176743 matches found
OESA-2026-4471 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4469 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4470 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
OESA-2026-4468 xorg-x11-server security update
X.Org X11 X server Security Fixes: A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can...
httpd: httpd: Denial of Service via mod_rewrite lookahead
A use-after-free flaw was found in the modrewrite module of Apache HTTP Server when evaluating URL lookahead expressions that reference HTTP request headers, such as %LA-U:HTTP:.... A remote attacker may be able to trigger invalid memory access in a server using an affected rewrite configuration,...
httpd: httpd: Authentication state corruption via concurrent Digest authentication requests
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
php2shell-exploit
php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...
Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2025-10911)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-10911 DESCRIPTION: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash...
php:8.2 security update
An update is available for module.php, module.php-pecl-xdebug3, php-pecl-rrd, php, module.php-pear, php-pecl-zip, php-pecl-apcu, module.php-pecl-apcu, libzip, php-pear, module.php-pecl-rrd, php-pecl-xdebug3, module.php-pecl-zip, module.libzip. This update affects Rocky Linux 8. A Common...
RLSA-2026:87073 Important: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via unbounded recursion in SOAP parser CVE-2026-91765 php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
💀 ZeroHack php2shell Lab & PoC Framework CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 / CVE-2026-109619 — PHP Session Upload Progres...
kernel: ALSA: seq: close a re-opened queue timer in the destructor
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 PoC - PHP uploadprogress UAF → RCE Pre-aut...
php-cve-2026-fix
php-cve-2026-fix A single Bash script that finds every PHP...
CVE-2026-98704
A flaw was found in the Linux kernel's mac80211 wireless subsystem. When associating with a wireless network profile that omits certain configuration parameters, the system prematurely frees internal data structures and subsequently reads the freed memory during connection setup. A malicious acce...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellscanner Non-destructive exposure assessment for C...