333903 matches found
Amazon Linux 2 : ghostscript (ALAS-2026-4034)
The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4034 advisory. A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the...
Exploit for CVE-2026-102256
sonicwall-sma1000-cve-2026-102256-check Sta...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Labs Is your server exposed to PHP2Shell? PHP2Shel...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-fix !checkshttps://github.com/sanketkokate712/p...
PHP2SHELL-POC
PHP2Shell — Vulnerability Research & Lab Analysis Research...
CVE-2026-115812
Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive. Multi Model Server is end of life and no fixed version is available. Users should discontinue use o...
Exploit for CVE-2026-106173
CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal File W...
Metasploit Wrap Up: Langflow, MongoDB, and More
This release adds multiple new modules, and 6 of those modules point at a single target: Langflow, the open-source LLM workflow builder. Together they cover an authentication bypass CVE-2026-93680, 3 unauthenticated remote code execution paths CVE-2026-0768, CVE-2026-0769, and CVE-2026-10134, and...
GHSA-FQ6X-J3G6-XX83 @rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...
GHSA-2VQ3-MPMF-9XGR @justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2026-46652
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...
CVE-2026-106765
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...