patch-CVE-2026-31337

Parche: CVE-2026-31337 Detalles de la Vulnerabilidad CVE : CVE-2026-31337 Producto : Ivanti Connect Secure Descripción : RCE mediante omisión de autenticación Gravedad : Crítica CISA KEV : Sí confirmado explotado en la naturaleza Estado del Parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche...

CVE-2025-22457

PoC para CVE-2025-22457 Un desbordamiento de búfer basado en pila remoto sin autenticación que afecta a Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure y ZTA Gateways Resumen Este es un exploit de prueba de concepto para demostrar la explotación de CVE-2025-22457. Para un anális...

NachoVPN

NachoVPN 🌮🔒 NachoVPN es una Prueba de Concepto que demuestra la explotación de clientes SSL-VPN, utilizando un servidor VPN malicioso. Utiliza una arquitectura basada en plugins para que la comunidad pueda contribuir con soporte para productos SSL-VPN adicionales. Actualmente admite varios...

CVE-2025-0282

CVE-2025-0282 Desbordamiento de pila TLS IFT en Ivanti Connect Secure pre-autenticación RCE CVE-2025-0282 Este código está intencionadamente roto de maneras no triviales y requerirá esfuerzo para funcionar según lo descrito previamente en nuestra publicación de blog sobre técnicas de explotación...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure y Puertas de enlace ZTA - CVE-2025-0282 Comando: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Referencia:...

CVE-2021-22893

CVE-2021-22893 Vulnerabilidad RCE en Pulse Connect Secure CVE-2021-22893 Shodan : https://www.shodan.io/search?query=http.component%3A%22pulse+secure%22...

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

Exploit for CVE-2026-31337

Patch: CVE-2026-31337 Vulnerability Details - CVE: CVE...

Exploit for Out-of-bounds Write in Ivanti Connect_Secure

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Ga...

Exploit for Out-of-bounds Write in Ivanti Connect_Secure

CVE-2025-22457 Simulation: Stack-Based Buffer Overflow Analizi...

📄 Ivanti Connect Secure 9.x / 22.x Command Injection

The provided PHP script targets CVE‑2024‑21887, a command injection vulnerability in Ivanti Connect Secure versions 9.x and 22.x It is designed to identify and exploit vulnerable systems through a crafted API request. It initializes a reusable cURL session to send malicious JSON payloads to a...

PT-2026-4276

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

PT-2026-4277

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2021-22936

A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter...

CVE-2021-22899

A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature...

CVE-2021-22965

A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device...

CVE-2021-22938

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console...

CVE-2021-22893

Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the...

CVE-2021-22934

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request...

CVE-2021-22894

A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room...