PoC mới public
Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 3 giờ trước.
-
CVE-2026-109618 Nghiêm trọng 9.2 19 giờ trước
PHP 7.4 for Windows with CVE-2026-109618 / CVE-2026-109619-Backport
-
CVE-2026-97859 Trung bình 6.5 19 giờ trước
Cybersecurity assignment on CVE-2026-97859, severity analysis, patching, and the Cyber Kill Chain.
-
CVE-2026-109618 Nghiêm trọng 9.2 20 giờ trước
Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell
-
CVE-2026-97859 Trung bình 6.5 20 giờ trước
Cybersecurity assignment on CVE-2026-97859, severity analysis, patching, and the Cyber Kill Chain.
-
CVE-2026-97859 Trung bình 6.5 20 giờ trước
Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the `individualPermsChecker` middleware that enforces the visibility of the target user. An authenticated user could therefore read the followers, following list, starred and watched repositories and public SSH and GPG keys of a user with limited or private visibility, whom they could not otherwise see. The issue was fixed in 1.27.3 and 28.0.0 and disclosed with 28.2.0.
-
CVE-2026-2031226 Chưa chấm 20 giờ trước
-
CVE-2026-109619 Nghiêm trọng 9.2 20 giờ trước
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
-
CVE-2026-109618 Nghiêm trọng 9.2 20 giờ trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-97859 Trung bình 6.5 20 giờ trước
Cybersecurity assignment on CVE-2026-97859, severity analysis, patching, and the Cyber Kill Chain.
-
CVE-2025-48561 Trung bình 5.5 20 giờ trước
CYB-401 vulnerability report: Pixnapping (CVE-2025-48561), NVD assessment, CVSS rating, patch analysis and mitigations.
-
CVE-2026-109619 Nghiêm trọng 9.2 20 giờ trước
php2shellscanner
-
CVE-2026-109619 Nghiêm trọng 9.2 20 giờ trước
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).
-
CVE-2026-109618 Nghiêm trọng 9.2 20 giờ trước
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
-
CVE-2026-109618 Nghiêm trọng 9.2 20 giờ trước
php2shellscanner
-
CVE-2026-109618 Nghiêm trọng 9.2 20 giờ trước
PHP 8.0.30 backport for CVE-2026-109618 / CVE-2026-109619 (Remi php80, EL7 RPMs)