CVE-2025-29927

CVE-2025-29927 Next.js Middleware Authorization Bypass The detection template for CVE-2025-29927 is now officially part of the Nuclei Templates repository. https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-29927-HEADLESS.yaml A critical vulnerability in...

patch-CVE-2026-15502

Patch: CVE-2026-15502 Vulnerability Details CVE : CVE-2026-15502 Product : Microsoft Exchange Server Description : SSRF leading to RCE Severity : Critical Patch Status: IN-REVIEW Field| Value ---|--- Patch Date| 2026-06-01 Status| in-review Deployed To| Production Validated By| SecOps Team...

CVE-2025-32463

CVE-2025-32463: Sudo Local Privilege Escalation Vulnerability Summary CVE-2025-32463 is a Local Privilege Escalation LPE vulnerability discovered in Sudo. An attacker can exploit this vulnerability to gain root privileges under certain conditions. Vulnerability Details Vulnerability Description: ...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

OpenSTA-Exploit

OpenSTA-Exploit Data| Detail ---|--- CVE ID| CVE-2025-69212 Vuln Score| critical 9.4 CWE| 78: Improper Neutralization of Special Elements used in an OS Command Affected Versions| OpenSTAManager ' SHELL.php" maliciousfile = f'invoice.p7m";cmd;echo "...

patch-CVE-2026-04321

Patch: CVE-2026-04321 Vulnerability Details CVE : CVE-2026-04321 Product : Zyxel firewall Description : OS command injection Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-01-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CIS...

CVE-2025-47577

CVE-2025-47577 - WordPress TI WooCommerce Wishlist for uploaded image path 💾 Saves valid uploaded image URLs to result.txt 💾 Saves valid wishlist URLs to resultwishlist.txt 🧠 Researcher Credit: Patchstack Database 🚀 Usage 1. Prepare your list.txt file with a list of target domains one per line,...

Atlassian-Bitbucket-CVE-2022-36804

Atlassian-Bitbucket-Server-CVE-2022-36804 A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions &...

patch-CVE-2026-28001

Patch: CVE-2026-28001 Vulnerability Details CVE : CVE-2026-28001 Product : Splunk Enterprise Description : Remote code execution in SPL parsing Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-07-22 Status| deployed Deployed To| Production Validated By| SecOps Team...

patch-CVE-2026-31337

Patch: CVE-2026-31337 Vulnerability Details CVE : CVE-2026-31337 Product : Ivanti Connect Secure Description : RCE via authentication bypass Severity : Critical CISA KEV : Yes confirmed exploited in the wild Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-08-15 Status| deployed...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code...

patch-CVE-2026-08742

Patch: CVE-2026-08742 Vulnerability Details CVE : CVE-2026-08742 Product : Citrix ADC Description : Buffer overflow Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-03-20 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...

patch-CVE-2026-22024

Patch: CVE-2026-22024 Vulnerability Details CVE : CVE-2026-22024 Product : Oracle WebLogic Server Description : Deserialization vulnerability Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-07-01 Status| deployed Deployed To| Production Validated By| SecOps Team...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot CVE| Component| Primary Issue| Fixed Open Source Versions| Priority ---|---|---|---|--- CVE-2026-28755|...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-2018-7600 , also known as Drupalgeddon2. CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote...

CVE-2022-22965

CVE-2022-22965 Spring4Shell Analysis Vulnerability Description Spring4Shell is the name of a CVE existing on Spring Core of the Spring Framework. With a CVSS 3.x score of 9.8, the vulnerability is classified as the highest risk level critical. This vulnerability allows an attacker to execute remo...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulnerability through the CLI can lead to RCE Products and Versions affected: Product| Affected Versions ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS: CRITICAL Actively Exploited: YES Patch: YES Mitigation: YES Help usage: CVE-2024-23897.py...

cve-2025-55182-react2shell-analysis

CVE-2025-55182 — React2Shell Vulnerability Analysis Overview This project presents a technical analysis of CVE-2025-55182 React2Shell , a critical remote code execution vulnerability affecting React Server Components. The objective of this research was to understand the vulnerability, analyze its...

2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critical Unrestricted File Upload vulnerability in Elementor Pro Potentially leading to Remote Code Execution RCE ⚠️ Overview CVE-2026-32475 is a critical security vulnerability affecting Elementor Pro , a widely deployed WordPress...