2025 CVEs¶
1197 entries from 2025. 22 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2025-20281 — A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an… | Critical (10.0) | — | ✅ |
| CVE-2025-29813 — Azure DevOps Token Hijacking / Privilege Escalation | Critical (10.0) | — | ✅ |
| CVE-2025-31324 — SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper… | Critical (10.0) | — | ✅ |
| CVE-2025-32433 — Erlang/OTP is a set of libraries for the Erlang programming language. | Critical (10.0) | — | ✅ |
| CVE-2025-32660 — Unrestricted Upload of File with Dangerous Type vulnerability in JoomSky JS Job Manager… | Critical (10.0) | — | ✅ |
| CVE-2025-34028 — The Commvault Command Center Innovation Release allows an unauthenticated actor to upload… | Critical (10.0) | — | ✅ |
| CVE-2025-37164 — CVE ID: CVE-2025-37164, CWE: CWE-94, Type: RCE, Attack Vector: NETWORK, CVSS: 10.0 | Critical (10.0) | — | ✅ |
| CVE-2025-41115 — Grafana Enterprise SCIM Admin Spoofing | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-43300 — An out-of-bounds write issue was addressed with improved bounds checking. | Critical (10.0) | — | ✅ |
| CVE-2025-47812 — In Wing FTP Server before 7.4.4. | Critical (10.0) | — | ✅ |
| CVE-2025-48106 — Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora… | Critical (10.0) | — | ✅ |
| CVE-2025-49060 — Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Wastia… | Critical (10.0) | — | ✅ |
| CVE-2025-49372 — Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme… | Critical (10.0) | — | ✅ |
| CVE-2025-49844 — Redis RediShell RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-52691 — Successful exploitation of the vulnerability could allow an unauthenticated attacker to… | Critical (10.0) | — | ✅ |
| CVE-2025-52694 — Successful exploitation of the SQL injection vulnerability could allow an unauthenticated… | Critical (10.0) | — | ✅ |
| CVE-2025-53283 — Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader… | Critical (10.0) | — | ✅ |
| CVE-2025-53767 — Azure OpenAI Server-Side Request Forgery / Privilege Escalation | Critical (10.0) | — | ✅ |
| CVE-2025-54253 — Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration… | Critical (10.0) | — | ✅ |
| CVE-2025-55182 — React Server Components Remote Code Execution (React2Shell) | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-60206 — Improper Control of Generation of Code ('Code Injection') vulnerability in Bearsthemes… | Critical (10.0) | — | ✅ |
| CVE-2025-60207 — Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User… | Critical (10.0) | — | ✅ |
| CVE-2025-60235 — Unrestricted Upload of File with Dangerous Type vulnerability in Plugify Helpdesk Support… | Critical (10.0) | — | ✅ |
| CVE-2025-61937 — The vulnerability, if exploited, could allow an unauthenticated | Critical (10.0) | — | ✅ |
| CVE-2025-6327 — Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King… | Critical (10.0) | — | ✅ |
| CVE-2025-63314 — A static password reset token in the password reset function of DDSN Interactive Acora… | Critical (10.0) | — | ✅ |
| CVE-2025-66478 — Next.js Remote Code Execution | Critical (10.0) | — | ✅ |
| CVE-2025-69828 — File Upload vulnerability in TMS Global Software TMS Management Console… | Critical (10.0) | — | ✅ |
| CVE-2025-22467 — Ivanti Connect Secure Stack-Based Buffer Overflow / RCE | Critical (9.9) | — | ✅ |
| CVE-2025-23120 — Veeam Backup & Replication Deserialization / Remote Code Execution | Critical (9.9) | — | ✅ |
| CVE-2025-23121 — Veeam Backup & Replication Deserialization / Remote Code Execution | Critical (9.9) | — | ✅ |
| CVE-2025-24016 — Wazuh is a free and open source platform used for threat prevention, detection, and… | Critical (9.9) | — | ✅ |
| CVE-2025-25012 — Kibana Prototype Pollution RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-29972 — Azure Storage Resource Provider Server-Side Request Forgery | Critical (9.9) | — | ✅ |
| CVE-2025-48983 — Veeam Backup & Replication Remote Code Execution | Critical (9.9) | — | ✅ |
| CVE-2025-10585 — Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker… | Critical (9.8) | — | ✅ |
| CVE-2025-1316 — Edimax IC-7100 does not properly neutralize requests. | Critical (9.8) | — | ✅ |
| CVE-2025-14733 — An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote… | Critical (9.8) | — | ✅ |
| CVE-2025-2005 — WordPress Arbitrary File Upload / RCE | Critical (9.8) | — | ✅ |
| CVE-2025-20333 — Cisco ASA/FTD Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-2237 — WordPress Authentication Bypass / Privilege Escalation | Critical (9.8) | — | ✅ |
| CVE-2025-24893 — XWiki Platform is a generic wiki platform offering runtime services for applications… | Critical (9.8) | — | ✅ |
| CVE-2025-24985 — Windows Fast FAT File System Driver Zero-Day Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-25257 — An improper neutralization of special elements used in an SQL command ('SQL Injection')… | Critical (9.8) | — | ✅ |
| CVE-2025-2746 — An authentication bypass vulnerability in Kentico Xperience allows authentication bypass… | Critical (9.8) | — | ✅ |
| CVE-2025-2747 — An authentication bypass vulnerability in Kentico Xperience allows authentication bypass… | Critical (9.8) | — | ✅ |
| CVE-2025-31161 — CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover… | Critical (9.8) | — | ✅ |
| CVE-2025-31200 — A memory corruption issue was addressed with improved bounds checking. | Critical (9.8) | — | ✅ |
| CVE-2025-31201 — This issue was addressed by removing the vulnerable code. | Critical (9.8) | — | ✅ |
| CVE-2025-3248 — Langflow versions prior to 1.3.0 are susceptible to code injection in | Critical (9.8) | — | ✅ |
| CVE-2025-32710 — Microsoft Remote Desktop Services Gateway Use-After-Free / Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-32756 — A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet… | Critical (9.8) | — | ✅ |
| CVE-2025-40602 — SonicWall SMA1000 Missing Authorization | Critical (9.8) | — | ✅ |
| CVE-2025-42599 — Active! | Critical (9.8) | — | ✅ |
| CVE-2025-4632 — Improper limitation of a pathname to a restricted directory vulnerability in Samsung… | Critical (9.8) | — | ✅ |
| CVE-2025-47172 — Microsoft SharePoint Server SQL Injection / Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-47981 — Windows SPNEGO Wormable Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-50165 — Windows Graphics Component Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-53770 — Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an… | Critical (9.8) | — | ✅ |
| CVE-2025-54948 — Trend Micro Apex One Command Injection | Critical (9.8) | — | ✅ |
| CVE-2025-54988 — Apache Tika PDF Parser XXE Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-57819 — FreePBX Authentication Bypass to RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-59287 — Microsoft WSUS Remote Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-61757 — Oracle Identity Manager Pre-Auth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-6543 — Memory overflow vulnerability leading to unintended control flow and Denial of Service in… | Critical (9.8) | — | ✅ |
| CVE-2025-7384 — WordPress Database Plugin Unauthenticated Remote Code Execution | Critical (9.8) | — | ✅ |
| CVE-2025-7775 — Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service… | Critical (9.8) | — | ✅ |
| CVE-2025-9242 — An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote… | Critical (9.8) | — | ✅ |
| CVE-2025-2775 — SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External… | Critical (9.3) | — | ✅ |
| CVE-2025-2776 — SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External… | Critical (9.3) | — | ✅ |
| CVE-2025-41236 — VMware ESXi/Workstation Remote Code Execution | Critical (9.3) | — | ✅ |
| CVE-2025-59374 — ASUS Live Update Embedded Malicious Code | Critical (9.3) | — | ✅ |
| CVE-2025-9074 — Docker Desktop Container Escape | Critical (9.3) | — | ✅ |
| CVE-2025-0108 — An authentication bypass in the Palo Alto Networks PAN-OS software enables an… | Critical (9.1) | — | ✅ |
| CVE-2025-12480 — Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control… | Critical (9.1) | — | ✅ |
| CVE-2025-20362 — Cisco ASA/FTD Authentication Bypass | Critical (9.1) | — | ✅ |
| CVE-2025-20393 — Cisco Multiple Products Improper Input Validation | Critical (9.1) | — | ✅ |
| CVE-2025-42999 — SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can… | Critical (9.1) | — | ✅ |
| CVE-2025-54236 — Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15… | Critical (9.1) | — | ✅ |
| CVE-2025-6205 — A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through… | Critical (9.1) | — | ✅ |
| CVE-2025-64459 — Django SQL Injection | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-8110 — Gogs Git Server RCE via Symlink Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-22457 — Ivanti Connect Secure Stack-Based Buffer Overflow / RCE | Critical (9.0) | — | ✅ |
| CVE-2025-23061 — Mongoose ODM RCE Patch Bypass | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-27407 — GitLab CE/EE Code Injection / Remote Code Execution | Critical (9.0) | — | ✅ |
| CVE-2025-30406 — Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a… | Critical (9.0) | — | ✅ |
| CVE-2025-48703 — CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated… | Critical (9.0) | — | ✅ |
| CVE-2025-5086 — A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release… | Critical (9.0) | — | ✅ |
| CVE-2025-53690 — Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM),… | Critical (9.0) | — | ✅ |
| CVE-2025-54309 — CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not… | Critical (9.0) | — | ✅ |
| CVE-2025-0994 — Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions… | High (8.8) | — | ✅ |
| CVE-2025-13223 — Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker… | High (8.8) | — | ✅ |
| CVE-2025-14174 — Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110… | High (8.8) | — | ✅ |
