113812 matches found
CVE-2026-112858 WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3...
CVE-2026-112859 WordPress Little Birdies theme <= 1.3.16 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16...
CVE-2026-112856 WordPress Vagabonds theme <= 1.3.10 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10...
CVE-2026-112856
The ThemeREX Group Vagabonds theme (versions up to and including 1.3.10 ) is vulnerable to a PHP Object Injection flaw due to the Deserialization of Untrusted Data . This vulnerability allows an attacker to inject objects, potentially leading to unauthorized code execution or system manipulation....
CVE-2026-112855 WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
CVE-2026-112855 WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5...
CVE-2026-112855
The axiomthemes Redy WordPress theme (versions
Exploit for Improperly Controlled Sequential Memory Allocation in Php
check-CVE-2026-109619 Detector não-destrutivo para o Use-Af...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-remediate Is your PHP exposed to CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
phpfixes-php2shell A read-only skill that reads the PHP evide...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-tools Read-only triage tools for the October 2026 P...
php2shell-radar
PHP2Shell Radar Find your PHP websites. See which ones need at...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell CVE-2026-109618 · CVE-2026-109619 Modular Po...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 Use...
Important: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell toolkit — research release Tooling for CVE-2026-1...
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560 , affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The...