Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619: PHP stale session state, isolated lab reprodu...

CVE-2026-102463

A flaw was found in vertx-pg-client. The binary array decoder does not enforce an upper bound on server-declared array dimensions during memory allocation. A malicious database server or an on-path attacker intercepting an unencrypted connection can exploit this flaw by sending a crafted message...

Security Bulletin: Vulnerability in Browserslist affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in Browserslist has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

RUSTSEC-2026-0431 Unbounded memory allocation in `evtx` parsing a `.wevtcache` file

Affected versions of evtx did not bound a per-entry payload length read from a .wevtcache file before allocating a buffer sized from it, allowing a tiny crafted file to force a multi-gigabyte allocation and abort the process out-of-memory denial of service, CWE-400. Details In...

Unbounded memory allocation in `evtx` parsing a `.wevtcache` file

Affected versions of evtx did not bound a per-entry payload length read from a .wevtcache file before allocating a buffer sized from it, allowing a tiny crafted file to force a multi-gigabyte allocation and abort the process out-of-memory denial of service, CWE-400. Details In...

BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

php2shell

php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information: 28 October 2026 16:46 CET Software list last status update: 30 October 2026 09:14 CET TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities tracked by CERT-EU as...

php-5.4-cve-2026-php2shell-patch

php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities OOM Vulnerability Mitigation This repository contains a custom .patch file for PHP 5.4.23 to fix the critical PHP2Shell Out-of-Memory OOM vulnerability CVE-2026-109618 /...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Well, it's just an old vulnerability whose CVE number is CVE-2008-4654. This vulnerability is caused by Out of Memory at line 1650 of modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; When I downloaded the EXP from other websites, I found that it doesn't work...

CLEANSTART-2024-CF10288 Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors

Security vulnerability affects the librewolf package. Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors...

CLEANSTART-2023-CS27824 libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen

Security vulnerability affects the libvterm package. libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen...

CLEANSTART-2024-YV16894 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CLEANSTART-2024-BQ90664 Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE

Security vulnerability affects the xen package. Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CVE-2019-12401

CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

php-eol-cve-2026-109618-109619

CVE-2026-109618 / CVE-2026-109619 patches for end-of-life PHP 7.3 on EL7, 5.4 / 5.3 on Amazon Linux Unofficial backports of the PHP security team's minimal mitigation for the two critical, unauthenticated remote code execution vulnerabilities announced on 2026-10-21: CVE| Advisory| Summary...

CLEANSTART-2024-CR08021 Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors

Security vulnerability affects the firefox package. Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors...

CLEANSTART-2024-MK49236 If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape

Security vulnerability affects the firefox-esr package. If an out-of-memory condition occurred when creating a JavaScript global, a JavaScript realm may be deleted while references to it lived on in a BaseShape...

October Linux Patch Wednesday

October Linux Patch Wednesday. There are 4,946 vulnerabilities in total. By comparison, there were 2,653 in September. That's an 86% increase! This time, there are 1,954 vulnerabilities in the Linux Kernel and 814 in Chromium. Together, they make up 56% of all vulnerabilities. Six vulnerabilities...

CLEANSTART-2026-LQ16834 maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error

Security vulnerability affects the ollama package. A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error...