Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code ...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

shadowphp Shadow-IT discovery and PHP2Shell CVE-2026-109618...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell F5 WAF Tools These are F5 BIG-IP Advanced WAF confi...

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

Amazon's Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities dating back to October 17, 2026, against its MadPot honeypot service, as the flaws come under broad exploitation in the wild following the release of the patches. "T...

php2shell-detector

php2shell-detector Read-only detection for PHP2Shell — th...

php2shell-detector

php2shell-detector Read-only detection for PHP2Shell — th...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP critical RCE update: CVE-2026-109618 and CVE-2026-109619...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

AriaWave PHP2Shell Vulnerability & Mitigation Scanner Zero-D...

Updated php8.4 & php8.5 packages fix security vulnerabilities

Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible...

MGASA-2026-0530 Updated php8.4 & php8.5 packages fix security vulnerabilities

Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell !Authorhttps://img.shields.io/badge/Author-l3tc...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-scanner English | 简体中文 Vuln...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check A non-destructive self-checking toolset for C...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell response kit Practical material for CVE-2026-1096...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Security Toolkit A multi-server toolkit for inspect...

Sophos Firewall <= 19.0 MR1 - Remote Code Execution

Sophos Firewall version v19.0 MR1 and older is vulnerable to code injection in the User Portal and Webadmin, allowing a remote unauthenticated attacker to execute arbitrary code. id: CVE-2022-3236 info: name: Sophos Firewall = 19.0 MR1 - Remote Code Execution author: daffainfo severity: critical...

Grafana 3.0.1-7.0.1 - Server-Side Request Forgery

Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Patches the PHP inside a UISP server against...

CVE-2026-96355

The Drupal Webform module (versions 0.0.0 to 6.2.12 and 6.3.0 to 6.3.1 ) is vulnerable to Code Injection due to improper neutralization of special elements used in a template engine. The root cause is the module's failure to sufficiently exclude certain format templates from token replacement, al...