Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-guard Defensive audit & hardening toolkit for CVE...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Proof-of-concept for CVE-2026-109618 / CVE-20...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP 5.6 Security Advisory: CVE-2026-109619 & CVE-2026-109618 B...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 & CVE-2026-109619 — PHP Pre-Auth RC...

php2shell-poc

CVE-2026-109618 / CVE-2026-109619 — PHP upload-progress RCE P...

php:php-fuzz-parser: Use-of-uninitialized-value in zend_get_compiled_lineno

Detailed Report: https://oss-fuzz.com/testcase?key=5443241508667392 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgetcompiledlineno getfilenamelineno...

EUVD-2010-4662

Malware in sbrugna...

EUVD-2010-1933

Malware in sbrugna...

SUSE CVE-2006-4812

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function Zend/zendalloc.c...

SUSE CVE-2007-1285

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service stack exhaustion and PHP crash via deeply nested arrays, which trigger deep recursion in the variable destruction routines...

SUSE CVE-2010-1914

The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...

SUSE CVE-2010-4697

Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service heap memory corruption or have unspecified other impact via vectors related to use of set, get, isset, and unset methods on objects...

SUSE CVE-2013-3735

The Zend Engine in PHP before 5.4.16 RC1, and 5.5.0 before RC2, does not properly determine whether a parser error occurred, which allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted function definition, as demonstrated by an atta...

SUSE CVE-2014-9425

Double free vulnerability in the zendtshashgracefuldestroy function in zendtshash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

SUSE CVE-2017-6441

The zvalgetlongfuncex in Zend/zendoperators.c in PHP 7.1.2 allows attackers to cause a denial of service NULL pointer dereference and application crash via crafted use of "declareticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do n...

SUSE CVE-2017-9119

The izvalptrdtor function in Zend/zendvariables.h in PHP 7.1.5 allows attackers to cause a denial of service memory consumption and application crash or possibly have unspecified other impact by triggering crafted operations on array data structures...

Zend Engine DoS

The vulnerability of the Zend Engine interpreter for the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

php:php-fuzz-execute: Heap-use-after-free in ZEND_ASSIGN_REF_SPEC_VAR_VAR_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=5714558381588480 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-execute Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf4c0e508 Crash State: ZENDASSIGNREFSPECVARVARHANDLER...