php2shell-eol-backport

php2shell-eol-backport Unofficial fix for CVE-2026-109618 and CVE-2026-109619 "php2shell" for the end-of-life PHP packages of Enterprise Linux 6 and 7 : php-5.3.3 RHEL / CentOS / Oracle Linux 6 and php-5.4.16 RHEL / CentOS / Oracle Linux / Scientific Linux 7. PHP fixed both vulnerabilities on 21...

php2shell-research

php2shell: CVE-2026-109618 / CVE-2026-109619 Independent veri...

httpd: httpd: Authentication state corruption via concurrent Digest authentication requests

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP 7.3.33 source patch for CVE-2026-109618 and CVE-2026-10961...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP 7.2.34 source patch for CVE-2026-109618 and CVE-2026-10961...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 — PHP OOM State Corruption R...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP 5.6 Security Advisory: CVE-2026-109619 & CVE-2026-109618 B...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php80/php80-8.0.30-i586-2slack15.0.txz: Rebuilt. This update fixes the following critical remote code execution flaw: Avoid state corruption via...

Exploit for CVE-2026-109618

php-oom-corruption-lab Research lab, verification tooling and...

php: Fix of 2 CVEs

CVE-2026-109618: avoid heap state corruption via bailout on out-of-memory - CVE-2026-109619: reset per-request globals that could be reused after a bailout during request startup...

Exploit for CVE-2026-109618

php2shell-verify Verification toolkit and source-level analys...

Exploit for CVE-2026-109618

PHP 8.0.30: CVE-2026-109618 / CVE-2026-109619 EnglishREADM...

Exploit for CVE-2026-109618

php2shell-detect Non-destructive detection toolkit and vers...

EUVD-2021-34888

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

CVE-2021-48018

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

PT-2026-120159

Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant is called, setting the lock overwrites the overlapping storage variable, corrupting contract state and breaking the...

CVE-2026-98449

A flaw was found in the Linux kernel's SMB Server Message Block client. This issue may allow a remote attacker or malicious server to trigger a Denial of Service DoS by inducing network transmission failures during compound request processing. Because the client releases its connection lock witho...

EulerOS 2.0 SP13 : libssh2 (EulerOS-SA-2026-4156)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a par...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 – Linux Kernel rtmutex removewaiter proxy-lo...

EUVD-2026-95136

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a FIXED attribute default to make cleanAttributesOnWhitelist perform a double DOMElement::removeAttribute call on the same attribute name in src/Sanitizer.php. The first removal deletes the...