329671 matches found
CVE-2024-32002
GIT RCE CVE-2024-32002 Description | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | First you need to create "calledrepo" "commandrepo" repos on git. | Victim will later call the calledrepo with "git clone --recursive calledrepo.git" that redirect to...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patch-php2shell A small, defensive remediation helper for the...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php2shell
php2shell PHP proof of concept for CVE-2026-109618 / CV...
Exploit for CVE-2026-111497
brotli-distro-check !cvehttps://img.shields.io/badge/CVE-2...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2025-30046
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...
CVE-2025-30047
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
BIT-NODE-2026-111497
A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
BIT-NODE-MIN-2026-111497
A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
EUVD-2025-211177
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...
EUVD-2025-211178
CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...
CVE-2025-30046
The CGM CLININET application server is vulnerable to Remote Code Execution (RCE) because multiple processes handling HL7 communication with external systems run with root privileges . These processes process untrusted data from external systems, allowing an attacker in an adjacent network to exec...
CVE-2025-30047
The CGM CLININET server is vulnerable to Remote Code Execution (RCE) due to the deserialization of untrusted data within an HTTP-based API used by the administrative module. An attacker located within the same local network can transmit a crafted serialized Java object to this API, leading to arb...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ā CVE-2026-10...
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit...
Exploit for CVE-2026-109518
PHP2Shell Research ā Defensive Analysis & Remediation A sec...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Fix Toolkit šØ ā ļø Emergency: Unau...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ā CVE-2026-10...
DS-Wireless-Communication-Remote-Code-Execution
DS Wireless Communication Remote Code Execution Injects arbitrary code into a client's game. Prerequisites Python 3.10 pip pydivert Usage pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py CVE-ID CVE-2023-45887 License GNU General Public License v2.0...