Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143723 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143724 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

Important: bind

Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 A BIND recursive resolver may experience excessi...

Important: bind

Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 Replaying GSS-TSIG signed UDP messages can resul...

Amazon Linux 2 : bind (ALAS-2026-4038)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4038 advisory. Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version...

Marimo 0.20.4 Pre-Auth Remote Code Execution

Marimo version 0.20.4 and earlier contains an authentication bypass in the terminal WebSocket endpoint that allows unauthenticated remote command execution. This proof of concept connects to the endpoint and sends a command. https://packetstorm.news/download/237403...

NetScaler ADC and Gateway 14.1-73.36 DTLS Check

NetScaler ADC and Gateway versions before the listed fixed builds contain a DTLS-enabled memory overflow vulnerability leading to remote code execution or denial of service. This offline tool assesses reported versions and exported DTLS configuration...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Summary Apache Karaf Cellar is a complete clustering solution for Apache Karaf Container. Cellar can be directly installed on running Karaf Container instances. Description Apache Karaf Cellar suffers from an unauthenticated cluster-join vulnerability leading to remote code execution. The default...

PHP Session Upload Progress Mitigation

A Bash utility that audits common PHP configuration layouts and can disable session upload progress as a temporary mitigation for an unlikely remote code execution vector...

PHP 8.5.11 PHP2Shell Scanner

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain memory-handling flaws that can allow unauthenticated remote code execution. This tool sends multipart request probes and identifies susceptible targets from crash signals or the X-Powered-By version...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Apache Karaf Cellar version 4.4.8 contains an unauthenticated cluster-join vulnerability that allows a network-adjacent attacker to publish a bundle event and execute code on cluster nodes. !/usr/bin/env bash Apache Karaf Cellar 4.4.8 Remote Code Execution Vendor: The Apache Software Foundation...

Node.js 26.12.0 Brotli Decoder Remote Code Execution

Node.js versions prior to 22.23.4, 24.22.1, and 26.12.1 contain a Brotli decoder out-of-bounds write that may lead to remote code execution when processing crafted compressed input. Included proof of concept demonstrates the issue in local Docker labs. https://packetstorm.news/download/237425...

YOOtheme Pro 5.0.52 Unauthenticated Remote Code Execution

YOOtheme Pro versions 5.0.0 through 5.0.52 contain an unauthenticated remote code execution vulnerability in the public image transformation handler. The supplied proof of concept reuses a signed image URL to inject image operations and write an executable polyglot outside the cache directory...

PHP 8.4.27 Session Upload Progress Serialization Mismatch Remote Code Execution

PHP version 8.4.27 contains a session upload progress serialization-handler mismatch that can lead to unauthenticated object injection and remote code execution when an application changes the session handler at runtime. Included is a proof of concept and Docker lab...

PHP 8.4.26 Stale Session Global State Remote Code Execution

PHP version 8.4.26 contains a stale session global-state use-after-free vulnerability that can lead to remote code execution. This proof of concept demonstrates the issue through session upload progress handling. https://packetstorm.news/download/237408...

PT-2026-122495

Name of the Vulnerable Software and Affected Versions Prime Mover versions prior to 2.2.2 Description An unauthenticated attacker can perform PHP Object Injection by submitting a crafted, base64-encoded serialized object through the standard comment-submission endpoint 'wp-comments-post.php', whi...

PT-2026-122507

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

PHP Session Upload Progress Remote Code Execution

PHP contains a session upload-progress deserialization vulnerability that can result in remote command execution when an application switches the session serializer at runtime. The proof of concept provides a local intentionally vulnerable lab. https://packetstorm.news/download/237419...

PHP 8.4.26 Pre-Authentication Remote Code Execution

PHP version 8.4.26 contains out-of-memory handling and use-after-free flaws in request processing. The supplied proof of concept uses crafted HTTP multipart requests to disclose process memory and execute a short command without authentication. https://packetstorm.news/download/237415...

PHP OOM / longjmp() State Corruption Simulation

PHP contains an out-of-memory handling issue where longjmp may leave request memory partially initialized before cleanup reads or branches on it, potentially resulting in remote code execution. This educational visualization demonstrates the conceptual execution flow...