3848 matches found
GHSA-GX7P-2J49-HFQ4 vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)
Summary API clients can supply arbitrary mmprocessorkwargs per request. vLLM forwards these values through the multimodal rendering and processing pipeline to Hugging Face and custom image/video processor constructors and calls. Resource-sensitive values such as image size, patch size, patch coun...
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)
Summary API clients can supply arbitrary mmprocessorkwargs per request. vLLM forwards these values through the multimodal rendering and processing pipeline to Hugging Face and custom image/video processor constructors and calls. Resource-sensitive values such as image size, patch size, patch coun...
PHP2SHELL-POC
PHP2Shell — Vulnerability Research & Lab Analysis Research...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 CVE-2026-109619 php2shell CVE-202...
CVE-2026-99004
The Linux kernel contains a vulnerability in the drm/imagination driver related to how page table preallocation is sized by device address. The root cause involves an incorrect calculation where preallocation was sized from device_addr + sgt_offset with an exclusive end, causing the allocation of...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Defense Kit Defensive research and tooling for PH...
CVE-2019-12401
CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...
VLC-CVE-2008-4654-Exploit
VLC-CVE-2008-4654-Exploit Well, it's just an old vulnerability whose CVE number is CVE-2008-4654. This vulnerability is caused by Out of Memory at line 1650 of modules/demux/ty.c. streamReadpdemux-s, mstbuf, 8 + imapsize; When I downloaded the EXP from other websites, I found that it doesn't work...
php2shell
php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information last significant change: 21 October 2026 17:25 CEST Software list last status update: 22 October 2026 17:23 CEST TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities...
php-eol-cve-2026-109618-109619
CVE-2026-109618 / CVE-2026-109619 patches for end-of-life PHP 7.3 on EL7, 5.4 / 5.3 on Amazon Linux Unofficial backports of the PHP security team's minimal mitigation for the two critical, unauthenticated remote code execution vulnerabilities announced on 2026-10-21: CVE| Advisory| Summary...
CLEANSTART-2026-LE11033 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request
Security vulnerability affects the php package. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request...
PHP 5.6.40 State Corruption Mitigation
PHP version 5.6.40 is affected by state corruption following an out-of-memory bailout and stale global-state reuse across requests. This package supplies a Debian 7 wheezy backport of the mitigation...
PHP 7.0.33 PHP2Shell Patch
PHP version 7.0.33 for CentOS 7 contains remote code execution issues involving out-of-memory state corruption and stale global state. This provides patches and a script to build a remedial Remi source RPM...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-shield 한국어 Stopgap protection for...
php2shell-poc
PHP2Shell Patch-Management Lab — CVE-2026-109618 / CVE-2026-10...
php-cve-2026-fix
php-cve-2026-fix A single Bash script that finds every PHP...
php2shell-detection
php2shell exposure assessment CVE-2026-109618 / CVE-2026-1096...
php2shell-detector
php2shell-detector Read-only detection for PHP2Shell — th...