Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619: php2shell One-shot RCE pro...

CVE-2025-49844-RediShell-Vulnerability-Scanner

CVE-2025-49844 RediShell Vulnerability Scanner Description A tool for checking the CVE-2025-49844 RediShell vulnerability in Redis. The utility performs safe checks without actually exploiting the vulnerability. Vulnerability CVE-2025-49844 - A Use-After-Free vulnerability in the Redis Lua...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619 — PHP jsonencode Use-After-Free via HashT...

CVE-2026-112999

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution inside the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This issue stems from a use-after-free vulnerability in an application programming interface API, where...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

CVE-2025-49844

CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...

ghostlock-oneplus

GhostLock — Locked Bootloader Jailbreak Kernel exploit for Android devices with locked bootloader. Achieves temporary root + KernelSU installation without unlocking bootloader or modifying boot image. Runtime auto-detection of kernel version with multi-device offset table. Vulnerability...

Exploit for CVE-2026-109619

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

Exploit for CVE-2026-109618

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

reditrap

RediTrap Honeypot RediTrap is a minimal Redis honeypot tailored to spot early attempts to exploit CVE-2025-49844 "RediShell", the critical Remote Code Execution vulnerability described by Wiz Research. The exploit abuses a 13 year old use-after-free bug in the embedded Lua engine: Redis would sto...

CVE-2025-40271

🔴 CVE-2025-40271: Critical Use-After-Free Vulnerability in the Linux Kernel 🛡️ Vulnerability Details CVE-2025-40271 is a critical Use-After-Free UAF vulnerability affecting the /proc filesystem of the Linux kernel. The flaw resides in the procreaddirde function, responsible for listing the content...

Exploit for CVE-2026-109618

php2shell-detection Detection signatures and interim mitigati...

CVE-2026-113263

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by enticing a user to view a specially crafted HTML page. The vulnerability stems from a use-after-free memory error in the Core component, which occurs when...

redis-CVE-2025-49844

CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...

privacy-filter

OpenAI Privacy Filter OpenAI Privacy Filter is a bidirectional token-classification model for personally identifiable information PII detection and masking in text. It is intended for high-throughput data sanitization workflows where teams need a model that they can run on-premises that is fast,...

Exploit for CVE-2026-109618

⚡ php2shell: Pre-Auth Remote Code Execution in PHP Core I...

CVE-2026-111804

The Apache Traffic Server experimental wasm plugin is vulnerable to a use-after-free flaw located in its transaction-close handler . Additionally, the plugin forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue impacts versions 10.0.0 through 10.1.4 and 10.2.0 . Af...

EUVD-2026-107490

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...

CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...

CVE-2026-78118

The Zephyr RTOS kernel contains a race condition in the z_waitq_head() helper function (kernel/include/wait_q.h). On SMP systems , this helper was called from several locations—notably z_timer_expiration_handler() in kernel/timer.c—without holding the _sched_spinlock, which is required to seriali...