CVE-2024-4577

CVE-2024-4577 PoC-эксплойт Описание Этот репозиторий содержит PoC-эксплойт для CVE-2024-4577 — критической уязвимости, затрагивающей все версии PHP, работающие в Windows. Уязвимость позволяет злоумышленникам удалённо выполнять произвольный код. Ошибка также затрагивает среду разработки XAMPP,...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577 : Injection d'argument dans PHP-CGI Aperçu Ce dépôt contient des scripts pour vérifier la vulnérabilité CVE-2024-4577, un problème d'injection d'argument dans PHP-CGI. Vous pouvez utiliser les scripts Bash, Go et Python fournis pour tester une liste de domaines pour cett...

CVE-2024-4577

CVE-2024-4577 - Injection d'arguments PHP CGI RCE Résumé CVE-2024-4577 est une vulnérabilité critique d'injection d'arguments CGI PHP qui affecte les systèmes Windows exécutant PHP en mode CGI. Cette faille permet à des attaquants distants d'injecter des arguments dans la ligne de commande de PHP...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 Уязвимость удаленного выполнения кода, возникающая в режиме CGI языка PHP, зарегистрированная в событии обнаружения внедрения аргументов PHP-CGI CVE-2024-4577 для внешних IP-адресов на внутренние серверы. Когда PHP выполняется в режиме CGI в среде...

CVE-2024-4577

CVE-2024-4577 : Vulnérabilité critique dans les configurations CGI de PHP Une grave faille de sécurité existe dans le mode CGI de PHP, permettant à des attaquants d'exécuter des commandes arbitraires en manipulant les paramètres d'URL. Versions concernées Les versions de PHP antérieures à 7.4.29 ...

CVE-2024-40445_CVE-2024-40446

Référence des vulnérabilités MimeTeX CVE-2024-40445 et CVE-2024-40446 Ce dépôt sert de référence publique pour les problèmes de sécurité CVE-2024-40445 et CVE-2024-40446 affectant MimeTeX, un rendu LaTeX open-source léger écrit en C. ⚠️ MimeTeX semble ne plus être activement maintenu. Les...

PT-2024-4006

Name of the Vulnerable Software and Affected Versions PHP versions 8.1.0 through 8.1.28 PHP versions 8.2.0 through 8.2.19 PHP versions 8.3.0 through 8.3.7 Description An argument injection flaw exists in PHP when running in CGI mode on Windows with Apache. The issue stems from the Windows...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0895-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

Security update for htmldoc (important)

openSUSE Security Update: Security update for htmldoc Announcement ID: openSUSE-SU-2021:0893-1 Rating: important References: 1184424 Cross-References: CVE-2021-20308 CVSS scores: CVE-2021-20308 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-20308 SUSE: 3.3...

EulerOS Virtualization 3.0.1.0 : php (EulerOS-SA-2019-1544)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A...

Arbitrary Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

Arbitrary Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php54 packages provide a recent stable release of PHP with the PEAR 1.9.4, APC 3.1.15, and memcache 3.0.8 PECL extensions, and a number of additional utilities. The php54 packages have been upgraded to...

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

Remote Code Execution (RCE) Via Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

Use-After-Free

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

php: out of bounds read when parsing a crafted .php file

A flaw was found in the way PHP handled malformed source files when running in CGI mode. A specially crafted PHP file could cause PHP CGI to crash...

Moderate: Red Hat Security Advisory: php55 security and bug fix update

Updated php55 collection packages that fix multiple security issues and several bugs are now available as part of Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...