Apache Karaf Cellar 4.4.8 Remote Code Execution

Summary Apache Karaf Cellar is a complete clustering solution for Apache Karaf Container. Cellar can be directly installed on running Karaf Container instances. Description Apache Karaf Cellar suffers from an unauthenticated cluster-join vulnerability leading to remote code execution. The default...

Important: brotli

Issue Overview: A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code execution. CVE-2026-111497 Affected Packages: brotli Issue Correction: Run dnf upda...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Apache Karaf Cellar version 4.4.8 contains an unauthenticated cluster-join vulnerability that allows a network-adjacent attacker to publish a bundle event and execute code on cluster nodes. !/usr/bin/env bash Apache Karaf Cellar 4.4.8 Remote Code Execution Vendor: The Apache Software Foundation...

PHP Session Upload Progress Remote Code Execution

PHP contains a session upload-progress deserialization vulnerability that can result in remote command execution when an application switches the session serializer at runtime. The proof of concept provides a local intentionally vulnerable lab. https://packetstorm.news/download/237419...

PHP 8.4.26 Pre-Authentication Remote Code Execution

PHP version 8.4.26 contains out-of-memory handling and use-after-free flaws in request processing. The supplied proof of concept uses crafted HTTP multipart requests to disclose process memory and execute a short command without authentication. https://packetstorm.news/download/237415...

Node.js 26.12.0 Brotli Decoder Remote Code Execution

Node.js versions prior to 22.23.4, 24.22.1, and 26.12.1 contain a Brotli decoder out-of-bounds write that may lead to remote code execution when processing crafted compressed input. Included proof of concept demonstrates the issue in local Docker labs. https://packetstorm.news/download/237425...

PHP 8.4.26 Stale Session Global State Remote Code Execution

PHP version 8.4.26 contains a stale session global-state use-after-free vulnerability that can lead to remote code execution. This proof of concept demonstrates the issue through session upload progress handling. https://packetstorm.news/download/237408...

Marimo 0.20.4 Pre-Auth Remote Code Execution

Marimo version 0.20.4 and earlier contains an authentication bypass in the terminal WebSocket endpoint that allows unauthenticated remote command execution. This proof of concept connects to the endpoint and sends a command. https://packetstorm.news/download/237403...

PHP Session Upload Progress Remote Code Execution

PHP session upload progress can permit attacker-controlled object deserialization when an application uses phpbinary or phpserialize and switches to the php serializer before sessionstart. Included proof of concept demonstrates the serializer-switch condition and a session-file LFI lab...

PHP 8.4.27 Session Upload Progress Serialization Mismatch Remote Code Execution

PHP version 8.4.27 contains a session upload progress serialization-handler mismatch that can lead to unauthenticated object injection and remote code execution when an application changes the session handler at runtime. Included is a proof of concept and Docker lab...

YOOtheme Pro 5.0.52 Unauthenticated Remote Code Execution

YOOtheme Pro versions 5.0.0 through 5.0.52 contain an unauthenticated remote code execution vulnerability in the public image transformation handler. The supplied proof of concept reuses a signed image URL to inject image operations and write an executable polyglot outside the cache directory...

Important: bind

Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 Replaying GSS-TSIG signed UDP messages can resul...

Exploit for CVE-2026-102256

sonicwall-sma1000-cve-2026-102256-check Sta...

L4J-Vuln-Patch

NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Labs Is your server exposed to PHP2Shell? PHP2Shel...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-fix !checkshttps://github.com/sanketkokate712/p...

PHP2SHELL-POC

PHP2Shell — Vulnerability Research & Lab Analysis Research...

CVE-2023-25610

CVE-2023-25610 Heap memory underflow in the FortiOS management interface leads to remote code execution. Scope and Limitations 1. Fortinet 6.x 2. Based on TLSv1.3; may vary across other TLS versions Usage python3 cve-2022-42475.py rhost rport lhost 'command' python3 CVE-2023-25610.py 192.168.10.1...