1324088 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — tek komutluk sarmalayıcı CVE-2026-109618 / CVE-20...
CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
EUVD-2026-109216
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
CVE-2026-113673
The GeoDirectory WordPress plugin versions prior to 2.8.194 is vulnerable to Remote Code Execution (RCE) . The root cause is a failure to properly escape administrator-defined text before it is written into a generated PHP file within the plugin's own folder. This flaw allows high-privilege users...
Fugu15
Fugu15 Fugu15 is a semi-untethered permasigned jailbreak for iOS 15. It contains a code-signing bypass, kernel exploit, kernel PAC bypass and PPL bypass. Additionally, it can be installed via Safari, i.e. a computer is not required, except for a Web Server that hosts Fugu15. Please note that Fugu...
CVE-2021-28476
CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...
CVE-2017-11882
CVE-2017-11882 Article Link Office Remote Code Execution Vulnerability Hidden for 17 Years CVE-2017-11882 http://www.cnblogs.com/Hi-blog/p/7878054.html...
MAL-2026-18248 Malicious code in overarch-windows-x64-yr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f1fa32ec925a11dad1e6efa7e1884b1cc263e28f153658b5a9d79e1e7a3236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ PHP2Shell Sentinel PHP Runtime Vulnerability Assessment...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-oom-longjmp Someone on the internet can talk to your PHP...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-stale-global-uaf Someone on the internet can talk to your...
MAL-2026-18247 Malicious code in @liauto/win32-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b21b90b1f7b784f09be79386162a6d31ac2c89649a3dff65fbf67456594251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-80829
A flaw was found in the Linux kernel's ALSA USB audio driver. A local attacker with a specially crafted USB device could exploit this vulnerability. By providing a malformed wMaxPacketSize value, the device can trigger an out-of-bounds write in the kernel's memory. This memory corruption could le...
CLSA-2026-1792807762 vim: Fix of 3 CVEs
CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion upstream 9.2.0845 - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling upstream 9.2.0480 - CVE-2026-47167: fix Ruby code execution via a crafted pattern in the...
How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected...
hackcar-writeup
Hackcar - Writeup Platform: DockerLabs Difficulty: Medium more or less, it has its quirks Objective: From webuser to root by breaking a Next.js The start: reconnaissance As always, first things first: see what we're up against. nmap -sC -sV -T4 172.17.0.2 PORT STATE SERVICE VERSION 8080/tcp open...
[SECURITY] [DLA 4856-1] xdg-dbus-proxy security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4856-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 23, 2026 https://wiki.debian.org/LTS -...
Codecepticon
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Codecepticon for the latest version. Codecepticon Table of Contents Introduction Read This First Prerequisites Visual Studio Roslyn Compiler Check to see if it works Using Codecepticon C VBA/VB6 PowerShell Obfuscating Command Li...