333304 matches found
GitLab 19.5.0 Integer Overflow Detection Tool
This tool assesses GitLab CE/EE version exposure to an integer overflow that can permit unauthenticated remote code execution and triages local exception logs for related indicators...
Citrix NetScaler ADC and Gateway 14.1-73.36 DTLS Configuration Check
Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS-enabled memory overflow vulnerability that may lead to remote code execution or denial of service. This tool evaluates reported builds and exported DTLS configuration offline...
NetScaler ADC and Gateway 14.1-73.36 Remote Code Execution
NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain an unauthenticated remote code execution vulnerability due to improper input validation...
PT-2026-122954
CVE-2026-429016 RCE remote cum execution found! ! ! guys update your balls before it's too late!...
Amazon Linux 2023 : ghostscript, ghostscript-gtk, ghostscript-tools-dvipdf (ALAS2023-2026-3294)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3294 advisory. A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the...
Google Brotli 1.2.0 Decoder Out-of-Bounds Write
Google Brotli versions 1.0.3 through 1.2.0 contain an out-of-bounds write in the decoder that may allow memory corruption, denial of service, information disclosure, or remote code execution via crafted compressed input...
Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-3312)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3312 advisory. Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50,...
Amazon Linux 2023 : brotli, brotli-devel, libbrotli (ALAS2023-2026-3334)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3334 advisory. A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code...
FreeBSD : Node.js -- multiple vulnerabilities (33a752ba-4cbe-46d8-abda-587011d90575)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 33a752ba-4cbe-46d8-abda-587011d90575 advisory. Node.js reports: dns.resolve truncates names containing NUL char CVE-2026-105482 - high TLS...
n8n 2.36.1 Git Node Remote Code Execution
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. A repository-local Git content-filter configuration can execute a command during a Git operation. https://packetstorm.news/download/237473...
Synology DiskStation Manager 7.2.2 Remote Code Execution
Synology DiskStation Manager versions before 7.2.2-72806-1 contain an improper encoding or escaping flaw in the system plugin daemon that allows remote attackers to execute arbitrary code. This proof of concept demonstrates environment-variable injection through the login flow...
Next.js 16.4.0 use cache Typed Array Remote Code Execution
Next.js version 16.4.0 use cache functions returning multiple typed arrays contain a React Flight framing flaw that can permit unauthenticated remote code execution. The proof of concept demonstrates affected and fixed versions. https://packetstorm.news/download/237482...
PHP 8.5.11 Remote Code Execution
PHP versions 5.4.0 through 8.5.11 contain pre-authentication remote code execution vulnerabilities involving out-of-memory handling and stale request state. https://packetstorm.news/download/237464...
PHP 8.5.11 out of Memory Remote Code Execution
PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory handling flaw that can leave request memory in an invalid state. This proof of concept compares affected and fixed builds. https://packetstorm.news/download/237484...
PHP 8.5.11 Remote Code Execution
PHP versions through 8.5.11 contain out-of-memory handling and use-after-free flaws that can allow unauthenticated remote code execution. This proof of concept demonstrates an HTTP-only exploit chain against PHP version 8.4.26 running under Apache modphp. https://packetstorm.news/download/237463...
PHP 8.4.27 Session Upload Progress Remote Code Execution
PHP version 8.4.27 and earlier contain a session upload-progress serialization handler mismatch that can allow pre-auth object injection and remote code execution when application code changes the session serialization handler before sessionstart. https://packetstorm.news/download/237461...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-probe A focused, open-source scanning probe for C...
php-oom-longjmp
php2shell - php-oom-longjmp Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP they can send a crafted file-upload request that makes the engine run out of memory while it is still reading the request, before your application...
php-stale-global-uaf
php2shell/php2dos - php-stale-global-uaf Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP 8.5 they can force one request to die with a fatal error, then send a second request to the same worker. PHP 8.5 keeps a backtrace from th...