PHP-Fuzzer

PHP Fuzzer Esta biblioteca implementa un fuzzer para PHP, que se puede usar para encontrar errores en bibliotecas particularmente bibliotecas de análisis sintáctico alimentándolas con entradas "aleatorias". La retroalimentación de la instrumentación de cobertura de aristas se utiliza para guiar l...

rbac

PHP-RBAC v2.x PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Hierarchical Role Based Access Control and more, in the fastest implementation yet. Current Stable Release: PHP-RBAC v2.0 Connect With Us Home Page: http://phprbac.net/ OWASP Project Page:...

zappzarapp-php-security

⚡ zappzarapp/security Biblioteca integral de seguridad para PHP que proporciona CSP, cabeceras de seguridad, protección CSRF, cookies seguras, validación de contraseñas, saneamiento de entradas, limitación de velocidad, SRI, carga de secretos, cifrado, seguridad de sesiones, autenticación de dos...

php-encryption

php-encryption root@kitploit: composer require defuse/php-encryption This is a library for encrypting data with a key or password in PHP. It requires PHP 5.6 or newer and OpenSSL 1.0.1 or newer. We recommend using a version of PHP that still has security support, which at the time of writing mean...

telegram-osint-lib

Biblioteca de escenarios OSINT para Telegram Descripción Hay muchas bibliotecas de la API de Telegram, pero ninguna demuestra cómo ejecutar escenarios complejos como extraer todas las fotos de canales, monitorear la presencia de usuarios o registrar una nueva cuenta. Este proyecto pretende correg...

limitrr-php

Redis를 사용하여 PHP 내에서 가벼운 속도 제한을 제공합니다. Limitrr PHP는 제가 만든 다른 라이브러리인 NodeJS용 Limitrr에서 크게 영감을 받았습니다. 여기에서 확인해 보세요. Limitrr PHP를 사용하면 애플리케이션에 속도 제한을 쉽게 통합할 수 있습니다. 다른 유사한 패키지와 달리 이 유틸리티는 요청 수뿐만 아니라 완료된 작업 수예: 특정 시간 내에 성공적으로 생성할 수 있는 계정 수도 제한할 수 있으며, 그러한 제한에 사용자 지정 옵션을 적용할 수 있습니다. 또한 사용자 지정...

CVE-2026-88023

CVE-2026-88023 affects the GridFS component of the MongoDB PHP Library . The root cause is query-operator injection : a caller-supplied structured file identifier is interpreted as a query condition rather than a literal identifier due to improper neutralization of special elements in data query ...

CVE-2026-88023 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

EUVD-2026-75637

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

GHSA-65FR-J4P9-VC33 mongodb: Reject "." and NUL bytes in database and collection names

Impact Passing untrusted input as part of a database or collection name may result in targeting a different database or collection than specified. Patches Fixed in PHP library 1.21.4 and 2.4.1. Workarounds Validate database and collection names prior to passing into APIs...

mongodb: Reject "." and NUL bytes in database and collection names

Impact Passing untrusted input as part of a database or collection name may result in targeting a different database or collection than specified. Patches Fixed in PHP library 1.21.4 and 2.4.1. Workarounds Validate database and collection names prior to passing into APIs...

CVE-2022-41343

CVE-2022-41343 🐍 Exploit en Python para CVE-2022-41343 Shell inversa por etapas para dompdf 2.0.1 Basado en: el artículo de Positive Sec y PoC Ejemplo root@kitploit: cve-2022-41343 10.10.16.3 44444 Uso root@kitploit: usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional...

DEBIAN-CVE-2026-86429

The league/commonmark thephpleague/commonmark library in versions = 1.5.0 and 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesExtension. When either extension is explicitly registered on the Environment they are not enabled by default and are excluded from the...

CVE-2026-86431

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...

CVE-2026-86429

The league/commonmark thephpleague/commonmark library in versions = 1.5.0 and 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesExtension. When either extension is explicitly registered on the Environment they are not enabled by default and are excluded from the...

zend-crypt

zend-crypt 저장소 중단됨 2019-12-31 이 저장소는 laminas/laminas-crypt로 이동했습니다. Zend\Crypt는 몇 가지 암호화 도구에 대한 지원을 제공합니다. 사용 가능한 기능 중 일부는 다음과 같습니다: 대칭 암호화를 사용한 encrypt-then-authenticate인증 단계는 HMAC으로 제공됩니다; 대칭 키 및 공개 키 알고리즘을 사용한 암호화/복호화예: RSA 알고리즘; 하이브리드 모드를 사용한 암호화/복호화OpenPGP 유사; 공개 키 알고리즘을 사용한 디지털 서명 생성예: RSA...

CGA-2PHP-XFR5-32X4

Bulletin has no description...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

UBUNTU-CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

GHSA-JJV6-8J6V-6J52 league/commonmark: Denial of service in the SmartPunct and Attributes extensions

Impact Two first-party extensions contain quadratic parsing paths. Both ship with the library but must be explicitly registered on the Environment; neither is included in CommonMarkConverter, GithubFlavoredMarkdownConverter, or GithubFlavoredMarkdownExtension. Applications that do not register...