Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — tek komutluk sarmalayıcı CVE-2026-109618 / CVE-20...

CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

CVE-2026-113673

The GeoDirectory WordPress plugin versions prior to 2.8.194 is vulnerable to Remote Code Execution (RCE) . The root cause is a failure to properly escape administrator-defined text before it is written into a generated PHP file within the plugin's own folder. This flaw allows high-privilege users...

EUVD-2026-109216

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

CVE-2026-113673 GeoDirectory < 2.8.194 - Admin+ RCE via DB Text Export

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

🛡️ PHP2Shell Sentinel PHP Runtime Vulnerability Assessment...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-stale-global-uaf Someone on the internet can talk to your...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-oom-longjmp Someone on the internet can talk to your PHP...

Exploit for CVE-2026-102785

█████╗ ███╗ ██╗ ████████╗ ██╗ ██████╗ ██████╗ ██████...

PHP OOM / longjmp() State Corruption Simulation

PHP contains an out-of-memory handling issue where longjmp may leave request memory partially initialized before cleanup reads or branches on it, potentially resulting in remote code execution. This educational visualization demonstrates the conceptual execution flow...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Apache Karaf Cellar version 4.4.8 contains an unauthenticated cluster-join vulnerability that allows a network-adjacent attacker to publish a bundle event and execute code on cluster nodes. !/usr/bin/env bash Apache Karaf Cellar 4.4.8 Remote Code Execution Vendor: The Apache Software Foundation...

PHP 8.4.27 Session Upload Progress Serialization Mismatch Remote Code Execution

PHP version 8.4.27 contains a session upload progress serialization-handler mismatch that can lead to unauthenticated object injection and remote code execution when an application changes the session handler at runtime. Included is a proof of concept and Docker lab...

PT-2026-122507

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

Marimo 0.20.4 Pre-Auth Remote Code Execution

Marimo version 0.20.4 and earlier contains an authentication bypass in the terminal WebSocket endpoint that allows unauthenticated remote command execution. This proof of concept connects to the endpoint and sends a command. https://packetstorm.news/download/237403...

Important: bind

Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 Replaying GSS-TSIG signed UDP messages can resul...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143723 advisory. PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after bei...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143724)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143724 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...

Owen Peredo Diaz CAMALEON CMS path traversal vulnerability

Owen Peredo Diaz: A path traversal vulnerability exists in CAMALEON CMS versions prior to 2.9.3. This vulnerability stems from improper handling of ../ sequences in the name parameter. Only users with media permissions can send a base64 data: URI to the cropurl media operation, thereby writing an...

Important: bind

Issue Overview: Inbound-message resource exhaustion CWE-400 leading to denial of service. No configuration precondition; version applicability is the deciding factor. Affected versions: 9.11.0-9.18.50, 9.20.0-9.20.29, 9.21.0-9.21.26. CVE-2026-19630 A BIND recursive resolver may experience excessi...

PHP 8.4.26 Stale Session Global State Remote Code Execution

PHP version 8.4.26 contains a stale session global-state use-after-free vulnerability that can lead to remote code execution. This proof of concept demonstrates the issue through session upload progress handling. https://packetstorm.news/download/237408...