CVE-2026-116048 krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file /source/registerform1.php of the component Registration. Performing a manipulation of the argument...

CVE-2026-116048 krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection

A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file /source/registerform1.php of the component Registration. Performing a manipulation of the argument...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-demo Un laboratorio pequeño para entender con los...

Exploit for CVE-2026-115560

Check · Exploit · Detection · Impact · Write-up --- Discl...

CVE-2026-115251

The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routine without authentication, allowing an administrator of a multisite child site who is not a network...

EUVD-2026-109353

The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routine without authentication, allowing an administrator of a multisite child site who is not a network...

WordPress Duplicator plugin < 5.0.0 - Multisite Subsite Admin+ Network-Wide PHP Code Execution vulnerability

Multisite Subsite Admin+ Network-Wide PHP Code Execution vulnerability discovered by Charles Vosburgh in WordPress Plugin Duplicator versions 5.0.0...

CVE-2026-115251 Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade

The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routine without authentication, allowing an administrator of a multisite child site who is not a network...

CVE-2026-115251

The Duplicator WordPress plugin (versions before 5.0.0 ) is vulnerable to Network-Wide PHP Code Execution due to an improperly restricted and unauthenticated one-click upgrade routine . An attacker with multisite child site administrator privileges—who is not a network administrator—can exploit t...

CVE-2026-115251 Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade

The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routine without authentication, allowing an administrator of a multisite child site who is not a network...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell toolkit v1.4 A set of tools for detecting, verifyin...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell: CVE-2026–109618, CVE-2026–109619 PoC — Pre-Auth RC...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php-radar php-radar finds PHP you did not know you were runni...

php2shell

SIGiL PHP2Shell Scanner, 1.0.0-rc2 Consolidated release candi...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-audit Exposure scanner, patch verifier and threat...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-migration A skill for AI coding agents that finds...

PHP 8.4.27 Session Upload Progress Remote Code Execution

PHP version 8.4.27 and earlier contain a session upload-progress serialization handler mismatch that can allow pre-auth object injection and remote code execution when application code changes the session serialization handler before sessionstart. https://packetstorm.news/download/237461...

PT-2026-123123

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

PHP 8.5.11 Remote Code Execution

PHP versions 5.4.0 through 8.5.11 contain pre-authentication remote code execution vulnerabilities involving out-of-memory handling and stale request state. https://packetstorm.news/download/237464...

PHP 8.5.11 Remote Code Execution

PHP versions through 8.5.11 contain out-of-memory handling and use-after-free flaws that can allow unauthenticated remote code execution. This proof of concept demonstrates an HTTP-only exploit chain against PHP version 8.4.26 running under Apache modphp. https://packetstorm.news/download/237463...