CVE-2025-59470

The repository contains a functional exploit for CVE-2025-59470, demonstrating command injection in PostgreSQL's pg_backup extension via a crafted backup command. The exploit leverages a reverse shell payload to achieve remote code execution as the PostgreSQL user.

This exploit demonstrates a command injection vulnerability in PostgreSQL's pg_backup extension, allowing arbitrary command execution as the PostgreSQL user via unsanitized parameters. The PoC injects a reverse shell command through the backup directory parameter.