GitLab 19.5.0 Integer Overflow Remote Code Execution

GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...

PHP 8.5.11 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain out-of-memory request-state flaws that can lead to remote code execution. The supplied proof of concept targets Apache modphp through multipart request processing. https://packetstorm.news/download/237264...

Apache ActiveMQ 5.18.2 OpenWire Remote Code Execution

Apache ActiveMQ versions before 5.15.16, 5.16.7, 5.17.6, and 5.18.3 contain an OpenWire deserialization flaw that allows unauthenticated remote code execution. This proof of concept sends a crafted ExceptionResponse frame. https://packetstorm.news/download/237303...

UBUNTU-CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi...

RockyLinux 9 : .NET 10.0 (RLSA-2026:86193)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86193 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

Node.js 26.x Security Release Check

A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...

PHP 8.5.11 Remote Code Execution Hardening Tool

PHP versions 5.4.0 through 8.5.11 contain two remote code execution vulnerabilities. This tool audits PHP runtime configuration and provides hardening templates for interim mitigation...

PHP 8.5.11 PHP2Shell Scanner

PHP versions through 8.5.11 contain php2shell vulnerabilities that may lead to remote code execution. This tool passively identifies potentially affected PHP versions from HTTP response headers, cookies, and limited response content...

PHP 8.5.11 Remote Vulnerability Scanner

A remote scanner checks PHP servers for exposure indicators related to stale global state remote code execution, including affected version ranges, session upload progress behavior, error handling, worker reuse, and security headers...

CVE-2026-106764

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

Node.js 26.x Brotli Decoder Remote Code Execution Mitigation

Terraform configuration and a verification script provide an interim Azure Application Gateway WAFv2 mitigation for Node.js versions 22.x, 24.x, and 26.x affected by a Brotli decoder out-of-bounds write that can permit remote code execution...

ROS-20261023-73-0022

The vulnerability in libssh2 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0028

The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-121800

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

CVE-2025-30047: Deserialization of Untrusted Data

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

PT-2026-121799

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

CVE-2025-30046: Execution with Unnecessary Privileges

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

ROS-20261023-73-0040

The vulnerability in Jenkins is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261023-73-0135

The vulnerability in rabbitmq-server relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...