php-encryption

php-encryption root@kitploit: composer require defuse/php-encryption Questa è una libreria per cifrare dati con una chiave o una password in PHP. Richiede PHP 5.6 o successivo e OpenSSL 1.0.1 o successivo. Raccomandiamo di utilizzare una versione di PHP che ha ancora il supporto di sicurezza, che...

CVE-2022-41343

CVE-2022-41343 🐍 Python Exploit für CVE-2022-41343 Staged Reverse Shell für dompdf 2.0.1 Basiert auf: Positive Sec's write-up und PoC Beispiel root@kitploit: cve-2022-41343 10.10.16.3 44444 Verwendung root@kitploit: usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional...

rbac

PHP-RBAC v2.x PHP-RBAC è una libreria di autorizzazione per PHP. Fornisce agli sviluppatori il controllo degli accessi basato sui ruoli RBAC gerarchico di Livello 2 NIST e altro, nell'implementazione più veloce finora. Versione stabile attuale: PHP-RBAC v2.0 Contattaci Pagina principale:...

limitrr-php

Limitação de taxa leve dentro do PHP usando Redis. O Limitrr PHP é muito inspirado na minha outra biblioteca, Limitrr, que foi criada para NodeJS. Confira aqui O Limitrr PHP permite que os usuários integrem facilmente a limitação de taxa em sua aplicação. Diferente de outros pacotes similares, es...

zappzarapp-php-security

⚡ zappzarapp/security Comprehensive PHP security library providing CSP, Security Headers, CSRF protection, Secure Cookies, Password Validation, Input Sanitization, Rate Limiting, SRI, Secrets Loading, Encryption, Session Security, TOTP two-factor authentication, Signed URLs, and Security Event...

PHP-Fuzzer

PHP Fuzzer Questa libreria implementa un fuzzer per PHP, che può essere usato per trovare bug in librerie in particolare librerie di parsing fornendo loro input "casuali". Il feedback dalla strumentazione della copertura dei bordi viene utilizzato per guidare la scelta degli input "casuali", in...

telegram-osint-lib

Libreria di scenari OSINT per Telegram Descrizione Ci sono molte librerie API di Telegram in giro, ma nessuna mostra come eseguire scenari complessi come scaricare tutte le foto dai canali, monitorare la presenza degli utenti o registrare un nuovo account. Questo progetto mira a correggere la...

zend-crypt

zend-crypt Repository aufgegeben am 2019-12-31 Dieses Repository wurde zu laminas/laminas-crypt verschoben. Zend\Crypt bietet Unterstützung für einige kryptografische Werkzeuge. Einige der verfügbaren Funktionen sind: Verschlüsselung mit anschließender Authentifizierung mittels symmetrischer...

CLSA-2026-1786546010 TuxCare security update for guzzlehttp/guzzle (2 CVEs)

TuxCare rebuilt guzzlehttp/guzzle to address 2 CVEs. Fixed in 7.10.0-p3+tuxcare...

CVE-2026-71488

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...

DEBIAN-CVE-2026-59882

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri::getHost to disagree with the URI authority used for security ...

CVE-2026-59882

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri::getHost to disagree with the URI authority used for security ...

CVE-2026-59882 guzzlehttp/psr7: Host Confusion via Weak URI Host Validation

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri::getHost to disagree with the URI authority used for security ...

CVE-2026-59882

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.3, Uri::assertValidHost does not reject URI host components containing authority delimiters, embedded ports, or malformed IPv6 brackets, allowing Uri::getHost to disagree with the URI authority used for security ...

CVE-2026-55766

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.1, guzzlehttp/psr7 did not reject CR/LF characters in certain first-party HTTP start-line fields: the request method, protocol version, and response reason phrase. If an application placed attacker-controlled dat...

Linux Distros Unpatched Vulnerability : CVE-2026-48979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP Standard Library PSL is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the...

EUVD-2026-36239

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host header validation when parsing raw HTTP request messages and when deriving a server request URI from server variables. An attacker can provide a malformed Host header containing U...

CVE-2026-46683

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0...

EUVD-2026-36112

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.0, there is a SSRF and local file read vulnerability via the xsl-style-sheet option. This issue has been patched in version 1.7.0...

Snappy 代码问题漏洞

Snappy is a PHP library developed by KNP Labs’ individual developers. It allows for the generation of thumbnails, snapshots, or PDFs from URLs or HTML pages. Versions of Snappy prior to 1.7.0 contained code vulnerabilities. These vulnerabilities stemmed from the xsl-style-sheet option, which coul...