Tailworm
Published: October 26, 2026 12:13
Named vulnerability dubbed "Tailworm" (CVE-2025-14282) from Erica Windisch (Cyberdione Labs Corporation). — (source: https://tailworm.com)
🦜 Vulnerability Garden 🪴
@vulnerability.garden@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
A list of all named vulnerabilities, attack techniques and exploits.
Site URL: vulnerability.garden
Feed URL: vulnerability.garden/feed.xml
Posts: 16
Followers: 7
Bad UVM
https://medium.com/@guoziyi114/bad-uvm-hijack-readonly-page-cache-via-nvidia-uvm-7accc7e3181e
Published: October 24, 2026 12:00
Named vulnerability dubbed "Bad UVM" from Ziyi Guo. — (source: https://medium.com/@guoziyi114/bad-uvm-hijack-readonly-page-cache-via-nvidia-uvm-7accc7e3181e)
Broccoli2Shell
Published: October 24, 2026 12:00
Named vulnerability dubbed "Broccoli2Shell" (CVE-2026-111497) from Juliano Rizzo. — (source: https://broccoli2shell.com)
Node2Shell / HTTP2Shell
https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/
Published: October 23, 2026 12:51
Named vulnerability dubbed "Node2Shell / HTTP2Shell" (CVE-2026-111497) from Matteo Collina. — (source: https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/)
Header Accordions
https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers
Published: October 22, 2026 13:47
Named vulnerability dubbed "Header Accordions" (CVE-2025-64702, CVE-2025-13945, CVE-2026-12523) from Sébastien Féry. — (source: https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers)
GhostShares
https://blog.claroc.io/ghostshares-muse-passive-dns/#_
Published: October 22, 2026 13:39
Named vulnerability dubbed "GhostShares" from Claroc. — (source: https://blog.claroc.io/ghostshares-muse-passive-dns/#_)
phpbleed
Published: October 22, 2026 12:00
Named vulnerability dubbed "phpbleed". — (source: https://phpbleed.com)
php2shell (PHPocalypse)
https://qideng.substack.com/p/php2shell-dissecting-phps-critical
Published: October 21, 2026 13:13
Named vulnerability dubbed "php2shell (PHPocalypse)" (CVE-2026-109618, CVE-2026-109619) from Qi Deng. — (source: https://qideng.substack.com/p/php2shell-dissecting-phps-critical)
4
https://emudhra.we-have-a-problem.com
Published: October 21, 2026 13:10
Named vulnerability dubbed "4" (CVE-2026-111943, CVE-2026-113470) from Wayne. — (source: https://emudhra.we-have-a-problem.com)
wp2root
https://blog.calif.io/p/the-wordpress-chain-massacre?utm_source=publication-search
Published: October 20, 2026 14:00
Named vulnerability dubbed "wp2root" from Calif. — (source: https://blog.calif.io/p/the-wordpress-chain-massacre?utm_source=publication-search)
Halo's Gate
https://blog.sektor7.net/#!res/2021/halosgate.md
Published: October 19, 2026 22:15
Named vulnerability dubbed "Halo's Gate" from rb (secktor7). — (source: https://blog.sektor7.net/#!res/2021/halosgate.md)
Hell's Gate
https://vxug.fakedoma.in/papers/VXUG/Exclusive/HellsGate.pdf
Published: October 19, 2026 22:13
Named vulnerability dubbed "Hell's Gate" from smelly__vx & am0nsec. — (source: https://vxug.fakedoma.in/papers/VXUG/Exclusive/HellsGate.pdf)
SyscallRevenant
https://github.com/SilentisVox/SyscallRevenant
Published: October 19, 2026 22:09
Named vulnerability dubbed "SyscallRevenant" from SilentisVox. — (source: https://github.com/SilentisVox/SyscallRevenant)
WPSplinter
https://qkaiser.github.io/broadcom-wps/
Published: October 19, 2026 22:07
Named vulnerability dubbed "WPSplinter" from Quentin Kaiser. — (source: https://qkaiser.github.io/broadcom-wps/)
Plexfiltration
https://infosec.exchange/@SecureOwl/116433809226090446
Published: October 19, 2026 12:21
Named vulnerability dubbed "Plexfiltration" from Mike Sheward. — (source: https://infosec.exchange/@SecureOwl/116433809226090446)
Plex2Shell
https://zmain.info/blog/plex2shell
Published: October 19, 2026 12:13
Named vulnerability dubbed "Plex2Shell" (CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656) from ZM. — (source: https://zmain.info/blog/plex2shell)