#CVE

Apache Tomcat / JBoss EJBInvokerServlet / JMXInvokerServlet Multiple Vulnerabilities.

Common Vulnerabilities and Exposures.

Vulnerabilities in Remote Desktop Could Allow Remote Code Execution.

Oracle TNS Listener Poisioning Checker.

The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.

OpenSSL 'ChangeCipherSpec' MiTM Vulnerability.

Vulnerability in Schannel Could Allow Remote Code Execution.

Dell iDRAC IPMI 1.5 - Insufficient Session ID Randomness.

Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow.

OpenSSL AES-NI Padding Oracle MitM Information Disclosure.

EternalBlue exploits a vulnerability in Microsoft's implementation of the Server Message Block (SMB) protocol.

SQL injection Vulnerability in Joomla! 3.7.0 exploit aka joomblah.

A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53.

libSSH authentication bypass exploit.

Abusing Exchange: One API call away from Domain Admin. (CVE-2019-0686 & CVE-2019-0724)

Remote Desktop Services Remote Code Execution Vulnerability.

Oracle WebLogic WLS9-async Remote Code Execution.

Command 10001 request, to disclose potentially sensitive information.

Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization - Remote Code Execution.

Citrix NetScaler.

A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'.

SMBv3 RCE.

SIGRed.

CVE-2020-1472 ZeroLogon.

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

Apache Ghostcat.

Oracle WebLogic Server RCE.

Pkexec Local Privilege Escalation.

CVE-2021-26855 - ProxyLogon - Vulnerability resulting in unauthenticated remote code execution through only port 443.

CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache Tapestry.

ProxyShell, the name given to a collection of vulnerabilities for Microsoft Exchange servers, enables an actor to bypass authentication and execute code as a privileged user.

PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service.

CVE-2021-40449 is a use-after-free in Win32k that allows for local privilege escalation.

Apache Log4j2 <=2.14.1 RCE.

The Dirty Pipe Vulnerability.

Win32k Elevation of Privilege Vulnerability.

Microsoft Support Diagnostic Tool (MSDT) RCE Vulnerability 'Follina'.

Overview of CVEs.