1148 matches found
ZF3_CVE-2021-3007
ZF3CVE-2021-3007 ZendFrameworkCVE-2021-3007 PoC...
Zend Server <9.13 - Cross-Site Scripting
Zend Server before version 9.13 is vulnerable to cross-site scripting via the debughost parameter. id: CVE-2018-10230 info: name: Zend Server 9.13 - Cross-Site Scripting author: marcosiaf severity: medium description: | Zend Server before version 9.13 is vulnerable to cross-site scripting via the...
Laminas Project laminas-http - Remote Code Execution
Laminas Project laminas-http 2.14.2 and Zend Framework 3.0.0 contain a deserialization vulnerability caused by destruct method in Zend\Http\Response\Stream, letting attackers control content lead to remote code execution, exploit requires attacker-controlled serialized data. id: CVE-2021-3007...
zend-crypt
zend-crypt Repository abandoned 2019-12-31 This repository has moved to laminas/laminas-crypt. Zend\Crypt provides support of some cryptographic tools. Some of the available features are: encrypt-then-authenticate using symmetric ciphers the authentication step is provided using HMAC;...
CentOS Linux 8.4 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc (CENTOS8.4:CLSA-2026:1772811390)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1772811390 advisory. - The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and...
CentOS Linux 8.4 [TuxCare] Security Update: php / php-dba / php-devel / php-enchant / php-fpm / php-gd / etc (CENTOS8.4:CLSA-2025:1749743304)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1749743304 advisory. - The zendstringextend function in Zend/zendstring.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negativ...
CLSA-2026-1790350388 TuxCare security update for zendframework/zend-session (1 CVE)
TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p2+tuxcare...
PT-2026-106048
TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p2+tuxcare...
CLSA-2026-1789457016 TuxCare security update for zendframework/zend-form (1 CVE)
TuxCare rebuilt zendframework/zend-form to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
PT-2026-98451
TuxCare rebuilt zendframework/zend-form to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
CLSA-2026-1789384773 TuxCare security update for zendframework/zend-view (1 CVE)
TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
CLSA-2026-1789376005 TuxCare security update for zendframework/zend-session (1 CVE)
TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
PT-2026-98177
TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
PT-2026-97769
TuxCare rebuilt zendframework/zend-session to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
CVE-2010-4176
creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49649 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45702 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49649 2026-09-02 01:02:04+00:00| seen|...
PHP BCMath 8.5.8 Remote Code Execution
PHP BCMath versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8 contain an out-of-bounds write vulnerability in bcstr2num. The issue can be leveraged from an existing PHP code execution context to corrupt Zend heap metadata, establish arbitrary memory access, resolve native PHP function handlers...
CLSA-2026-1783299704 TuxCare security update for zendframework/zend-http (1 CVE)
TuxCare rebuilt zendframework/zend-http to address 1 CVE. Fixed in 2.5.6-p2+tuxcare...
CLSA-2026-1771548781 TuxCare security update for zendframework/zendframework1 (7 CVEs)
TuxCare rebuilt zendframework/zendframework1 to address 7 CVEs. Fixed in 1.12.10-p1+tuxcare...