PT-2026-125505

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability...

MiracleLinux 9 : dotnet9.0-9.0.122-1.el9_8.ML.1 (AXSA:2026-2151:20)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2151:20 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET...

KLA91373 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of...

F5 Networks BIG-IP : PHP vulnerabilities (K000163821)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.7 / 17.5.1.11 / 21.1.0.4 / Hotfix- BIGIP-17.1.3.6.0.9.20-ENG / Hotfix-BIGIP-17.5.1.10.0.37.35-ENG. It is, therefore, affected by multiple vulnerabilities as referenced in the K000163821 advisory. CVE-2026-109618also...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-30)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-30 advisory. - PHP uses longjmp for out-of-memory OOM...

Node2Shell CVEs

CVE-2026-105482 - high This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-105483 - high This vulnerability affects Node.js 26.x and 24.x. CVE-2026-106069 - high This vulnerability affects Node.js 26.x, 24.x, and 22.x. CVE-2026-111497 - high A flaw in Node.js can cause Node.js Brotl...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146098 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146096)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146096 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

ROS-20261026-73-0207

The vulnerability in rabbitmq-server relates to the lack of origin verification in websockets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted file...

ROS-20261026-73-0166

The vulnerability in openssh relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PHP Memory Corruption Vulnerability

PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution...

PHP Stale Internal Request-State Vulnerability

PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution...

CVE-2022-22947

CVE-2022-22947 CVE-2022-22947 Spring-Cloud-Gateway In the first quarter of 2022, an interesting and critical base score of 10.0 Spring Cloud Gateway Code Injection vulnerability was discovered leveraging the Actuator API to perform SpEL Injection, potentially leading to system compromise. Spring...

Exploit for Race Condition in Sonicwall Sma_6200_Firmware

CVE-2024-6387-how-to-fix Vulnerability remediation and mitiga...

Exploit for CVE-2026-111497

CVE-2026-111497 Node2Shell/HTTP2Shell - Validation Suite Th...

Exploit for OS Command Injection in Php

AI Threat Detection: PHP CGI Vulnerabilities A curated, deep-d...

paracosme

Paracosme - CVE-2022-33318 - Remote Code Execution in ICONICS Genesis64 Paracosme is a memory corruption exploit I wrote to target the Genesis64 suite v10.97.1 made by ICONICS to achieve remote code execution. The exploit was demonstrated during the Pwn2Own 2022 Miami contest that took place at t...

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability

Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026

Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...

.NET 10.0 Update - October 25, 2026

.NET 10.0 Update - October 25, 2026 .NET 10.0 has been refreshed with an out-of-band security update as of October 25, 2026. This update is separate from the regular monthly servicing release. See the release notes for details about updated packages. Important: This out-of-band security update...