| CVE-2025-15429 — A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. | High (8.8) | — | ✅ |
| CVE-2025-15430 — A vulnerability was detected in UTT 进取 512W 1.7.7-171114. | High (8.8) | — | ✅ |
| CVE-2025-15431 — A flaw has been found in UTT 进取 512W 1.7.7-171114. | High (8.8) | — | ✅ |
| CVE-2025-21042 — Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows… | High (8.8) | — | ✅ |
| CVE-2025-25291 — GitLab CE/EE SAML Authentication Bypass | High (8.8) | — | ✅ |
| CVE-2025-33053 — External control of file name or path in Internet Shortcut Files allows an unauthorized… | High (8.8) | — | ✅ |
| CVE-2025-33073 — Improper access control in Windows SMB allows an authorized attacker to elevate… | High (8.8) | — | ✅ |
| CVE-2025-3928 — Commvault Web Server has an unspecified vulnerability that can be exploited by a remote,… | High (8.8) | — | ✅ |
| CVE-2025-4008 — The Meteobridge web interface let meteobridge administrator manage their weather station… | High (8.8) | — | ✅ |
| CVE-2025-43529 — A use-after-free issue was addressed with improved memory management. | High (8.8) | — | ✅ |
| CVE-2025-48543 — In multiple locations, there is a possible way to escape chrome sandbox to attack android… | High (8.8) | — | ✅ |
| CVE-2025-49704 — Improper control of generation of code ('code injection') in Microsoft Office SharePoint… | High (8.8) | — | ✅ |
| CVE-2025-5419 — Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a… | High (8.8) | — | ✅ |
| CVE-2025-6558 — Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to… | High (8.8) | — | ✅ |
| CVE-2025-8088 — A path traversal vulnerability affecting the Windows version of WinRAR allows the… | High (8.8) | — | ✅ |
| CVE-2025-8876 — Improper Input Validation vulnerability in N-able N-central allows OS Command… | High (8.8) | — | ✅ |
| CVE-2025-30066 — tj-actions changed-files before 46 allows remote attackers to discover secrets by reading… | High (8.6) | — | ✅ |
| CVE-2025-30154 — reviewdog/action-setup is a GitHub action that installs reviewdog. | High (8.6) | — | ✅ |
| CVE-2025-31133 — runC Container Runtime Container Escape | High (8.6) | — | ✅ |
| CVE-2025-52565 — runC Container Runtime Container Escape | High (8.6) | — | ✅ |
| CVE-2025-52881 — runC Container Runtime Container Escape / Race Condition | High (8.6) | — | ✅ |
| CVE-2025-55752 — Apache Tomcat Directory Traversal RCE | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-2783 — Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on… | High (8.3) | — | ✅ |
| CVE-2025-22225 — VMware ESXi Arbitrary Write / Sandbox Escape | High (8.2) | — | ✅ |
| CVE-2025-24989 — An improper access control vulnerability in Power Pages allows an unauthorized attacker… | High (8.2) | — | ✅ |
| CVE-2025-58360 — GeoServer is an open source server that allows users to share and edit geospatial data. | High (8.2) | — | ✅ |
| CVE-2025-1094 — PostgreSQL SQL Injection to RCE | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-3935 — ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code… | High (8.1) | — | ✅ |
| CVE-2025-6554 — Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to… | High (8.1) | — | ✅ |
| CVE-2025-68154 — systeminformation Command Injection vulnerability (CVSS 7.5). | High (8.1) | — | ✅ |
| CVE-2025-23209 — Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web… | High (8.0) | — | ✅ |
| CVE-2025-48384 — Git is a fast, scalable, distributed revision control system with an unusually rich… | High (8.0) | — | ✅ |
| CVE-2025-6204 — An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA… | High (8.0) | — | ✅ |
| CVE-2025-21756 — Linux Kernel Use-After-Free / Privilege Escalation | High (7.8) | — | ✅ |
| CVE-2025-38727 — Linux Kernel Netlink Privilege Escalation | High (7.8) | — | ✅ |
| CVE-2025-48572 — Android Framework Privilege Escalation | High (7.8) | — | ✅ |
| CVE-2025-21605 — Redis Unauthenticated DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-25227 — Joomla CMS MFA Authentication Bypass | High (7.5) | — | ✅ |
| CVE-2025-27210 — Node.js Path Traversal | High (7.5) | — | ✅ |
| CVE-2025-64756 — Node.js glob Package Denial of Service | High (7.5) | — | ✅ |
| CVE-2025-68428 — jsPDF is a library to generate PDFs in JavaScript. | High (7.5) | — | ✅ |
| CVE-2025-9230 — OpenSSL Out-of-Bounds Read/Write / DoS | High (7.5) | — | ✅ |
| CVE-2025-22226 — VMware ESXi/Workstation/Fusion Information Disclosure | High (7.1) | — | ✅ |
| CVE-2025-0411 — 7-Zip Mark-of-the-Web Bypass | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-32023 — Redis HyperLogLog RCE | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-38352 — Linux Kernel POSIX CPU Timers Race Condition / Use-After-Free | High (7.0) | — | ✅ |
| CVE-2025-21540 — MySQL Server Privilege Escalation | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-13456 — The ShopBuilder WordPress plugin before 3.2.2 does not sanitise and escape a parameter… | Medium (6.1) | — | ✅ |
| CVE-2025-9231 — OpenSSL Timing Side-Channel | Medium (5.9) | — | ✅ |
| CVE-2025-48633 — Android Framework Information Disclosure | Medium (5.5) | — | ✅ |
| CVE-2025-55754 — Apache Tomcat ANSI Escape Sequence Injection | Medium (4.3) | — | ✅ |
| CVE-2025-0001 — PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-0002 — GlobalProtect Auth Bypass | Critical | — | ✅ |
| CVE-2025-0003 — Cortex XDR Privilege Escalation | Critical | — | ✅ |
| CVE-2025-0004 — Prisma Cloud RCE | Critical | — | ✅ |
| CVE-2025-0005 — Panorama Command Injection | Critical | — | ✅ |
| CVE-2025-0006 — PAN-OS Auth Bypass | Critical | — | ✅ |
| CVE-2025-0007 — Cortex XSOAR RCE | Critical | — | ✅ |
| CVE-2025-0008 — PAN-OS Buffer Overflow | Critical | — | ✅ |
| CVE-2025-0282 — Connect Secure, Policy Secure, ZTA Gateways | Critical | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-0283 — Ivanti Policy Secure Privilege Escalation | Critical | — | ✅ |
| CVE-2025-0493 — WordPress MultiVendorX LFI | Critical | — | ✅ |
| CVE-2025-10035 — CVE ID: CVE-2025-10035, CWE: CWE-77, Type: COMMAND_INJECTION, Attack Vector: NETWORK,… | Unrated | — | ✅ |
| CVE-2025-11247 — GitLab EE Information Disclosure | Critical | — | ✅ |
| CVE-2025-11833 — WordPress Post SMTP RCE | Critical | — | ✅ |
| CVE-2025-12049 — GitLab RCE | Critical | — | ✅ |
| CVE-2025-14611 — CVE ID: CVE-2025-14611, CWE: CWE-798, Type: LFI, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2025-14700 — Crafty Controller RCE | Critical | — | ✅ |
| CVE-2025-1974 — NGINX Ingress Controller RCE | Critical | — | ✅ |
| CVE-2025-20265 — Cisco Secure Firewall Management Center Command Injection | Critical | — | ✅ |
| CVE-2025-20337 — Cisco Identity Services Engine RCE | Critical | — | ✅ |
| CVE-2025-20363 — Cisco ASA Auth Bypass | Critical | — | ✅ |
| CVE-2025-20394 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-20395 — Cisco ASA Auth Bypass | Critical | — | ✅ |
| CVE-2025-20396 — Cisco FTD RCE | Critical | — | ✅ |
| CVE-2025-20397 — Cisco ISE RCE | Critical | — | ✅ |
| CVE-2025-20398 — Cisco CUCM SQL Injection | Critical | — | ✅ |
| CVE-2025-20399 — Cisco Nexus Command Injection | Critical | — | ✅ |
| CVE-2025-20400 — Cisco AnyConnect Privilege Escalation | Critical | — | ✅ |
| CVE-2025-20401 — Cisco Webex RCE | Critical | — | ✅ |
| CVE-2025-20402 — Cisco DNA Center Auth Bypass | Critical | — | ✅ |
| CVE-2025-20403 — Cisco SD-WAN RCE | Critical | — | ✅ |
| CVE-2025-20404 — Cisco UCS Command Injection | Critical | — | ✅ |
| CVE-2025-20405 — Cisco Meraki RCE | Critical | — | ✅ |
| CVE-2025-20406 — Cisco Prime Deserialization | Critical | — | ✅ |
| CVE-2025-20407 — Cisco WLC RCE | Critical | — | ✅ |
| CVE-2025-20408 — Cisco ESA Command Injection | Critical | — | ✅ |
| CVE-2025-20409 — Cisco WSA RCE | Critical | — | ✅ |
| CVE-2025-20410 — Cisco SMA Auth Bypass | Critical | — | ✅ |
| CVE-2025-20411 — Cisco Firepower RCE | Critical | — | ✅ |
| CVE-2025-20412 — Cisco Catalyst Command Injection | Critical | — | ✅ |
| CVE-2025-20413 — Cisco ACI Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21043 — CVE ID: CVE-2025-21043, CWE: CWE-787, Attack Vector: NETWORK, CVSS: 8.8 | Unrated | — | ✅ |
| CVE-2025-21295 — Windows SPNEGO RCE | Critical | — | ✅ |
| CVE-2025-21296 — Windows BranchCache RCE | Critical | — | ✅ |
| CVE-2025-21297 — Windows Remote Desktop Services RCE | Critical | — | ✅ |
| CVE-2025-21298 — Windows (OLE Component) | Critical | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-21299 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21300 — Windows upnphost DoS | Critical | — | ✅ |
| CVE-2025-21301 — Windows WLAN Info Disclosure | Critical | — | ✅ |
| CVE-2025-21302 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21303 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21304 — Windows RRAS RCE | Critical | — | ✅ |
| CVE-2025-21305 — Windows RDS RCE | Critical | — | ✅ |
| CVE-2025-21306 — Windows Network RCE | Critical | — | ✅ |
| CVE-2025-21307 — Windows RMCAST RCE | Critical | — | ✅ |
| CVE-2025-21308 — Windows Themes Spoofing | Critical | — | ✅ |
| CVE-2025-21309 — Windows Remote Desktop Services RCE | Critical | — | ✅ |
| CVE-2025-21310 — Windows DWM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21311 — Windows NTLMv1 Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21312 — Windows COM Info Disclosure | Critical | — | ✅ |
| CVE-2025-21313 — Windows Security DoS | Critical | — | ✅ |
| CVE-2025-21314 — Windows WMI Spoofing | Critical | — | ✅ |
| CVE-2025-21315 — Windows Installer Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21316 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21317 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21318 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21319 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21320 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21321 — Windows MapUrlToZone Auth Bypass | Critical | — | ✅ |
