Exploit for Improperly Controlled Sequential Memory Allocation in Php

Testeur CVE-2026-109618 / CVE-2026-109619 php2shell Un scri...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — Refactored POC for CVE-2026-109618 / CVE-2026-1096...

OESA-2026-4422 kafka security update

Apache Kafka is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications. Security Fixes: JMSSink in all versions of Log4j 1.x is vulnerable to deserialization o...

OESA-2026-4423 kafka security update

Apache Kafka is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications. Security Fixes: JMSSink in all versions of Log4j 1.x is vulnerable to deserialization o...

OESA-2026-4421 kafka security update

Apache Kafka is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications. Security Fixes: JMSSink in all versions of Log4j 1.x is vulnerable to deserialization o...

OESA-2026-4420 kafka security update

Apache Kafka is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications. Security Fixes: JMSSink in all versions of Log4j 1.x is vulnerable to deserialization o...

OESA-2026-4414 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2026-4413 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2026-4412 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2026-4411 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

CVE-2026-94502

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

CVE-2026-85079

In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...

Azure Pipelines Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Pipelines allows an unauthorized attacker to execute code over a network...

Microsoft Exchange Online Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...

CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling

In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...

CVE-2026-85079

EmberZNet version 9.1.1 and earlier are vulnerable to an out-of-bounds write caused by processing malformed Simple_Desc_req responses from network devices. This vulnerability could potentially lead to remote code execution . The attack requires the response to originate from a device that has alr...

EUVD-2026-108185

In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...

CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling

In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...

EUVD-2026-108184

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...