PHP 8.5.11 Multipart OOM Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain out-of-memory and stale request-state flaws that can lead to remote code execution. The supplied proof of concept demonstrates multipart upload-progress trigger paths. https://packetstorm.news/download/237257...

PHP 8.4.26 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory state-corruption vulnerability that may allow remote code execution. This proof of concept targets PHP 8.4.26 Apache modphp in an isolated Docker environment. https://packetstorm.news/download/237271...

JetBrains TeamCity 2026.1.2 Agent Polling Remote Code Execution

JetBrains TeamCity versions before 2026.1.3 and 2025.11.7 contain an unauthenticated agent-polling protocol deserialization vulnerability that allows remote code execution. https://packetstorm.news/download/237301...

GitLab 19.5.0 Integer Overflow Remote Code Execution

GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...

PHP 8.5.11 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain out-of-memory request-state flaws that can lead to remote code execution. The supplied proof of concept targets Apache modphp through multipart request processing. https://packetstorm.news/download/237264...

PHP 8.3.36 CentOS 7 Security Update

PHP version 7.4.33 and version 8.3.36 CentOS 7 packages include fixes for two remote code execution vulnerabilities...

Node.js 26.x Security Release Check

A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...

PHP 8.5.11 Remote Code Execution Hardening Tool

PHP versions 5.4.0 through 8.5.11 contain two remote code execution vulnerabilities. This tool audits PHP runtime configuration and provides hardening templates for interim mitigation...

PHP 8.5.11 PHP2Shell Scanner

PHP versions through 8.5.11 contain php2shell vulnerabilities that may lead to remote code execution. This tool passively identifies potentially affected PHP versions from HTTP response headers, cookies, and limited response content...

PHP 8.5.11 Remote Vulnerability Scanner

A remote scanner checks PHP servers for exposure indicators related to stale global state remote code execution, including affected version ranges, session upload progress behavior, error handling, worker reuse, and security headers...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

CVE-2026-106765

The @rog0x/mcp-docker-tools version 1.0.1 contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is specifically located within the handleImageList function. No details regarding the specific root cause, remediation, or active exploits are provided i...

PT-2026-122139

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

EUVD-2026-109094

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

ROS-20261023-73-0097

The vulnerability in libxml2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RockyLinux 9 : .NET 10.0 (RLSA-2026:86193)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86193 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792757203)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792757203 advisory. - Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive...

PHP 8.4.26 Remote Code Execution

PHP core versions after 5.4 contain a vulnerability that can result in remote code execution. This proof of concept targets PHP version 8.4.26 running as modphp with a prefork Apache configuration. !/usr/bin/env python3 """ Exploit credited to 9bie, adjusted using AI by OffSec php2shell - one-cli...

Linux Distros Unpatched Vulnerability : CVE-2026-114094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a...