Lucene search
+L

334368 matches found

osv_cve
osv_cve
•added 2026/10/22 1:21 a.m.•16 views

CVE-2026-96375 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle AiTM. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

4.8CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/22 1:21 a.m.•27 views

CVE-2026-96375 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle AiTM. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/22 1:21 a.m.•11 views

CVE-2026-96376 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

5.9AI score0.00579EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 1:21 a.m.•31 views

CVE-2026-96376 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

0.00579EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/22 1:21 a.m.•15 views

CVE-2026-96376 Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177

Improper Neutralization of Special Elements used in an OS Command "OS Command Injection" vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

6.4CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2026/10/22 1:21 a.m.•53 views

CVE-2026-96376

The Drupal Cloud module (versions 0.0.0 to 7.0.1 ) is vulnerable to OS Command Injection due to insufficient sanitization of user-controlled Git branch and repository URL values. These values are passed to shell commands within the Kubernetes integration , potentially allowing an attacker to exec...

6.4CVSS5.9AI score0.00579EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/10/22 1:01 a.m.•20 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-patch-verify A portable Agent Skill that checks wheth...

9.8CVSS9.2AI score0.99999EPSS
SaveExploits516
GithubExploit
GithubExploit
•added 2026/10/22 12:56 a.m.•8 views

php2shell-patches

PHP CVE-2026-109618 / CVE-2026-109619 Patch Helper A remediat...

9.8CVSS9.3AI score0.99999EPSS
SaveExploits516
GithubExploit
GithubExploit
•added 2026/10/22 12:52 a.m.•15 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

anti-php2shell !Python Versionhttps://img.shields.io/badg...

9.8CVSS9.4AI score0.99999EPSS
SaveExploits516
Wordfence Blog
Wordfence Blog
•added 2026/10/22 12:51 a.m.•12 views

Why It’s Urgent to Update PHP on Your WordPress Site: Two Critical PHP Vulnerabilities and What Our Testing Found

On October 21, 2026, the PHP project released emergency updates for two critical vulnerabilities that can allow an unauthenticated attacker to run code through the PHP service handling website traffic. We first alerted WordPress site owners to these updates in our initial public service...

9.8CVSS8.9AI score0.99999EPSS
SaveExploits516
GithubExploit
GithubExploit
•added 2026/10/22 12:46 a.m.•10 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell CVE-2026-109618 / CVE-2026-109619 Research Compila...

9.8CVSS9.4AI score0.99999EPSS
SaveExploits516
osv_rlsa
osv_rlsa
•added 2026/10/22 12:08 a.m.•18 views

RLSA-2026:86195 Critical: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

9.4CVSS6.1AI score0.0125EPSS
SaveExploits0References24
Rockylinux
Rockylinux
•added 2026/10/22 12:08 a.m.•13 views

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross...

9.4CVSS6.2AI score0.0125EPSS
SaveExploits0
Rockylinux
Rockylinux
•added 2026/10/22 12:04 a.m.•11 views

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...

9.4CVSS6.2AI score0.0125EPSS
SaveExploits0
osv_rlsa
osv_rlsa
•added 2026/10/22 12:04 a.m.•19 views

RLSA-2026:86193 Critical: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

9.4CVSS6.1AI score0.0125EPSS
SaveExploits0References24
Kitploit
Kitploit
•added 2026/10/22 12:03 a.m.•32 views

CVE-2015-1925.RCE

CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...

7.8CVSS8.8AI score0.03321EPSS
SaveExploits1
osv_rlsa
osv_rlsa
•added 2026/10/22 12:01 a.m.•15 views

RLSA-2026:86192 Critical: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

9.4CVSS6.1AI score0.0125EPSS
SaveExploits0References24
Rockylinux
Rockylinux
•added 2026/10/22 12:01 a.m.•9 views

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...

9.4CVSS6.2AI score0.0125EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•7 views

PT-2026-121320

On October 21, 2026, two critical remote code execution RCE vulnerabilities, collectively known as "PHP2Shell", were disclosed in the PHP core. These vulnerabilities exploit a heap use-after-free UAF condition in PHP's session upload progress mechanism, enabling unauthenticated remote code...

7AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/10/22 12:00 a.m.•6 views

PHP 8.5.11 Remote Code Execution

PHP versions through 8.5.11 contain out-of-memory corruption and stale global-state flaws that can result in unauthenticated remote code execution when processing web requests...

6.4AI score
SaveExploits0
Rows per page
Query Builder