28 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ Operation Fire Pole: The Heroic Ts PHP2Shell Emergency Shi...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
A remote scanner and research PoC for the PHP2SHELL RCE pair —re...
php2shell-poc
php2shell-poc Remote exploit for CVE-2026-109618 PHP se...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — CVE-2026-109618 Pre-auth use-after-free in PHP...
Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shell
Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shel...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-detect Defensive Detector + Bounded Offensive I...
CLSA-2026-1792603232 php: Fix of 2 CVEs
CVE-2026-109618: stop re-entering the engine after an allocator failure in Zend/zendalloc.c, report it and exit instead of bailing out - CVE-2026-109619: avoid stale global state via bailout in main/rfc1867.c and ext/session/session.c, disabling the session upload-progress callback...
Exploit for CVE-2026-109618
php2shell-probe.py Defensive probe for the PHP multipart pars...
Exploit for CVE-2026-109618
CVE-2026-109618 / CVE-2026-109619 — PHP2Shell PoC Critica...
Exploit for CVE-2026-109618
php2shell-scan Reachability and change detection for the ph...
EUVD-2011-2192
Malware in sbrugna...
PHP RFC1867 Component DoS
The vulnerability of the rfc1867.c component of the PHP programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...
php security and bug fix update
5.4.16-42 - bz2: fix improper error handling in bzread CVE-2016-5399 5.4.16-41 - gd: fix integer overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 - gd: fix integer overflow in gdImagePaletteToTrueColor resulting in heap overflow CVE-2016-5767 - mbstring: fix double free in...
PHP 'main/rfc1867.c' Remote Denial of Service Vulnerability
PHP is a general-purpose web programming language. A remote denial of service vulnerability exists in PHP 'main/rfc1867.c' that allows remote attackers to submit special requests consuming large amounts of CPU resources to conduct denial of service attacks...
CVE-2012-1172: Improper Input Validation
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid open square bracket characters in name values, which makes it easier for remote attackers to cause a denial of service malformed $FILES indexes or conduct directory traversal attacks during multi-file...
CVE-2012-1172
The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid open square bracket characters in name values, which makes it easier for remote attackers to cause a denial of service malformed $FILES indexes or conduct directory traversal attacks during multi-file...
php: file path injection vulnerability in RFC1867 file upload filename
The rfc1867posthandler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request...
php: file path injection vulnerability in RFC1867 file upload filename
The rfc1867posthandler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request...
Fedora 14 : maniadrive-1.2-32.fc14 / php-5.3.8-1.fc14 / php-eaccelerator-0.9.6.1-9.fc14 (2011-11537)
Security Enhancements and Fixes : - Updated cryptblowfish to 1.2. CVE-2011-2483 - Fixed crash in errorlog. Reported by Mateusz Kocielski - Fixed buffer overflow on overlog salt in crypt. - Fixed bug 54939 File path injection vulnerability in RFC1867 File upload filename. Reported by Krzysztof...
CVE-2011-2202
The rfc1867posthandler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request...