111936 matches found
CVE-2026-40733: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...
PT-2026-50404
Name of the Vulnerable Software and Affected Versions ShiftUp versions 1.3 and earlier Description An unauthenticated PHP Object Injection issue exists in the software. PHP Object Injection occurs when user-supplied input is passed to the unserialize function without proper validation, potentiall...
CVE-2026-40761: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...
CVE-2026-40756: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40757: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
PT-2026-50408
Unauthenticated PHP Object Injection in Château = 1.2.1 versions...
PT-2026-50407
Unauthenticated PHP Object Injection in Zoya = 1.4 versions...
CVE-2026-40755: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in TechLink = 1.3 versions...
CVE-2026-40758: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...
CVE-2026-49108: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
PT-2026-50409
Unauthenticated PHP Object Injection in Moderno 1.43 versions...
CVE-2026-48979: Inconsistent Interpretation of HTTP Requests
PHP Standard Library PSL is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnection does not validate that the total bytes received in DATA frames match the content-length header declared in the...
PT-2026-50544
Name of the Vulnerable Software and Affected Versions PHP Standard Library PSL versions 6.1.0 through 6.1.1 PHP Standard Library PSL version 6.2.0 Description The PslH2ServerConnection function does not validate that the total bytes received in DATA frames match the content-length header declared...
CVE-2026-49075: Deserialization of Untrusted Data
Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...
CVE-2026-54814: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through 1.4.109...
CVE-2026-40735: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Reina = 2.1 versions...
CVE-2026-40751: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...
CVE-2026-40753: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...