CVE-2023-3824

PHP Malicious Phar File PoC CVE-2023-3824 Description This Proof of Concept PoC demonstrates how to create a malicious Phar file in PHP and trigger a buffer overflow vulnerability. Usage Creating the Malicious Phar File 1. Create a new PHP file e.g., createphar.php and add the following code:...

Internet Bug Bounty: stack-buffer-overflow through "ResourceBundle" methods

Upstream Bug --- https://bugs.php.net/bug.php?id=73218 Summary -- ResourceBundle::create and ResourceBundle::getLocales methods and their respective functions are vulnerables to stack buffer overflow when bundlename parameter length is equal or close to 0x7fffffff, due to a type confusion in...