{"vulnerability": "cve-2024-3116", "sightings": [{"uuid": "76f3560d-2d02-4b0f-a341-da7748b57b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "6d69ab8c-bef8-4da0-9b9b-936a5c151f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:02.000000Z"}, {"uuid": "014e110a-3aba-4ca7-acac-1bf2918ad4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "e49193b7-f519-4351-b1dd-526a6a6f61cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pgadmin_binary_path_api.rb", "content": "", "creation_timestamp": "2024-08-28T18:11:08.000000Z"}, {"uuid": "2952f81f-2df5-4118-89bd-8352d3d3e7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6974", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMaking a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4\nURL\uff1ahttps://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-07T23:08:03.000000Z"}, {"uuid": "f6afd2ea-eea5-4202-a76d-5bc3047060af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6973", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aMaking a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4\nURL\uff1ahttps://github.com/TechieNeurons/Testing-CVE-2024-3116---RCE-in-pgadmin-8.4\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-04-07T23:03:55.000000Z"}, {"uuid": "476aa31d-4d02-4403-a1ab-6f688a6e8f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4305", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3116\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-04-04T15:15:39.667\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://gist.github.com/aelmokhtar/689a8be7e3bd535ec01992d8ec7b2b98\n2. https://github.com/pgadmin-org/pgadmin4/issues/7326\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIF5T34JTTYRGIN5YPT366BDFG6452A2/\n4. https://gist.github.com/aelmokhtar/689a8be7e3bd535ec01992d8ec7b2b98\n5. https://github.com/pgadmin-org/pgadmin4/issues/7326\n6. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GIF5T34JTTYRGIN5YPT366BDFG6452A2/\n7. https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-pgadmin-cve-2024-3116", "creation_timestamp": "2025-02-13T19:11:20.000000Z"}, {"uuid": "1b9abb19-01dc-4b79-8516-bf16206f6686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/14966", "content": "https://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\nMaking a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4\n#github #exploit", "creation_timestamp": "2024-07-30T16:57:24.000000Z"}, {"uuid": "2651c59a-e83c-4bea-a3e9-0d5246adac58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "Telegram/COVPm300cusKNHW-qOnOYR5KovZkX53TRRbS2ppcSMbF_w", "content": "", "creation_timestamp": "2024-07-30T15:27:20.000000Z"}, {"uuid": "f9d9d067-5fb7-40b3-9d35-008bd284526c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1581", "content": "https://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\nMaking a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4\n#github #exploit", "creation_timestamp": "2024-07-30T16:57:24.000000Z"}, {"uuid": "a73f6929-ee61-46e0-822e-d8f70889e411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/75", "content": "#exploit\n1. CVE-2024-3116:\nRCE in pgAdmin <=8.4\nhttps://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\n2. CVE-2024-23746:\nMiro Desktop 0.8.18 on macOS allows Electron code injection\nhttps://github.com/louiselalanne/CVE-2024-23746", "creation_timestamp": "2024-07-30T07:06:00.000000Z"}, {"uuid": "b9cc179a-b2ef-40d5-8259-0624138abf9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2904", "content": "https://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\nMaking a lab and testing the CVE-2024-3116, a Remote Code Execution in pgadmin <=8.4\n#github #exploit", "creation_timestamp": "2024-07-30T07:13:57.000000Z"}, {"uuid": "c97c7a06-0a1e-498e-813b-8f730bda40d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10903", "content": "#exploit\n1. CVE-2024-3116:\nRCE in pgAdmin <=8.4\nhttps://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\n2. CVE-2024-23746:\nMiro Desktop 0.8.18 on macOS allows Electron code injection\nhttps://github.com/louiselalanne/CVE-2024-23746", "creation_timestamp": "2024-07-30T11:01:36.000000Z"}, {"uuid": "d48b2507-326b-4dac-9ea8-e916e3524b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3510", "content": "#exploit\n1. CVE-2024-3116:\nRCE in pgAdmin <=8.4\nhttps://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4\n\n2. CVE-2024-23746:\nMiro Desktop 0.8.18 on macOS allows Electron code injection\nhttps://github.com/louiselalanne/CVE-2024-23746", "creation_timestamp": "2024-08-16T11:18:08.000000Z"}, {"uuid": "f370a82b-df4d-4a32-a408-97c9f5d20b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3116", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/pgadmin_binary_path_api.rb", "content": "{\"aliases\": [], \"arch\": \"x64\", \"author\": [\"M.Selim Karahan\", \"Mustafa Mutlu\", \"Ayoub Mokhtar\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"pgAdmin <= 8.4 is affected by a Remote Code Execution (RCE)\\n          vulnerability through the validate binary path API. This vulnerability\\n          allows attackers to execute arbitrary code on the server hosting PGAdmin,\\n          posing a severe risk to the database management system's integrity and the security of the underlying data.\\n\\n          Tested on pgAdmin 8.4 on Windows 10 both authenticated and unauthenticated.\", \"disclosure_date\": \"2024-03-28\", \"fullname\": \"exploit/windows/http/pgadmin_binary_path_api\", \"is_install_path\": true, \"mod_time\": \"2025-04-11 15:55:46 +0000\", \"name\": \"pgAdmin Binary Path API RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"config-changes\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/pgadmin_binary_path_api.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/pgadmin_binary_path_api\", \"references\": [\"CVE-2024-3116\", \"URL-https://ayoubmokhtar.com/post/remote_code_execution_pgadmin_8.4-cve-2024-3116/\", \"URL-https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-pgadmin-cve-2024-3116\"], \"rport\": 8000, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:56.821051Z"}]}