EUVD-2026-125087

FrankenPHP before 1.13.4 contains a use-after-free vulnerability that leaves a dangling pointer to a freed environment table when putenv is called during request shutdown. Attackers triggering putenv in shutdown functions, destructors, or session handlers can crash the process on the next getenv...

CVE-2026-128015

FrankenPHP versions prior to 1.13.4 are vulnerable to a use-after-free issue (CWE-416) occurring when putenv() is called during request shutdown. This operation leaves a dangling pointer to a freed environment table. An attacker triggering putenv() via shutdown functions, destructors, or session ...

CVE-2026-128026

FrankenPHP versions 1.5.0 before 1.13.0 are vulnerable to a cross-request environment leakage due to an incomplete environment sandbox. The putenv function writes directly to the process-wide OS environment via os.Setenv, causing environment variables to persist across concurrent requests. An att...

EUVD-2026-125076

FrankenPHP from 1.5.0 before 1.13.0 contains an incomplete environment sandbox vulnerability in which putenv writes to the process-wide OS environment via os.Setenv, leaking values across concurrent requests. Attackers reaching a request path that spawns child processes with the default environme...

Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 Exploit Root exploit for the PwnKit vulnerabili...

Fedora 27 : php (2018-d034538627)

PHP version 7.1.13 04 Jan 2018 Core: - Fixed bug php75573 Segmentation fault in 7.1.12 and 7.0.26. Laruence - Fixed bug php75384 PHP seems incompatible with OneDrive files on demand. Anatol - Fixed bug php74862 Unable to clone instance when private clone defined. Daniel Ciochiu - Fixed bug php750...

IWConfig Local ARGV Command Line Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. / Name: iw-config.c Copyright: !sh2k+!tc...

SCO OpenServer 5.0.5 Env Local Stack Overflow Exploit

No description provided by source. / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: SCO OpenServer mscreen / / Tested...

RHEL 3 : glibc (RHSA-2005:256)

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. It was discovered that the use of LDDEBUG...

Low: Red Hat Security Advisory: glibc security update

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. Flaws in the catchsegv and glibcbug scrip...