333967 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-check A single-file, read-only Bash script that che...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618, CVE-2026-109619: indicators and l...
Exploit for CVE-2026-115560
CVE-2026-115560 — PHP session upload progress serialize-handle...
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator VCO to its Known Exploited Vulnerabilities KEV, citing reports of active exploitation in the wild. The...
CVE-2026-113673
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — tek komutluk sarmalayıcı CVE-2026-109618 / CVE-20...
EUVD-2026-109216
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
CVE-2026-113673
The GeoDirectory WordPress plugin versions prior to 2.8.194 is vulnerable to Remote Code Execution (RCE) . The root cause is a failure to properly escape administrator-defined text before it is written into a generated PHP file within the plugin's own folder. This flaw allows high-privilege users...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ PHP2Shell Sentinel PHP Runtime Vulnerability Assessment...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-oom-longjmp Someone on the internet can talk to your PHP...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-stale-global-uaf Someone on the internet can talk to your...
Exploit for CVE-2026-102785
█████╗ ███╗ ██╗ ████████╗ ██╗ ██████╗ ██████╗ ██████...
SonicWall SMA1000 12.5.0 OS Command Injection
SonicWall SMA1000 versions 12.4.3-03526 and earlier and 12.5.0-02952 and earlier contain an authenticated administrator OS command injection vulnerability that may result in remote code execution...
Marimo 0.20.4 Pre-Auth Remote Code Execution
Marimo version 0.20.4 and earlier contains an authentication bypass in the terminal WebSocket endpoint that allows unauthenticated remote command execution. This proof of concept connects to the endpoint and sends a command. https://packetstorm.news/download/237403...
PHP 8.4.27 Session Upload Progress Serialization Mismatch Remote Code Execution
PHP version 8.4.27 contains a session upload progress serialization-handler mismatch that can lead to unauthenticated object injection and remote code execution when an application changes the session handler at runtime. Included is a proof of concept and Docker lab...
PHP Session Upload Progress Remote Code Execution
PHP session upload progress can permit attacker-controlled object deserialization when an application uses phpbinary or phpserialize and switches to the php serializer before sessionstart. Included proof of concept demonstrates the serializer-switch condition and a session-file LFI lab...
NetScaler ADC and Gateway 14.1-73.36 DTLS Check
NetScaler ADC and Gateway versions before the listed fixed builds contain a DTLS-enabled memory overflow vulnerability leading to remote code execution or denial of service. This offline tool assesses reported versions and exported DTLS configuration...
Apache Karaf Cellar 4.4.8 Remote Code Execution
Summary Apache Karaf Cellar is a complete clustering solution for Apache Karaf Container. Cellar can be directly installed on running Karaf Container instances. Description Apache Karaf Cellar suffers from an unauthenticated cluster-join vulnerability leading to remote code execution. The default...