PHP spl_ptr_heap_insert function memory misreference vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

CVE-2016-3185

The makehttpsoaprequest function in ext/soap/phphttp.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service type confusion and application crash via crafted...

CVE-2014-0236

file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a zero rootstorage value in a CDF file, related to cdf.c and readcdf.c...

CVE-2015-8874

Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...

PI Engine Arbitrary File Download Vulnerability

PI Engine is an open-source CMS system that is more widely used within some Internet companies. The /download.php page of PI Engine is used to provide the file download function, but the function does not impose any restriction on file types, and there are flaws in the checking of paths, so an...

PHP has an unspecified vulnerability (CNVD-2016-02885)

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability in PHP's handling of XML files allows remote attackers to exploit the vulnerability to trigger an xmlparseintostruct segment error...

UBUNTU-CVE-2016-4542

The exifprocessIFDTAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...

UBUNTU-CVE-2016-3132

Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spldllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index...

SOL71059632 - PHP vulnerability CVE-2015-8616

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

PHP 'mb_strcut()' Function Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. The PHP 'mbstrcut' function fails to properly handle string formatting, allowing a remote attacker to exploit the vulnerability by submitting a special request to crash the application...

UBUNTU-CVE-2016-4070

Integer overflow in the phprawurlencode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial of service application crash via a long string to the rawurlencode function. NOTE: the vendor says "Not sure if this...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 182...

ourphp v1.3.1 商品分类页面 type参数SQL注入漏洞

No description provided by source...

PHP 5.5.33 - Invalid Memory Write

Exploit Title: Invalid memory write in phar on filename with \0 in name Date: 2016-03-19 Exploit Author: @vah13 Vendor Homepage: https://secure.php.net/ Software Link: https://github.com/php/php-src Version: 5.5.33 Tested on: Linux Test script: --------------- cat test.php ------------------- ';...

UBUNTU-CVE-2016-3141

Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact by triggering a wddxdeserialize call on XML data...

F5 Networks BIG-IP : PHP vulnerability (K17127)

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

PHP php_str_replace_in_subject function arbitrary code execution vulnerability

PHP is a general-purpose scripting language that can be embedded in HTML. A security vulnerability exists in the function phpstrreplaceinsubject in PHP ext/standard/string.c. By submitting a specially crafted strireplace function parameter, a remote attacker can execute arbitrary code...

F5 Networks BIG-IP : PHP vulnerabilities (SOL16993)

PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to 1...

CVE-2016-1903

The gdImageRotateInterpolated function in ext/gd/libgd/gdinterpolation.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a large bgdcolor argument to t...

EUVD-2015-7703

Off-by-one error in the pharparsezipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service uninitialized pointer dereference and application crash by including the / filename in a .zip PHAR archive...