Important: Red Hat Security Advisory: php8.4 security update

An update for php8.4 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Exploit for CVE-2026-109618

php2shell - CVE-2026-109618 / CVE-2026-109619 Independe...

Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619: php2shell One-shot RCE pro...

CVE-2025-49844-RediShell-Vulnerability-Scanner

CVE-2025-49844 RediShell Vulnerability Scanner Description A tool for checking the CVE-2025-49844 RediShell vulnerability in Redis. The utility performs safe checks without actually exploiting the vulnerability. Vulnerability CVE-2025-49844 - A Use-After-Free vulnerability in the Redis Lua...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619 — PHP jsonencode Use-After-Free via HashT...

CVE-2026-112999

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution inside the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This issue stems from a use-after-free vulnerability in an application programming interface API, where...

CVE-2025-49844

CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...

Exploit for CVE-2026-109619

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

Exploit for CVE-2026-109618

php2shell-scanner — Mass validator for CVE-2026-109618 / CVE-2...

reditrap

RediTrap Honeypot RediTrap is a minimal Redis honeypot tailored to spot early attempts to exploit CVE-2025-49844 "RediShell", the critical Remote Code Execution vulnerability described by Wiz Research. The exploit abuses a 13 year old use-after-free bug in the embedded Lua engine: Redis would sto...

CVE-2026-78118

The kernel helper zwaitqhead kernel/include/waitq.h reads the head of a thread wait queue, but on SMP systems it was called from several places without holding the scheduler spinlock schedspinlock that serializes wait-queue mutation. The consequential call site is ztimerexpirationhandler in...

CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...

CVE-2025-40271

🔴 CVE-2025-40271: Critical Use-After-Free Vulnerability in the Linux Kernel 🛡️ Vulnerability Details CVE-2025-40271 is a critical Use-After-Free UAF vulnerability affecting the /proc filesystem of the Linux kernel. The flaw resides in the procreaddirde function, responsible for listing the content...

Exploit for CVE-2026-109618

php2shell-detection Detection signatures and interim mitigati...

CVE-2026-113263

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by enticing a user to view a specially crafted HTML page. The vulnerability stems from a use-after-free memory error in the Core component, which occurs when...

Exploit for CVE-2026-109618

⚡ php2shell: Pre-Auth Remote Code Execution in PHP Core I...

CVE-2026-111804

The Apache Traffic Server experimental wasm plugin is vulnerable to a use-after-free flaw located in its transaction-close handler . Additionally, the plugin forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue impacts versions 10.0.0 through 10.1.4 and 10.2.0 . Af...

CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...