186054 matches found
OESA-2026-4451 firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Sandbox escape in the Security: Process Sandboxing component of Mozilla Firefox. An attacker could exploit this vulnerability to break out of the browser's process sandbo...
OESA-2026-4415 libarchive security update
is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
httpd: httpd: Denial of Service via mod_rewrite lookahead
A use-after-free flaw was found in the modrewrite module of Apache HTTP Server when evaluating URL lookahead expressions that reference HTTP request headers, such as %LA-U:HTTP:.... A remote attacker may be able to trigger invalid memory access in a server using an affected rewrite configuration,...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
php2shell-exploit
php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...
Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2025-10911)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
RLSA-2026:87073 Important: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error...
php:8.2 security update
An update is available for php-pecl-rrd, module.php-pear, php, php-pear, libzip, module.php-pecl-zip, php-pecl-zip, module.php-pecl-xdebug3, php-pecl-apcu, module.php-pecl-rrd, php-pecl-xdebug3, module.php, module.libzip, module.php-pecl-apcu. This update affects Rocky Linux 8. A Common...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
💀 ZeroHack php2shell Lab & PoC Framework CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 — PHP Session Upload Progres...
kernel: ALSA: seq: close a re-opened queue timer in the destructor
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 PoC - PHP uploadprogress UAF → RCE Pre-aut...
php-cve-2026-fix
php-cve-2026-fix A single Bash script that finds every PHP...
CVE-2026-98704
A flaw was found in the Linux kernel's mac80211 wireless subsystem. When associating with a wireless network profile that omits certain configuration parameters, the system prematurely frees internal data structures and subsequently reads the freed memory during connection setup. A malicious acce...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellscanner Non-destructive exposure assessment for C...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-waf Virtual patch / WAF rules สำหรับช่องโหว่ PHP2...