Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Proof-of-concep...

nanwinata-CVE-2024-52301

This script using simple tools subfinder,httpx. Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1706700142)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1706700142 advisory. - In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a...

EUVD-2007-0901

Malware in sbrugna...

EUVD-2024-28034

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-9026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, when using PHP-FPM SAPI and it is configured to catch workers output through...

CVE-2024-52301: Improper Neutralization of Argument Delimiters in a Command

Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28,...

CVE-2024-50340: Improper Neutralization of Special Elements in Output Used by a Downstream Component

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

CVE-2024-43574

CVE-2024-43574 is a Microsoft Speech API (SAPI) remote code execution vulnerability. Documents indicate a network-based vector with high impact (execution of code, full confidentiality/integrity/availability impact) and that user interaction is required. Affected component: Microsoft Speech API i...

CVE-2024-43574 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

...

KB5044281: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2024)

The remote Windows host is missing security update 5044281. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

KB5044288: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (October 2024)

The remote Windows host is missing security update 5044288. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

KB5044284: Windows 11 Version 24H2 / Windows Server 2025 Security Update (October 2024)

The remote Windows host is missing security update 5044284. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

KB5044280: Windows 11 version 21H2 Security Update (October 2024)

The remote Windows host is missing security update 5044280. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

KB5044285: Windows 11 version 22H2 / 23H2 Security Update (October 2024)

The remote Windows host is missing security update 5044285. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

KB5044273: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2024)

The remote Windows host is missing security update 5044273. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...

PT-2024-6798

Name of the Vulnerable Software and Affected Versions Microsoft Speech Application Programming Interface SAPI affected versions not specified Description The issue is related to a remote code execution vulnerability in the Microsoft Speech Application Programming Interface SAPI. It is caused by t...

CVE-2024-43574: Use After Free

Microsoft Speech Application Programming Interface SAPI Remote Code Execution Vulnerability...

Fedora 39 : php (2024-7c800c4df7)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7c800c4df7 advisory. PHP version 8.2.24 26 Sep 2024 CGI: Fixed bug GHSA-p99j-rfp4-xqvq Bypass of CVE-2024-4577, Parameter Injection Vulnerability. CVE-2024-8926 nielsdos...

php -- Multiple vulnerabilities

php.net reports: CVE-2024-8926: CGI: Fixed bug GHSA-9pqp-7h25-4f32 Bypass of CVE-2024-4577, Parameter Injection Vulnerability. CVE-2024-8927: CGI: Fixed bug GHSA-94p6-54jq-9mwp cgi.forceredirect configuration is bypassable due to the environment variable collision. CVE-2024-9026: FPM: Fixed bug...