PHP Group

Argument Injection in PHP-CGI

In CISA KEVRansomware

Underflow in PHP-FPM can lead to RCE

In CISA KEVRansomware

PHP-CGI Query String Parameter Vulnerability

In CISA KEV

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

In CISA KEV

PEAR Archive_Tar Improper Link Resolution Vulnerability

In CISA KEV

RCE via OOM corruption

RCE via stale global state

Command injection via array-ish $command parameter of proc_open()

PHP: security vulnerability

Buffer overflow and overread in phar_dir_read()

PHP: Heap-Based Buffer Overflow

PHP: Use-After-Free

PHP 7.x: Use-After-Free

PHP: Use of Uninitialized Memory

Libgd Libgd: Heap-Based Buffer Overflow

PHP: Deserialization of Untrusted Data

PHP: Deserialization of Untrusted Data

Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

PHP Group Memcached: security vulnerability

PHP: Format String

PHP: Format String

PHP: Stack-Based Buffer Overflow

Node.js: Command Injection

PHP: Integer Overflow

PHP: Denial of Service