TimeAfterFree

TimeAfterFree PHP 8 sandbox escape PoC demonstrating a disablefunctions bypass on Unix-like systems. This exploit leverages a use-after-free bug to bypass disablefunctions and execute system commands. The exploitation techniques used for leaking heap pointers and obtaining read/write primitives...

PHP BCMath 8.5.8 Remote Code Execution

PHP BCMath versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8 contain an out-of-bounds write vulnerability in bcstr2num. The issue can be leveraged from an existing PHP code execution context to corrupt Zend heap metadata, establish arbitrary memory access, resolve native PHP function handlers...

Exploit for Out-of-bounds Write in Php

CVE-2026-17544 — PHP bcmath OOB write → universal memory-only...

PHP 8 TimeAfterFree disable_functions bypass

PHP 8 sandbox escape TimeAfterFree — engine-level memory corruption leading to disablefunctions bypass. Targets Unix-like systems. PHP 8.2–8.5. from kittysploit import from lib.protocols.http.httpserver import Httpserver as HTTPServer class ModulePost, HTTPServer: info = "name": "PHP 8...

PHP 7.0-7.4 disable_functions bypass

PHP 7.0-7.4 disablefunctions bypass 7.0 - all versions 7.1 - all versions 7.2 - all versions 7.3 7.3.15 7.4 7.4.3 from kittysploit import from lib.protocols.http.httpserver import Httpserver as HTTPServer class ModulePost, HTTPServer: info = "name": "PHP 7.0-7.4 disablefunctions bypass",...

PHP 7.0-7.3 disable_functions bypass

PHP 7.0-7.3 disablefunctions bypass using UAF vulnerability from kittysploit import from lib.protocols.http.httpserver import Httpserver as HTTPServer class ModulePost, HTTPServer: info = "name": "PHP 7.0-7.3 disablefunctions bypass", "description": "PHP 7.0-7.3 disablefunctions bypass using UAF...

CVE-2007-5447: Undefined Security Weakness

ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...

PHP 5.2.4 ionCube extension safe_mode / disable_functions Bypass

Exploit for unknown platform in category local exploits ================================================================ PHP 5.2.4 ionCube extension safemode / disablefunctions Bypass ================================================================ ionCub...