CVE-2026-91767

A flaw was found in PHP. When validating secure connections using Transport Layer Security TLS, an error in how wildcard domain names in server certificates are verified can lead to an out-of-bounds memory read. A malicious server presenting a specially crafted certificate can exploit this issue...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842 OOB read / info leak in convert.* stream filters when line-break-chars contains NUL

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842

The PHP language is vulnerable to an out-of-bounds read and information leak in the convert.base64-encode, convert.quoted-printable-encode, and convert.quoted-printable-decode stream filters. The root cause is that the line-break-chars option's length is tracked independently of the string itself...

CVE-2026-92842 OOB read / info leak in convert.* stream filters when line-break-chars contains NUL

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2026-92842

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup, which stops at the first NUL byte,...

CVE-2025-1218

A flaw was found in PHP. The MySQL Native Driver mysqlnd wire protocol parser fails to verify that an incoming packet contains enough bytes before reading its fields. A malicious or compromised database server can send a truncated packet, causing the client application to read past the buffer...

CVE-2024-55557

CVE-2024-55557 Usage python3 exploit.py --local retrieve from local readable files python3 exploit.py default mode is remote More Read more on CVE-2024-55557 - Weasis 4.5.1 POC https://github.com/user-attachments/assets/a3f64a58-7720-4f93-8bcc-9393d8afcb68...

CVE-2025-1218

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

EUVD-2025-211005

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

CVE-2025-1218

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

CVE-2025-1218

The mysqlnd wire protocol parser is vulnerable to a packet overread because it reads fields from server packets without verifying if the packet contains sufficient bytes. A malicious or compromised MySQL server can exploit this by sending a truncated packet , forcing the client to read past the e...

CVE-2022-44311

Description for CVE-2022-44311 html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file. Reproduction T...

CVE-2021-41773-POC

CVE-2021-41773 Vulnerability Reproduction Report Vulnerability Overview CVE ID : CVE-2021-41773 Vulnerability Name : Apache HTTP Server Path Traversal Vulnerability Risk Level : High CVSS 7.5 Affected Version : Apache HTTP Server 2.4.49 Vulnerability Description : Apache HTTP Server version 2.4.4...

CVE-2026-93682

A flaw was found in PHP. When the HTTP stream wrapper processes a redirect response containing an empty Location header, an out-of-bounds read occurs by accessing memory beyond the allocated buffer. A malicious server can exploit this flaw to influence the client's redirect target path, potential...

Adminer-CVE-2021-43008

Adminer CVE-2021-43008 PoC Adminer に影響する CVE-2021-43008 の PoC エクスプロイト。 この脆弱性により、悪意のある MySQL サーバーが、LOAD DATA LOCAL INFILE が有効な場合に、クライアントマシンから任意のローカルファイルを要求できるようになります。 このリポジトリには、攻撃を再現するためのツールが含まれています。 リポジトリの内容 exploit.py Adminer とのやり取りを自動化する Python スクリプト。 機能: Adminer に認証します CSRF トークンを抽出します SQL...

DEBIAN-CVE-2026-93682

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...

CVE-2026-93682

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...

AZL-104913 CVE-2026-93682 affecting package php 8.3.33-1

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...

UBUNTU-CVE-2026-93682

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location. The value of that out-of-bounds byte decides which redirect target is built, so a malicious server...