439 matches found
php2shell-eol-backport
php2shell-eol-backport Unofficial fix for CVE-2026-109618 and CVE-2026-109619 "php2shell" for the end-of-life PHP packages of Enterprise Linux 6 and 7 : php-5.3.3 RHEL / CentOS / Oracle Linux 6 and php-5.4.16 RHEL / CentOS / Oracle Linux / Scientific Linux 7. PHP fixed both vulnerabilities on 21...
CVE-2026-106137
In affected versions of Progress® Telerik® UI for ASP.NET MVC 2012.2.710 through 2026.3.811, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and...
EUVD-2026-123615
In affected versions of Progress® Telerik® UI for ASP.NET MVC 2012.2.710 through 2026.3.811, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and...
PT-2026-145287
In affected versions of Progress® Telerik® UI for ASP.NET MVC 2012.2.710 through 2026.3.811, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and...
CVE-2026-106137: Progress Software Telerik UI for ASP.NET MVC: In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a…
In affected versions of Progress® Telerik® UI for ASP.NET MVC 2012.2.710 through 2026.3.811, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
OESA-2026-4636 httpd security update
Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced...
OESA-2026-4635 httpd security update
Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: Missing authentication checks in modauthdigest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service forced...
CVE-2026-98951
A flaw was found in the Linux kernel's RISC-V architecture. When handling process tracing ptrace register set requests with shorter-than-expected data lengths, the kernel fails to initialize temporary stack buffers before copying user input. A local attacker with process tracing privileges can...
php: Fix of 6 CVEs
CVE-2026-109618: avoid heap state corruption via bailout on out-of-memory - CVE-2026-109619: reset per-request globals that could be reused after a bailout during request startup...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
PHP 7.3.33 State Corruption Mitigation Patch
PHP version 7.3.33 is affected by out-of-memory bailout handling and stale request global state issues. This patch backports the PHP 7.4 end-of-life mitigation for the affected request lifecycle and multipart parsing paths...
PHP 7.0.33 PHP2Shell Patch
PHP version 7.0.33 for CentOS 7 contains remote code execution issues involving out-of-memory state corruption and stale global state. This provides patches and a script to build a remedial Remi source RPM...
PHP 5.6.40 State Corruption Mitigation
PHP version 5.6.40 is affected by state corruption following an out-of-memory bailout and stale global-state reuse across requests. This package supplies a Debian 7 wheezy backport of the mitigation...
php2shell-research
php2shell: CVE-2026-109618 / CVE-2026-109619 Independent veri...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP 7.3.33 source patch for CVE-2026-109618 and CVE-2026-10961...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP 7.2.34 source patch for CVE-2026-109618 and CVE-2026-10961...