RHEL 9 : libkcapi (RHSA-2026:87712)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87712 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143063 advisory. In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143043)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143043 advisory. Due to a vulnerability in the iouring subsystem, it is possible to leak kernel memory information to the user process.timensinstall calls currentissinglethreaded to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143120 advisory. In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after devhardheader pppoesendmsg saves a pointer to the PPPoE header...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142762 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tungetuser uses tun-align both as skb headroom and when choosing...

Oracle Linux 8 : php:7.4 (ELSA-2026-87080)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87080 advisory. - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address...

PHP 7.x through 8.1 Out-Of-Memory Handling Check

This tool checks PHP versions 7.x through 8.1 for the out-of-memory handling associated with CVE-2026-109618 by triggering a memory-limit error and observing whether shutdown functions run...

RHEL 10 : php (RHSA-2026:87070)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87070 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : PHP vulnerabilities (USN-8948-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8948-1 advisory. It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker coul...

Linux Distros Unpatched Vulnerability : CVE-2026-102485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash nt...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142470 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: altera-msgdma: properly free descriptor in msgdmafreedescriptor Remove listdel call in...

SUSE SLES15: libpython3_11-1_0 / python311 / python311-base / python311-curses / etc (SUSE-SU-2026:4809-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4809-1 advisory. - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-15806:...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142508)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142508 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offse...

PHP 8.5.11 Remote Code Execution

PHP version 8.5.11 and earlier affected branch releases contain two unauthenticated remote code execution vulnerabilities involving out-of-memory handling and stale global state...

Rocky Linux 9 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc Multiple Vulnerabilities (crlsa-2026_86983)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686983 advisory. openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing CVE-2026-34544 openexr: OpenEXR: Denial of Service or Informatio...

RockyLinux 9 : kernel (RLSA-2026:86033)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-5293...

RHEL 8 : go-toolset:rhel8 (RHSA-2026:87245)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87245 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/http:...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP CVE-2026-109618/109619 资产排查工具（源码 GUI 单文件exe）...

SUSE CVE-2026-19630

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...

SUSE CVE-2026-94300

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...