSQL History - ExposurePoCpostgres-credentials-exposure: PostgreSQL Credentials - ExposurePoCpostgresql-cluster-config: PostgreSQL Cluster - ConfigurationPoCCVE-2019-9193: PostgreSQL 9.3-12.3 Authenticated Remote Code ExecutionPoClog-connections-disabled: PostgreSQL "log_connections" Parameter - DisabledPoClog-disconnections-disabled: PostgreSQL "log_disconnections" Parameter - DisabledPoClog-duration-disabled: PostgreSQL "log_duration" Parameter - DisabledPoCpostgresql-audit-disabled: PostgreSQL Database Instances - SQL Auditing DisabledPoCec2-unrestricted-pgsql: Unrestricted PostgreSQL AccessPoCazure-postgresql-db-delete-unalerted: Azure PostgreSQL Database Delete Alert Not ConfiguredPoCazure-postgresql-db-update-unalerted: Azure PostgreSQL Database Create/Update Alert Not ConfiguredPoCazure-nsg-postgresql-unrestricted: Unrestricted PostgreSQL Database Access in Azure NSGs