PHP - CVE CyberSecurity Database News (Page 12)

Nov 26, 2024 Exploit PHP

CVE-2024-11680: Improper Authentication Vulnerability in ProjectSend Versions Before r172 Allows Unauthorized Access and Exploitation

Recently, a significant security vulnerability has been identified in ProjectSend, a free, open-source file sharing program used extensively over the Internet. This flaw, designated as

Nov 26, 2024 WordPress Exploit PHP

CVE-2024-10781: Arbitrary Plugin Installation Vulnerability in Spam protection, Anti-Spam, FireWall by CleanTalk WordPress Plugin

Introduction: The popular Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress has been discovered to possess a security vulnerability up to and including the

Nov 26, 2024 WordPress Exploit PHP

CVE-2024-10542 - Unauthorized Arbitrary Plugin Installation Vulnerability in Spam Protection, Anti-Spam, FireWall by CleanTalk Plugin for WordPress

-- The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress, a popular plugin for protecting WordPress websites from spam, is found to be vulnerable

Nov 24, 2024 Exploit PHP

CVE-2024-11233: Buffer Overread in PHP's convert.quoted-printable-decode Filter

CVE-2024-11233 is a security vulnerability associated with PHP's convert.quoted-printable-decode filter. The issue impacts PHP versions 8.1.* before 8.1.31, 8.

Nov 24, 2024 RCE Exploit PHP

CVE-2024-11236: PHP ldap_escape() Function Integer Overflow on 32-Bit Systems

A new vulnerability, CVE-2024-11236, has been identified in multiple versions of PHP, affecting the ldap_escape() function on 32-bit systems. The vulnerability is caused by