CVE-2026-37603

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder pH7 Social Dating CMS through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captchaadminenabled and the CAPTCHA form element is only built when that flag is presen...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2023-002407)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002407 advisory. In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont function in gd extension, it is possible to supply a specially crafted font file, such a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090639 advisory. In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to acce...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090110 advisory. In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, pharparsezipfile could be tricked int...

writeups

Writeups & Pentest Notes Personal knowledge base documenting...

CVE-2020-0688

CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...

PT-2026-96041

Name of the Vulnerable Software and Affected Versions Web to Print Online Designer WordPress plugin versions prior to 2.15.0 Description Insufficient validation of uploaded file types and extensions allows unauthenticated attackers to upload arbitrary files, including PHP scripts. Additionally, t...

VulnCheck KEV: CVE-2021-30134

php-mod/curl a wrapper of the PHP cURL extension before 2.3.2 allows XSS via the postfilepathupload.php key parameter and the POST data to postmultidimensional.php...

SUSE SLES15 Security Update : php-composer2 (SUSE-SU-2026:4059-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4059-1 advisory. This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL...

CVE-2026-36471

Deserialization of Untrusted Data of the postdata parameter in cnparseurl in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request variables including referer via a crafted base64-encoded serialized PHP payload submitted as a POST parameter...

CVE-2026-82187: Unrestricted Upload of File with Dangerous Type

The Web to Print Online Designer WordPress plugin before 2.15.0 does not validate the type or extension of uploaded files, and hands the token protecting those uploads to any visitor who asks for it, allowing unauthenticated attackers to upload arbitrary files, including PHP ones, and run code on...

CVE-2026-88856

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

DEBIAN-CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

UBUNTU-CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94108

getID3 (PHP library) versions through 1.9.26 are affected by an XML External Entity (XXE) injection in the XML2array helper function. The root cause is that entity loading is not properly disabled when running on PHP before 8.0 . An attacker can craft malicious XML metadata in media files to disc...

CVE-2026-94108 getID3 through 1.9.26 XML External Entity Injection via XML2array

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94108 getID3 through 1.9.26 XML External Entity Injection via XML2array

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

EUVD-2026-83728

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2026-94104 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...