1164 matches found
Zend Server <9.13 - Cross-Site Scripting
Zend Server before version 9.13 is vulnerable to cross-site scripting via the debughost parameter. id: CVE-2018-10230 info: name: Zend Server 9.13 - Cross-Site Scripting author: marcosiaf severity: medium description: | Zend Server before version 9.13 is vulnerable to cross-site scripting via the...
ZF3_CVE-2021-3007
ZF3CVE-2021-3007 ZendFrameworkCVE-2021-3007 PoC...
Laminas Project laminas-http - Remote Code Execution
Laminas Project laminas-http 2.14.2 and Zend Framework 3.0.0 contain a deserialization vulnerability caused by destruct method in Zend\Http\Response\Stream, letting attackers control content lead to remote code execution, exploit requires attacker-controlled serialized data. id: CVE-2021-3007...
PoC_PHP2Shell
PoCPHP2Shell Security research and proof-of-concept for CV...
zend-crypt
zend-crypt Repository abandoned 2019-12-31 This repository has moved to laminas/laminas-crypt. Zend\Crypt provides support of some cryptographic tools. Some of the available features are: encrypt-then-authenticate using symmetric ciphers the authentication step is provided using HMAC;...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-guard Defensive audit & hardening toolkit for CVE...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP Memory-Safety CVE Local Lab English · 中文README.zh-...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Proof-of-concept for CVE-2026-109618 / CVE-20...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP 5.6 Security Advisory: CVE-2026-109619 & CVE-2026-109618 B...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...
php2shell-POC
CVE-2026-109618 - "PHP2Shell" proof of concept Remote code ex...
php2shell-poc
CVE-2026-109618 / CVE-2026-109619 — PHP upload-progress RCE P...
CLSA-2026-1792603232 php: Fix of 2 CVEs
CVE-2026-109618: stop re-entering the engine after an allocator failure in Zend/zendalloc.c, report it and exit instead of bailing out - CVE-2026-109619: avoid stale global state via bailout in main/rfc1867.c and ext/session/session.c, disabling the session upload-progress callback...
CentOS Linux 8.4 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (CENTOS8.4:CLSA-2026:1772811390)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1772811390 advisory. - The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and...
CentOS Linux 8.4 [TuxCare] Security Update: php / php-dba / php-devel / php-enchant / php-fpm / php-gd / etc (CENTOS8.4:CLSA-2025:1749743304)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1749743304 advisory. - The zendstringextend function in Zend/zendstring.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negativ...
CLSA-2026-1790350388 TuxCare security update for zendframework/zend-session (1 CVE)
TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p2+tuxcare...
