Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-triage !CIhttps://github.com/leejongyoung/php2sh...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-scan Defensive exposure and compromise-indicator...

CLEANSTART-2026-IG79892 Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loadi...

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...

CLEANSTART-2026-NO66415 Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586)

Security vulnerability affects the sonarqube package. Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586...

CVE-2026-106764

An issue in @rog0x/mcp-git-tools version 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability is triggered specifically through the resolveBaseBranch function. The CVSS 3.1 score for this issue is 7.5 (HIGH) , with a vector indicating that it requires high comple...

EUVD-2026-109096

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

PT-2026-122137

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

PHP 8.3.36 CentOS 7 Security Update

PHP version 7.4.33 and version 8.3.36 CentOS 7 packages include fixes for two remote code execution vulnerabilities...

PHP 7.0.33 PHP2Shell Patch

PHP version 7.0.33 for CentOS 7 contains remote code execution issues involving out-of-memory state corruption and stale global state. This provides patches and a script to build a remedial Remi source RPM...

Node.js 26.x Security Release Check

A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...

PHP 8.5.11 PHP2Shell Scanner

PHP versions through 8.5.11 contain php2shell vulnerabilities that may lead to remote code execution. This tool passively identifies potentially affected PHP versions from HTTP response headers, cookies, and limited response content...

PHP 8.5.11 PHP2Shell Patch Check

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain memory safety flaws that can allow remote code execution. The supplied Bash tool checks local CLI, FPM, and Apache PHP component versions against upstream fixed releases...

ROS-20261023-73-0149

The vulnerability in Jenkins is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2025-30047: Deserialization of Untrusted Data

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

CVE-2025-30046: Execution with Unnecessary Privileges

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

PT-2026-133246

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running...

HPESBGN05174 rev.2 - Certain HPE Products Impacted by Multiple PHP Vulnerabilities (PHP2Shell)

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager 6.11.0, 6.11.4, 6.12.0, 6.11.5, 6.11.6, 6.11.7, 6.12.1, 6.11.8, 6.12.2, 6.11.9, 6.12.3, 6.11.10, 6.12.4, 6.11.11, 6.12.5, 6.11.12, 6.12.6, 6.11.13,...