CVE-2025-68664-LangGrinch-PoC

📑 Índice 🎯 Resumen Ejecutivo 📂 Estructura del Proyecto 🚀 Inicio Rápido...

patch-CVE-2026-03200

Patch: CVE-2026-03200 Vulnerability Details CVE : CVE-2026-03200 Product : Progress MOVEit Description : SQL injection Severity : Critical Patch Status: DEPLOYED...

patch-CVE-2026-11553

Patch: CVE-2026-11553 Vulnerability Details CVE : CVE-2026-11553 Product : VMware vCenter Description : Authentication bypass Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-04-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CI...

patch-CVE-2026-08742

Patch: CVE-2026-08742 Vulnerability Details CVE : CVE-2026-08742 Product : Citrix ADC Description : Buffer overflow Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-03-20 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...

patch-CVE-2026-10520

Patch: CVE-2026-10520 Vulnerability Details CVE : CVE-2026-10520 Product : Apache Struts Description : OGNL injection Severity : Critical Patch Status: IN-REVIEW...

patch-CVE-2026-07219

Patch: CVE-2026-07219 Vulnerability Details CVE : CVE-2026-07219 Product : F5 BIG-IP Description : iControl REST vulnerability Severity : Critical Patch Status: DEPLOYED...

patch-CVE-2026-15502

Patch: CVE-2026-15502 Vulnerability Details CVE : CVE-2026-15502 Product : Microsoft Exchange Server Description : SSRF leading to RCE Severity : Critical Patch Status: IN-REVIEW...

patch-CVE-2026-14290

Patch: CVE-2026-14290 Vulnerability Details CVE : CVE-2026-14290 Product : Palo Alto PAN-OS Description : Command injection in GlobalProtect Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-05-20 Status| deployed Deployed To| Production Validated By| SecOps Team...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-2018-7600 , also known as Drupalgeddon2. CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote...

CVE-2025-55182-React2Shell

CVE-2025-55182-React2Shell xpl0ited by infrar3d A 10.0 critical severity vulnerablility affecting server-side use of React.js, tracked as CVE-2025-55182 in React.js and CVE-2025-66478 specifically for the Next.js framework. This vulnerability was responsibly disclosed by Lachlan Davidson on 29...

CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Vulnerabilidad crítica de ejecución remota de código en Microsoft SMBv1 📌 Resumen EternalBlue es una vulnerabilidad crítica en el protocolo Server Message Block versión 1 SMBv1 de Microsoft que permite a atacantes remotos ejecutar código arbitrario en sistemas Windows...

Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload

Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. id: CVE-2018-9206 info: name: Blueimp jQuery-File-Upload v9.22.0 -...

SmarterTools SmarterMail - Admin Password Reset

Detected a SmartMail admin password reset vulnerability by sending a POST request to the /api/v1/auth/force-reset-password endpoint, indicating that administrative password resets could potentially be triggered without proper authorization. id: CVE-2026-23760 info: name: SmarterTools SmarterMail ...

Adobe Experience Manager Forms - Insecure Deserialization

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user...

HPE OneView - Remote Code Execution

HPE OneView contains a remote code execution vulnerability, letting remote attackers execute arbitrary code. id: CVE-2025-37164 info: name: HPE OneView - Remote Code Execution author: DhiyaneshDk,garciaizcoa severity: critical description: | HPE OneView contains a remote code execution...

CVE-2025-70149-SQL-Injection

CVE-2025-70149 — Proyecto de investigación de inyección SQL Descripción general Proyecto de investigación de seguridad que demuestra la explotación y mitigación de CVE-2025-70149, una vulnerabilidad crítica de inyección SQL CVSS 9.8/10 en CodeAstro Membership Management System v1.0. Detalles de C...

CVE-2021-22205

CVE-2021-22205 - GitLab Unauthenticated Remote Code Execution CVE-2021-22205 is a critical Remote Code Execution RCE vulnerability affecting GitLab Community Edition CE and Enterprise Edition EE. The vulnerability originates from improper validation of uploaded image files that are processed by t...

CVE-2026-63030

🚨 CVE-2026-63030 — WP2Shell WordPress REST API Route Confusion → Remote Code Execution A Critical WordPress Core vulnerability enabling REST API route confusion that can be chained with SQL Injection to achieve unauthenticated Remote Code Execution. 📖 Overview CVE-2026-63030 is a Critical...

CVE-2022-22947

Vulnerability Description Spring Cloud Gateway is a new project under Spring Cloud, aiming to replace Netflix Zuul. It is developed based on Spring 5.0+, Spring Boot 2.0+, and WebFlux based on the high-performance Reactor pattern reactive communication framework Netty, asynchronous non-blocking...

patch-CVE-2026-28001

Patch: CVE-2026-28001 Vulnerability Details CVE : CVE-2026-28001 Product : Splunk Enterprise Description : Remote code execution in SPL parsing Severity : Critical Patch Status: DEPLOYED...