CVE-2026-94300

The BIND 9 software (component named ) is vulnerable to memory corruption due to a race condition when processing concurrent GSS-TSIG signed UDP messages. An attacker who captures a previously signed UDP message can replay it while the negotiated TSIG key remains valid. By simultaneously sending ...

CVE-2026-94300

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified 194 vulnerabilities in the Oracle E-Business Suite and related components, specifically for versions 12.2.3 through 12.2.15. Depending on the specific vulnerability, these can be exploited by an attacker with network access to obtain unauthorized access to data, or to modify...

Critical Vulnerabilities in PHP Require Immediate Patching

Update October 23, 2026 : CISA has updated this Alert to: 1 provide a SIGMA detection rule to help identify potentially suspicious activity; 2 incorporate partner resources; and 3 reinforce existing mitigation guidance. Purpose CISA strongly urges organizations to immediately patch the recently...

Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 + CVE-2026-60137 — WP2Shell Exploit WordPres...

Exploit for CVE-2026-109618

Overview php2shell - CVE-2026-109618 / CVE-2026-109619 ph...

Exploit for CVE-2026-109618

php-rfc1867-guard For PHP 5.4 to 8.1, which get no official f...

CVE-2026-59562

The Apache IoTDB database is vulnerable to remote code execution and unauthenticated path traversal due to a missing authentication for critical function vulnerability in the legacy pipe sendFile RPC . This issue affects versions 2.0.0 through 2.0.10 . To remediate this vulnerability, users are r...

CVE-2026-59562 Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

ApacheRCEEssay

CVE-2021-41773 Essay 🕸️ Description 🖼️ This repository contains an essay about CVE-2021-41773, a remote code execution vulnerability in Apache 2.4.49. This was created for a course from Faculty of Automatic Control and Computers, University POLITEHNICA of Bucharest, namely "Cyberdefences and...

Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 Spring4Shell: Vulnerability Analysis Name:...

Exploit for CVE-2026-88900

CVE-2026-88900 — camel-jgroups: unsafe Java deserialization of...

Exploit for CVE-2026-109618

php2shell-check Check, then apply, the php2shell fix on y...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619 PHP session.uploadprogr...

POC-CVE-2025-1094

POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool 📋 Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...

Drupal-cve-2019-6340

Research CVE 2019-6340 The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any other web service...

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

This story is developing and was written before PHP's scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions below are confirmed by the official advisory. PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical...

exploit-CVE-2025-49113

CVE-2025-49113 PoC Repository Overview of CVE-2025-49113 CVE-2025-49113 is a critical vulnerability affecting Roundcube Webmail versions prior to 1.5.10 and 1.6.11. Discovered in 2025, this flaw allows remote code execution RCE through PHP Object Deserialization in the /settings/upload.php...