Node2Shell CVEs

CVE-2026-105482 - high This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-105483 - high This vulnerability affects Node.js 26.x and 24.x. CVE-2026-106069 - high This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-111497 - high A flaw in Node.js can cause Node.js Brotl...

AlmaLinux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio (ALMALINUX9.6:CLSA-2026:1793015517)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793015517 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components...

Meta FAIRChem dense_eval results-file Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pickl...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway In the first quarter of 2022, an interesting and critical base score of 10.0 Spring Cloud Gateway Code Injection vulnerability was discovered leveraging the Actuator API to perform SpEL Injection, potentially leading to system compromise. Spring...

Exploit for Race Condition in Sonicwall Sma_6200_Firmware

CVE-2024-6387-how-to-fix Vulnerability remediation and mitiga...

Exploit for CVE-2026-111497

CVE-2026-111497 Node2Shell/HTTP2Shell - Validation Suite Th...

Exploit for OS Command Injection in Php

AI Threat Detection: PHP CGI Vulnerabilities A curated, deep-d...

paracosme

Paracosme - CVE-2022-33318 - Remote Code Execution in ICONICS Genesis64 Paracosme is a memory corruption exploit I wrote to target the Genesis64 suite v10.97.1 made by ICONICS to achieve remote code execution. The exploit was demonstrated during the Pwn2Own 2022 Miami contest that took place at t...

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability

Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026

Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...

.NET 10.0 Update - October 25, 2026

.NET 10.0 Update - October 25, 2026 .NET 10.0 has been refreshed with an out-of-band security update as of October 25, 2026. This update is separate from the regular monthly servicing release. See the release notes for details about updated packages. Important: This out-of-band security update...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...

CVE-2018-7600

Proof-Of-Concept for CVE-2018-7600 / SA-CORE-2018-002 codebeat badge Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. H...

php2shell-check

php2shell-check A read-only triage script for WordPress sites after PHP2Shell CVE-2026-109618 and CVE-2026-109619, the pair of critical remote code execution bugs in the PHP engine disclosed on October 21, 2026. Patching PHP closes the door, but Amazon's honeypots logged an exploitation attempt o...

MGASA-2026-0541 Updated bind package fixes security vulnerabilities

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

Updated bind package fixes security vulnerabilities

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-radar php-radar finds PHP you did not know you were runni...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-migration A skill for AI coding agents that finds...

NetScaler ADC and Gateway 14.1-73.36 Remote Code Execution

NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain an unauthenticated remote code execution vulnerability due to improper input validation...