333304 matches found
PHP 8.5.11 Remote Code Execution
PHP versions prior to 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain remote code execution vulnerabilities. This script performs behavioral checks for affected request parsing and session state handling...
UBUNTU-CVE-2026-92183
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates within the escapeShellString and sanitizeCode functions. The documents do not provide specific details regarding remediation or evidence of in-the-wild ex...
CVE-2026-106765
The @rog0x/mcp-docker-tools version 1.0.1 contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is specifically located within the handleImageList function. No details regarding the specific root cause, remediation, or active exploits are provided i...
EUVD-2026-109094
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...
EUVD-2026-109096
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PT-2026-122139
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...
PT-2026-121839
Name of the Vulnerable Software and Affected Versions AgenticSeek versions prior to commit 409840c Description Remote code execution is possible because the llm server/app.py file hardcodes Flask debug mode while binding to all interfaces. An attacker who can access the server port and obtain the...
PT-2026-122137
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PT-2026-122127
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...
PHP 8.3.36 CentOS 7 Security Update
PHP version 7.4.33 and version 8.3.36 CentOS 7 packages include fixes for two remote code execution vulnerabilities...
Node.js 26.x Security Release Check
A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...
PHP 8.5.11 Remote Code Execution Hardening Tool
PHP versions 5.4.0 through 8.5.11 contain two remote code execution vulnerabilities. This tool audits PHP runtime configuration and provides hardening templates for interim mitigation...
PHP 8.5.11 PHP2Shell Scanner
PHP versions through 8.5.11 contain php2shell vulnerabilities that may lead to remote code execution. This tool passively identifies potentially affected PHP versions from HTTP response headers, cookies, and limited response content...
PHP 8.5.11 Remote Vulnerability Scanner
A remote scanner checks PHP servers for exposure indicators related to stale global state remote code execution, including affected version ranges, session upload progress behavior, error handling, worker reuse, and security headers...
CVE-2026-106765
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
ROS-20261023-73-0022
The vulnerability in libssh2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...