338769 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-guard Scanner, interim-mitigation and incident-hunt...
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...
New Serious PHP Vulnerabilities Released and Patched
PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations...
CVE-2026-102785
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
actual-php2shell
actual-php2shell A reproducible, application-independent remo...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
php2shell-exploit
php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.55
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
EUVD-2026-108161
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
CVE-2026-102785
The YOOtheme Pro Joomla extension (versions 5.0.0-5.0.52 ) is vulnerable to unauthenticated remote code execution due to a flaw in its publicly accessible image transformation handler . The root cause is an incomplete binding of normalized image operations and output destinations to the request s...
Node2Shell: From Brotli Data to Remote Code Execution
Imperva Red Team demonstrated remote code execution against the official vulnerable Node.js build, then confirmed that the fixed release rejects the same Brotli input. Executive summary Node2Shell is Imperva Red Team's name for our analysis of CVE-2026-111497, a High severity flaw in Node.js's...
Exploit for Deserialization of Untrusted Data in Jetbrains Teamcity
CVE-2026-63077 — JetBrains TeamCity agent-polling deserializat...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell brief A static, dependency-free brief on the critic...
Exploit for CVE-2026-111497
CVE-2026-111497: Interim Mitigation for Azure Application Gate...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Detection Rules !PRs Welcomehttps://img.shields...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc — one-shot pre-auth RCE on stock PHP 8.4.26 Apa...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
💀 ZeroHack php2shell Lab & PoC Framework CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Vendor Watch A single-page, live dashboard of vendo...
CVE-2021-48014
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...