Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check CVE-2026-109618 / CVE-2026-109619 !CIht...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

cve-check Shell scripts that check Linux hosts for known vu...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

GHSA-4RR5-89J8-MWWM Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

[SECURITY] [DSA 6576-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6576-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 21, 2026 https://www.debian.org/security/faq -...

CLSA-2026-1792616775 Fix CVE(s): CVE-2026-109618, CVE-2026-109619

SECURITY UPDATE: remote code execution via engine state corruption after bailout - debian/patches/CVE-2026-109618-CVE-2026-109619.patch: avoid state corruption via bailout GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp - CVE-2026-109618 - CVE-2026-109619...

php2shell-check

php2shell — Verificação das CVE-2026-109618 e CVE-2026-109619...

CVE-2026-113343

A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code...

CVE-2026-113331

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The issue stems from memory corruption within the browser's Controls component...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...

CVE-2026-113328

A flaw was found in Google Chrome's Privacy component. Due to improper input validation, a remote attacker could convince a user to visit a crafted HTML page to execute arbitrary code outside the browser's security sandbox an isolated execution environment. Successful exploitation could allow the...

CVE-2026-113312

A flaw was found in the Autofill component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's isolated security sandbox. An attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page...

CVE-2026-113294

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's isolated sandbox environment by convincing a user to open a crafted HTML page. The vulnerability stems from improper input validation within the Loader component...

CVE-2026-113303

A flaw was found in the Web Real-Time Communication WebRTC component of chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page...

CVE-2026-113316

A flaw was found in the Views component of chromium-browser. Due to improper input validation, a remote attacker could execute arbitrary code within the browser sandbox environment by convincing a user to visit a specially crafted HTML page...

CVE-2026-113284

A flaw was found in chromium-browser. A remote attacker could potentially execute arbitrary code inside the application's restricted sandbox environment by tricking a user into viewing a specially crafted HTML page. This issue is caused by memory corruption during the processing of Extensible...

CVE-2026-113288

A flaw was found in chromium-browser. This memory corruption vulnerability in the Core component allows a remote attacker to execute arbitrary code within the application's restricted sandbox environment. To exploit this issue, an attacker must trick a user into viewing a specially crafted HTML...

CVE-2026-113286

A flaw was found in the Google Lens component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment by enticing a user to visit a specially crafted web page...

CVE-2026-113289

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. The issue stems from improper input validation within the PerformanceAPIs component...