cve-2019-2725

cve-2019-2725 Referencias: Tenable - https://www.tenable.com/blog/oracle-weblogic-affected-by-unauthenticated-remote-code-execution-vulnerability-cve-2019-2725 Exploit Database - https://www.exploit-db.com/exploits/46780 PaloAlto -...

CVE-2026-48907

🚨 CVE-2026-48907 - JCE Joomla Content Editor Ejecución remota de código no autenticada ⚠️ Ejecución remota de código crítica no autenticada en JCE Joomla Content Editor Una vulnerabilidad crítica de control de acceso que permite a atacantes no autenticados comprometer instalaciones de Joomla...

CVE-2026-23744-MCPJam-Exploit

CVE-2026-23744 MCPJam Inspector RCE Exploit ⚠️ AVISO LEGAL Esta herramienta es SOLO para pruebas de seguridad autorizadas y fines educativos. El uso no autorizado es ilegal. Los usuarios asumen toda responsabilidad por sus acciones. 📋 Resumen Este repositorio contiene una prueba de concepto del...

httpd-2.4.49

httpd-2.4.49 critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 CVE-2021-42013...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

This repository does not have a README...

CVE-2012-1823

CVE-2012-1823 - Inyección de Argumentos CGI en PHP - Ejecución Remota de Código RCE Severidad: Crítica CVSS 9.8 CVE: CVE-2012-1823 Publicado: 11 de mayo de 2012 Software afectado: PHP ejecutándose en modo CGI php-cgi Tipo de vulnerabilidad: Inyección de argumentos / Ejecución Remota de Código RCE...

EUVD-2026-72533

Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint with only the settings.edit permission, allowing non-Superadmin administrators to upload and extract arbitrary zip archives over the live application source code. Attackers can upload a malicious archive...

EUVD-2026-72534

Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote...

CVE-2022-22963

CVE-2022-22963 Educational proof-of-concept automation for CVE-2022-22963, demonstrated in an authorized Hack The Box lab environment. Overview CVE-2022-22963 is a Spring Cloud Function vulnerability involving the spring.cloud.function.routing-expression header. Under vulnerable configurations, a...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-falla-TCP-IP-que-abre-las-puertas Una vulnerabilidad crítica de RCE en la pila TCP/IP de Windows CVE-2025-26686 deja memoria sensible desbloqueada, permitiendo a atacantes remotos secuestrar sistemas. Explotable a través de la red, corre el riesgo de un compromiso total. Parchee...

PT-2026-87890

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-88229

Huge security roundup: Google patches 200 Android vulnerabilities—in particular a Wi-Fi bug CVE-2026-28662 that enables remote code execution. Meanwhile, phishing campaigns leverage browser redirects & fake shops clone real brands at scale. Exposure through extensions, Shadow AI risk, Patel serve...

PT-2026-87822

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-69522

This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution...

PT-2026-87688

We recently used LYNXRAY to independently discover an unauthenticated remote code execution vulnerability affecting certain Windows versions CVE-2026-69732. Unfortunately, MSRC determined that our submission duplicated an earlier report by Seung Chan Kim. Although we narrowly missed the first...

PT-2026-87630

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

PT-2026-87129

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...

PT-2026-87090

🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/BqCC52NTwG Ivanti CyberSecurity InfoSec...

PT-2026-87982

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...