163679 matches found
Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to remote code execution (CVE-2026-109618, CVE-2026-109619)
Summary IBM App Connect Enterprise Toolkit pattern generation using a PHP API for user-defined patterns is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
vvdecapp decoder reconstructCoeff Heap Buffer Overflow DoS
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
vvdecapp Decoder Heap Buffer Overflow DoS
The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
vvdecapp readAlf Heap Buffer Overflow DoS
The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619: PHP2Shell — Security Research Lab & PoC...
CVE-2026-98870
A flaw was found in the Linux kernel's ksmbd Server Message Block SMB server. A remote attacker could trigger this vulnerability by establishing and terminating bound SMB channels, leaving stale connection references attached to active session lists. When the owning connection is subsequently tor...
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files bsc1271044. CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument bsc1271048. CVE-2026-59998: sshd:...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell - CVE-2026-109618 / CVE-2026-109619 Alat riset keam...
BIT-PILLOW-2026-112396 Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an application saves attacker-influenced TIFF tags to BytesIO, libtiff can reject a tag during encoding in...
CLSA-2026-1792993907 libpng: Fix of 3 CVEs
CVE-2016-10087: fix NULL pointer dereference in pngsettext2 - CVE-2026-25646: fix heap buffer overflow in pngsetdither - CVE-2026-33416: fix use-after-free on pngptr palette and trans buffers...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP-FPM CVE-2026-109618 research lab This repository is a sel...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Unauthenticated remote code ex...
Important: Red Hat Security Advisory: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
python: Use-after-free of a server-side SSLContext when sni_callback switches contexts
A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...