279 matches found
CVE-2025-14180
CVE-2025-14180 affects PHP’s PDO PostgreSQL driver when using PDO::ATTR_EMULATE_PREPARES and can cause a NULL return from PQescapeStringConn on certain invalid parameter sequences, leading to a NULL pointer dereference in pdo_parse_params() and potential server crashes. Connected advisories confi...
php:7.4 security update
An update is available for module.php, module.php-pecl-xdebug, module.php-pear, module.php-pecl-apcu, php-pecl-rrd, php-pecl-zip, php, php-pear, module.php-pecl-zip, module.php-pecl-rrd, php-pecl-apcu, php-pecl-xdebug, module.libzip, libzip. This update affects Rocky Linux 8. A Common Vulnerabili...
RockyLinux 9 : php:8.1 (RLSA-2023:2417)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2417 advisory. XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could be treated as a 'Host-' or 'Secure-' cooki...
PHP 安全漏洞
PHP is a scripting language executed server-side by PHP Open Source. A security vulnerability exists in PHP versions prior to 8.1.34, 8.2.30, 8.3.29, 8.4.16, and 8.5.1, which stems from a null pointer dereference in the PDO PostgreSQL driver that could cause a crash...
RockyLinux 8 : php:7.4 (RLSA-2023:2903)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2903 advisory. XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could be treated as a 'Host-' or 'Secure-' cooki...
MGASA-2025-0330 Updated php packages fix security vulnerabilities
Opcache: - Reset global pointers to prevent use-after-free in zendjitstatus. PDO: - Fixed PDO quoting result null deref. Standard: - Fixed Null byte termination in dnsgetrecord - Heap buffer overflow in arraymerge - Information Leak of Memory in getimagesize...
CVE-2025-67510 MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare + execute without semantic restrictions. This is consistent with the name “write tool”, but in an LLM/agent context...
EUVD-2021-2006
Malware in sbrugna...
EUVD-2020-21660
Malware in sbrugna...
EUVD-2018-2381
Malware in sbrugna...
EUVD-2021-8876
Malicious code in bioql PyPI...
EUVD-2022-2169
Malicious code in bioql PyPI...
EUVD-2025-3948
Malicious code in bioql PyPI...
EUVD-2022-54225
Malicious code in bioql PyPI...
EUVD-2022-1994
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2015-7695
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via...
Malicious code in @zalastax/nolb-pdo (npm)
The package @zalastax/nolb-pdo was found to contain malicious code...
MAL-2025-13113 Malicious code in @zalastax/nolb-pdo (npm)
The package @zalastax/nolb-pdo was found to contain malicious code...
Exploit for CVE-2025-32429
CVE-2025-32429 – SQL Injection in PHP PDO Prepared Statements...
CVE-2025-24792
Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects PDO extension to connect to the Snowflake database. Snowflake discovered and remediated a vulnerability in the Snowflake PHP PDO Driver where executing unsupported queries like PUT or GET on stages causes a signed-to-unsigned...