CVE-2026-113013

A flaw was found in Chromium DevTools. A remote attacker could exploit this memory corruption issue by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox...

CVE-2026-112994

A flaw was found in chromium-browser. This vulnerability is caused by memory corruption within the browser. A remote attacker could exploit this issue by convincing a user to load a crafted HTML page, potentially leading to arbitrary code execution inside the browser sandbox...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel BPassed to VectorStore query/filter B -- CInMemoryVectorStore evaluates filter expression unsafely C -- DUnsafe attribute resolution via class / base / subclasses D -- EAccess to init.globals containing os and builtins E -- FArbitrary code execution e.g. os.system F --...

php2shell-poc

PHP2Shell 🔬 Two PHP vulnerabilities. One evidence trail...

CVE-2026-113005

A flaw was found in chromium-browser. A memory corruption vulnerability in the Bluetooth component allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment. To exploit this flaw, an attacker must entice a user into visiting a specially crafted HTML pa...

CVE-2026-113012

A flaw was found in chromium-browser. Improper input validation within the Graphics Processing Unit GPU component allows a remote attacker to potentially execute arbitrary code inside the browser's sandbox. An attacker could exploit this vulnerability by convincing a user to load a specially...

CVE-2026-113007

A flaw was found in chromium-browser. A memory corruption vulnerability in the Permissions component allows a remote attacker to execute arbitrary code outside the sandbox, which is an isolated security boundary designed to restrict untrusted programs. By convincing a user to open a specially...

CVE-2026-113004

A flaw was found in chromium-browser. A memory corruption vulnerability in the Sync component allows a remote attacker to achieve arbitrary code execution inside the browser's restricted security environment sandbox. An attacker can exploit this issue by enticing a user to visit a specially craft...

CVE-2026-112998

A flaw was found in chromium-browser. A memory corruption vulnerability in the Views user interface framework allows a remote attacker to execute arbitrary code within the application's sandbox an isolated security environment. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-112996

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's restricted execution environment sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a memory corruption vulnerability in the Loader component...

Exploit for CVE-2026-109619

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

Exploit for CVE-2026-109619

CVE-2026-109619 — PHP stale session global state → RCE A work...

Exploit for CVE-2026-109618

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

PHP2SHELL-POC

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗ ██║ ██║██╔══██╗╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝ ███████║██████╔╝ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██╔═══╝ ██╔═══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██║ ██║ ██║██║ ███████╗███████║██║...

Exploit for CVE-2026-109618

⚡ php2shell: Pre-Auth Remote Code Execution in PHP Core I...

Exploit for CVE-2026-109618

Php2Shell-POC Pre-auth remote code execution & reverse shel...

Exploit for CVE-2026-109618

🍉 php2shell — CVE-2026-109618 / CVE-2026-109619 Pre-auth re...

CVE-2026-92208

NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

DEBIAN-CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...