2196 matches found
CVE-2026-21876
CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origi...
CVE-2025-55182-EXP
CVE-2025-55182 Exploitation Tool Tool Introduction This tool is used to detect and exploit the CVE-2025-55182 vulnerability presumably a code execution vulnerability in frameworks related to Next.js. It supports single-target / multi-target batch detection, command execution, interactive shell, a...
php-oom-longjmp
php2shell - php-oom-longjmp Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP they can send a crafted file-upload request that makes the engine run out of memory while it is still reading the request, before your application...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-oom-longjmp Someone on the internet can talk to your PHP...
phptopwn
PHP2Shell Threat-Intelligence Honeypot A safe, high-interacti...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Patched PHP 7.4 for Synology DSM 6.2 PHP2Shell Unofficial d...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618 / CVE-2026-109619 Two critica...
CVE-2026-113872
The multer middleware for Node.js (versions 2.0.0 before 2.5.0 ) is vulnerable to a Denial of Service (DoS) . When configured with an asynchronous fileFilter , an aborted request can leave a pending callback that resumes a torn-down parsing stream. This causes the parser to emit an error on a str...
CVE-2026-113872 multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a single request can crash the Node.js process. If the request is aborted while one file's asynchronous fileFilter is...
CVE-2026-113872 multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown
multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a single request can crash the Node.js process. If the request is aborted while one file's asynchronous fileFilter is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell !Authorhttps://img.shields.io/badge/Author-l3tc...
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
UPD 23.10.2026: added rules for Kaspersky SIEM and events for developing custom detection rules or conducting threat hunting. UPD 22.10.2026: added a description of how the Kaspersky Managed Detection and Response service detects the described malicious activity. UPD 22.10.2026: added a descripti...
Exploit for CVE-2026-109619
CVE-2026-109619 Cross-request use-after-free in PHP's se...
php2shell_PoC
PHP2Shell PoC — stale bytesprocessed in the session upload-...
Exploit for CVE-2026-109618
php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...
Exploit for CVE-2026-109618
Cloudflare custom rule php2shell - UNOFFICIAL, PROVISIONAL...