PHP 8.5.11 Remote Code Execution Check

PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain two unauthenticated remote code execution vulnerabilities. The supplied shell script checks installed PHP versions, relevant configuration, and whether workers require restarting...

PT-2026-121596

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A command injection issue exists in the PAPI protocol, which is used for access point management. An unauthenticated attacker can achieve remote code execution by sending specially crafted...

PT-2026-121637

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw in the web-based management interface of wireless network management systems allows an authenticated remote attacker to execute remote code. This could le...

CVE-2026-51954

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirecturi...

EUVD-2026-108222

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirecturi...

Microsoft Windows Server 2022 10.0.20348.1 Remote Desktop Protocol Remote Code Execution

Microsoft Windows Server 2022 version 10.0.20348.1 contains an uninitialized resource vulnerability in Remote Desktop Protocol that allows an unauthenticated attacker to execute code over a network...

Apache Log4j 2.14.1 JNDI Remote Code Execution

Apache Log4j versions 2.0-beta9 through 2.14.1 contain a JNDI lookup vulnerability that may allow remote code execution when attacker-controlled input is logged...

PT-2026-121395

In EmberZNet 9.1.1 and earlier, a malformed Simple Desc req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple Desc req before the attack can...

PHP 8.5.11 Remote Code Execution Checker

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain remote code execution vulnerabilities. This tool identifies vulnerable PHP installations on hosts and running Docker containers...

PHP 5.3.29 / 5.4.16 / 7.3.33 Remote Code Execution

PHP versions 5.3.29, 5.4.16, and 7.3.33 backport minimal mitigations for remote code execution issues caused by out-of-memory corruption and stale global state...

PT-2026-121640

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A buffer overflow in the PAPI protocol allows an authenticated remote attacker with high privileges to execute arbitrary code as a privileged user on the underlying operating system. A buffer...

PT-2026-121629

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description Command injection flaws exist that allow unauthenticated remote code execution. An attacker can achieve this by sending specially crafted PAPI packets, enabling the execution of arbitrary code ...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_86169)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686169 advisory. dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability CVE-2026-58280 dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_86193)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686193 advisory. dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability CVE-2026-102870 dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service...

PHP 8.5.11 Remote Code Execution Vulnerabilities

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain two unauthenticated remote code execution vulnerabilities involving out-of-memory handling and stale global state. The supplied advisory summarizes affected deployments, mitigations, patch versions, and references...

PHP 8.1.34 End of Life Security Fixes

PHP versions 7.0 through 8.1 Docker image build definitions apply backported fixes for two remote code execution vulnerabilities, including unofficial patches for versions 7.0 through 7.3...

Apache Struts 2.5.10 Remote Code Execution

Apache Struts versions 2.3.0 through 2.3.31 and 2.5.0 through 2.5.10 contain a remote code execution vulnerability in Jakarta Multipart parser error handling. This report provides defensive analysis, incident-response guidance, and remediation recommendations...

PHP 8.5.11 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain remote code execution vulnerabilities caused by out-of-memory corruption and stale global state...

Microsoft Azure Pipelines command injection vulnerability

Microsoft Azure Pipelines has a command injection vulnerability. This vulnerability stems from improper neutralization of special elements within commands, potentially allowing unauthenticated attackers to execute code over the network...

PHP 8.5.11 / 8.4.26 / 8.3.35 / 8.2.34 Remote Code Execution

PHP versions before 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain out-of-memory corruption and stale request-owned global state flaws that can allow unauthenticated remote code execution. This submission provides vulnerability information and cPanel EasyApache 4 partial mitigation guidance...