113813 matches found
CVE-2026-54630 Part-DB: Authenticated RCE via .phar attachment upload served from public/media
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension blocklist does not include phar...
CVE-2026-54630
The Part-DB open source inventory management system is vulnerable to Remote Code Execution (RCE) in versions prior to 2.12.1 . The vulnerability exists because the AttachmentSubmitHandler::renameBlacklistedExtensions() function fails to include the .phar extension in its blocklist, allowing attac...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell - Official environment, no displayerrors needed,...
CVE2026
php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Ad...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2SHELL POC Lab Lab edukasi untuk mendemonstrasikan teknik...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109619 — PHP stale session global state → RCE A work...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-triage PHP2ShellCVE-2026-109618 / CVE-2026-10961...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
Security Bulletin: Two Critical PHP Vulnerabilities
Summary API Connect is vulnerable to critical PHP Vulnerabilities affecting V10 LTS Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- API Connect V10 OnPrem| V10.0.8.0 - V10.0.8.13...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618 / CVE-2026-109619 — PHP session...
CLEANSTART-2026-NC34833 PHP has various global state that temporarily points into request memory
Security vulnerability affects the php package. PHP has various global state that temporarily points into request memory...
CLEANSTART-2026-LE11033 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request
Security vulnerability affects the php package. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request...
PHP 8.5.11 Multipart OOM Remote Code Execution
PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain an out-of-memory request-parsing flaw that can lead to remote code execution. The proof of concept sends a chunked multipart request to reproduce the OOM bailout trigger. https://packetstorm.news/download/237279...
baserproject baserCMS arbitrary file upload vulnerability
BaserProject baserCMS versions prior to 5.0.0-beta1 and 5.3.2, as well as versions 5.4.0 and 5.4.2, contain an arbitrary file upload vulnerability. This vulnerability arises because PermissionGroupsService::build writes wildcard allow rules when the plugin lacks config/permission.php, allowing th...
CVE-2026-115560
A flaw in PHP's session upload progress handling can lead to remote code execution when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and switches it to php at runtime with iniset before calling sessionstart, while session.uploadprogress.enabled is...