2586 matches found
php-oom-longjmp
php2shell - php-oom-longjmp Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP they can send a crafted file-upload request that makes the engine run out of memory while it is still reading the request, before your application...
CVE-2026-0049
CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Full research material and PoC. Narrative analysis: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : unsigned integer overflow on fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388. Impact...
CVE-2023-25136
OpenSSH CVE-2023-25136 Pre-Auth Double Free – Writeup and POC What is OpenSSH? OpenSSH is a popular tool used for secure communication and remote access. It was developed as a free, open-source implementation of the Secure Shell SSH communications protocol and is widely used for various...
CVE-2023-33242
CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...
CVE-2024-27804
CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...
jfrog-CVE-2023-25136-OpenSSH_Double-Free
CVE-2023-25136 Proof-of-Concept Overview This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136. It will trigger the double-free and cause an abort crash. For a comprehensive understanding, check out the accompanying blog post for in-depth details. Dependencies...
CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-
Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling rouille Assigned CVE ID: CVE-2026-66754 Summary Request::removeprefix tests the percent-decoded URL but asserts on the raw one. A request whose decoded path starts with the prefix while its raw path does no...
Uncaught Exception
Overview ddtrace is a Datadog APM client library Affected versions of this package are vulnerable to Uncaught Exception via moduloaspect in the IAST taint-tracking C++ extension, when a lone surrogate character is passed as a format argument to the % modulo string operator. The unhandled surrogat...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146120)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146120 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146121)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146121 advisory. In PHP versions 8.2. before 8.2.32, 8.3. before 8.3.32, 8.4. before 8.4.23, 8.5. before 8.5.8, the AES-WRAP-PAD algorithm implementation in OpenSSL extension contain...
Incorrect Calculation
Overview Affected versions of this package are vulnerable to Incorrect Calculation via the tcnwritetobytebuffer callback in the BIO write process. An attacker can cause queued post-handshake records to truncate flights, fail connections, or abort the JVM process by sending specially crafted TLS 1...
Incorrect Calculation
Overview Affected versions of this package are vulnerable to Incorrect Calculation via the tcnwritetobytebuffer callback in the BIO write process. An attacker can cause queued post-handshake records to truncate flights, fail connections, or abort the JVM process by sending specially crafted TLS 1...
UBUNTU-CVE-2026-116541
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcnwritetobytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail...
EUVD-2026-109911
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcnwritetobytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail...
CVE-2026-116541
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcnwritetobytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail...
CVE-2026-116541 netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcnwritetobytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail...
PT-2026-123394
Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn write to bytebuffer BIO write callback that overreports bytes consumed. Remote TLS 1.3 peers can provoke queued post-handshake records like NewSessionTicket or KeyUpdate to truncate flights, fail...
Node.js DNS resolveAny Process Abort
Node.js versions 22.x, 24.x, and 26.x contain a flaw where dns.resolveAny can abort the process when a DNS response has more than 256 A records. The supplied offline checker compares reported version evidence against fixed releases...
Node.js DNS resolveAny Process Abort
Node.js versions 22.x, 24.x, and 26.x contain a flaw where dns.resolveAny can abort a process when DNS responses contain more than 256 A records. This submission provides source-backed research and an implementation plan; it contains no checker or proof of concept...