| CVE-2025-21322 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21323 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21324 — Windows DWM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21325 — Windows Secure Kernel Auth Bypass | Critical | — | ✅ |
| CVE-2025-21326 — Windows SmartScreen RCE | Critical | — | ✅ |
| CVE-2025-21327 — Windows DFS Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21328 — Windows MapUrlToZone Auth Bypass | Critical | — | ✅ |
| CVE-2025-21329 — Windows MapUrlToZone Auth Bypass | Critical | — | ✅ |
| CVE-2025-21330 — Windows RDS DoS | Critical | — | ✅ |
| CVE-2025-21331 — Windows Installer Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21333 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21334 — Windows Hyper-V Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21335 — Windows Hyper-V Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21336 — Windows Cryptographic Info Disclosure | Critical | — | ✅ |
| CVE-2025-21337 — Windows NTFS Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21338 — Windows GDI+ RCE | Critical | — | ✅ |
| CVE-2025-21339 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21340 — Windows Virtualization Auth Bypass | Critical | — | ✅ |
| CVE-2025-21341 — Windows DWM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21342 — Windows Web Threat Auth Bypass | Critical | — | ✅ |
| CVE-2025-21343 — Windows Network Info Disclosure | Critical | — | ✅ |
| CVE-2025-21344 — Windows Search Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21345 — Windows COM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21346 — Office Auth Bypass | Critical | — | ✅ |
| CVE-2025-21347 — Windows DWM DoS | Critical | — | ✅ |
| CVE-2025-21348 — SharePoint RCE | Critical | — | ✅ |
| CVE-2025-21349 — Windows RDS Tampering | Critical | — | ✅ |
| CVE-2025-21350 — Windows Kerberos DoS | Critical | — | ✅ |
| CVE-2025-21351 — Windows DNS DoS | Critical | — | ✅ |
| CVE-2025-21352 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21353 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21354 — Microsoft Excel RCE | Critical | — | ✅ |
| CVE-2025-21355 — Bing RCE | Critical | — | ✅ |
| CVE-2025-21356 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21357 — Outlook RCE | Critical | — | ✅ |
| CVE-2025-21358 — Windows Core Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21359 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21360 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21361 — Outlook RCE | Critical | — | ✅ |
| CVE-2025-21362 — Microsoft Excel RCE | Critical | — | ✅ |
| CVE-2025-21363 — Word RCE | Critical | — | ✅ |
| CVE-2025-21364 — Excel Auth Bypass | Critical | — | ✅ |
| CVE-2025-21365 — Office RCE | Critical | — | ✅ |
| CVE-2025-21366 — Access RCE | Critical | — | ✅ |
| CVE-2025-21367 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21368 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21369 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21370 — Windows Virtualization Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21371 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21372 — Windows DWM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21373 — Windows Installer Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21374 — Windows CSC Info Disclosure | Critical | — | ✅ |
| CVE-2025-21375 — Windows Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21376 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21377 — Windows NTLM Spoofing | Critical | — | ✅ |
| CVE-2025-21378 — Windows CSC Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21379 — Windows DHCP RCE | Critical | — | ✅ |
| CVE-2025-21380 — Azure Marketplace Info Disclosure | Critical | — | ✅ |
| CVE-2025-21381 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21382 — Windows Graphics Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21383 — Excel Info Disclosure | Critical | — | ✅ |
| CVE-2025-21384 — Azure Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21385 — Purview Info Disclosure | Critical | — | ✅ |
| CVE-2025-21386 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21387 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21388 — Exchange Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21389 — Windows upnphost DoS | Critical | — | ✅ |
| CVE-2025-21390 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21391 — Windows Storage Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21392 — Office RCE | Critical | — | ✅ |
| CVE-2025-21393 — SharePoint Spoofing | Critical | — | ✅ |
| CVE-2025-21394 — Excel RCE | Critical | — | ✅ |
| CVE-2025-21395 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21396 — Account Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21397 — Office RCE | Critical | — | ✅ |
| CVE-2025-21398 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21399 — Windows Storage Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21400 — SharePoint RCE | Critical | — | ✅ |
| CVE-2025-21401 — Edge Auth Bypass | Critical | — | ✅ |
| CVE-2025-21402 — Office RCE | Critical | — | ✅ |
| CVE-2025-21403 — Azure Info Disclosure | Critical | — | ✅ |
| CVE-2025-21404 — Edge Spoofing | Critical | — | ✅ |
| CVE-2025-21405 — Visual Studio Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21406 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21407 — Windows Telephony RCE | Critical | — | ✅ |
| CVE-2025-21408 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21409 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21410 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21411 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21412 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21413 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21414 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21415 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21416 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21417 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21418 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21419 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21420 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21421 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21422 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21423 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21424 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21425 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21426 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21427 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21428 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21429 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21430 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21431 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21432 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21433 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21434 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21435 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21436 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21437 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21438 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21439 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21440 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21441 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21442 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21443 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21444 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21445 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21446 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21447 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21448 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21449 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21450 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21451 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21452 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21453 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21454 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21455 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21456 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21457 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21458 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21459 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21460 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21461 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21462 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21463 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21464 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21465 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21466 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21467 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21468 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21469 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21470 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21471 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21472 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21473 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21474 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21475 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21476 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21477 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21478 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21479 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21480 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21481 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21482 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21483 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21484 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21485 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21486 