CVE-2026-88900

CVE-2026-88900 — camel-jgroups: unsafe Java deserialization of cluster messages Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the jgroups consumer Java-deserialized cluster messages with no filter. JGroupsEndpoint.createExchangeMessage — called for every message th...

CVE-2020-1350

Warning This repository has been archived and is no longer actively maintained. CVE-2020-1350 This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service. Supported OS for this workaround script Windows Server 2012...

php-cve-2026-fix

php-cve-2026-fix A single Bash script that finds every PHP...

CVE-2025-8971

CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...

Important: Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shellscanner Non-destructive exposure assessment for C...

php2shell-detection

php2shell exposure assessment CVE-2026-109618 / CVE-2026-1096...

Exploit for Code Injection in Geoserver

CVE-2024-36401 — GeoServer OGC filter evaluation RCE PoC and...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE-SU-2026:4858-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

Exploit for CVE-2026-62356

English | 中文 CVE-2026-62356 — Re...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 Detection Tools Two detecti...

Exploit for CVE-2026-111497

CVE-2026-111497 | | | |---|---| | CVE | CVE-2026-111497 |...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — CVE-2026-109618 Pre-auth use-after-free in PHP...

Pillow: Heap Use-after-free When Encoding TIFF To An In-memory Buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When "TIFFWriteScanline" fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, "TIFFClose" flushe...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 - php2shell !CVE-2026-109...

PHP2Shell-Full-Chain-Exploit

PHP2Shell — Detection & Mitigation Guide PHP session.upload...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check Defensive, self-check for CVE-2026-109618...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2SHELL PHP Runtime Security Research · Hackersdream A...

Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions

Node.js released security updates on October 21 for its three supported release lines, 22.x, 24.x and 26.x, fixing 10 flaws. The most serious is a bug in the Brotli decompression code that Node.js bundles, which the project says can allow remote code execution, meaning an attacker could run code ...