109821 matches found
CVE-2026-53965
The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...
CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service
The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...
CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service
The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...
CVE-2026-53965
CVE-2026-53965 affects the MCP PHP SDK (Composer package mcp/sdk), versions 0.5.0 through 0.7.0 . The HttpTransport class's processSSEStream() method appends each 4 KiB read chunk to an in-memory buffer ($this->sseBuffer) with no upper bound ; the buffer is only flushed upon encountering the S...
CVE-2026-53965
The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...
CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service
The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...
EUVD-2026-66113
The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...
WordPress WS Form LITE – Drag & Drop Contact Form Builder plugin <= 1.10.80 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin WS Form LITE versions = 1.10.80...
Exploit for OS Command Injection in Php
CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab /...
CVE-2026-78572
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
EUVD-2026-65355
The Kalles Addons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.6 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software,...
CVE-2026-78572
The Kalles Addons plugin for WordPress (versions up to and including 1.0.6 ) is vulnerable to PHP Object Injection via deserialization of untrusted input, allowing unauthenticated attackers to inject a PHP Object. No known POP chain exists within the plugin itself, so impact depends on whether an...
CVE-2026-78572
...
CVE-2026-78562
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2026-78566
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2026-77138
The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...
CVE-2026-56095
The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...
CVE-2026-56095
The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...
CVE-2026-56095 Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...