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21487 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21488 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21489 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21490 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21491 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21492 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21493 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21494 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21495 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21496 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21497 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21498 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21499 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21500 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21501 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21502 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21503 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21504 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21505 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21506 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21507 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21508 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21509 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21510 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21511 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21512 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21513 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21514 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21515 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21516 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21517 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21518 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21519 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21520 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21521 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21522 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21523 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21524 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21525 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21526 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21527 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21528 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21529 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21530 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21531 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21532 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21533 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21534 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21535 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21536 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21537 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21538 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21539 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21541 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21542 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21543 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21544 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21545 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21546 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21547 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21548 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21549 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21550 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21551 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21552 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21553 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21554 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21555 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21556 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21557 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21558 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21559 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21560 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21561 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21562 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21563 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21564 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21565 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21566 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21567 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21568 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21569 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21570 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21571 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21572 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21573 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21574 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21575 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21576 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21577 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21578 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21579 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21580 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21581 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21582 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21583 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-21584 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21585 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21586 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21587 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21588 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21589 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21590 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21591 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21592 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21593 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21594 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21595 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21596 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21597 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21598 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21599 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21600 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21601 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21602 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21603 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21604 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21606 — Windows Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21607 — Windows Win32k Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21608 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-21609 — Windows Graphics RCE | Critical | — | ✅ |
| CVE-2025-21610 — Windows DirectX RCE | Critical | — | ✅ |
| CVE-2025-21611 — Windows SMB RCE | Critical | — | ✅ |
| CVE-2025-21612 — Windows RPC RCE | Critical | — | ✅ |
| CVE-2025-21613 — Windows DNS RCE | Critical | — | ✅ |
| CVE-2025-21614 — Windows LDAP RCE | Critical | — | ✅ |
| CVE-2025-21615 — Windows Kerberos Auth Bypass | Critical | — | ✅ |
| CVE-2025-21616 — Windows NTLM Auth Bypass | Critical | — | ✅ |
| CVE-2025-21617 — Windows Hyper-V RCE | Critical | — | ✅ |
| CVE-2025-21618 — Windows BitLocker Auth Bypass | Critical | — | ✅ |
| CVE-2025-21619 — Windows Defender Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21620 — Windows Print Spooler RCE | Critical | — | ✅ |
| CVE-2025-21621 — Windows Task Scheduler Privilege Escalation | Critical | — | ✅ |
| CVE-2025-21622 — Windows COM RCE | Critical | — | ✅ |
| CVE-2025-21623 — Windows DCOM RCE | Critical | — | ✅ |
| CVE-2025-21624 — Windows MSHTML RCE | Critical | — | ✅ |
| CVE-2025-21625 — Windows VBScript RCE | Critical | — | ✅ |
| CVE-2025-21626 — Windows JScript RCE | Critical | — | ✅ |
| CVE-2025-21627 — Windows PowerShell RCE | Critical | — | ✅ |
| CVE-2025-22001 — Confluence RCE | Critical | — | ✅ |
| CVE-2025-22002 — Jira Auth Bypass | Critical | — | ✅ |
| CVE-2025-22003 — Bitbucket RCE | Critical | — | ✅ |
| CVE-2025-22004 — Bamboo Command Injection | Critical | — | ✅ |
| CVE-2025-22005 — Crowd Auth Bypass | Critical | — | ✅ |
| CVE-2025-22006 — Confluence OGNL Injection | Critical | — | ✅ |
| CVE-2025-22007 — Jira SQL Injection | Critical | — | ✅ |
| CVE-2025-22224 — vCenter Server, Cloud Foundation | Critical | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-22227 — VMware vCenter RCE | Critical | — | ✅ |
| CVE-2025-22228 — VMware Aria Auth Bypass | Critical | — | ✅ |
| CVE-2025-22229 — VMware NSX Command Injection | Critical | — | ✅ |
| CVE-2025-22230 — VMware Cloud Director RCE | Critical | — | ✅ |
| CVE-2025-22231 — VMware Horizon Auth Bypass | Critical | — | ✅ |
| CVE-2025-22232 — VMware Workstation Privilege Escalation | Critical | — | ✅ |
| CVE-2025-22233 — VMware vSAN RCE | Critical | — | ✅ |
| CVE-2025-23006 — SonicWall SMA1000 Deserialization | Critical | — | ✅ |
| CVE-2025-24085 — Apple iOS/macOS Use-After-Free | Critical | — | ✅ |
| CVE-2025-24086 — macOS Privilege Escalation | Critical | — | ✅ |
| CVE-2025-24087 — iOS RCE | Critical | — | ✅ |
| CVE-2025-24088 — Safari Memory Corruption | Critical | — | ✅ |
| CVE-2025-24089 — iOS Sandbox Escape | Critical | — | ✅ |
| CVE-2025-24090 — macOS RCE | Critical | — | ✅ |
| CVE-2025-24091 — iOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-24092 — watchOS RCE | Critical | — | ✅ |
| CVE-2025-24093 — tvOS RCE | Critical | — | ✅ |
