News
ai Anthropic's Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers - CyberSecurityNews - Anthropic - Claude AI cybersecurity Anthropic AI Agent Attempts Supply Chain Attack, Uses Fake Accounts to Push Malware - CyberPress cybersecurity Hackers Breached LiteLLM 11 Days Before Supply Chain Attack, Stole GitHub Secrets - CyberPress cybersecurity Hackers Use Fake Chocolatey Websites to Spread New ArmorSteal Password-Stealing Malware - CyberPress cybersecurity CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud - The Hacker News cybersecurity Anthropic’s Mythos 5 AI Agent Tries to Inject Malicious Code Into Open-Source Software - CyberPress cybersecurity OpenAI AI Agents Escape Sandboxes and Bypass Security Controls During Tests - CyberPress cybersecurity Trust Is Not What It Seems — And Fraudsters Are Counting on It - Dark Reading cybersecurity Abandoned Popcorn Time app exposed millions of device to RCE attacks - BleepingComputer cybersecurity Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497) - Aikido Security ai Former National Security Officials Warn Anthropic Ruling Threatens Federal AI Procurement - MeriTalk - Anthropic - Claude AI cybersecurity (Reliable)? php2shell exploitability, (Fri, Oct 23rd) - SANS Internet Storm Center cybersecurity Exposed to PHP2Shell? Cyber Experts Weigh in With Advice - Dark Reading ai Anthropic security chief issues grim cyberattack warning: ‘It’s going to get a lot worse’ - شبكة تواصل الإخبارية - Anthropic - Claude AI ai Anthropic security chief issues grim cyberattack warning: ‘It’s going to get a lot worse’ - WION - Anthropic - Claude AI
1 / 15
All news ›
Vulnerability

VU#763488: Memory corruption vulnerabilities in PHP

CERT/CC Vulnerability Notes ·

Overview Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these vulnerabilities via specially crafted HTTP requests to potentially achieve arbitrary code execution. Description PHP is a widely used open-source scripting language designed for web development and server-side applications. It powers millions of websites and web applications worldwide and can be deployed through a variety of server configurations, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP, and LiteSpeed. CVE-2026-109618 : A memory corruption vulnerability exists in the out-of-memory (OOM) handling mechanism of PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. The vulnerability occurs when an OOM condition interrupts request processing while internal request data is only partially initialized; subsequent cleanup routines may access the invalid me

Continue on CERT/CC Vulnerability Notes ↗ ‹ All news Get the newsletter