Publicly Disclosed
PoC Exploits

🔴 Alway take caution when working with PoC Exploits 🔴

Discovered 1 hour ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 2 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 3 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-111943

Go Standard LibraryCrypto/x509
Certificate Trust Issue in Go Affecting Security

Certain implementations of Go rely on system root certificates, but in some scenarios, updates to the system trust stores may not occur automatically. This oversight can expose the application to security risks, as known intermediate certificates that are deemed untrustworthy may still be used. T...

Discovered 4 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-94000

Red HatRed Hat Build Of Keycloak6.6MEDIUM
Privilege Escalation Vulnerability in Keycloak Admin REST API

A security flaw in the Admin REST API of Keycloak allows a delegated administrator with limited permissions to gain unauthorized access to high-privilege groups. This occurs because the system does not properly verify if a group grants administrative rights before enabling a user to be added. Thi...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 5 hours ago

PoC for CVE-2026-115506

LibexpatLibexpat8.7HIGH
Denial of Service Vulnerability in libexpat by Expat Software

libexpat versions through 2.9.0 present a denial of service vulnerability due to insufficient handling of entity expansion in XML documents. The 'billion laughs' attack exploits this flaw by using moderately sized XML files that contain a large Document Type Definition (DTD) with nested entities....

PoC for CVE-2026-115505

SahlbergLibsmb27.2HIGH
Integer Overflow Vulnerability in libsmb2 Affects Samba Client

The libsmb2 library prior to version 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder, specifically in the lib/dcerpc.c file. Exploiting these vulnerabilities, an attacker can craft malicious NetrShareEnum replies through an unauthorized SMB server or machine-in-the-middle...

PoC for CVE-2026-115504

HeasarcCfitsio8.5HIGH
Out-of-Bounds Write Vulnerability in CFITSIO by HEASARC

CFITSIO, up to version 4.7.0, possesses a vulnerability in the ffgcls2() function found in getcols.c. The vulnerability occurs due to incorrect handling of attacker-supplied heap descriptor lengths for variable-length string columns, leading to an out-of-bounds write condition. By crafting a mali...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 6 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-111497

GoogleBrotli9.2CRITICAL
Buffer Overflow Vulnerability in Google Brotli Decoder

A buffer overflow issue in the Brotli decoder (c/dec/decode.c) affects Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows remote unauthenticated attackers to manipulate adjacent decoder state memory. Consequences include the possibility of disclosing sensitive memory co...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-111943

Go Standard LibraryCrypto/x509
Certificate Trust Issue in Go Affecting Security

Certain implementations of Go rely on system root certificates, but in some scenarios, updates to the system trust stores may not occur automatically. This oversight can expose the application to security risks, as known intermediate certificates that are deemed untrustworthy may still be used. T...

Discovered 7 hours ago

PoC for CVE-2026-12118

IBMWebmethods Integration...9.8CRITICAL
Remote Code Execution Vulnerability in IBM webMethods Integration P...

A vulnerability in IBM webMethods Integration products allows unauthenticated remote attackers to execute arbitrary code on the system through the deserialization of untrusted data. This can lead to significant risks, making it critical for organizations using affected versions to apply security ...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 8 hours ago

PoC for CVE-2025-64702

Quic-goQuic-go5.3MEDIUM
Excessive Memory Allocation Vulnerability in quic-go's HTTP/3 Clien...

The quic-go implementation of the QUIC protocol prior to version 0.57.0 is susceptible to excessive memory allocation due to its handling of QPACK-encoded HEADERS frames. Attackers can exploit this vulnerability by sending specially crafted requests that cause the header field section to grow exc...

PoC for CVE-2026-104711

ApacheApache Struts9.8CRITICAL
Expression Language Injection Vulnerability in Apache Struts

An expression language injection vulnerability exists in Apache Struts that enables attackers to craft specific requests to inject OGNL expressions, potentially leading to remote code execution. This primarily affects applications using the legacy RESTful action mapper when the OGNL allowlist is ...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-104935

IvantiConnect Secure🟣 EPSS 26%8.6HIGH
Authentication Bypass Vulnerability in Ivanti Connect Secure

An authentication bypass vulnerability exists in Ivanti Connect Secure before version 25.1.3.0, allowing remote unauthenticated attackers to execute arbitrary commands. This security flaw does not affect ICS version 22.7R2.14 or earlier, highlighting the importance of updating to the latest softw...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

Discovered 9 hours ago

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-114509

LaravelFramework9.2CRITICAL
TokenGuard Vulnerability in Laravel Web Application Framework

The Laravel web application framework has a vulnerability in the TokenGuard, specifically when configured as a standard token-based API guard. Prior to versions 12.68.0 and 13.29.0, this flaw allows an attacker to bypass authentication by submitting a crafted non-string credential. Under certain ...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...

PoC for CVE-2026-109618

PHP GroupPHP9.2CRITICAL
Remote Code Execution Risk in PHP Software

This vulnerability in PHP relates to how it handles out-of-memory (OOM) errors. When a context triggers an OOM condition, it may fail to appropriately manage memory, leaving it in an uninitialized state. Consequently, during the cleanup process of a request, this uninitialized memory could potent...