| CVE-2025-24094 — visionOS RCE | Critical | — | ✅ |
| CVE-2025-24200 — Apple iOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-24201 — CVE ID: CVE-2025-24201, CWE: CWE-787, Attack Vector: NETWORK, CVSS: 10.0 | Unrated | — | ✅ |
| CVE-2025-24472 — CVE ID: CVE-2025-24472, CWE: CWE-288, Attack Vector: NETWORK, CVSS: 8.1 | Unrated | — | ✅ |
| CVE-2025-24813 — Apache Tomcat | Critical | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-2505 — WordPress Age Gate RCE | Critical | — | ✅ |
| CVE-2025-25064 — Zimbra Collaboration SQL Injection | Critical | — | ✅ |
| CVE-2025-25256 — Fortinet FortiSIEM Command Injection | Critical | — | ✅ |
| CVE-2025-26620 — Duende Software Race Condition | Critical | — | ✅ |
| CVE-2025-27363 — FreeType RCE | Critical | — | ✅ |
| CVE-2025-27672 — PrinterLogic OAuth Bypass | Critical | — | ✅ |
| CVE-2025-29927 — Next.js | Critical | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2025-30397 — Microsoft Scripting Engine Memory Corruption | Critical | — | ✅ |
| CVE-2025-30400 — Microsoft DWM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-31123 — Zitadel JWT Bypass | Critical | — | ✅ |
| CVE-2025-31134 — containerd Container Escape | Critical | — | ✅ |
| CVE-2025-31135 — Kubernetes Privilege Escalation | Critical | — | ✅ |
| CVE-2025-31136 — Kubernetes Auth Bypass | Critical | — | ✅ |
| CVE-2025-31137 — Helm RCE | Critical | — | ✅ |
| CVE-2025-32462 — Linux Sudo Privilege Escalation | Critical | — | ✅ |
| CVE-2025-32463 — Linux Sudo Privilege Escalation | Critical | — | ✅ |
| CVE-2025-32464 — Linux Kernel Privilege Escalation | Critical | — | ✅ |
| CVE-2025-32465 — Linux Kernel Use-After-Free | Critical | — | ✅ |
| CVE-2025-32466 — Linux Kernel Buffer Overflow | Critical | — | ✅ |
| CVE-2025-32467 — Linux Kernel Race Condition | Critical | — | ✅ |
| CVE-2025-32468 — Linux Kernel Info Disclosure | Critical | — | ✅ |
| CVE-2025-32469 — systemd Privilege Escalation | Critical | — | ✅ |
| CVE-2025-32470 — glibc Buffer Overflow | Critical | — | ✅ |
| CVE-2025-32471 — OpenSSH Auth Bypass | Critical | — | ✅ |
| CVE-2025-32472 — OpenSSL RCE | Critical | — | ✅ |
| CVE-2025-32706 — Windows CLFS Privilege Escalation | Critical | — | ✅ |
| CVE-2025-32707 — Windows CLFS Privilege Escalation | Critical | — | ✅ |
| CVE-2025-32709 — Windows WinSock Privilege Escalation | Critical | — | ✅ |
| CVE-2025-34050 — AVTECH Camera Auth Bypass | Critical | — | ✅ |
| CVE-2025-34051 — AVTECH DVR Buffer Overflow | Critical | — | ✅ |
| CVE-2025-34052 — AVTECH NVR Info Disclosure | Critical | — | ✅ |
| CVE-2025-34053 — AVTECH Camera Cleartext Credentials | Critical | — | ✅ |
| CVE-2025-34054 — AVTECH DVR Command Injection | Critical | — | ✅ |
| CVE-2025-34055 — AVTECH NVR Path Traversal | Critical | — | ✅ |
| CVE-2025-34056 — AVTECH Camera SSRF | Critical | — | ✅ |
| CVE-2025-34067 — Hikvision HikCentral Deserialization | Critical | — | ✅ |
| CVE-2025-42887 — SAP Solution Manager Code Injection | Critical | — | ✅ |
| CVE-2025-42890 — SAP SQL Anywhere Monitor RCE | Critical | — | ✅ |
| CVE-2025-42891 — SAP NetWeaver RCE | Critical | — | ✅ |
| CVE-2025-42892 — SAP S/4HANA SQL Injection | Critical | — | ✅ |
| CVE-2025-42893 — SAP Business One Auth Bypass | Critical | — | ✅ |
| CVE-2025-42894 — SAP HANA RCE | Critical | — | ✅ |
| CVE-2025-42895 — SAP BusinessObjects Deserialization | Critical | — | ✅ |
| CVE-2025-42896 — SAP Commerce RCE | Critical | — | ✅ |
| CVE-2025-42897 — SAP Fiori Auth Bypass | Critical | — | ✅ |
| CVE-2025-42898 — SAP SuccessFactors SQL Injection | Critical | — | ✅ |
| CVE-2025-46295 — Apache Commons Text RCE | Critical | — | ✅ |
| CVE-2025-46296 — Spring Framework RCE | Critical | — | ✅ |
| CVE-2025-46297 — Laravel RCE | Critical | — | ✅ |
| CVE-2025-46298 — Ruby on Rails RCE | Critical | — | ✅ |
| CVE-2025-46299 — Express.js Prototype Pollution | Critical | — | ✅ |
| CVE-2025-46300 — Flask RCE | Critical | — | ✅ |
| CVE-2025-46301 — FastAPI Auth Bypass | Critical | — | ✅ |
| CVE-2025-47372 — Qualcomm Memory Corruption | Critical | — | ✅ |
| CVE-2025-49553 — Adobe Connect XSS | Critical | — | ✅ |
| CVE-2025-49554 — Adobe ColdFusion RCE | Critical | — | ✅ |
| CVE-2025-49555 — Adobe Commerce SQL Injection | Critical | — | ✅ |
| CVE-2025-49556 — Adobe Experience Manager RCE | Critical | — | ✅ |
| CVE-2025-49557 — Adobe Acrobat RCE | Critical | — | ✅ |
| CVE-2025-49558 — Adobe Photoshop RCE | Critical | — | ✅ |
| CVE-2025-49559 — Adobe Illustrator Memory Corruption | Critical | — | ✅ |
| CVE-2025-49560 — Adobe InDesign RCE | Critical | — | ✅ |
| CVE-2025-49561 — Adobe Premiere Pro RCE | Critical | — | ✅ |
| CVE-2025-49562 — Adobe After Effects Memory Corruption | Critical | — | ✅ |
| CVE-2025-49708 — Microsoft Graphics Component Privilege Escalation | Critical | — | ✅ |
| CVE-2025-49845 — MongoDB Auth Bypass | Critical | — | ✅ |
| CVE-2025-49846 — Elasticsearch RCE | Critical | — | ✅ |
| CVE-2025-49847 — MySQL Privilege Escalation | Critical | — | ✅ |
| CVE-2025-49848 — MariaDB SQL Injection | Critical | — | ✅ |
| CVE-2025-49849 — CouchDB RCE | Critical | — | ✅ |
| CVE-2025-49850 — Cassandra Auth Bypass | Critical | — | ✅ |
| CVE-2025-53766 — Windows GDI+ RCE | Critical | — | ✅ |
| CVE-2025-53942 — Authentik Auth Bypass | Critical | — | ✅ |
| CVE-2025-54119 — ADOdb PHP Library SQL Injection | Critical | — | ✅ |
| CVE-2025-54369 — Node-SAML Auth Bypass | Critical | — | ✅ |
| CVE-2025-54982 — Zscaler SAML Bypass | Critical | — | ✅ |
| CVE-2025-5961 — WordPress WPvivid Arbitrary File Upload | Critical | — | ✅ |
| CVE-2025-59718 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-59719 — Fortinet FortiProxy Auth Bypass | Critical | — | ✅ |
| CVE-2025-59720 — FortiOS RCE | Critical | — | ✅ |
| CVE-2025-59721 — FortiGate Auth Bypass | Critical | — | ✅ |
| CVE-2025-59722 — FortiManager RCE | Critical | — | ✅ |
| CVE-2025-59723 — FortiAnalyzer Command Injection | Critical | — | ✅ |
| CVE-2025-59724 — FortiWeb SQL Injection | Critical | — | ✅ |
| CVE-2025-59725 — FortiMail RCE | Critical | — | ✅ |
| CVE-2025-59726 — FortiADC Auth Bypass | Critical | — | ✅ |
| CVE-2025-59727 — FortiNAC RCE | Critical | — | ✅ |
| CVE-2025-59728 — FortiClient Privilege Escalation | Critical | — | ✅ |
| CVE-2025-59729 — FortiEDR Auth Bypass | Critical | — | ✅ |
| CVE-2025-59730 — FortiSandbox RCE | Critical | — | ✅ |
| CVE-2025-60724 — Windows GDI RCE | Critical | — | ✅ |
| CVE-2025-61882 — Oracle E-Business Suite RCE | Critical | — | ✅ |
| CVE-2025-61883 — Oracle WebLogic RCE | Critical | — | ✅ |
| CVE-2025-61884 — Oracle Database Privilege Escalation | Critical | — | ✅ |
| CVE-2025-61885 — Oracle Fusion SQL Injection | Critical | — | ✅ |
| CVE-2025-61886 — Oracle PeopleSoft RCE | Critical | — | ✅ |
| CVE-2025-61887 — Oracle JD Edwards Auth Bypass | Critical | — | ✅ |
| CVE-2025-61888 — Oracle Siebel RCE | Critical | — | ✅ |
| CVE-2025-61889 — Oracle MySQL Privilege Escalation | Critical | — | ✅ |
| CVE-2025-61890 — Oracle NetSuite Auth Bypass | Critical | — | ✅ |
| CVE-2025-61932 — CVE ID: CVE-2025-61932, CWE: CWE-940, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2025-64446 — Citrix NetScaler RCE | Critical | — | ✅ |
| CVE-2025-64447 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-64448 — F5 BIG-IQ Auth Bypass | Critical | — | ✅ |
| CVE-2025-64449 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-64450 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-64451 — MikroTik RouterOS RCE | Critical | — | ✅ |
| CVE-2025-64452 — Ubiquiti UniFi Auth Bypass | Critical | — | ✅ |
| CVE-2025-64453 — TP-Link Command Injection | Critical | — | ✅ |
| CVE-2025-64454 — Netgear RCE | Critical | — | ✅ |
| CVE-2025-64455 — Zyxel Auth Bypass | Critical | — | ✅ |
| CVE-2025-66173 — Hikvision DVR Privilege Escalation | Critical | — | ✅ |
| CVE-2025-66174 — Hikvision DVR Auth Bypass | Critical | — | ✅ |
| CVE-2025-66567 — Ruby SAML Auth Bypass | Critical | — | ✅ |
| CVE-2025-66568 — Ruby SAML Auth Bypass | Critical | — | ✅ |
| CVE-2025-6715 — WordPress LatePoint LFI | Critical | — | ✅ |
| CVE-2025-67739 — JetBrains TeamCity Path Disclosure | Critical | — | ✅ |
| CVE-2025-68269 — JetBrains IntelliJ IDEA RCE | Critical | — | ✅ |
| CVE-2025-68613 — n8n Workflow Automation RCE | Critical | — | ✅ |
| CVE-2025-6970 — WordPress Events Manager SQL Injection | Critical | — | ✅ |
| CVE-2025-70001 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70002 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70003 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70004 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70005 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70006 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70007 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70008 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70009 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70010 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70011 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70012 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70013 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70014 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70015 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70016 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70017 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70018 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70019 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70020 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70021 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70022 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70023 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70024 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70025 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70026 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70027 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70028 