335941 matches found
PHP 8.5.11 out of Memory Remote Code Execution
PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory handling flaw that can leave request memory in an invalid state. This proof of concept compares affected and fixed builds. https://packetstorm.news/download/237484...
Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-3312)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3312 advisory. Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50,...
FreeBSD : Node.js -- multiple vulnerabilities (33a752ba-4cbe-46d8-abda-587011d90575)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 33a752ba-4cbe-46d8-abda-587011d90575 advisory. Node.js reports: dns.resolve truncates names containing NUL char CVE-2026-105482 - high TLS...
Synology DiskStation Manager 7.2.2 Remote Code Execution
Synology DiskStation Manager versions before 7.2.2-72806-1 contain an improper encoding or escaping flaw in the system plugin daemon that allows remote attackers to execute arbitrary code. This proof of concept demonstrates environment-variable injection through the login flow...
Amazon Linux 2023 : ghostscript, ghostscript-gtk, ghostscript-tools-dvipdf (ALAS2023-2026-3294)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3294 advisory. A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the...
PT-2026-122954
CVE-2026-429016 RCE remote cum execution found! ! ! guys update your balls before it's too late!...
n8n 2.36.1 Git Node Remote Code Execution
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. A repository-local Git content-filter configuration can execute a command during a Git operation. https://packetstorm.news/download/237473...
Next.js 16.4.0 use cache Typed Array Remote Code Execution
Next.js version 16.4.0 use cache functions returning multiple typed arrays contain a React Flight framing flaw that can permit unauthenticated remote code execution. The proof of concept demonstrates affected and fixed versions. https://packetstorm.news/download/237482...
Amazon Linux 2023 : brotli, brotli-devel, libbrotli (ALAS2023-2026-3334)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3334 advisory. A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-probe A focused, open-source scanning probe for C...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patchferry-check Free, read-only scripts that check a server...
Exploit for CVE-2026-111497
CVE‑2026‑111497 – Node.js Brotli Decoder...
Exposed Dangerous Method or Function
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via the extend method in Blueprint.php, where untrusted Flex form override fields can exploit merge...
Security Bulletin: Two Critical PHP Vulnerabilities
Summary API Connect is vulnerable to critical PHP Vulnerabilities affecting v12 on prem and v10 LTS Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-check A single-file, read-only Bash script that che...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618, CVE-2026-109619: indicators and l...
Exploit for CVE-2026-115560
CVE-2026-115560 — PHP session upload progress serialize-handle...
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator VCO to its Known Exploited Vulnerabilities KEV, citing reports of active exploitation in the wild. The...
CVE-2026-113673
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...