1068 matches found
CVE-2020-28948-and-CVE-2020-28949
CVE-2020-28948-and-CVE-2020-28949 https://github.com/pear/ArchiveTar/issues/33 https://vulners.com/cve/CVE-2020-28948 for more learn https://i.blackhat.com/us-18/Thu-August-9/us-18-Thomas-Its-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-Know-It.pdf...
CVE-2025-49132_HTB_SEASON10
CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...
CVE-2025-49132_HTB_SEASON10
CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...
CVE-2025-49132-PHP-PEAR
CVE-2025-49132: Pterodactyl Panel Unauthenticated RCE via PHP PEAR Method Table of Contents Overview Vulnerability Details Technical Analysis Exploit Flow Installation Usage Examples Mitigation Disclaimer References Author Overview This repository contains a proof-of-concept PoC exploit for...
Oracle Linux 8 : php:8.2 (ELSA-2026-87073)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87073 advisory. libzip 1.7.3-1 - update to 1.7.3 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure...
php:8.2 security update
libzip 1.7.3-1 - update to 1.7.3 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available 1.5.1-1 - update to 1.5.1 - drop dependency on zlib-devel and bzip2-devel no mo...
CLEANSTART-2024-AG03928 PEAR Archive_Tar version 1
Security vulnerability affects the drupal7 package. PEAR ArchiveTar version 1...
Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2022_7628)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20227628 advisory. php: Special character breaks path in xml parsing CVE-2021-21707 php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 php-pear:...
Rocky Linux 8.6 [CIQ] Security Update: php-pear Multiple Vulnerabilities (ciqsa-2026_0139)
The Rocky Linux 8.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260139 advisory. This advisory aggregates security fixes for the php-pear SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2020-28949, CVE-2020-36193. Tenable has extracted...
Exploit for PHP Remote File Inclusion in Wordpress
markdown 🎯 CVE-2026-87902 — WordPress Core LFI → RCE...
Exploit for PHP Remote File Inclusion in Wordpress
markdown 🎯 CVE-2026-87902 — WordPress Core LFI → RCE...
Astra Linux – Vulnerability in php-pear
In ArchiveTar before version 1.4.14, symlinks can reference targets outside of the extracted archive. This is a separate vulnerability from CVE-2020-36193...
php:8.2 security, bug fix, and enhancement update
libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14705 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstre...
[SECURITY] Fedora 43 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc43
PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...
[SECURITY] Fedora 44 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc44
PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...
Fedora 43 : php-pear-PHP-CodeSniffer (2026-fdc77dd5f5)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fdc77dd5f5 advisory. Version 4.0.4 - 2026-08-06 This is a security release and all users are advised to update their installs as soon as possible. The security issue only affects...
Oracle Linux 8 : php:8.2 (ELSA-2026-47749)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47749 advisory. libzip php 8.2.32-1 - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding description block...
PEAR Registry Files Exposed Detection
Detected exposed PEAR registry files .reg containing serialized PHP metadata, including package versions and local paths. This exposure facilitated supply-chain reconnaissance by revealing installed dependencies and system mappings. !/usr/bin/env python3 -- coding: utf-8 -- """Detected exposed PE...
coiled-runtime (>=0.2.0, <=0.2.1), here-search-demo (>=0.8.0, <=0.8.5) +5 more potentially affected by CVE-2026-40171 via jupyterlab (3.5.0)
jupyterlab PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - coiled-runtime =0.2.0, =0.8.0, =0.2.0b2, =1.0.0, =0.0.3, =1.0.0a20, =1.0.1, =1.0.1.6 Source cves: CVE-2026-40171 Source advisory:...