PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497 , a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when...

Magento CVE-2015-1398 tunnel unserialize RCE

CVE-2015-1398 Magento CE = 1.9.0.1: admin dashboard tunnel unserializes ?ga= POP chain to system; blind — read output file or use sleep oracle. !/usr/bin/env python3 -- coding: utf-8 -- """Magento CE CVE-2015-1398 authenticated POP chain tunnel RCE blind.""" from future import annotations import...

PHP2Shell (CVE-2026-109618/619) detection

Flags PHP versions in the CVE-2026-109618 / CVE-2026-109619 affected ranges. Confirm exploitation with exploits/multi/http/php2shellcve2026109618rce. !/usr/bin/env python3 -- coding: utf-8 -- """Detect PHP2Shell exposure CVE-2026-109618 / CVE-2026-109619.""" from future import annotations import ...

Laravel CVE-2018-15133 APP_KEY RCE

CVE-2018-15133: with the base64 APPKEY, forge an encrypted X-XSRF-TOKEN cookie that deserializes to Illuminate gadget chains calling system on attacker-controlled input. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel CVE-2018-15133 APPKEY decrypt cookie deserialization RCE.""" from future...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 Proof of Concept / Exploit archive per CVE-...

php2shell-poc-verifier

php2shell lab + PoC verifier Tools built while reproducing a...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

A remote scanner and research PoC for the PHP2SHELL RCE pair —re...

php: Fix of 6 CVEs

CVE-2026-109618: avoid heap state corruption via bailout on out-of-memory - CVE-2026-109619: reset per-request globals that could be reused after a bailout during request startup...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2scan A self-hosted web page that checks whether a website...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Checker A self-hosted web page that checks whether...

CVE-2026-115190

An insecure deserialization PHP object injection vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of usin...

PoC_PHP2Shell

PoCPHP2Shell Security research and proof-of-concept for CV...

⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More

This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they...

PHP-WebSec-VectorLab

PHP-WebSec-VectorLab !PHPhttps://img.shields.io/badge/PHP...

Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to remote code execution (CVE-2026-109618, CVE-2026-109619)

Summary IBM App Connect Enterprise Toolkit pattern generation using a PHP API for user-defined patterns is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of...

WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ultimate Member versions = 2.13.1...

WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Filter Everything — WordPress & WooCommerce Filters versions = 1.9.7...

WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Phoenix Media Rename versions = 3.13.5...

WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dokan versions = 5.3.1...

WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin GS Logo Slider versions = 3.8.9...