CVE-2026-40176-poc

CVE-2026-40176: PoC de Inyección de Comandos del Sistema Operativo en Composer Perforce English version Resumen Este repositorio es una Prueba de Concepto PoC para la vulnerabilidad crítica de inyección de comandos del sistema operativo CVE-2026-40176 en el controlador VCS de Perforce de Composer...

CVE-2026-40176

CVE-2026-40176 — Composer Perforce Driver Command Injection Proof of Concept A self-contained, OOP-style PHP proof of concept that demonstrates and differentially verifies a command-injection vulnerability in Composer's Perforce repository driver. The PoC runs the same malicious composer.json...

cve-2026-40176-cve-2026-40261

CVE-2026-40176 Ejecución Remota de Código RCE en el Repositorio Perforce de Composer 📋 Resumen Vulnerabilidad de Inyección de Comandos en el controlador de repositorio Perforce de Composer que permite la Ejecución Remota de Código RCE mediante una validación insuficiente de entrada en el...

Exploit for CVE-2026-40176

CVE-2026-40176: Composer Perforce OS Command Injection PoC...

Exploit for CVE-2026-40176

!CAUTION THIS REPOSITORY CONTAINS PROOF-OF-CONCEPT CODE FO...

PT-2026-32621

Name of the Vulnerable Software and Affected Versions Composer versions 1.0 through 2.2.26 Composer versions 2.3 through 2.9.5 Description A command injection issue exists in the Perforce VCS driver of Composer, a dependency manager for PHP. The Perforce::generateP4Command function constructs she...

PT-2026-32622

Name of the Vulnerable Software and Affected Versions Composer versions 1.0 through 2.2.26 Composer versions 2.3 through 2.9.5 Description Command injection is possible in the PHP dependency manager Composer. The Perforce::syncCodeBase function appends the $sourceReference parameter to a shell...