477 matches found
Chankro
Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...
PHP BCMath 8.5.8 Remote Code Execution
PHP BCMath versions 8.4.0 through 8.4.23 and 8.5.0 through 8.5.8 contain an out-of-bounds write vulnerability in bcstr2num. The issue can be leveraged from an existing PHP code execution context to corrupt Zend heap metadata, establish arbitrary memory access, resolve native PHP function handlers...
Exploit for Out-of-bounds Write in Php
CVE-2026-17544 — PHP bcmath OOB write → universal memory-only...
CVE-2026-33656
EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine allowing updating attachment's sourceId thus allowing an authenticated admin to overwrite the sourceId field on Attachment entities. Because sourceId is...
EUVD-2026-25081
EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine allowing updating attachment's sourceId thus allowing an authenticated admin to overwrite the sourceId field on Attachment entities. Because sourceId is...
EspoCRM 路径遍历漏洞
EspoCRM is an open-source, web-based Customer Relationship Management system CRM developed by EspoCRM. This system offers features such as sales automation, community management, and customer support. Versions of EspoCRM prior to 9.3.4 contained a path traversal vulnerability. This vulnerability...
PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes
Impact PHPUnit forwards PHP INI settings to child processes used for isolated/PHPT test execution as -d name=value command-line arguments without neutralizing INI metacharacters. Because PHP's INI parser interprets " as a string delimiter, ; as the start of a comment, and most importantly a newli...
CVE-2025-71282
XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by openbasedir restrictions. This allows an attacker to obtain information about the server's directory structure...
CVE-2025-71282 XenForo Path Disclosure via open_basedir Exceptions
XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by openbasedir restrictions. This allows an attacker to obtain information about the server's directory structure...
Xenforo 安全漏洞
Xenforo is a forum software developed by the Xenforo company. Versions of XenForo prior to 2.3.7 contained security vulnerabilities. These vulnerabilities stemmed from abnormal messages triggered by the openbasedir limitation, which allowed the leakage of file system paths. This could potentially...
CVE-2025-71282: Generation of Error Message Containing Sensitive Information
XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by openbasedir restrictions. This allows an attacker to obtain information about the server's directory structure...
EUVD-2006-5163
Malware in sbrugna...
EUVD-2007-1829
Malware in sbrugna...
EUVD-2007-4634
Malware in sbrugna...
EUVD-2006-2822
Malware in sbrugna...
EUVD-2007-4645
Malware in sbrugna...
EUVD-2007-4806
Malware in sbrugna...
EUVD-2012-3339
Malware in sbrugna...