## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SOLTANALI0-CVE-2025-1094-EXPLOIT
# CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀
This repository contains a proof of concept (PoC) exploit for **CVE-2025-1094** , a vulnerability in PostgreSQL that allows an SQL Injection (SQLi) attack to escalate to Remote Code Execution (RCE) through WebSocket hijacking.
## Overview
This exploit leverages an SQL Injection vulnerability in PostgreSQL to inject malicious code that reads sensitive files, such as `/etc/passwd`, and stores them on the vulnerable server. The exploit then hijacks an active WebSocket connection to execute arbitrary commands, ultimately achieving a remote shell on the compromised server.
## Vulnerability Details
* **CVE ID** : CVE-2025-1094
* **Vulnerable System** : PostgreSQL (misconfigured functions)
* **Exploit Path** : SQL Injection → WebSocket Hijacking → Remote Code Execution (RCE)
## How It Works
1. **SQL Injection (SQLi)** : The attack begins with injecting malicious SQL commands into a vulnerable PostgreSQL endpoint. The payload uses `lo_export` to read sensitive files from the server.
2. **WebSocket Hijacking** : The attacker hijacks an open WebSocket connection and sends a payload to execute the RCE. This triggers a reverse shell connection back to the attacker’s system.