176347 matches found
CVE-2026-114605 dnspython dns.name.from_wire_parser() excessive CPU use
dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...
EUVD-2026-108227
dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...
CVE-2026-114605
The dnspython DNS toolkit for Python is vulnerable to excessive CPU use in versions prior to 2.9.0 . The root cause is located in dns.name.from_wire_parser(), which follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can trigger exce...
EUVD-2026-90872
next.js cache leak across root param values in nested 'use cache' functions...
npm: next.js cache leak across root param values in nested 'use cache' functions
npm: next.js cache leak across root param values in nested 'use cache' functions vulnerability discovered by ? in WordPress npm next versions = 16.3.0, 16.3.8...
EUVD-2026-85608
Librsvg: Use-after-free when XML includes have duplicated entities...
Librsvg: Use-after-free when XML includes have duplicated entities
Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...
GHSA-CPVR-W4J5-2MPG Librsvg: Use-after-free when XML includes have duplicated entities
Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Testeur CVE-2026-109618 / CVE-2026-109619 php2shell Un scri...
php2shell-CVE-2026-109618-CVE-2026-109619-PoC
php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Advisory CVSS v4.0: 9.2 - Critical: On October 20, details of two pre-auth Remote Code Execution RCE flaws in the PHP core leaked online ahead of coordinated disclosure. Exploitation allows arbitrary command execution straight from the web...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Security issues fixed: CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash bsc1277001. CVE-2026-65335: webkitgtk: Processing maliciously crafted web content may lead to an unexpected...
httpd: httpd: Denial of Service via mod_rewrite lookahead
A use-after-free flaw was found in the modrewrite module of Apache HTTP Server when evaluating URL lookahead expressions that reference HTTP request headers, such as %LA-U:HTTP:.... A remote attacker may be able to trigger invalid memory access in a server using an affected rewrite configuration,...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
php2shell-exploit
php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...
Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2025-10911)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
RLSA-2026:87073 Important: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error...
php:8.2 security update
An update is available for php, module.php-pecl-xdebug3, php-pecl-rrd, module.php-pecl-zip, php-pecl-zip, module.php, module.php-pecl-rrd, php-pear, php-pecl-apcu, module.php-pecl-apcu, libzip, module.libzip, module.php-pear, php-pecl-xdebug3. This update affects Rocky Linux 8. A Common...