roaris/CVE-2024-27304-PoC

PoC

PoC of "DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste"

view exploit source poc_in_githubauthor roarispublished 2025-10-12catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-27304US	—	1.11% (66th)	Exploit	2024-03-06
pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the ca…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.