333789 matches found
PT-2026-122507
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
PHP Session Upload Progress Remote Code Execution
PHP contains a session upload-progress deserialization vulnerability that can result in remote command execution when an application switches the session serializer at runtime. The proof of concept provides a local intentionally vulnerable lab. https://packetstorm.news/download/237419...
PHP 8.4.26 Pre-Authentication Remote Code Execution
PHP version 8.4.26 contains out-of-memory handling and use-after-free flaws in request processing. The supplied proof of concept uses crafted HTTP multipart requests to disclose process memory and execute a short command without authentication. https://packetstorm.news/download/237415...
PHP OOM / longjmp() State Corruption Simulation
PHP contains an out-of-memory handling issue where longjmp may leave request memory partially initialized before cleanup reads or branches on it, potentially resulting in remote code execution. This educational visualization demonstrates the conceptual execution flow...
Amazon Linux 2 : bind (ALAS-2026-4038)
The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4038 advisory. Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version...
Marimo 0.20.4 Pre-Auth Remote Code Execution
Marimo version 0.20.4 and earlier contains an authentication bypass in the terminal WebSocket endpoint that allows unauthenticated remote command execution. This proof of concept connects to the endpoint and sends a command. https://packetstorm.news/download/237403...
Amazon Linux 2 : ghostscript (ALAS-2026-4034)
The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4034 advisory. A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the...
PHP Session Upload Progress Remote Code Execution
PHP session upload progress can permit attacker-controlled object deserialization when an application uses phpbinary or phpserialize and switches to the php serializer before sessionstart. Included proof of concept demonstrates the serializer-switch condition and a session-file LFI lab...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143723)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143723 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143724)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143724 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Important: bind
Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 A BIND recursive resolver may experience excessi...
Important: bind
Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 Replaying GSS-TSIG signed UDP messages can resul...
Important: brotli
Issue Overview: A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code execution. CVE-2026-111497 Affected Packages: brotli Issue Correction: Run dnf upda...
Exploit for CVE-2026-102256
sonicwall-sma1000-cve-2026-102256-check Sta...
L4J-Vuln-Patch
NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Labs Is your server exposed to PHP2Shell? PHP2Shel...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...