16 matches found
PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560 , affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The...
Attacks on PHP2Shell Continue, But No Known Compromises as a Result Yet
On October 21st, 2026 , the PHP project released emergency updates for two critical vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. We warned site owners before the fixes became available and followed up after our team reviewed the vulnerability details and began testing the patch...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...
php2shell-CVE-2026-109618-CVE-2026-109619-PoC
php2shell — CVE-2026-109618 / CVE-2026-109619 Critical Advisory CVSS v4.0: 9.2 - Critical: On October 20, details of two pre-auth Remote Code Execution RCE flaws in the PHP core leaked online ahead of coordinated disclosure. Exploitation allows arbitrary command execution straight from the web...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell PoC — CVE-2026-109619 This is a minimal proof of co...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-shield 한국어 Stopgap protection for...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — pre-auth RCE in PHP session upload-progress Eng...
Exploit for CVE-2026-109619
php2shellpoc Local proof of concept for CVE-2026-109619ht...
Exploit for CVE-2026-109618
php2shell-guard Defensive toolkit for php2shell CVE-2026...
CVE-2022-24977
ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHPSESSIONUPLOADPROGRESS when the PHP installation supports...
GHSA-389P-FCHR-Q2MG Path Traversal in ImpressCMS
ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHPSESSIONUPLOADPROGRESS when the PHP installation supports...
PHP Session Upload Progress Remote Code Execution
A remote code execution vulnerability exists in PHP PHPSESSIONUPLOADPROGRESS session. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
PHP 7.2.x < 7.2.28 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is prior to 7.2.28, 7.3.x prior to 7.3.15, or 7.4.x prior to 7.4.3. It is, therefore, affected by multiple vulnerabilities: - A heap buffer overflow exists in pharextractfile. CVE-2020-7061 - A null pointer dereference...
Null pointer dereference
In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 disabled, and the file upload fails, the upload procedure would try to clean up data that does...
PHP < 7.2.28 Multiple Vulnerabilities (Feb 2020) - Windows
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
Internet Bug Bounty: Null Pointer Dereference in PHP Session Upload Progress
Affected Versions ------------ Affected is all of PHP5.4/5.5/5.6 Affected is all of PHP7 Credits ------------ This vulnerability was disclosed by Taoguang Chen. Description ------------ session.c static int phpsessionrfc1867callbackunsigned int event, void eventdata, void extra / / ... switcheven...