110514 matches found
EUVD-2026-93080
Unauthenticated PHP Object Injection in Haaken = 1.5 versions...
CVE-2026-39797
The WordPress GDPR Framework By Data443 plugin versions
CVE-2026-39797 WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
CVE-2026-39797 WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
EUVD-2026-93041
Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...
Exploit for CVE-2026-104905
CVE-2026-104905 — PHP Object Injection in FacturaScripts Widg...
Cacti cmd_realtime.php - Command Injection
Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the $pollerid used ...
CLEANSTART-2026-QY88672 In PHP versions 8
Security vulnerability affects the php package. In PHP versions 8...
CLEANSTART-2026-AE99282 In PHP 8
Security vulnerability affects the php package. In PHP 8...
CLEANSTART-2026-CK30216 In PHP versions 8
Security vulnerability affects the php package. In PHP versions 8...
CLEANSTART-2026-YY93268 In PHP versions 8
Security vulnerability affects the php package. In PHP versions 8...
CLEANSTART-2026-YW89455 In PHP versions 8
Security vulnerability affects the php package. In PHP versions 8...
CLEANSTART-2026-UW00601 In PHP version 8
Security vulnerability affects the php package. In PHP version 8...
CLEANSTART-2026-GO78577 In PHP versions 8
Security vulnerability affects the php package. In PHP versions 8...
CLEANSTART-2026-QQ38336 Due to an incomplete fix to CVE-2022-31629 https://github
Security vulnerability affects the php package. Due to an incomplete fix to CVE-2022-31629 https://github...
CLEANSTART-2026-BM76577 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings
CVE-2026-43871 affects multiple packages. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings. See references for individual vulnerability details...
PT-2026-106707
CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...
Rocky Linux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791281631)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791281631 advisory. - The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined...
Rocky Linux 9.6 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ciqsa-2026_1587)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261587 advisory. This advisory aggregates security fixes for the php SRPM in CIQ LTS 9.6. It addresses 28 CVEs: CVE-2024-8925, CVE-2025-1217, CVE-2012-2386, CVE-2024-1123...
PT-2026-106761
HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensions, or content is performed. An authenticated administrator can upload a crafte...