Exploit for CVE-2026-109618

php2shell-lab Two requests crash PHP 8.4.26 before a single...

CVE-2026-98709

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. During channel context switching operations across multiple virtual interfaces, improper tracking of link reservations can cause an active channel context to be released prematurely while still in use by the driver. A...

CVE-2026-98632

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can trigger a use-after-free condition by cancelling a pending Bluetooth mesh transmission while it remains queued for processing. When the system later attempts to handle the queued transmission using the already freed...

Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

UPD 23.10.2026: added Kaspersky SIEM rules and events for developing custom detection rules or conducting threat hunting. UPD 22.10.2026: added a description of how the Kaspersky Managed Detection and Response service detects the described malicious activity. UPD 22.10.2026: added a description o...

Exploit for CVE-2026-109618

CVE-2026-109618 y CVE-2026-109619 — PHP RCE: detección y mitig...

php2shell-detect-exploit-kit

php2shell — CVE-2026-109618 / CVE-2026-109619 Lab-Verified Too...

exploit-kit

php2shell — CVE-2026-109618 / CVE-2026-109619 Lab-Verified Too...

Two critical RCEs in PHP core

Update 10/22: Added section detailing observations of in the wild exploitation and associated IOCs. Cisco Talos is tracking the disclosure of two unauthenticated remote code execution RCE flaws in PHP core, dubbed "php2shell", triggered by a plain HTTP request and exploitable before any applicati...

PHP2SHELL-POC

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...

php2shell-poc

php2shell — CVE-2026-109618 / CVE-2026-109619 Verification Ve...

CVE-2026-102485 Out-of-bounds Read in ntpsec

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...

CVE-2026-102485

The NTPsec ntpd utility (versions prior to 1.2.6 ) contains an out-of-bounds read vulnerability within the Motorola Oncore refclock driver . An attacker capable of controlling the GPS receiver's serial data can trigger this flaw by providing a PPS Control (@@Gc) reply containing an out-of-range m...

EUVD-2026-107311

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...

CVE-2026-102485 Out-of-bounds Read in ntpsec

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...

CVE-2026-102485

Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memory via a PPS Control @@Gc reply with an out-of-range mode byte...

CVE-2026-102484 Heap-based Buffer Overflow in ntpsec

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...

EUVD-2026-107310

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...

CVE-2026-102484 Heap-based Buffer Overflow in ntpsec

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...

CVE-2026-102484

A Heap-based Buffer Overflow exists in the JJY refclock driver of NTPsec ntpd versions prior to 1.2.6 . An attacker who controls the Telephone JJY time source can cause a memory corruption or crash the ntpd service by sending more than six time replies. No information regarding specific exploits ...

CVE-2026-102484

Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...