1283602 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-audit !CVEhttps://img.shields.io/badge/CVE-2026-...
wp2shell-poc-fulljs
WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...
CVE-2026-96778
A flaw was found in Pillow. A remote attacker could exploit a heap buffer overflow vulnerability to achieve arbitrary code execution or cause a Denial of Service DoS. This issue occurs when an application re-encodes an untrusted image into JPEG format while preserving specially crafted color...
brotli: Out-of-Bounds Write in Google Brotli Decoder
A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2SHELL HTTP-only, ASLR-bypassing remote code execution f...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell checker Find out if your PHP site is exposed to p...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-check CVE-2026-109618 / CVE-2026-109619 !CIht...
CVE-2026-98657
A flaw was found in the Linux kernel's PulsedLight LIDAR sensor driver. When device initialization fails during power management setup, the driver fails to properly unregister the device before releasing its allocated memory. This leaves active system interfaces pointing to released memory,...
CVE-2026-114145
A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...
Malicious code in journey-test-helloshell (PyPI)
Source: kam193 bdf4549e34df1c1c7dfd704454011cf0a26ea5807948e917d7bc65f130182fc9 In specific environments, package starts a reverse shell during installation. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-journey-test-helloshell Reasons...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
cve-check Shell scripts that check Linux hosts for known vu...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
EUVD-2026-104603
Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO...
Virtualenv Activation Scripts Run Code From A Path That Contains A Placeholder Name
Impact "ViaTemplateActivator.instantiatetemplate" replaces the placeholders in an activation template one key at a time, each across the whole text. When a value that it already substituted and quoted contains the name of a later placeholder, the later pass rewrites that name inside the quoted...
EUVD-2026-104632
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer...
GHSA-4RR5-89J8-MWWM Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...
MAL-2026-18125 Malicious code in @worrisome/aaaa (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a40fa46e41f398f4bc4d74e11b8ff064d691a5c5a9b8950003f93e76e114b5b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
DEBIAN-CVE-2026-96778
Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode in src/libImaging/JpegEncode.c can call jpegwritemarker for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted freeinbuffer...
CVE-2026-96778
Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode in src/libImaging/JpegEncode.c can call jpegwritemarker for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted freeinbuffer...