BUGS_OOM_NULL_PTR_DEREF

BUGSOOMNULLPTRDEREF BUGS ON ANDROID NULL PTR DEREF, OOM JUST FOR LULZ...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

php2shell

php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information: 28 October 2026 16:46 CET Software list last status update: 30 October 2026 09:14 CET TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities tracked by CERT-EU as...

php-5.4-cve-2026-php2shell-patch

php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities OOM Vulnerability Mitigation This repository contains a custom .patch file for PHP 5.4.23 to fix the critical PHP2Shell Out-of-Memory OOM vulnerability CVE-2026-109618 /...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Well, it's just an old vulnerability whose CVE number is CVE-2008-4654. This vulnerability is caused by Out of Memory at line 1650 of modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; When I downloaded the EXP from other websites, I found that it doesn't work...

CVE-2019-12401

CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

php-eol-cve-2026-109618-109619

CVE-2026-109618 / CVE-2026-109619 patches for end-of-life PHP 7.3 on EL7, 5.4 / 5.3 on Amazon Linux Unofficial backports of the PHP security team's minimal mitigation for the two critical, unauthenticated remote code execution vulnerabilities announced on 2026-10-21: CVE| Advisory| Summary...

October Linux Patch Wednesday

October Linux Patch Wednesday. There are 4,946 vulnerabilities in total. By comparison, there were 2,653 in September. That's an 86% increase! This time, there are 1,954 vulnerabilities in the Linux Kernel and 814 in Chromium. Together, they make up 56% of all vulnerabilities. Six vulnerabilities...

Medium: soci-snapshotter

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: soci-snapshotter

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

EUVD-2026-110023

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shellaudit A small, dependency-free detector for PHP2S...

php2shell-lab

php2shell-lab Lab reproduction, exposure probe and detectio...

Allocation of Resources Without Limits or Throttling

Overview @a2ui/webcore is an A2UI Core Library Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via DataModel.set in data-model.ts when a caller sets data at a large array index e.g., /items/10000000. The target array expands without an uppe...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX697263)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.32, or 14.1 prior to 14.1-73.49, or 13.1-FIPS/NDcPP prior to 13.1-37.286, or 14.1-FIPS prior to 14.1-73.49-FIPS. It is, therefore, affected by multiple vulnerabilities in its...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell exposure checks CVE-2026-109618 / CVE-2026-109619...

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities KEV catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate...

Linux Distros Unpatched Vulnerability : CVE-2026-99004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 drm/imagination: Fix page count for page table for map interface passed the...

EUVD-2026-110031

When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory...

CVE-2026-72758 Routinator may exit on malformed ranges

When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the range, Routinator will never reach the maximum value and run out of memory...