A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
CVE-2026-109618/109619 β PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.
PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.
KASLD defeats Linux kernel KASLR from a local process β recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.
CVE-2026-65343 PoC β AppleKeyStore OOB read β KASLR defeat (iOS 26.6 / 23G71)