Lucene search
+L

103 matches found

The Hacker News
The Hacker News
added 2025/10/29 3:38 p.m.16 views

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

Cybersecurity researchers are calling attention to a spike in automated attacks targeting PHP servers, IoT devices, and cloud gateways by various botnets such as Mirai, Gafgyt, and Mozi. "These automated campaigns exploit known CVE vulnerabilities and cloud misconfigurations to gain control over...

10CVSS9AI score0.99999EPSS
SaveExploits114
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2015-9401

Malware in sbrugna...

9.3CVSS6.1AI score0.05072EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-44011

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.01078EPSS
SaveExploits0References1
Oracle linux
Oracle linux
added 2025/09/11 12:00 a.m.32 views

php:8.2 security update

libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

9.8CVSS7AI score0.02286EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2025/09/11 12:00 a.m.7 views

Oracle Linux 8 : php:8.2 (ELSA-2025-15687)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-15687 advisory. libzip php 8.2.28-1 - rebase to 8.2.28 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted the preceding descripti...

9.8CVSS7.2AI score0.02286EPSS
SaveExploits5References9
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2022-40743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability for the xdebug plugin in Apache Software Foundation Apache Traffic Server can lead to cross site scripting and cache...

6.1CVSS6AI score0.01078EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2015-10141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. Wh...

9.3CVSS6.2AI score0.05072EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2025/07/24 12:02 a.m.9 views

SUSE CVE-2015-10141

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS8.4AI score0.05072EPSS
SaveExploits2References3
OSV
OSV
added 2025/07/23 2:15 p.m.11 views

CVE-2015-10141

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

7.7AI score
SaveExploits0References6
OSV
OSV
added 2025/07/23 2:15 p.m.10 views

DEBIAN-CVE-2015-10141

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS6.3AI score0.05072EPSS
SaveExploits2References1
NVD
NVD
added 2025/07/23 2:15 p.m.15 views

CVE-2015-10141

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS0.05072EPSS
SaveExploits2References6
OSV
OSV
added 2025/07/23 2:15 p.m.7 views

UBUNTU-CVE-2015-10141

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS6.2AI score0.05072EPSS
SaveExploits2References8
CVE
CVE
added 2025/07/23 1:53 p.m.63 views

CVE-2015-10141

Summary: CVE-2015-10141 affects Xdebug (PHP debugging extension) ≤ 2.5.5. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An unauthenticated attacker can send a crafted eval command to execute arbitrary PHP code, potenti...

9.3CVSS7.9AI score0.05072EPSS
SaveExploits2References6
Vulnrichment
Vulnrichment
added 2025/07/23 1:53 p.m.11 views

CVE-2015-10141 Xdebug Remote Debugger Unauthenticated OS Command Execution

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS7.9AI score0.05072EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2025/07/23 1:53 p.m.24 views

CVE-2015-10141 Xdebug Remote Debugger Unauthenticated OS Command Execution

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS0.05072EPSS
SaveExploits2References6
Debian CVE
Debian CVE
added 2025/07/23 1:53 p.m.9 views

CVE-2015-10141

An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker ca...

9.3CVSS6.2AI score0.05072EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2025/07/23 12:00 a.m.18 views

PT-2025-30581 · Xdebug · Xdebug

Name of the Vulnerable Software and Affected Versions: Xdebug versions 2.5.5 and earlier Description: An unauthenticated OS command injection vulnerability exists in Xdebug, a PHP debugging extension. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol...

9.3CVSS8AI score0.05072EPSS
SaveExploits2References13
CNNVD
CNNVD
added 2025/07/23 12:00 a.m.10 views

Xdebug 安全漏洞

Xdebug is an extension for debugging and analyzing PHP code from the Xdebug open source. A security vulnerability exists in Xdebug 2.5.5 and earlier versions, which stems from unauthenticated OS command injection and could lead to the execution of arbitrary PHP code...

9.3CVSS7.6AI score0.05072EPSS
SaveExploits2References7
OpenVAS
OpenVAS
added 2024/11/18 12:00 a.m.12 views

Fedora: Security Advisory (FEDORA-2024-e7bb8bc2da)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS4.4AI score0.00471EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2024/09/30 5:33 p.m.1023 views

Exploit for Deserialization of Untrusted Data in Givewp

This post is a research article published by EQSTLabhttps://g...

10CVSS10AI score0.74283EPSS
SaveExploits11
Rows per page
Query Builder