PHP 8.5.11 PHP2Shell Patch Check

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain memory safety flaws that can allow remote code execution. The supplied Bash tool checks local CLI, FPM, and Apache PHP component versions against upstream fixed releases...

ROS-20261023-73-0211

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-106764

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...

Intranda goobi-viewer-core path traversal vulnerability

A security vulnerability exists in Intranda Goobi Viewer Core versions from 24.03 up to but not including 26.05. This vulnerability arises because ExternalFilesDownloader.getFilename extracts the target filename from the Content-Disposition response header provided by the server and passes it...

rog0x mcp-git-tools security vulnerability

A security vulnerability exists in version 1.0.1 of rog0x mcp-git-tools; it stems from issues in the resolveBaseBranch function and may allow remote attackers to execute arbitrary code...

PT-2026-122139

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

rog0x mcp-git-tools security vulnerability

A security vulnerability exists in version 1.0.1 of rog0x mcp-git-tools; it stems from issues in the handleImageList function and may allow remote attackers to execute arbitrary code...

EUVD-2026-109096

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

CVE-2026-106763

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

PT-2026-122137

An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...

EUVD-2026-109094

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

PT-2026-121887

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description An issue exists that could potentially allow remote code execution on the server. This occurs under a rare combination of non-default session settings and specific application behavior. Amazon...

PHP 8.5.11 Multipart OOM Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory request-parsing flaw that can lead to remote code execution. The proof of concept sends a chunked multipart request to reproduce the OOM bailout trigger. https://packetstorm.news/download/237279...

PHP 8.4.26 mod_php Remote Code Execution

PHP version 8.4.26 with modphp contains an out-of-memory handling vulnerability that allows unauthenticated remote command execution. The included proof of concept targets the PHP session upload-progress feature. https://packetstorm.news/download/237269...

CVE-2026-115560

A flaw in PHP's session upload progress handling can lead to remote code execution when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and switches it to php at runtime with iniset before calling sessionstart, while session.uploadprogress.enabled is...

AlmaLinux 8 : hplip (ALSA-2026:82295)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multipl...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x / 12.2.x Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, 12.1.x, or 12.2.x. It is, therefore, affected by multiple vulnerabilities. Palo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619...

Linux Distros Unpatched Vulnerability : CVE-2026-111183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...