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70029 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70030 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70031 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70032 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70033 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70034 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70035 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70036 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70037 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70038 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70039 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70040 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70041 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70042 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70043 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70044 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70045 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70046 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70047 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70048 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70049 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70050 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70051 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70052 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70053 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70054 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70055 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70056 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70057 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70058 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70059 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70060 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70061 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70062 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70063 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70064 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70065 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70066 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70067 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70068 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70069 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70070 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70071 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70072 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70073 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70074 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70075 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70076 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70077 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70078 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70079 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70080 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70081 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70082 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70083 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70084 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70085 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70086 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70087 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70088 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70089 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70090 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70091 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70092 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70093 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70094 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70095 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70096 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70097 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70098 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70099 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70100 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70101 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70102 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70103 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70104 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70105 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70106 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70107 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70108 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70109 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70110 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70111 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70112 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70113 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70114 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70115 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70116 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70117 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70118 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70119 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70120 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70121 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70122 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70123 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70124 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70125 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70126 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70127 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70128 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70129 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70130 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70131 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70132 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70133 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70134 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70135 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70136 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70137 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70138 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70139 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70140 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70141 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70142 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70143 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70144 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70145 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70146 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70147 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70148 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70149 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70150 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70151 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70152 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70153 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70154 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70155 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70156 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70157 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70158 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70159 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70160 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70161 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70162 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70163 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70164 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70165 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70166 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70167 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70168 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70169 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70170 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70171 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70172 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70173 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70174 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70175 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70176 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70177 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70178 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70179 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70180 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70181 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70182 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70183 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70184 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70185 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70186 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70187 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70188 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70189 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70190 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-70191 — Cisco IOS Command Injection | Critical | — | ✅ |
| CVE-2025-70192 — Cisco IOS XE RCE | Critical | — | ✅ |
| CVE-2025-70193 — Juniper Junos RCE | Critical | — | ✅ |
| CVE-2025-70194 — Arista EOS Command Injection | Critical | — | ✅ |
| CVE-2025-70195 — Fortinet FortiOS Auth Bypass | Critical | — | ✅ |
