773 PoCs | 119 CISA KEV

tag

Ruby

Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Unauthenticated Stack-Based Buffer Overflow (CVE-2025-22457) KEV RW EPSS 100%

CVE-2025-22457 network Unpatched

CVE-2025-22457networkCRITICAL 9Unpatched2026-08-09GitLab Notebook-Diff Oj Parser Memory-Corruption Chain → Unauthenticated-Reach RCE (No CVE Yet)

N/A (no CVE assigned as of 2026-07-27 — researcher disclosure via depthfirst.com blog, covered by The Hacker News) web Unverified

N/AwebCRITICALUnverified2026-07-27Tenda AC9 `AdvSetMacMtuWan` Stack-Based Buffer Overflow (CVE-2025-29384)

CVE-2025-29384 network Unpatched

CVE-2025-29384networkCRITICAL 9.8Unpatched2026-07-06Rack::Session::Cookie Decrypt-Failure Fallback to Unencrypted Cookies (CVE-2026-39324)

CVE-2026-39324 / GHSA-33qg-7wpp-89cq web Patched

CVE-2026-39324 / GHSA-33qg-7wpp-89cqwebCRITICALPatched2026-07-05