OESA-2026-4508 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...

OESA-2026-4507 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...

OESA-2026-4506 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...

OESA-2026-4505 gdb security update

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...

cve-2022-33891

CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell PoC — CVE-2026-109619 This is a minimal proof of co...

Vulnerabilities in Snort 3 of Cisco

Cisco has addressed several vulnerabilities in Snort 3, the open-source intrusion detection and prevention system used in various Cisco products. These vulnerabilities reside in various components of the Snort 3 Detection Engine, including the SMTP MIME Decoder, NetFlow Detection Engine, GRE...

PHP2Shell

PHP2Shell CVE-2026-109618 PHP 8.5.4 may allow for a buffer...

Exploit for Authentication Bypass by Spoofing in Ivanti Connect_Secure

Bluefire Redteam — Ivanti Connect Secure check Checker only...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell PoC lab CVE-2026-109618 / CVE-2026-109619 Minimal...

CVE-2021-27928

CVE-2021-27928 In this repository, you will find a proof of concept of the exploitation of the CVE-2021-27928 flaw through a docker container. Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before...

Exploit for CVE-2026-111497

CVE-2026-111497 POC Reproducible local proof for the Brotli d...

php2shell

php2shell Reproducible HTTP proof of concept for the PHP requ...

EUVD-2026-107658

In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the editmanagerxml capability could execute arbitrary operating-system commands using the permissions of the user account running Splunk Enterprise by opening the affected configuration in the...

lrzsz security, bug fix, and enhancement update

An update is available for lrzsz. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmode...

RLSA-2026:86056 Important: lrzsz security, bug fix, and enhancement update

Lrzsz consisting of lrz and lsz is a cosmetically modified zmodem/ymodem/xmodem package built from the public-domain version of the rzsz package. Lrzsz was created to provide a working GNU copylefted Zmodem solution for Linux systems. Security Fixes: lrzsz: lrzsz: Arbitrary file overwrite via...

PT-2026-121588

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description An unauthenticated remote attacker can perform SQL injection attacks against the affected interface of AOS-8. This flaw could lead to the execution of arbitrary commands on the underlying...

PT-2026-121584

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description Authentication bypass flaws in the affected interface could allow an unauthenticated remote attacker to execute arbitrary commands on the underlying operating system if specific preconditions...

PT-2026-121593

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description A flaw in the affected interface of AOS-10 allows an unauthenticated remote attacker to perform SQL injection attacks. SQL injection is a technique where malicious SQL statements are inserted...

PT-2026-121587

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description An unauthenticated remote attacker can perform SQL injection attacks against the affected interface of AOS-8. This flaw could lead to the execution of arbitrary commands on the underlying...