CVE-2012-1823

Injeção de Argumento PHP CGI CVE-2012-1823 Descrição sapi/cgi/cgimain.c no PHP anterior a 5.3.12 e versões 5.4.x anteriores a 5.4.2, quando configurado como script CGI também conhecido como php-cgi, não lida corretamente com strings de consulta que não possuem o caractere = sinal de igual, o que...

CVE-2024-4577

Orange Tsi 🍊 تم اكتشاف هذه الثغرة بواسطة Orange Tsai @orange8361 من DEVCORE @d3vc0r3. تأكد من متابعة أبحاثه المتميزة، بينما كان دورنا هو فقط إعادة إنشاء وتطوير الاستغلال لهذه المشكلة. تنبيه أمني: CVE-2024-4577 ثغرة حقن وسائط PHP CGI نظرة عامة CVE-2024-4577 هي ثغرة خطيرة في PHP تؤثر على تكوينات CG...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | PHP-CGI रिमोट कोड निष्पादन RCE एक्सप्लॉइट CVE-2012-1823 के लिए एक पायथन-आधारित एक्सप्लॉइट। यह भेद्यता एक हमलावर को क्वेरी स्ट्रिंग के माध्यम से कमांड-लाइन तर्क इंजेक्ट करके PHP-CGI का कमजोर संस्करण चलाने वाले सर्वर पर मनमाना कोड निष्पादित करने की अनुमति देती है। 📝 भेद्यता अवलोकन य...

CVE-2024-4577-LetsDefend-walkthrough

Incident Response Walkthrough: Mitigating a Zero-Day Attack CVE-2024-4577 تقرير LetsDefend PHP-CGI CVE-2024–4577 السيناريو: رصد نظام كشف التسلل IDS ونظام منع التسلل IPS هجومًا محتملًا يستهدف مكوّنًا حرجًا في النظام في الساعة 12:05 مساءً بتوقيت UTC. يوضّح هذا التقرير عملية التحقيق لتأكيد محاولة...

RockyLinux 9 : php:8.2 (RLSA-2024:10949)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10949 advisory. php: host/secure cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 php: passwordverify can erroneously return true, opening ATO risk...

CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...

CVE-2016-5385

Removed by vendor...

UBUNTU-CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...