94 matches found
PHP BCMath 8.5.8 Remote Code Execution
PHP BCMath versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8 contain an out-of-bounds write vulnerability in bcstr2num. The issue can be leveraged from an existing PHP code execution context to corrupt Zend heap metadata, establish arbitrary memory access, resolve native PHP function handlers...
Exploit for Out-of-bounds Write in Php
CVE-2026-17544 — PHP bcmath OOB write → universal memory-only...
EUVD-2010-1161
Malware in sbrugna...
EUVD-2002-0481
Malware in sbrugna...
EUVD-2010-3434
Malware in sbrugna...
EUVD-2012-3339
Malware in sbrugna...
EUVD-2012-1201
Malware in sbrugna...
EUVD-2006-4469
Malware in sbrugna...
EUVD-2007-3368
Malware in sbrugna...
EUVD-2007-0899
Malware in sbrugna...
EUVD-2006-1498
Malware in sbrugna...
EUVD-2006-5691
Malware in sbrugna...
K000141353: Multiple PHP vulnerabilities
Security Advisory Description CVE-2019-9024 An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpcdecode can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64decodexmlrpc in...
SUSE CVE-2006-3011
The errorlog function in basicfunctions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and openbasedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode...
SUSE CVE-2006-4625
PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safemode and openbasedir, via the inirestore function, which resets the values to their php.ini Master Value defaults...
SUSE CVE-2006-5706
Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass openbasedir restrictions and perform unspecified actions via unspecified vectors involving the 1 chdir and 2 tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494...
SUSE CVE-2006-6383
PHP 5.2.0 and 4.4 allows local users to bypass safemode and openbasedir restrictions via a malicious path and a null byte before a ";" in a sessionsavepath argument, followed by an allowed path, which causes a parsing inconsistency in which PHP validates the allowed path but sets session.savepath...
SUSE CVE-2007-1835
PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path session.savepath, uses the TMPDIR default after checking the restrictions, which allows local users to bypass openbasedir restrictions...