GiveWP PHP Object Injection exploit
-
Updated
Jan 12, 2025 - Python
#
object-injection
Here are 7 public repositories matching this topic...
PoC and Docker lab for CVE-2026-115560 — PHP session upload-progress serialize_handler mismatch to unauthenticated object injection / RCE. Validated end-to-end on php:8.4.27-apache with mitigation and no-switch controls.
php proof-of-concept deserialization poc rce security-research vulnerability-research remote-code-execution php-session object-injection cve-2026-115560
-
Updated
Oct 24, 2026 - Python
PHP Spring Lib is a library that brings core concepts of the Java Spring ecosystem into PHP, using XML-based bean configuration. It includes ODI (Object Dependency Injection), iBatis-style SQL mapping, and Hibernate-inspired ORM, all configured through XML files. With this XML-style library, you create XML beans that point to PHP classes.
php sql orm spring xml hibernate dao ibatis hibernate-validator odi hibernate-orm dependecy-injection sql-map bean-factory data-map xml-beans data-access-object object-injection object-relational-map xml-map
-
Updated
Dec 18, 2025 - PHP
Read-only triage for PHP object injection: find where request data reaches unserialize(). Reports the PHP build, plugin and theme versions, and every deserialisation call site. No writes, no execution, no network.
-
Updated
Oct 27, 2026 - PHP
CVE-2026-115560: PHP session upload-progress serialize_handler mismatch → pre-auth object injection → RCE. Check/exploit/verify scripts + Docker lab + Suricata/Sigma detection rules.
php security proof-of-concept exploit deserialization poc rce vulnerability cve pre-auth object-injection cwe-502 session-upload-progress cve-2026-115560 serialize-handler
-
Updated
Oct 25, 2026 - Python
📃Demo of OWASP PHP Deserialization/Object Injection💉
-
Updated
Dec 22, 2019 - PHP
Add this topic to your repo
To associate your repository with the object-injection topic, visit your repo's landing page and select "manage topics."