333629 matches found
CVE-2025-30047
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
BIT-NODE-2026-111497
A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
BIT-NODE-MIN-2026-111497
A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
CVE-2025-30046
The CGM CLININET application server is vulnerable to Remote Code Execution (RCE) because multiple processes handling HL7 communication with external systems run with root privileges . These processes process untrusted data from external systems, allowing an attacker in an adjacent network to exec...
CVE-2025-30047
The CGM CLININET server is vulnerable to Remote Code Execution (RCE) due to the deserialization of untrusted data within an HTTP-based API used by the administrative module. An attacker located within the same local network can transmit a crafted serialized Java object to this API, leading to arb...
CVE-2025-30046 Remote Code Execution in CGM CLININET
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...
EUVD-2025-211177
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...
EUVD-2025-211178
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
CVE-2025-30047 Remote Code Execution via Java Deserialization in CGM CLININET
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...
K000163864: Spring Tools vulnerability CVE-2026-47858
Security Advisory Description Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring...
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit...
Exploit for CVE-2026-109518
PHP2Shell Research — Defensive Analysis & Remediation A sec...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Fix Toolkit 🚨 ⚠️ Emergency: Unau...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-triage !CIhttps://github.com/leejongyoung/php2sh...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-triage PHP2ShellCVE-2026-109618 / CVE-2026-10961...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...