106548 matches found
[SECURITY] Fedora 45 Update: php-8.5.11-2.fc45
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
CVE-2026-17544-PoC
CVE-2026-17544 — PHP bcmath bccomp: запись вне границ буфера разрушение стека CVSS 9.8 критический · CWE-787 · GHSA-x692-q9x7-8c3f Сводка bcstr2num в ext/bcmath/libbcmath/src/str2num.c встроенная libbcmath, PHP 8.4+ содержит ошибку off-by-N, приводящую к записи вне границ. Когда переданный...
Linux Distros Unpatched Vulnerability : CVE-2026-94644
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are...
CVE-2026-85015: Improper Limitation of a Pathname to a Restricted Directory
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature Administrators by default, or Editors when a non-default Unlimited Elements fo...
Linux Distros Unpatched Vulnerability : CVE-2026-91137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP...
Linux Distros Unpatched Vulnerability : CVE-2026-66858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough ca...
Linux Distros Unpatched Vulnerability : CVE-2026-96289
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version...
Linux Distros Unpatched Vulnerability : CVE-2026-94638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are...
Linux Distros Unpatched Vulnerability : CVE-2026-66837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users...
Linux Distros Unpatched Vulnerability : CVE-2026-87117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to versi...
Linux Distros Unpatched Vulnerability : CVE-2026-94642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version...
Linux Distros Unpatched Vulnerability : CVE-2026-94653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrad...
wwwolf-php-webshell
wwwolf's PHP web shell Я часто сталкивался с проблемами при использовании других веб-шеллов: Они используют новые возможности синтаксиса PHP, несовместимые со старыми версиями PHP, работающими на некоторых целях. Они делают неверные предположения об удалённом URL, что нарушает внедрение PHP-кода...
nate158g-m-w-n-l-p-d-a-o-e
nate158g-m-w-n-l-p-d-a-o-e Этот модуль требует Metasploit: https://metasploit.com/download Текущий источник: https://github.com/rapid7/metasploit-framework...
Roundcube-CVE-2025-49113
Roundcube RCE Exploit CVE-2025-49113 A fully functional proof-of-concept exploit for CVE-2025-49113 🧠 Résumé CVE-2025-49113 est La vulnérabilité résulte d'un défaut logique dans l'analyseur de session de l'application, ce qui permet une désérialisation non sécurisée d'objets PHP. Les utilisateurs...
phuip-fpizdam
PHuiP-FPizdaM Что это Это эксплойт для уязвимости в php-fpm CVE-2019-11043. В некоторых конфигурациях nginx + php-fpm уязвимость можно вызвать извне. Это означает, что пользователь веб-приложения может получить выполнение кода, если у вас уязвимая конфигурация см. ниже. Разбор Поскольку нам было...
CVE-2024-55270
Система управления студентами 1.0 CVE-2024-55270 Обзор Система управления студентами SMS — это веб-приложение, разработанное с использованием PHP и MySQL для управления информацией о студентах. Этот репозиторий содержит исходный код и описание системы, а также отчет об уязвимости безопасности...
CVE-2026-7654
CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...
CVE-2026-37068
CVE-2026-37068 Écriture arbitraire de fichier dans /vfm-admin/index.php?section=translations&action=update dans Veno File Manager Project 4.4.9 permet à un utilisateur authentifié avec le rôle de super administrateur d'écraser tout fichier php dans l'application via une requête POST spécialement...