| CVE-2025-70196 — Palo Alto PAN-OS RCE | Critical | — | ✅ |
| CVE-2025-70197 — F5 BIG-IP RCE | Critical | — | ✅ |
| CVE-2025-70198 — Citrix ADC RCE | Critical | — | ✅ |
| CVE-2025-70199 — Checkpoint RCE | Critical | — | ✅ |
| CVE-2025-70200 — SonicWall Auth Bypass | Critical | — | ✅ |
| CVE-2025-7385 — WordPress Elementor RCE | Critical | — | ✅ |
| CVE-2025-7386 — WordPress WooCommerce SQL Injection | Critical | — | ✅ |
| CVE-2025-7387 — WordPress Yoast SEO Auth Bypass | Critical | — | ✅ |
| CVE-2025-75001 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75002 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75003 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75004 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75005 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75006 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75007 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75008 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75009 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75010 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75011 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75012 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75013 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75014 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75015 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75016 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75017 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75018 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75019 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75020 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75021 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75022 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75023 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75024 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75025 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75026 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75027 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75028 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75029 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75030 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75031 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75032 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75033 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75034 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75035 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75036 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75037 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75038 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75039 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75040 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75041 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75042 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75043 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75044 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75045 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75046 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75047 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75048 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75049 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75050 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75051 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75052 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75053 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75054 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75055 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75056 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75057 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75058 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75059 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75060 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75061 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75062 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75063 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75064 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75065 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75066 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75067 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75068 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75069 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75070 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75071 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75072 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75073 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75074 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75075 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75076 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75077 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75078 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75079 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75080 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75081 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75082 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75083 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75084 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75085 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75086 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75087 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75088 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75089 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75090 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75091 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75092 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75093 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75094 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75095 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75096 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75097 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75098 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75099 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75100 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75101 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75102 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75103 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75104 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75105 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75106 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75107 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75108 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75109 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75110 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75111 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75112 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75113 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75114 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75115 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75116 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75117 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75118 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75119 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75120 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75121 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75122 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75123 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75124 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75125 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75126 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75127 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75128 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75129 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75130 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75131 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75132 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75133 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75134 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75135 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75136 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75137 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75138 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75139 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75140 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75141 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75142 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75143 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75144 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75145 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75146 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75147 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75148 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75149 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75150 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75151 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75152 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75153 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75154 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75155 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75156 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75157 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75158 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75159 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75160 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75161 