410179 matches found
CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...
CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...
CVE-2026-113789
The pypdf pure-python PDF library is vulnerable to uncontrolled resource consumption (CWE-400, CWE-407) in versions prior to 6.21.0 . An attacker can craft a malicious PDF file that triggers large memory usage or long runtimes when an application attempts to retrieve the document's form fields . ...
CVE-2026-113789 pypdf: Possible long runtimes/large memory usage when retrieving form fields
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves the document's form fields. This issue is fixed in version 6.21.0...
[SECURITY] [DSA 6575-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6575-1 [email protected] https://www.debian.org/security/ Jan MojžÃÅ¡ October 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-109618
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
CVE-2026-113681
A flaw was found in OpenImageIO. An integer overflow in the Cineon image parser causes an undersized memory buffer allocation. By tricking a user or application into processing a specially crafted Cineon image file, an attacker can trigger an out-of-bounds memory read and crash the application,...
CVE-2026-112074
A flaw was found in ncnn. An integer overflow vulnerability in the image format conversion component, specifically within the ncnn::yuv420sp2rgb function, allows a remote attacker to cause a Denial of Service DoS or memory corruption. By providing specially crafted image data for conversion, an...
Exploit for CVE-2026-109618
php2shell-lab Two requests crash PHP 8.4.26 before a single...
CVE-2026-98709
A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. During channel context switching operations across multiple virtual interfaces, improper tracking of link reservations can cause an active channel context to be released prematurely while still in use by the driver. A...
CVE-2026-98632
A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can trigger a use-after-free condition by cancelling a pending Bluetooth mesh transmission while it remains queued for processing. When the system later attempts to handle the queued transmission using the already freed...
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
UPD 23.10.2026: added Kaspersky SIEM rules and events for developing custom detection rules or conducting threat hunting. UPD 22.10.2026: added a description of how the Kaspersky Managed Detection and Response service detects the described malicious activity. UPD 22.10.2026: added a description o...
Exploit for CVE-2026-109618
CVE-2026-109618 y CVE-2026-109619 — PHP RCE: detección y mitig...
exploit-kit
php2shell — CVE-2026-109618 / CVE-2026-109619 Lab-Verified Too...
php2shell-detect-exploit-kit
php2shell — CVE-2026-109618 / CVE-2026-109619 Lab-Verified Too...
Two critical RCEs in PHP core
Update 10/22: Added section detailing observations of in the wild exploitation and associated IOCs. Cisco Talos is tracking the disclosure of two unauthenticated remote code execution RCE flaws in PHP core, dubbed "php2shell", triggered by a plain HTTP request and exploitable before any applicati...
PHP2SHELL-POC
██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...
php2shell-poc
php2shell — CVE-2026-109618 / CVE-2026-109619 Verification Ve...
CVE-2026-102485
The NTPsec ntpd utility (versions prior to 1.2.6 ) contains an out-of-bounds read vulnerability within the Motorola Oncore refclock driver . An attacker capable of controlling the GPS receiver's serial data can trigger this flaw by providing a PPS Control (@@Gc) reply containing an out-of-range m...
CVE-2026-102485
Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...