Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — tek komutluk sarmalayıcı CVE-2026-109618 / CVE-20...

CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

EUVD-2026-109216

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

CVE-2026-113673

The GeoDirectory WordPress plugin versions prior to 2.8.194 is vulnerable to Remote Code Execution (RCE) . The root cause is a failure to properly escape administrator-defined text before it is written into a generated PHP file within the plugin's own folder. This flaw allows high-privilege users...

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

CVE-2017-11882

CVE-2017-11882 Article Link Office Remote Code Execution Vulnerability Hidden for 17 Years CVE-2017-11882 http://www.cnblogs.com/Hi-blog/p/7878054.html...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

🛡️ PHP2Shell Sentinel PHP Runtime Vulnerability Assessment...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-oom-longjmp Someone on the internet can talk to your PHP...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-stale-global-uaf Someone on the internet can talk to your...

Exploit for CVE-2026-102785

█████╗ ███╗ ██╗ ████████╗ ██╗ ██████╗ ██████╗ ██████...

PHP Session Upload Progress Mitigation

A Bash utility that audits common PHP configuration layouts and can disable session upload progress as a temporary mitigation for an unlikely remote code execution vector...

PHP 8.5.11 PHP2Shell Scanner

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain memory-handling flaws that can allow unauthenticated remote code execution. This tool sends multipart request probes and identifies susceptible targets from crash signals or the X-Powered-By version...

SonicWall SMA1000 12.5.0 OS Command Injection

SonicWall SMA1000 versions 12.4.3-03526 and earlier and 12.5.0-02952 and earlier contain an authenticated administrator OS command injection vulnerability that may result in remote code execution...

PHP OOM / longjmp() State Corruption Simulation

PHP contains an out-of-memory handling issue where longjmp may leave request memory partially initialized before cleanup reads or branches on it, potentially resulting in remote code execution. This educational visualization demonstrates the conceptual execution flow...

PT-2026-122495

Name of the Vulnerable Software and Affected Versions Prime Mover versions prior to 2.2.2 Description An unauthenticated attacker can perform PHP Object Injection by submitting a crafted, base64-encoded serialized object through the standard comment-submission endpoint 'wp-comments-post.php', whi...

PT-2026-122507

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Summary Apache Karaf Cellar is a complete clustering solution for Apache Karaf Container. Cellar can be directly installed on running Karaf Container instances. Description Apache Karaf Cellar suffers from an unauthenticated cluster-join vulnerability leading to remote code execution. The default...

NetScaler ADC and Gateway 14.1-73.36 DTLS Check

NetScaler ADC and Gateway versions before the listed fixed builds contain a DTLS-enabled memory overflow vulnerability leading to remote code execution or denial of service. This offline tool assesses reported versions and exported DTLS configuration...

Amazon Linux 2 : bind (ALAS-2026-4038)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4038 advisory. Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version...