113810 matches found
WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Accordion versions = 2.3.25...
WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Zoho Flow versions = 2.14.5...
EUVD-2026-109793
An insecure deserialization PHP object injection vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of usin...
CVE-2026-115190
An insecure deserialization PHP object injection vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of usin...
CVE-2026-115190
An insecure deserialization PHP object injection vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of usin...
CVE-2026-115190
An insecure deserialization (PHP object injection) vulnerability exists in Mautic due to the improper handling of segment filters and custom field properties. The application fails to restrict which PHP classes are instantiated during deserialization of database-stored values, bypassing Mautic's ...
CVE-2026-115190
An insecure deserialization PHP object injection vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of usin...
CVE-2026-115190
An insecure deserialization PHP object injection vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restricting which PHP classes may be instantiated, instead of usin...
WordPress Polylang Pro plugin < 3.7.4 - Contributor+ PHP Object Injection vulnerability
Contributor+ PHP Object Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Polylang Pro versions 3.7.4...
WordPress Polylang Pro plugin < 3.8.10 - Editor+ PHP Object Injection vulnerability
Editor+ PHP Object Injection vulnerability discovered by Ananda Dhakal in WordPress Plugin Polylang Pro versions 3.8.10...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate Patching: CVE-2026-109618 – PHP Memory Corruption Vulnerability CVE-2026-109619 – PHP Stale Internal Request-State Vulnerability...
php2shell-lab
php2shell-lab English | 日本語 | 中文 A black-box capture-the-flag target built around PHP2Shell — the 2026 PHP engine memory-corruption family CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2, fixed in PHP 8.4.27. The vulnerability is in the engine , not the app: the tiny PHP application layer is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619: PHP2Shell — Security Research Lab & PoC...
ctf-cve-2019-11043
Task Management APP CVE-2019-11043 Lab Minimal PHP app with intentionally vulnerable Nginx/PHP-FPM setup for reproducing CVE-2019-11043. Includes a tiny task manager, login/admin, and DB config UI. Build & Run Docker build docker build -t cve-2019-11043-lab:app . run docker run --rm -p 8080:80...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-lab Local reproduction lab for the two critical PHP...
ctf-cve-2024-4577
CVE-2024-4577 CTF Challenge Overview This CTF challenge demonstrates CVE-2024-4577, a critical PHP CGI argument injection vulnerability affecting PHP versions 8.1.x 8.1.21, 8.2.x 8.2.8, and 8.3.x 8.3.1. Vulnerability Details CVE-2024-4577 is a PHP CGI argument injection vulnerability that occurs...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-lab Weaponized PoC and lab for CVE-2026-109618...
php2shell-mitigation
MITIGATION — detect and work around CVE-2026-109618 / CVE-2026...