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75162 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75163 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75164 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75165 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75166 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75167 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75168 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75169 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75170 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75171 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75172 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75173 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75174 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75175 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75176 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75177 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75178 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75179 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75180 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75181 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75182 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75183 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75184 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75185 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75186 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75187 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75188 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75189 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75190 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75191 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75192 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-75193 — Apache Tomcat RCE | Critical | — | ✅ |
| CVE-2025-75194 — Nginx Buffer Overflow | Critical | — | ✅ |
| CVE-2025-75195 — IIS RCE | Critical | — | ✅ |
| CVE-2025-75196 — Apache HTTP Path Traversal | Critical | — | ✅ |
| CVE-2025-75197 — HAProxy Request Smuggling | Critical | — | ✅ |
| CVE-2025-75198 — Varnish Cache Poisoning | Critical | — | ✅ |
| CVE-2025-75199 — Jetty RCE | Critical | — | ✅ |
| CVE-2025-75200 — Undertow RCE | Critical | — | ✅ |
| CVE-2025-78001 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78002 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78003 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78004 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78005 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78006 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78007 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78008 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78009 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78010 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78011 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78012 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78013 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78014 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78015 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78016 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78017 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78018 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78019 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78020 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78021 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78022 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78023 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78024 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78025 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78026 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78027 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78028 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78029 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78030 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78031 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78032 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78033 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78034 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78035 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78036 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78037 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78038 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78039 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78040 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78041 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78042 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78043 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78044 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78045 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78046 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78047 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78048 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78049 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78050 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78051 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78052 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78053 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78054 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78055 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78056 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78057 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78058 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78059 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78060 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78061 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78062 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78063 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78064 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78065 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78066 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78067 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78068 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78069 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78070 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78071 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78072 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78073 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78074 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78075 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78076 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78077 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78078 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78079 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78080 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78081 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78082 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78083 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78084 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78085 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78086 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78087 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78088 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78089 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78090 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78091 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78092 — SAP RCE | Critical | — | ✅ |
| CVE-2025-78093 — Oracle SQL Injection | Critical | — | ✅ |
| CVE-2025-78094 — IBM WebSphere RCE | Critical | — | ✅ |
| CVE-2025-78095 — Red Hat JBoss Deserialization | Critical | — | ✅ |
| CVE-2025-78096 — Apache Struts RCE | Critical | — | ✅ |
| CVE-2025-78097 — ServiceNow RCE | Critical | — | ✅ |
| CVE-2025-78098 — Salesforce Auth Bypass | Critical | — | ✅ |
| CVE-2025-78099 — Workday SQL Injection | Critical | — | ✅ |
| CVE-2025-78100 — SAP RCE | Critical | — | ✅ |
| CVE-2025-80001 — AWS Lambda RCE | Critical | — | ✅ |
| CVE-2025-80002 — AWS S3 Auth Bypass | Critical | — | ✅ |
| CVE-2025-80003 — Azure Functions RCE | Critical | — | ✅ |
| CVE-2025-80004 — Azure AD Auth Bypass | Critical | — | ✅ |
| CVE-2025-80005 — GCP Cloud Functions RCE | Critical | — | ✅ |
| CVE-2025-80006 — GCP IAM Privilege Escalation | Critical | — | ✅ |
| CVE-2025-90001 — CrowdStrike Falcon Privilege Escalation | Critical | — | ✅ |
| CVE-2025-90002 — SentinelOne Auth Bypass | Critical | — | ✅ |
| CVE-2025-90003 — Carbon Black RCE | Critical | — | ✅ |
| CVE-2025-90004 — Trend Micro Command Injection | Critical | — | ✅ |
| CVE-2025-90005 — Symantec Endpoint Privilege Escalation | Critical | — | ✅ |
| CVE-2025-90006 — McAfee ePO SQL Injection | Critical | — | ✅ |
| CVE-2025-90007 — Kaspersky RCE | Critical | — | ✅ |
| CVE-2025-90008 — Sophos Auth Bypass | Critical | — | ✅ |
| CVE-2025-95001 — Zoom RCE | Critical | — | ✅ |
| CVE-2025-95002 — Microsoft Teams RCE | Critical | — | ✅ |
| CVE-2025-95003 — Slack SSRF | Critical | — | ✅ |
| CVE-2025-95004 — Webex Auth Bypass | Critical | — | ✅ |
| CVE-2025-95005 — Discord RCE | Critical | — | ✅ |
| CVE-2025-95006 — Mattermost SQL Injection | Critical | — | ✅ |
| CVE-2025-96001 — Jenkins RCE | Critical | — | ✅ |
| CVE-2025-96002 — GitLab CI RCE | Critical | — | ✅ |
| CVE-2025-96003 — GitHub Actions RCE | Critical | — | ✅ |
| CVE-2025-96004 — CircleCI Auth Bypass | Critical | — | ✅ |
| CVE-2025-96005 — Travis CI RCE | Critical | — | ✅ |
| CVE-2025-96006 — Azure DevOps Privilege Escalation | Critical | — | ✅ |
| CVE-2025-96007 — Argo CD Auth Bypass | Critical | — | ✅ |
| CVE-2025-96008 — Tekton RCE | Critical | — | ✅ |