Exploit for Improperly Controlled Sequential Memory Allocation in Php

anti-php2shell !Python Versionhttps://img.shields.io/badg...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

GHSA-4RR5-89J8-MWWM Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

Exploit for CVE-2026-109618

⚡ php2shell: Pre-Auth Remote Code Execution in PHP Core I...

Exploit for CVE-2026-109618

php2shell - PoC for CVE-2026-109618 / CVE-2026-109619 Proof-o...

Exploit for CVE-2026-109618

php2shell - PoC for CVE-2026-109618 / CVE-2026-109619 Proof-o...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...

CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...

CVE-2026-74758

Apache bRPC (versions

EUVD-2026-107182

A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...

Exploit for CVE-2026-109618

php2shell-verify Independent verification lab and proof-of-co...

Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619 — PHP2Shell PoC Critica...

Exploit for CVE-2026-109618

php2shell-detect Defensive detection toolkit for php2shell...

Exploit for CVE-2026-109618

php-uploadprogress-waf Defensive detection rules for the repo...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed ERRASANTHREADC18...

CVE-2026-92388

The libcurl library is vulnerable to a write callback mixup during failed FTP wildcard LIST operations. The root cause is that libcurl fails to restore the restoration path, leaving the write callback set to the internal listing parser and the data pointer directed at the easy handle . This state...

EUVD-2026-105318

When an FTP wildcard LIST operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash,...

CVE-2026-92388

When an FTP wildcard LIST operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash,...

CVE-2026-92388

When an FTP wildcard LIST operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash,...