PHP 8.5.11 PHP2Shell Scanner

PHP versions through 8.5.11 contain php2shell vulnerabilities that may lead to remote code execution. This tool passively identifies potentially affected PHP versions from HTTP response headers, cookies, and limited response content...

PHP 8.5.11 Remote Vulnerability Scanner

A remote scanner checks PHP servers for exposure indicators related to stale global state remote code execution, including affected version ranges, session upload progress behavior, error handling, worker reuse, and security headers...

ROS-20261023-73-0038

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0040

The vulnerability in Jenkins is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0093

The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

ROS-20261023-73-0133

The vulnerability in python-pulpcore is related to the lack of protection for the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261023-73-0135

The vulnerability in rabbitmq-server relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261023-73-0143

The vulnerability in golang-github-prometheus relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0149

The vulnerability in Jenkins is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20261023-73-0153

The vulnerability in Jenkins is related to insufficient verification of the registry. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0211

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0219

The vulnerability in Jenkins is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0223

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0225

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-121839

Name of the Vulnerable Software and Affected Versions AgenticSeek versions prior to commit 409840c Description Remote code execution is possible because the llm server/app.py file hardcodes Flask debug mode while binding to all interfaces. An attacker who can access the server port and obtain the...

AlmaLinux 8 : hplip (ALSA-2026:82295)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multipl...

PT-2026-121887

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description An issue exists that could potentially allow remote code execution on the server. This occurs under a rare combination of non-default session settings and specific application behavior. The issue...

Node.js 26.x Brotli Decoder Remote Code Execution Mitigation

Terraform configuration and a verification script provide an interim Azure Application Gateway WAFv2 mitigation for Node.js versions 22.x, 24.x, and 26.x affected by a Brotli decoder out-of-bounds write that can permit remote code execution...

ROS-20261023-73-0145

The vulnerability in golang-github-prometheus relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...