259619 matches found
CVE-2026-70640
The CVE-2026-70640 issue affects llama.cpp builds b1886–b7445, with a race condition in the LLaMA-Android JNI wrapper: bench_1model() and free_1context() lack synchronization, allowing a thread to operate on freed llama_context memory. Attackers could perform heap spray using attacker-controlled ...
CVE-2026-70640
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...
CVE-2026-70640 llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...
CVE-2026-66709
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
CVE-2026-65553
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-65548
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...
CVE-2026-53975
OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn without any allowlist, blocklist, or...
EUVD-2026-53912
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
EUVD-2026-53981
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-65553
Unauthenticated Remote Code Execution in WordPress Spider Analyser plugin (
EUVD-2026-53978
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...
CVE-2026-65548
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...
CVE-2026-65548 WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...
CVE-2026-65548
The connected sources confirm a Remote Code Execution (RCE) vulnerability affecting WordPress Betheme theme versions
CVE-2026-53975
OpenChamber 1.11.7 is affected by an unauthenticated RCE via POST /api/fs/exec. The endpoint passes commands verbatim to Node.js spawn() without any allowlist or argument validation, enabling remote execution of arbitrary OS commands. The authentication middleware becomes a no-op when UI_PASSWORD...
CVE-2026-66373
A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...
Azure Service Bus Remote Code Execution Vulnerability
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...
