95654 matches found
CVE-2026-67434 PHP_CodeSniffer gitblame report command injection via crafted filename
PHPCodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHPCodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame report formats. As a result, running...
CVE-2026-71488
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...
CVE-2026-19064 SourceCodester Online Examination & Learning Management System view.php authorization
A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...
Exploit for SQL Injection in Php
CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...'...
CVE-2026-65575
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-65573
Unauthenticated PHP Object Injection in Abelle = 1.22 versions...
CVE-2026-65549
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
CVE-2026-28139
Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...
CVE-2026-65581
The CVE-�2026-65581 entry concerns the WordPress AI ANN theme (<= 1.29.0) and describes an unauthenticated PHP Object Injection vulnerability. The connected documents corroborate the affected product and version range, with a focus on PHP object injection as the underlying issue. There are no ...
EUVD-2026-53878
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65579
CVE-2026-65579 describes an unauthenticated PHP Object Injection in the WordPress Agricola theme up to version 1.21.0. The affected component is the Agricola WordPress theme; the root cause is a PHP object injection vulnerability, enabling an attacker to achieve total compromise without authentic...
EUVD-2026-53995
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...
CVE-2026-65576
CVE-2026-65576 affects WordPress Adrena theme <= 1.2.14. The issue is unauthenticated PHP Object Injection in the theme code, enabling high-impact impact per CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The connected sources confirm the vulnerability exists in Adrena
CVE-2026-65575 WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-65575
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-65576 WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65574 WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-65572 WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...