Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Production URL Auditor !Python Versionhttps://i...

CVE-2025-50881

CVE-2025-50881: Remote Code Execution in API Use it Flow via moniteur.php Identifier: CVE-2025-50881 Affected Product: API Use it Flow Version 8.2.0 Rev 15851, Version 9.2.0 Rev 18093 Editor: https://www.tenorsolutions.com formerly https://api-sas.fr/ Affected Components: flow/admin/moniteur.php...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check !CVE-2026-109618https://img.shields.io/ba...

ndpi:fuzz_ndpi_reader_nalloc: Use-of-uninitialized-value in processHandshakeTLSBlock

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5685346470526976 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzndpireadernalloc Job Type: libfuzzermsanndpi Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

EVlink City < R8 V3.4.0.1 - Authentication Bypass

A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker t...

cve-2024-1086-lpe

cve-2024-1086-lpe Technical analysis and proof-of-concept for CVE-2024-1086, a Linux kernel nftables use-after-free vulnerability leading to local privilege escalation. Includes vulnerability breakdown, affected versions, exploitation methodology, and mitigation guidance for research and...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP 5.6 Security Advisory: CVE-2026-109619 & CVE-2026-109618 B...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_hash_destroy

Detailed Report: https://oss-fuzz.com/testcase?key=4850237358014464 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf46283d8 Crash State: zendhashdestroy...

CVE-2026-98677

A flaw was found in the Linux kernel's Analog-to-Digital Converter ADC Sigma-Delta driver. Due to an improper resource cleanup sequence when a device is unbound or disconnected, the internal sample buffer is freed before interrupt handling is disabled. A local attacker with administrative...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP RCE Patch-Status Tools — CVE-2026-109618 / CVE-2026-109619...

php2shell-patches

PHP CVE-2026-109618 / CVE-2026-109619 Patch Helper A remediat...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

anti-php2shell !Python Versionhttps://img.shields.io/badg...

CVE-2026-98666

A flaw was found in the Linux kernel's Industrial I/O IIO adis16136 gyroscope driver. The driver fails to properly synchronize debugfs read operations during device unbinding, allowing an active read to continue after the underlying device data structures have been freed. A local user with access...

CVE-2026-98664

A flaw was found in the Linux kernel's ADIS16400 driver. A local user with access to the debug file system debugfs could cause a Denial of Service DoS or kernel memory corruption due to a use-after-free condition. This issue occurs because the driver creates its serial number debugfs file without...

CVE-2026-98663

A flaw was found in the Linux kernel's ADIS16480 Industrial I/O IIO driver. The driver fails to protect debug file system debugfs read operations against concurrent device removal. A local attacker with access to debugfs can exploit this race condition by reading firmware attributes while unbindi...

php-8.1.0-dev-exploit

php-8.1-dev-Exploit ⚠️ Important read first This repository contains a Java proof-of-concept PoC intended for CTF / lab use only. Do not run this code against systems you do not own or do not have explicit written permission to test. Unauthorized exploitation is illegal. Use only in isolated...

RLSA-2026:86331 Important: glycin-loaders security update

Sandboxed and extendable image decoding. Security Fixes: librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...

glycin-loaders security update

An update is available for glycin-loaders. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Sandboxed and extendable image decoding. Security Fixes: librsvg:...

librsvg2 security update

An update is available for librsvg2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The librsvg2 packages provide a Scalable Vector Graphics SVG library based ...

RLSA-2026:86841 Important: librsvg2 security update

The librsvg2 packages provide a Scalable Vector Graphics SVG library based on the libart library. Security Fixes: librsvg: Use-after-free when XML includes have duplicated entities CVE-2026-96889,RUSTSEC-2026-0305 For more details about the security issues, including the impact, a CVSS score,...