CVE-2026-109619

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Pre-authenticat...

CLSA-2026-1792137027 kernel-uek: Fix of 161 CVEs

net: usb: pegasus: don't rely on id table pointer arithmetic CVE-2026-97540 - ocfs2: validate directory-index entry counts when reading metadata CVE-2026-89492 - ocfs2: validate dxroot extent list fields during block read CVE-2026-89492 - nvme-tcp: reject a read that transferred too few bytes...

Exploit for CVE-2026-109618

PoC CVE-2026-109619 !CIhttps://github.com/jackalsyn-sec/p...

CVE-2026-84727

Use-after-free in the RTMP protocol implementation in Apache bRPC version RtmpChunkStream::SerializeMessage runs concurrently on sender threads and dereferences the same RtmpChunkStream object without synchronization. If a remote peer sends an Abort message naming a chunk stream that is...

Exploit for CVE-2026-109618

CVE-2026-109618 / CVE-2026-109619 - PHP2Shell !PHPhttps://...

Exploit for CVE-2026-109618

PHP2Shell — CVE-2026-109618 / CVE-2026-109619 Independent ana...

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...

Exploit for CVE-2026-109618

php2shell-poc PHP Serializable varhash use-after-free → RC...

CLSA-2026-1789373515 Fix of 124 CVEs

CVE-2025-68214 - timers: Fix NULL function pointer race in timershutdownsync CVE-2025-68214 CVE-2024-58093 - PCI/ASPM: Fix link state exit during switch upstream function removal CVE-2024-58093 CVE-2026-72463 - xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 CVE-2026-64600 -...

CLSA-2026-1783354994 kernel: Fix of 17 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - btrfs: fix use-after-free after failure to create a snapshot CVE-2022-48733 - Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold CVE-2026-31408 - xfs: delete attr leaf freemap entries...

SUSE-SU-2026:4835-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. - CVE-2026-93517: GLX...

Security update for xwayland

This update for xwayland fixes the following issues: CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. CVE-2026-93517: GLX...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: CVE-2026-109704: Privilege escalation in the Application Update component. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...

SUSE-SU-2026:4834-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary...

CLSA-2026-1783337794 kernel: Fix of 17 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - btrfs: fix use-after-free after failure to create a snapshot CVE-2022-48733 - Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold CVE-2026-31408 - xfs: delete attr leaf freemap entries...

Exploit for CVE-2026-109618

PHP session.uploadprogress — cross-request use-after-free...

CLSA-2026-1783337441 kernel: Fix of 17 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - btrfs: fix use-after-free after failure to create a snapshot CVE-2022-48733 - Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold CVE-2026-31408 - xfs: delete attr leaf freemap entries...

Exploit for CVE-2026-109618

php2shell-check !statushttps://img.shields.io/badge/status...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...