113810 matches found
VulnCheck KEV: CVE-2022-24637
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...
Rocky Linux 9.2 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ciqsa-2026_1719)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261719 advisory. This advisory aggregates security fixes for the php SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-109619, CVE-2026-109618. Tenable has extracted the...
PHP 8.5.11 out of Memory Remote Code Execution
PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory handling flaw that can leave request memory in an invalid state. This proof of concept compares affected and fixed builds. https://packetstorm.news/download/237484...
PT-2026-122958
A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql query of the file /source/registerform1.php of the component Registration. Performing a manipulation of the argument...
PHP 8.3.30 Remote Code Execution
PHP version 8.3.30 contains out-of-memory handling and stale request-state flaws that can lead to remote code execution. PHP version 8.3.36 fixes the issues...
Rocky Linux 9.2 [CIQ] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ciqsa-2026_1718)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261718 advisory. This advisory aggregates security fixes for the php SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2026-109619, CVE-2026-109618. Tenable has extracted the...
PHP 8.5.11 Session Upload Progress Trigger
PHP version 8.5.11 session.uploadprogress proof of concept triggers request-startup memory exhaustion with multipart form data, causing a PHP-FPM worker exit and nginx 502 response in the supplied local lab. https://packetstorm.news/download/237480...
PHP 5.4.23 PHP2Shell OOM Mitigation
PHP version 5.4.23 contains out-of-memory request-processing and stale request-state issues. The supplied patches provide a fail-closed mitigation for PHP2Shell...
PT-2026-122951
The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routine without authentication, allowing an administrator of a multisite child site who is not a network...
PT-2026-122959
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysql query of the file /source/registerform2.php of the component Registration Wizard. Executing a manipulation of the argument...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 exploit tool — RCE via OO...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-probe A focused, open-source scanning probe for C...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellcheck Are you actually on the PHP2Shell fix? One...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell: a repo the scanner should flag A minimal PHP app...
php2shell-scan-revamp
php2shell-scan A clean, modular, and extensively documented r...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patchferry-check Free, read-only scripts that check a server...
[SECURITY] Fedora 44 Update: php-pecl-mongodb2-2.1.12-1.fc44
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...
[SECURITY] Fedora 43 Update: php-pecl-mongodb2-2.1.12-1.fc43
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...