PHP 跨站脚本漏洞

PHP is an open-source scripting language executed on the server side. Versions of PHP prior to 8.2.31, 8.3.31, 8.4.21, and 8.5.6 had a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of user data, allowing attackers to construct URLs that allowed arbitrary...

Fedora 44 : php (2026-c66eaae759)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c66eaae759 advisory. PHP version 8.5.6 07 May 2026 Core: Fixed bug GH-19983 GC assertion failure with fibers, generators and destructors. iliaal Fixed ZENDAPI mismatch o...

CLSA-2026-1778055087 php: Fix of 3 CVEs

CVE-2018-5711: Fix infinite loop in gdImageCreateFromGifCtx libgd when reading crafted GIF - CVE-2018-17082: Fix XSS via Transfer-Encoding: chunked in apache2 SAPI - CVE-2018-10545: Do not set PRSETDUMPABLE by default in php-fpm child...

php: Fix of 3 CVEs

CVE-2018-5711: Fix infinite loop in gdImageCreateFromGifCtx libgd when reading crafted GIF - CVE-2018-17082: Fix XSS via Transfer-Encoding: chunked in apache2 SAPI - CVE-2018-10545: Do not set PRSETDUMPABLE by default in php-fpm child...

PT-2026-39445

Name of the Vulnerable Software and Affected Versions PHP versions 8.2.0 through 8.2.30 PHP versions 8.3.0 through 8.3.30 PHP versions 8.4.0 through 8.4.20 PHP versions 8.5.0 through 8.5.5 Description Improper sanitation of user data allows an attacker to compose a URL that executes arbitrary...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, yunikorn-web, nri-apache, neuvector-sigstore-interface, kubernetes-event-exporter, kube-rbac-proxy, spark-operator, prometheus, tigera-operator, nri-couchbase, aws-eks-pod-identity-agent, kubernetes-csi-driver-hostpath, redpanda,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, yunikorn-web, nri-apache, neuvector-sigstore-interface, kubernetes-event-exporter, kube-rbac-proxy, spark-operator, prometheus, tigera-operator, nri-couchbase, aws-eks-pod-identity-agent, kubernetes-csi-driver-hostpath, redpanda,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, yunikorn-web, nri-apache, neuvector-sigstore-interface, kubernetes-event-exporter, kube-rbac-proxy, spark-operator, prometheus, tigera-operator, nri-couchbase, nats-server-config-reloader, aws-eks-pod-identity-agent,...

MiracleLinux 9 : php:8.1 (AXSA:2024-9437:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9437:01 advisory. php: host/secure cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 php: passwordverify can erroneously return true, opening ATO risk...

MiracleLinux 9 : php:8.2 (AXSA:2024-9503:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9503:01 advisory. php: host/secure cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 php: passwordverify can erroneously return true, opening ATO risk...

Exploit for Out-of-bounds Write in Php

PHuiP-FPizdaM What's this This is an exploit for a bug in...

EUVD-2012-3765

Malware in sbrugna...

EUVD-2018-2617

Malware in sbrugna...

EUVD-2015-3274

Malware in sbrugna...

EUVD-2022-3982

Malicious code in bioql PyPI...

EUVD-2021-29028

Malicious code in bioql PyPI...

EUVD-2024-49671

Malicious code in bioql PyPI...

EUVD-2021-8875

Malicious code in bioql PyPI...

EUVD-2025-22119

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-42040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop and php-fpm hang within the Loops...