Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-8142 PoC — PHP‘process_nested_data’函数释放后重用漏洞

Source
https://github.com/3xp10it/php_cve-2014-8142_cve-2015-0231
Associated Vulnerability
Title:PHP‘process_nested_data’函数释放后重用漏洞 (CVE-2014-8142)
Description:Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys within the serialized properties of an object, a different vulnerability than CVE-2004-1019.
Description
php_cve-2014-8142_cve-2015-0231的漏洞环境docker
File Snapshot

 [4.0K]  /data/pocs/8a06f0e8afda4ab0a7fe7d3b902a1dcf09a03961
└── [ 198]  Dockerfile

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →