330119 matches found
Important: brotli
Issue Overview: A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code execution. CVE-2026-111497 Affected Packages: brotli Issue Correction: Run dnf upda...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143723)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143723 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143724)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143724 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
PT-2026-122507
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...
PT-2026-122495
Name of the Vulnerable Software and Affected Versions Prime Mover versions prior to 2.2.2 Description An unauthenticated attacker can perform PHP Object Injection by submitting a crafted, base64-encoded serialized object through the standard comment-submission endpoint 'wp-comments-post.php', whi...
L4J-Vuln-Patch
NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Labs Is your server exposed to PHP2Shell? PHP2Shel...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-fix !checkshttps://github.com/sanketkokate712/p...
PHP2SHELL-POC
PHP2Shell — Vulnerability Research & Lab Analysis Research...
CVE-2023-25610
CVE-2023-25610 Heap memory underflow in the FortiOS management interface leads to remote code execution. Scope and Limitations 1. Fortinet 6.x 2. Based on TLSv1.3; may vary across other TLS versions Usage python3 cve-2022-42475.py rhost rport lhost 'command' python3 CVE-2023-25610.py 192.168.10.1...
dlink_shell_poc
dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...
Metasploit Wrap Up: Langflow, MongoDB, and More
This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass CVE-2026-93680, 3 unauthenticated remote code execution paths CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134, and...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2026-46652
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...
CVE-2026-106765
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...