113811 matches found
Important: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
cve-2026-109618-109619-poc PHP session.uploadprogress UAF P...
Important: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
Exploit for OS Command Injection in Php
PHP CVE PoC Collection Colecao de Provas de Conceito PoC ed...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
POC-CVE-...
php-oneshot-checker
PHP Oneshot Checker A single Python file for configuration...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 CVE-2026-109619 php2shell CVE-202...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Pre-auth Remote...
CVE-2026-115481
baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2, PermissionGroupsService::build reads a plugin's config/permission.php to decide what each user group may reach. When that file is absent it writes a wildcard allow rule instead: url...
CVE-2026-114622
baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesService::update and getFullpath, but ThemeFileForm::execute subsequently applies rawurldecode to fullpath before writin...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Exploit Tools and Fingerprint Database CVE-2026-109...
Important: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php2shell
💀 php2shell CVE-2026-109618 / CVE-2026-109619 — unauthent...
CVE-2026-114624
The baserCMS website development framework (versions 5.0.0 to 5.3.2 and 5.4.0 to 5.4.2 ) is vulnerable to PHP object injection . The widget-area entity fails to validate input types, allowing a string submitted via the admin JSON API to be stored unchanged. Subsequent entity reads deserialize thi...
CVE-2026-114624 baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity
baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an array, allowing a string submitted through the admin JSON API to be stored unchanged. Entity reads, including front-end...
CVE-2026-114624 baserCMS: PHP object injection via unguarded unserialize() in the widget-area entity
baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an array, allowing a string submitted through the admin JSON API to be stored unchanged. Entity reads, including front-end...