111389 matches found
K000162775: PHP Phar vulnerability CVE-2026-7260
Security Advisory Description Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9. CVE-2026-7260 Impac...
MGASA-2026-0322 Updated php packages fix security vulnerabilities
This update brings the latest version of php 8.2 and fixes some security vulnerabilities...
Updated php packages fix security vulnerabilities
This update brings the latest version of php 8.2 and fixes some security vulnerabilities...
CVE-2026-18788
Trippo ResponsiveFilemanager
CVE-2026-18788 Trippo ResponsiveFilemanager dialog.php unrestricted upload
A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...
CVE-2026-18766
A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...
CLSA-2026-1783904626 TuxCare security update for aws/aws-sdk-php (1 CVE)
TuxCare rebuilt aws/aws-sdk-php to address 1 CVE. Fixed in 3.263.4-p3+tuxcare...
CLSA-2026-1769734644 TuxCare security update for firebase/php-jwt (1 CVE)
TuxCare rebuilt firebase/php-jwt to address 1 CVE. Fixed in 6.11.1-p2+tuxcare...
CLSA-2026-1769993567 TuxCare security update for aws/aws-sdk-php (1 CVE)
TuxCare rebuilt aws/aws-sdk-php to address 1 CVE. Fixed in 3.263.4-p1+tuxcare...
CLSA-2026-1776819190 TuxCare security update for phpunit/phpunit (1 CVE)
TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 9.5.28-p1+tuxcare...
CLSA-2026-1776732788 TuxCare security update for phpunit/phpunit (1 CVE)
TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 10.4.2-p1+tuxcare...
CLSA-2026-1780447841 TuxCare security update for aws/aws-sdk-php (1 CVE)
TuxCare rebuilt aws/aws-sdk-php to address 1 CVE. Fixed in 3.263.4-p2+tuxcare...
CLSA-2026-1778978781 TuxCare security update for symfony/http-foundation (2 CVEs)
TuxCare rebuilt symfony/http-foundation to address 2 CVEs. Fixed in 3.4.47-p3+tuxcare...
CLSA-2026-1776818215 TuxCare security update for phpunit/phpunit (1 CVE)
TuxCare rebuilt phpunit/phpunit to address 1 CVE. Fixed in 8.4.3-p1+tuxcare...
CVE-2026-18766
CVE-2026-18766 affects the chetans9 core-php-admin-panel (up to the commit 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f). The issue is a SQL injection caused by manipulation of the argument filter_col in customers.php. It can be exploited remotely, and the exploit has been published and may be used. ...
CVE-2026-18766 chetans9 core-php-admin-panel customers.php sql injection
A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...
CVE-2026-18766
A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...
CVE-2026-18766 chetans9 core-php-admin-panel customers.php sql injection
A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the argument filtercol can lead to sql...
CVE-2026-43871
A flaw was found in Apache Thrift, affecting its Python, Go, PHP, and Java components. This vulnerability, known as an 'Infinite Loop', could allow a remote attacker to disrupt service availability. By exploiting this flaw, an attacker can trigger a continuous loop, leading to a denial of service...
