Exploit for CVE-2026-109618

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

reditrap

RediTrap Honeypot RediTrap is a minimal Redis honeypot tailored to spot early attempts to exploit CVE-2025-49844 "RediShell", the critical Remote Code Execution vulnerability described by Wiz Research. The exploit abuses a 13 year old use-after-free bug in the embedded Lua engine: Redis would sto...

CVE-2025-40271

🔴 CVE-2025-40271: Critical Use-After-Free Vulnerability in the Linux Kernel 🛡️ Vulnerability Details CVE-2025-40271 is a critical Use-After-Free UAF vulnerability affecting the /proc filesystem of the Linux kernel. The flaw resides in the procreaddirde function, responsible for listing the content...

Exploit for CVE-2026-109618

php2shell-detection Detection signatures and interim mitigati...

CVE-2026-113263

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by enticing a user to view a specially crafted HTML page. The vulnerability stems from a use-after-free memory error in the Core component, which occurs when...

redis-CVE-2025-49844

CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...

privacy-filter

OpenAI Privacy Filter OpenAI Privacy Filter is a bidirectional token-classification model for personally identifiable information PII detection and masking in text. It is intended for high-throughput data sanitization workflows where teams need a model that they can run on-premises that is fast,...

Exploit for CVE-2026-109618

⚡ php2shell: Pre-Auth Remote Code Execution in PHP Core I...

CVE-2026-111804

The Apache Traffic Server experimental wasm plugin is vulnerable to a use-after-free flaw located in its transaction-close handler . Additionally, the plugin forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue impacts versions 10.0.0 through 10.1.4 and 10.2.0 . Af...

EUVD-2026-107490

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...

CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...

CVE-2026-78118 Race condition on kernel wait queues: unlocked z_waitq_head() read in the timer expiration handler can yield a stale or sentinel thread pointer on SMP

The kernel helper zwaitqhead kernel/include/waitq.h reads the head of a thread wait queue, but on SMP systems it was called from several places without holding the scheduler spinlock schedspinlock that serializes wait-queue mutation. The consequential call site is ztimerexpirationhandler in...

CVE-2026-78118

The Zephyr RTOS kernel contains a race condition in the z_waitq_head() helper function (kernel/include/wait_q.h). On SMP systems , this helper was called from several locations—notably z_timer_expiration_handler() in kernel/timer.c—without holding the _sched_spinlock, which is required to seriali...

CVE-2025-49844-Vulnerability-Scanner

CVE-2025-49844 RediShell Vulnerability Scanner A comprehensive vulnerability scanner for testing Redis instances against the critical CVE-2025-49844 RediShell vulnerability. About the Vulnerability CVE ID : CVE-2025-49844 Name : RediShell CVSS Score : 10.0 Critical Type : Use-After-Free UAF in Lu...

CVE-2026-113222

A flaw was found in Chromium's V8 engine. A remote attacker could exploit this use-after-free vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code outside the browser sandbox...

CVE-2026-113189

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by enticing a user to visit a specially crafted HTML page. The issue stems from a use-after-free memory management vulnerability in the Core component, which ca...

CVE-2026-64564

CVE-2026-64564 — SCTPhantom: Linux SCTP ASCONF DEL-IP UAF Local Privilege Escalation HackSpeak distribution repository. This repository is a distribution mirror of a community-public PoC; the code is identical to upstream. ⚠️ Upstream provides no LICENSE and no author information; this PoC is...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619: PHP Use-After-Free via zen...

redis-cve-2026-23479-check

redis-cve-2026-23479-check You do you. I do me. We share contexts. Your Redis stays yours; the checker reads one INFO line and changes nothing. A safe, read-only version checker for CVE-2026-23479 — the use-after-free in Redis's blocking-client code that lets an authenticated user reach remote co...

CVE-2025-49844

CVE-2025-49844 – Redis Lua Parser Use-After-Free Lua chunk-name GC race leading to Redis 8.2.1 use-after-free and remote code execution. Overview Redis embeds Lua 5.1 for scripting. In versions up to 8.2.1 the luaYparser function does NOT anchor the chunk name string on the Lua stack before...