CVE-2026-61791

Versions of OCO-Server prior to 1.2.1 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The Html::commandButton() function in lib/Html.class.php incorrectly handles stored computer hostnames by using htmlspecialchars(ENT_QUOTES) for HTML escaping only. Because browsers decode HTML entit...

php2shell-poc

PHP2Shell — CVE-2026-109618 / CVE-2026-109619 PoC Independent...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell PoC — CVE-2026-109619 This is a minimal proof of co...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619-POC Pre-RINIT session unserialize RCE in PHP...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-shield 한국어 Stopgap protection for...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

💀 ZeroHack php2shell Lab & PoC Framework CVE-2026-109618...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 — PHP Session Upload Progres...

CVE-2020-26732

CVE-2020-26732 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session Description SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTP...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2SHELL PHP Runtime Security Research · Hackersdream A...

phppoc

CVE-2026-109618 — postbytesprocessed stale pointer session.c:...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — CVE-2026-109618 / CVE-2026-109619 RCE PoC One-cli...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell PHP unauthorized RCE PoC and EXP tools for CVE-2026...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell !Authorhttps://img.shields.io/badge/Author-l3tc...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Single-file...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — pre-auth RCE in PHP session upload-progress Eng...

DEBIAN-CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcubesession::unserialize. A session key prefixed with “!” was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing th...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcubesession::unserialize. A session key prefixed with “!” was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing th...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcubesession::unserialize. A session key prefixed with “!” was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing th...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcubesession::unserialize. A session key prefixed with “!” was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing th...

CVE-2026-114724

Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 are vulnerable to an object injection primitive within the rcube_session::unserialize() function. The root cause is that session keys prefixed with "!" were treated as having no value, causing the reconstructed serialized string to d...