K000163864: Spring Tools vulnerability CVE-2026-47858

Security Advisory Description Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. Affected Spring Products and Versions: Spring Tools for Eclipse: 5.2.0 and earlier Spring...

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit...

Exploit for CVE-2026-109518

PHP2Shell Research — Defensive Analysis & Remediation A sec...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Fix Toolkit 🚨 ⚠️ Emergency: Unau...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-triage !CIhttps://github.com/leejongyoung/php2sh...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-triage PHP2ShellCVE-2026-109618 / CVE-2026-10961...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-scan Defensive exposure and compromise-indicator...

CLEANSTART-2026-IG79892 Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loadi...

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...

CLEANSTART-2026-NO66415 Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586)

Security vulnerability affects the sonarqube package. Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586...

Linux Distros Unpatched Vulnerability : CVE-2026-43598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference...

Linux Distros Unpatched Vulnerability : CVE-2026-111183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

AlmaLinux 9.2 [TuxCare] Security Update: grafana Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792757203)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792757203 advisory. - Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive...

PHP 8.4.26 Remote Code Execution

PHP version 8.4.26 contains out-of-memory and stale-state memory-corruption vulnerabilities that can lead to remote code execution under a vulnerable Apache modphp prefork configuration. This proof of concept demonstrates the PHP2Shell exploit chain. https://packetstorm.news/download/237284...

PHP 8.5.11 Multipart OOM Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain out-of-memory and stale request-state flaws that can lead to remote code execution. The supplied proof of concept demonstrates multipart upload-progress trigger paths. https://packetstorm.news/download/237257...

PHP 8.4.26 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory state-corruption vulnerability that may allow remote code execution. This proof of concept targets PHP 8.4.26 Apache modphp in an isolated Docker environment. https://packetstorm.news/download/237271...

JetBrains TeamCity 2026.1.2 Agent Polling Remote Code Execution

JetBrains TeamCity versions before 2026.1.3 and 2025.11.7 contain an unauthenticated agent-polling protocol deserialization vulnerability that allows remote code execution. https://packetstorm.news/download/237301...

GitLab 19.5.0 Integer Overflow Remote Code Execution

GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...