Drupal – Critical Arbitrary PHP code execution Vulnerability
The Drupal project uses the PEAR Archive_Tar library. The PEAR Archive_Tar library has released a security update that impacts Drupal.
Read more
PHP
Sophisticated spam attack targeting UK users looking for jobs and extra income
Compromised devices are used to act as proxies forwarding a malicious base64-encoded PHP script to vulnerable web servers in a
Read more
PHP.net PHP php_jpg_get16 Method Heap Buffer Overflow Vulnerability [CVE-2019-11040]
CVE Number – CVE-2019-11040 A vulnerability in PHP could allow an unauthenticated, remote attacker to access sensitive information or cause
Read more
PHP.net PHP _php_iconv_mime_decode() Function Out-of-Bounds Read Vulnerability [CVE-2019-11039]
CVE Number – CVE-2019-11039 A vulnerability in PHP could allow an unauthenticated, remote attacker to access sensitive information or cause
Read more
PHP EXIF exif_process_IFD_in_MAKERNOTE Heap Buffer Overflow Vulnerability [CVE-2019-11034]
CVE Number – CVE-2019-11034 A vulnerability in the EXIF component of PHP could allow an unauthenticated, remote attacker to access
Read more
Drupal PHP Templating Engine Cross-Site Scripting Vulnerability [CVE-2019-10909]
CVE Number – CVE-2019-10909 A vulnerability in Drupal could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)
Read more
PHP VCWD_RENAME Information Disclosure Vulnerability [CVE-2019-9637]
CVE Number – CVE-2019-9637 A vulnerability in PHP could allow an unauthenticated, remote attacker to access sensitive information on a
Read more
PHP EXIF exif_process_IFD_in_MAKERNOTE Arbitrary Code Execution Vulnerability [CVE-2019-9639]
CVE Number – CVE-2019-9639 A vulnerability in the EXIF component of PHP could allow an unauthenticated, remote attacker to execute
Read more
PHP EXIF exif_process_SOFn Method Arbitrary Code Execution Vulnerability [CVE-2019-9640]
CVE Number – CVE-2019-9640 A vulnerability in the EXIF component of PHP could allow an unauthenticated, remote attacker to execute
Read more
PHP EXIF exif_process_IFD_in_MAKERNOTE maker_note->offset Mishandling Arbitrary Code Execution Vulnerability [CVE-2019-9638]
CVE number – CVE-2019-9638 A vulnerability in the EXIF component of PHP could allow an unauthenticated, remote attacker to execute
Read more