PHP - CVE CyberSecurity Database News (Page 43)

Nov 28, 2024 RCE WordPress PHP

CVE-2024-11082 - How a WordPress Plugin Put Sites at Risk of Arbitrary File Upload & Remote Code Execution

If you run a WordPress website and you use the Tumult Hype Animations plugin, this post is crucial for you. A critical vulnerability—CVE-2024-11082—has

Nov 27, 2024 API Exploit SQL PHP

CVE-2024-42327 - Zabbix API SQL Injection Exploit in CUser.get – How Any API User Can Hack Your Database

--- Introduction Yet another major security hole has been found in the world of network monitoring—this time in Zabbix, the popular open-source platform used

Nov 27, 2024 RCE Exploit PHP

CVE-2024-53676 - Remote Code Execution via Directory Traversal in HPE Insight Remote Support

Important: This post explains the CVE-2024-53676 vulnerability in detail, including how it works, a proof-of-concept code snippet, references, and thoughts on mitigation. If you manage

Nov 26, 2024 RCE Exploit PHP

CVE-2024-11680 - Exploiting Improper Authentication in ProjectSend to Gain Full Access

Keywords: ProjectSend, CVE-2024-11680, webshell, exploit, PHP, authentication bypass, RCE ProjectSend is a popular self-hosted PHP application for sharing files privately. In early 2024, security researchers

Nov 24, 2024 Exploit PHP

CVE-2024-11233 - Dangerous Buffer Overread in PHP’s quoted-printable Filter—How it Works, Why it Matters, and How to Stay Safe

If you run any code on PHP 8.1, 8.2, or early 8.3 versions, you should know about CVE-2024-11233—a subtle, yet extremely