← All credits
Victor A. Morales, Senior Pentester Team Leader, GM Sectec, Corp.
22 vulnerability records and advisories credit this contributor.
CVE-2026-109430
Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection
CVE-2026-25550
Seagull Software BarTender Unauthenticated RCE via .NET Remoting Service
CVE-2026-25551
Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service
CVE-2026-41939
Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly
CVE-2026-23751
Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting
CVE-2025-34320
BASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCE
CVE-2026-26335
Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE
CVE-2026-26334
Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys Allow Decryption of Service Credentials
CVE-2026-26333
Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCE
CVE-2026-56122
Winstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths