PoC mới public
Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 44 phút trước.
-
CVE-2026-109618 Nghiêm trọng 9.2 4 giờ trước
Unofficial PHP 5.3.29 backport of the php2shell fix (CVE-2026-109618, CVE-2026-109619) for Apache mod_php
-
CVE-2026-109618 Nghiêm trọng 9.2 4 giờ trước
Check after php
-
CVE-2026-110264 Nghiêm trọng 10.0 4 giờ trước
Benign PoC carrier for CVE-2026-110264
-
CVE-2026-109618 Nghiêm trọng 9.2 5 giờ trước
PoC demonstrations for PHP vulnerabilities CVE-2026-109618 & CVE-2026-109619
-
CVE-2026-12118 Nghiêm trọng 9.8 5 giờ trước
POC for CVE-2026-12118
-
CVE-2026-109618 Nghiêm trọng 9.2 5 giờ trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-109618 Nghiêm trọng 9.2 6 giờ trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2025-64702 Trung bình 5.3 6 giờ trước
CVE-2025-64702, CVE-2026-12523, CVE-2025-13945
-
CVE-2026-104711 Nghiêm trọng 9.8 6 giờ trước
POC for the CVE-2026-104711 NEW-VARIANT
-
CVE-2026-97206 Cao 7.5 6 giờ trước
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the DoQ stream. Cleanup frees the DoQ stream and when the pending mesh reply later completes it dereferences a stale pointer leading to a crash.
-
CVE-2026-109619 Nghiêm trọng 9.2 6 giờ trước
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
-
CVE-2026-104935 Cao 8.6 6 giờ trước
CVE-2026-104935 — Ivanti Connect Secure / Pulse Secure RCE Exploit
-
CVE-2026-109618 Nghiêm trọng 9.2 6 giờ trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-114509 Nghiêm trọng 9.2 7 giờ trước
CVE-2026-114509-POC [Educational Purpose Only]
-
CVE-2026-109618 Nghiêm trọng 9.2 7 giờ trước
PHP CVE-2026-109618 / CVE-2026-109619 簡易確認スクリプト