Re: I have a suspicious query

2025-07-12 Thread Ron Johnson
On Fri, Jul 11, 2025 at 2:44 PM Greg Sabino Mullane wrote: > Looks like someone testing out the fake Postgres CVE 2019-9193 > > https://nvd.nist.gov/vuln/detail/CVE-2019-9193 > > See for example: > > https://packetstorm.news/files/id/166540 > > But certainly the first step is finding out who or w

Re: I have a suspicious query

2025-07-12 Thread Matthias Apitz
El día viernes, julio 11, 2025 a las 11:12:38a. m. -0600, Edmundo Robles escribió: > Hi > > i have (PostgreSQL) 13.16 (Debian 13.16-0+deb11u1) > While monitoring active queries, I came across the following: > > `DROP TABLE IF EXISTS _145e289026a0a2a62de07e49c06d9965; CREATE TABLE > _145e289026

Re: I have a suspicious query

2025-07-11 Thread Merlin Moncure
On Fri, Jul 11, 2025 at 11:13 AM Edmundo Robles wrote: > Hi > > i have (PostgreSQL) 13.16 (Debian 13.16-0+deb11u1) > While monitoring active queries, I came across the following: > > `DROP TABLE IF EXISTS _145e289026a0a2a62de07e49c06d9965; CREATE TABLE > _145e289026a0a2a62de07e49c06d9965(cmd_out

Re: I have a suspicious query

2025-07-11 Thread Greg Sabino Mullane
Looks like someone testing out the fake Postgres CVE 2019-9193 https://nvd.nist.gov/vuln/detail/CVE-2019-9193 See for example: https://packetstorm.news/files/id/166540 But certainly the first step is finding out who or what is running this. Cheers, Greg

Re: I have a suspicious query

2025-07-11 Thread Adrian Klaver
On 7/11/25 10:12 AM, Edmundo Robles wrote: Hi i have  (PostgreSQL) 13.16 (Debian 13.16-0+deb11u1) While monitoring active queries, I came across the following: `DROP TABLE IF EXISTS _145e289026a0a2a62de07e49c06d9965; CREATE TABLE _145e289026a0a2a62de07e49c06d9965(cmd_output text); COPY _14