410523 matches found
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Lab Three-target Docker lab for CVE-2026-109618 / C...
PHP2Shell-POC
PHP2Shell fix checker Lab use only. This project runs a...
Security Bulletin:Multiple vulnerabilities in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-87795, CVE-2026-87823, CVE-2026-87824, CVE-2026-87825, CVE-2026-87877)
Summary Multiple security vulnerabilities have been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Defense Kit Defensive research and tooling for PH...
Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge
Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.4 Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time...
Security Bulletin:Vulnerability in jackson-dataformat-cbor may affect IBM Infosphere Change Data Capture (CVE-2026-68495)
Summary A security vulnerability has been identified in jackson-dataformat-cbor, . is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details CVEID:CVE-2026-68495 DESCRIPTION: T...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...
CVE-2026-114645
A flaw was found in mongo-c-driver. An integer wraparound in the Windows-native Kerberos authentication code can occur when an excessively long credential value is supplied in the client connection configuration. An attacker capable of modifying this client configuration can cause the driver to...
CVE-2026-115417
A flaw was found in aws-c-mqtt. A remote attacker can cause a Denial of Service DoS in client applications due to improper memory allocation handling within the MQTT Message Queuing Telemetry Transport compatibility adapter. By triggering an excessive memory allocation request, an attacker can...
SUSE-SU-2026:24381-1 Security update for containerd
This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. - CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
This is pa...
Exploit for CVE-2026-109518
PHP2Shell Research — Defensive Analysis & Remediation A sec...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
English This repository contains unofficial source backpo...
CLSA-2026-1792146192 ImageMagick: Fix of 26 CVEs
Rebase to EPEL 8 ImageMagick-6.9.13.58-1.el8 - Drop the vendor soname-revert patch: the 6.9.13.58 tarball already sets MAGICKLIBRARYCURRENT=7, matching the libraries shipped so far - Drop the TuxCare backports for CVE-2026-86420, CVE-2026-86421, CVE-2026-93586, CVE-2026-93587, CVE-2026-93588,...
CLSA-2026-1792145295 ImageMagick: Fix of 24 CVEs
Rebase to EPEL 8 ImageMagick-6.9.13.58-1.el8 - Drop the vendor soname-revert patch: the 6.9.13.58 tarball already sets MAGICKLIBRARYCURRENT=7, matching the libraries shipped so far - Drop the TuxCare backports for CVE-2026-86420, CVE-2026-86421, CVE-2026-93586, CVE-2026-93587, CVE-2026-93588,...
CVE-2026-98771
A flaw was found in the Linux kernel's Sierra Wireless USB storage driver. This vulnerability can lead to an information disclosure because the driver does not verify whether a complete data response is received from an attached device, leaving kernel memory uninitialized. A malicious or emulated...
CVE-2026-98770
A flaw was found in the Linux kernel's USB gadget MIDI 2.0 driver. Under-sized descriptor arrays allow a local user to trigger an out-of-bounds memory access when setting up a large number of MIDI jacks through the configuration filesystem configfs. This issue primarily results in memory corrupti...
CVE-2026-98769
A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...