BIT-MARIADB-MIN-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql50 bypass prefix is affected because it allows the mysql50 prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue wit...

BIT-MARIADB-MIN-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...

BIT-MARIADB-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql50 bypass prefix is affected because it allows the mysql50 prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue wit...

BIT-MARIADB-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 · ORBITRON respo...

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell. The vulnerabilities are listed below -...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: 1Panel Client Certificate Bypass RCE Vulnerability Integrated Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operations and maintenance management panel that provides a graphical interface for deploying websites, managing servers,...

Exploit for CVE-2026-109618

phpup-2026 IOCs and detection rules for CVE-2026-109618 /...

CVE-2021-42013

CVE-2021-42013 Vulnerable service Installation Several options: 1. Docker container docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h3rc-6mm3-gc2m. This link is maintained to preserve external references. Original Description vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mmprocessorkwargs.coderevision to Transformers...

GHSA-F623-HJM8-5WG5 Duplicate Advisory: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h3rc-6mm3-gc2m. This link is maintained to preserve external references. Original Description vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mmprocessorkwargs.coderevision to Transformers...

CVE-2026-113019

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free condition in the Turbolev component, where the application references memory...

CVE-2026-113079

A flaw was found in the SiteIsolation component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering a use-after-free memory error. Successful exploitation allows the attacker to execute arbitrary code within the...

CVE-2026-113200

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563350676...

CVE-2026-113001

A flaw was found in chromium-browser. A use-after-free vulnerability in the Workers component allows a remote attacker to execute arbitrary code inside the browser sandbox. To exploit this flaw, an attacker must trick a user into opening a specially crafted HTML page...

CVE-2026-113101

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is due to a use-after-free condition in the SiteIsolation component, which occurs when memory is...

CVE-2026-113210

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563354824...

CVE-2026-113181

A flaw was found in the Navigation component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to open a specially crafted web page. The issue stems from a use-after-free condition, which occurs when the application...