PHP-8.1.0-dev_WebShell-RCE

PHP 8.1.0-dev WebShell RCE Unauthenticated Exploit Code for PHP 8.1.0-dev WebShell RCE Unauthenticated Expected outcome: Exploiting backdoor installed on PHP 8.1.0-dev server thereby obtaining WebShell to execute commands remotely. Intended only for educational and testing in corporate...

PHP_imap_open_exploit

PHPimapopenexploit Bypassing disabled exec functions in PHP via imapopen Debian & Ubuntu Original report by CRLF: https://bugs.php.net/bug.php?id=76428...

astrolock

Astrolock A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...

DEBIAN-CVE-2026-106436

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-106436

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

DEBIAN-CVE-2026-106432

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

CVE-2026-106432

The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation size can wrap while the copy operation uses the original length. The resulting heap buffer overflow can corrupt proces...

CVE-2026-106436

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

Exploit for Path Traversal in Unbit Uwsgi

uWSGI PHP Plugin Path Traversal CVE-2018-7490 Vulhubhttp...

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...

cpanel-malware-cleaner-cve-2026

cPanel malware, CVE-2026-41940, virus removal 🚨 cPanel Malware Cleaner – CVE-2026-41940 Fix Tool A lightweight and powerful security tool to detect, remove, and prevent malware infections caused by recent cPanel vulnerabilities including CVE-2026-41940. 🔥 Features Detects and removes malware,...

cve-2024-4577-lab

CVE-2024-4577 — PHP-CGI Argument Injection → RCE Docker Lab / CTF A self-contained, from-scratch Docker lab that demonstrates the real argument-injection → Remote Code Execution primitive behind CVE-2024-4577. Exploit it over http://localhost:8080, pop a shell, and read the flag from inside the...

copy-fail-CVE-2026-31431-php

CVE-2026-31431 Copy Fail PHP PoC www-data@jumpbox:/home$ id uid=33www-data gid=33www-data groups=33www-data www-data@jumpbox:/home$ uname -a Linux testbox 5.15.0-136-generic 147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x8664 x8664 x8664 GNU/Linux www-data@jumpbox:/home$ php CVE-2026-31431.php id...

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms Fix A drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro ≤ 3.8.1 to mitigate Remote Code Execution CVE-2026-39440, CVSS 9.9. The Vulnerability Field| Value ---|--- CVE ID| CVE-2026-39440 CVSS Score| 9.9 Critical Affected|...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit PanaceaSoft all products 0day exploit https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html no write-up read: jQuery File Upload's PHP Upload Handler...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

CVE-2026-106436 Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...

EUVD-2026-95236

The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected application to encode an unusually large data structure can terminate the...