snuffleupagus

Snuffleupagus 针对 php7 和 php8 的安全模块 —— 消灭漏洞类别，虚拟补丁其余部分！ 主要特性 • 下载 • 示例 • 文档 • 许可证 • 致谢 Snuffleupagus 是一个 PHP 7+ 和 8+ 模块，旨在通过消灭整个漏洞类别来大幅提高攻击网站的成本。它还提供了一个强大的虚拟补丁系统，允许管理员修复特定漏洞并审计可疑行为，而无需修改 PHP 代码。 主要特性 没有明显的性能影响 编写虚拟补丁规则既强大又简单 消灭多种漏洞类别 基于反序列化的代码执行 基于 mail 的代码执行 Cookie 窃取型 XSS 基于文件上传的代码执行 弱...

snuffleupagus

Snuffleupagus Sicherheitsmodul für PHP7 und PHP8 – beseitigt Bug-Klassen und patcht den Rest virtuell!...

CVE-2026-22034

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

CVE-2026-22034

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

DEBIAN-CVE-2026-22034

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

CVE-2026-22034 Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD package

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

CVE-2026-22034

Summary: CVE-2026-22034 affects Snuffleupagus prior to v0.13.0 where enabling the non-default upload validation feature to use upstream VLD scripts, without the VLD extension available to the CLI SAPI, causes all files in multipart POST requests to be evaluated as PHP code. This can enable remote...

EUVD-2026-1676

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

CVE-2026-22034 Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD package

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

CVE-2026-22034 Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD package

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

CVE-2026-22034

Snuffleupagus is a module that raises the cost of attacks against website by killing bug classes and providing a virtual patching system. On deployments of Snuffleupagus prior to version 0.13.0 with the non-default upload validation feature enabled and configured to use one of the upstream...

PT-2026-2140

Name of the Vulnerable Software and Affected Versions Snuffleupagus versions prior to 0.13.0 Description Snuffleupagus is a module designed to increase the cost of attacks against websites by eliminating bug classes and offering a virtual patching system. In deployments of Snuffleupagus before...

Snuffleupagus 安全漏洞

Snuffleupagus is a security module by Julien Voisin Personal Developer. A security vulnerability exists in Snuffleupagus versions prior to 0.13.0, which stems from a misconfiguration of the upload validation feature that could result in files in multipart POST requests being evaluated as PHP code...