CVE-2026-11727

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 and IBM MQ 9.1 through 10.0.0.0 (Standard Client) are affected by a heap-based buffer overflow (CWE-122) in the MQ client's MQOPEN reply handler . Improper validation of queue manager responses when requesting AMS policy data allows a rogue queue mana...

CVE-2026-11725 IBM MQ queue manager is vulnerable to privilege escalation

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing...

CVE-2026-11725 IBM MQ queue manager is vulnerable to privilege escalation

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing...

EUVD-2026-83292

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing...

CVE-2026-11725

IBM MQ queue manager is vulnerable to an integer overflow (CWE-190) in MQINQ request validation , allowing an authenticated attacker to cause a denial of service or potentially execute arbitrary code. The affected versions span IBM MQ 9.1 LTS through 10.0.0.0 (Server component) and IBM MQ Applian...

EUVD-2026-83289

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

CVE-2026-11716 IBM MQ for HPE NonStop is vulnerable to a denial of service attack

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

CVE-2026-11716

IBM MQ (across multiple platforms including HPE NonStop, standard server, and Appliance) is affected by a heap-based buffer overflow (CWE-122) in the queue manager's cluster migration message handler. An authenticated attacker with network access can trigger a denial of service or potentially exe...

CVE-2026-11716 IBM MQ for HPE NonStop is vulnerable to a denial of service attack

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...

Spring4Shell-POC

Aplicación PoC de Spring4Shell Esta es una aplicación dockerizada que es vulnerable a la vulnerabilidad Spring4Shell CVE-2022-22965. Se proporciona el código fuente Java completo del war y es modificable; el war se reconstruirá cada vez que se construya la imagen de docker. El WAR construido será...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 - 未经身份验证的任意文件上传 描述 WordPress 的 AR for WooCommerce 插件在所有版本（包括 6.2）中由于缺少文件类型验证，容易受到任意文件上传攻击。这使得未经身份验证的攻击者可以在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 详细信息 类型 : plugin 标识符 : ar-for-woocommerce 受影响版本 : 6.2 CVSS 分数 : 9.8 CVSS 评级 : 严重 CVSS 向量 :...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange Para este laboratorio, el objetivo era practicar el triaje de una vulnerabilidad real y conocida de la misma forma en que lo haría un equipo de seguridad: leyendo los detalles de la CVE, comprendiendo la puntuación CVSS y razonando sobre el...

CVE-2025-2945

CVE-2025-2945 - Exploit de RCE autenticado en pgAdmin4 Autor: G0D150NE Versión: 2.0.0 CVE: CVE-2025-2945 Severidad: Crítica CVSS 9.9 📌 Descripción Exploit para la vulnerabilidad de ejecución remota de código RCE en pgAdmin4 que afecta a las versiones 8.10 a 9.1. La vulnerabilidad se encuentra en ...

Triage-CVE-2017-0144

Triage: CVE-2017-0144 EternalBlue / SMBv1 — asociado a la propagación de WannaCry Para este laboratorio, el objetivo era hacer triage de otra vulnerabilidad real y conocida, esta vez EternalBlue, la falla de SMBv1 que fue explotada famosamente por el brote de ransomware WannaCry. Paso 1: Abrir el...

CVE-2025-5781

Exploit de FreePBX CVE-2025-57819 Descripción Este script explota una vulnerabilidad en versiones de FreePBX anteriores a 16.0.26.0 CVE-2025-57819, permitiendo a atacantes remotos ejecutar código PHP arbitrario a través de una falla de inyección SQL en el endpoint de la API AJAX. El exploit crea...

CVE-2026-93759

Mongoid does not neutralize a string-typed query criterion supplied to its query builder, and instead passes it to the database as a server-side JavaScript expression. An unauthenticated party able to influence the value an application supplies as a query argument may cause code of their choosing...

CVE-2026-81180

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

CVE-2026-33625

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model wit...

CVE-2025-66455

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.2 and prior to version 0.16.0, LMDeploy's PyTorch DistServe/PD-disaggregation control plane used recvpyobj to deserialize messages received through a ZeroMQ PULL socket. PyZMQ implements...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triaje: CVE-2021-44228 Log4Shell / Log4j Para este laboratorio, el objetivo era hacer triaje de otra vulnerabilidad real y conocida, Log4Shell, una de las más explotadas en los últimos años debido a lo común que era la biblioteca afectada en el software empresarial. Paso 1: Abrir el CVE en NVD Fu...