335807 matches found
EUVD-2025-211177
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...
K000163864: Spring Tools vulnerability CVE-2026-47858
Security Advisory Description Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring...
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit...
Exploit for CVE-2026-109518
PHP2Shell Research — Defensive Analysis & Remediation A sec...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Fix Toolkit 🚨 ⚠️ Emergency: Unau...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-triage !CIhttps://github.com/leejongyoung/php2sh...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-triage PHP2ShellCVE-2026-109618 / CVE-2026-10961...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-scan Defensive exposure and compromise-indicator...
CLEANSTART-2026-IG79892 Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loadi...
Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...
CLEANSTART-2026-NO66415 Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586)
Security vulnerability affects the sonarqube package. Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586...
CVE-2026-106764
An issue in @rog0x/mcp-git-tools version 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability is triggered specifically through the resolveBaseBranch function. The CVSS 3.1 score for this issue is 7.5 (HIGH) , with a vector indicating that it requires high comple...
EUVD-2026-109096
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PT-2026-122137
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PHP 8.3.36 CentOS 7 Security Update
PHP version 7.4.33 and version 8.3.36 CentOS 7 packages include fixes for two remote code execution vulnerabilities...
PHP 7.0.33 PHP2Shell Patch
PHP version 7.0.33 for CentOS 7 contains remote code execution issues involving out-of-memory state corruption and stale global state. This provides patches and a script to build a remedial Remi source RPM...
Node.js 26.x Security Release Check
A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...