CVE-2023-3824

PoC di File Phar Malizioso in PHP CVE-2023-3824 Descrizione Questa Proof of Concept PoC dimostra come creare un file Phar malizioso in PHP e attivare una vulnerabilità di buffer overflow. Utilizzo Creazione del File Phar Malizioso 1. Creare un nuovo file PHP ad es. createphar.php e aggiungere il...

Internet Bug Bounty: stack-buffer-overflow through "ResourceBundle" methods

Upstream Bug --- https://bugs.php.net/bug.php?id=73218 Summary -- ResourceBundle::create and ResourceBundle::getLocales methods and their respective functions are vulnerables to stack buffer overflow when bundlename parameter length is equal or close to 0x7fffffff, due to a type confusion in...