335538 matches found
GitLab 19.5.0 Integer Overflow Remote Code Execution
GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...
PHP 8.5.11 Remote Code Execution
PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain out-of-memory request-state flaws that can lead to remote code execution. The supplied proof of concept targets Apache modphp through multipart request processing. https://packetstorm.news/download/237264...
Tenable Security Center Multiple Vulnerabilities (TNS-2026-28)
According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-28 advisory. - PHP uses longjmp for out-of-memory OOM...
UBUNTU-CVE-2026-92183
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi...
PT-2026-121800
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
CVE-2026-106764
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates within the escapeShellString and sanitizeCode functions. The documents do not provide specific details regarding remediation or evidence of in-the-wild ex...
JetBrains TeamCity 2026.1.2 Agent Polling Remote Code Execution
JetBrains TeamCity versions before 2026.1.3 and 2025.11.7 contain an unauthenticated agent-polling protocol deserialization vulnerability that allows remote code execution. https://packetstorm.news/download/237301...
PHP 8.4.26 Remote Code Execution
PHP core versions after 5.4 contain a vulnerability that can result in remote code execution. This proof of concept targets PHP version 8.4.26 running as modphp with a prefork Apache configuration. !/usr/bin/env python3 """ Exploit credited to 9bie, adjusted using AI by OffSec php2shell - one-cli...
PT-2026-122127
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...
PHP 8.5.11 Remote Vulnerability Scanner
A remote scanner checks PHP servers for exposure indicators related to stale global state remote code execution, including affected version ranges, session upload progress behavior, error handling, worker reuse, and security headers...
Node.js 26.x Brotli Decoder Remote Code Execution Mitigation
Terraform configuration and a verification script provide an interim Azure Application Gateway WAFv2 mitigation for Node.js versions 22.x, 24.x, and 26.x affected by a Brotli decoder out-of-bounds write that can permit remote code execution...
ROS-20261023-73-0038
The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261023-73-0135
The vulnerability in rabbitmq-server relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20261023-73-0143
The vulnerability in golang-github-prometheus relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261023-73-0153
The vulnerability in Jenkins is related to insufficient verification of the registry. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261023-73-0211
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Amazon Web Services Multi Model Server path traversal vulnerability
Amazon Web Services Multi Model Server versions 1.1.11 and earlier contain a path traversal vulnerability. This vulnerability arises from relative path traversal during the decompression of model archives, potentially allowing remote attackers to execute arbitrary code via specially crafted model...
ROS-20261023-73-0093
The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...