PoC-CVE-2018-15473

PoC-CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. CVE: CVE-2018-1547...

php2shell-kit

php2shell-kit An all-in-one testing + exploit kit for the PHP...

PHP 7.3.33 State Corruption Mitigation Patch

PHP version 7.3.33 is affected by out-of-memory bailout handling and stale request global state issues. This patch backports the PHP 7.4 end-of-life mitigation for the affected request lifecycle and multipart parsing paths...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

php2shell

💀 php2shell CVE-2026-109618 / CVE-2026-109619 — unauthent...

php2shell

php2shell - CVE-2026-109618 & CVE-2026-109619 Testing Environm...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Defense Kit Defensive research and tooling for PH...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...

PHP 5.6.40 State Corruption Mitigation

PHP version 5.6.40 is affected by state corruption following an out-of-memory bailout and stale global-state reuse across requests. This package supplies a Debian 7 wheezy backport of the mitigation...

RHEL 8 : php:7.4 (RHSA-2026:88565)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88565 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

RHEL 9 : php (RHSA-2026:88720)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88720 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

RHEL 9 : php:8.2 (RHSA-2026:88834)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88834 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

RHEL 9 : php:8.2 (RHSA-2026:88835)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88835 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

AlmaLinux 8 : ALSA-2026:A013php:8.0 (ALSA-2026:A013)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:A013 advisory. php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state leading t...

RHEL 9 : php (RHSA-2026:88725)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88725 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

MiracleLinux 8 : php:8.2 (AXSA:2026-2129:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2129:01 advisory. php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state...

MiracleLinux 8 : php:8.0 (AXSA:2026-2130:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2130:01 advisory. php: OOM bailout during request parsing leads to memory corruption and RCE CVE-2026-109618 php: fatal error handling retains stale request state...