334100 matches found
Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...
CVE-2026-85079
EmberZNet version 9.1.1 and earlier are vulnerable to an out-of-bounds write caused by processing malformed Simple_Desc_req responses from network devices. This vulnerability could potentially lead to remote code execution . The attack requires the response to originate from a device that has alr...
CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
EUVD-2026-108185
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
EUVD-2026-108184
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
CVE-2026-94502
EmberZNet versions 9.1.1 and earlier are vulnerable to an out-of-bounds write caused by a malformed Publish Price Matrix command. This vulnerability specifically impacts devices supporting the Price Cluster and requires the malicious message to originate from a device that has already joined the ...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Shellproof Find and fix PHP security exposure, starting wit...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-guard Scanner, interim-mitigation and incident-hunt...
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...
New Serious PHP Vulnerabilities Released and Patched
PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations...
CVE-2026-102785
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
actual-php2shell
actual-php2shell A reproducible, application-independent remo...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
php2shell-exploit
php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.55
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
EUVD-2026-108161
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
CVE-2026-102785
The YOOtheme Pro Joomla extension (versions 5.0.0-5.0.52 ) is vulnerable to unauthenticated remote code execution due to a flaw in its publicly accessible image transformation handler . The root cause is an incomplete binding of normalized image operations and output destinations to the request s...