409825 matches found
CVE-2026-115722
RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...
CVE-2026-98784
A flaw was found in the AMD GPU driver within the Linux kernel. During graphics block teardown, the driver fails to release previously loaded microcode firmware resources. A local user could exploit this behavior through repeated device re-initialization and teardown operations, resulting in a...
CVE-2026-98780
A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs system filesystem interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpected registration failure can cause the memory to remain...
CVE-2026-98789
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter memory allocator. When releasing memory, objects queued while a delayed cleanup cycle is already in progress can fail to be reclaimed. A local user can exploit this vulnerability through repeated BPF operations, causing an unbounde...
CVE-2026-80764
A flaw was found in the Linux kernel's Bluetooth subsystem. A local user could exploit a use-after-free vulnerability in the hcievent component. This occurs when the hciccreset function clears Bluetooth Low Energy LE lists without proper locking, allowing a debugfs reader to access freed memory...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patch-php2shell A small, defensive remediation helper for the...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Vulnerability Reproduction Report CVE-2026-1096...
CLSA-2026-1792751700 kernel: Fix of 106 CVEs
net: skbuff: propagate shared-frag marker in skbzerocopy - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net: skbuff: propagate shared-frag marker through frag-transfer helpers CVE-2026-43503 - ALSA: virtio: reset device before deleting virtqueues CVE-2026-98264 - ALSA: usb-audio:...
Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in compression
Summary Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in compression. CVE-2026-87776 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-87776 DESCRIPTION: compression is a Node.js and Express compression middleware. In versio...
Important: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Lab Three-target Docker lab for CVE-2026-109618 / C...
PHP2Shell-POC
PHP2Shell fix checker Lab use only. This project runs a...
Security Bulletin:Multiple vulnerabilities in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-87795, CVE-2026-87823, CVE-2026-87824, CVE-2026-87825, CVE-2026-87877)
Summary Multiple security vulnerabilities have been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Defense Kit Defensive research and tooling for PH...
Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.4 Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time...
Security Bulletin:Vulnerability in jackson-dataformat-cbor may affect IBM Infosphere Change Data Capture (CVE-2026-68495)
Summary A security vulnerability has been identified in jackson-dataformat-cbor, . is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details CVEID:CVE-2026-68495 DESCRIPTION: T...