Security News

Google's PHP API client has XSS vulnerability (The Register)
2017-05-12 05:18

Ubiquiti network gear can be 'hijacked by an evil URL' thanks to its 20-year-old PHP build (The Register)
2017-03-16 22:18

Researchers Used PHP Zero-Days to Hack PornHub (SecurityWeek)
2016-07-25 09:46

PHP flaws allowed God mode access to top smut site (The Register)
2016-07-25 00:01

Severe Swagger vulnerability compromises NodeJS, PHP, Java (ZDNet)
2016-06-23 14:42

PHP, Python still fail to spot revoked TLS certificates (Help Net Security)
2016-04-01 16:04

In 2012, a group of researchers demonstrated that SSL certificate validation is broken in many applications and libraries, and pointed out the root causes for that situation: badly designed APIs...

Bypass PHP safe mode by abusing SQLite3s FTS tokenizer (Reddit)
2016-01-20 17:41

Full Disclosure: CCA on CoreProc/crypto-guard and an Appeal to PHP Programmers (Reddit)
2016-01-16 01:00

Content-Security-Policy Builder (PHP) (Reddit)
2016-01-01 20:39

SeedSpring - A seeded, deterministic PRNG PHP 7 (Reddit)
2015-12-22 19:38