HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a buffer overflow flaw in the affected interface. By sending specially crafted packets to this interface, attackers can achieve unauthenticated remote code execution. Exploiting this vulnerability allows arbitrary code execution with...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a remote code execution flaw in the underlying operating system. Unauthenticated neighboring attackers can execute arbitrary code on affected devices. Successful exploitation allows attackers to run arbitrary commands with privileged...

PT-2026-134888

Two critical PHP vulnerabilities that can allow unauthenticated remote code execution have been fixed. The updated packages should be installed as soon as possible...

HPE ArubaOS security vulnerabilities

HPE ArubaOS 8 contains a security vulnerability stemming from improper handling of specially crafted packets directed to UDP port 8211 on the PAPI Aruba Access Point Management Protocol. This may lead to unauthorized remote code execution; attackers can then execute arbitrary code as a privileged...

Important: php8.2

Issue Overview: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup...

Important: php8.5

Issue Overview: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup...

Important: php

Issue Overview: A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from command injection in the PAPI protocol; sending specially crafted packets to affected UDP ports can lead to unauthenticated remote code execution. This may allow attackers to execute arbitrary code as a privileged user on the underlyin...

HPE ArubaOS security vulnerabilities

A security vulnerability exists in HPE ArubaOS. It stems from a command injection flaw in the PAPI protocol. An attacker adjacent to the target can send specially crafted packets to achieve unauthenticated remote code execution. Successful exploitation of this vulnerability allows arbitrary code...

PHP 8.5.11 Remote Code Execution

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain OOM-corruption and stale-global-state flaws that can lead to remote code execution. This proof of concept supplies local-lab reproduction, OOM probes, and version detection. https://packetstorm.news/download/237027...

PHP 8.4.26 session.upload_progress Remote Code Execution

PHP version 8.4.26 with Apache modphp contains a session.uploadprogress stale-pointer condition that can be exploited remotely without authentication to leak memory and execute commands. This proof of concept targets a pinned Docker image. https://packetstorm.news/download/236989...

PHP 8.0.30-6 Out-Of-Memory Remote Code Execution

PHP version 8.0.30-6 on EL7 Remi builds is vulnerable to out-of-memory state corruption that can lead to remote code execution. This submission provides a backported mitigation and a Docker proof of concept demonstrating affected session upload progress, local file inclusion, and OOM behavior...

Microsoft Windows Server 2022 10.0.20348.1 Remote Desktop Protocol Remote Code Execution

Microsoft Windows Server 2022 version 10.0.20348.1 contains an uninitialized resource vulnerability in Remote Desktop Protocol that allows an unauthenticated attacker to execute code over a network...

PHP 8.5.11 Remote Code Execution Check

PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain two unauthenticated remote code execution vulnerabilities. The supplied shell script checks installed PHP versions, relevant configuration, and whether workers require restarting...

PHP 8.5.11 Security Fix Tool

The php-cve-2026-fix tool audits PHP servers for two remote code execution vulnerabilities and can update affected Debian and Ubuntu packages, apply configuration hardening, and verify services...

PHP 8.5.11 / 8.4.26 / 8.3.35 / 8.2.34 Remote Code Execution

PHP versions before 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain out-of-memory corruption and stale request-owned global state flaws that can allow unauthenticated remote code execution. This submission provides vulnerability information and cPanel EasyApache 4 partial mitigation guidance...

PHP 5.3.29 / 5.4.16 / 7.3.33 Remote Code Execution

PHP versions 5.3.29, 5.4.16, and 7.3.33 backport minimal mitigations for remote code execution issues caused by out-of-memory corruption and stale global state...

PHP 8.1 FPM Memory Corruption Fixes

PHP versions 5.0 through 8.1 contain memory-state corruption flaws that can lead to remote code execution. This release provides backported patches, Dockerfiles, and validation tools for PHP-FPM and related images...

PHP 8.5.11 Remote Code Execution Vulnerabilities

PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain two unauthenticated remote code execution vulnerabilities involving out-of-memory handling and stale global state. The supplied advisory summarizes affected deployments, mitigations, patch versions, and references...

CVE-2026-51954

The Webasyst Framework (version 4.0.3 and before ) contains an OAuth 2.0 implementation flaw where the redirect_uri parameter is not properly validated. A remote, unauthenticated attacker can exploit this by providing a crafted OAuth authorization URL to intercept authorization credentials. Succe...