109863 matches found
Rocky Linux 9 [CIQ] Security Update: apcu-panel / php / php-bcmath / php-bcmath-debuginfo / php-cli / etc Multiple Vulnerabilities (crlsa-2026_57539)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202657539 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archives...
CVE-2026-103592
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CVE-2026-103592
The simple-php-router library, specifically versions through 5.4.1.7 , contains an IP restriction bypass vulnerability within the IpRestrictAccess middleware. The root cause allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections by spoofing HTTP headers such as X...
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CLEANSTART-2024-XJ18859 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-SA12234 Composer is an open source dependency manager for the PHP language
Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language...
CLEANSTART-2024-VD23894 Composer is a dependency manager for the PHP programming language
Security vulnerability affects the composer package. Composer is a dependency manager for the PHP programming language...
CLEANSTART-2024-OM41616 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-JY83809 Composer is a dependency Manager for the PHP language
Security vulnerability affects the composer package. Composer is a dependency Manager for the PHP language...
CLEANSTART-2024-ND02975 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97256
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-103474
yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...
CVE-2026-102377
Contributor PHP Object Injection in Photo Gallery by 10Web = 1.8.46 versions...
CVE-2026-102392
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-100512
Contributor PHP Object Injection in Nested Pages = 3.3.2 versions...
CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...