CVE-2023-3824

PoC: CVE-2023-3824

In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.

PoC: poc-cve

poc-cve-2023-3824

PoC: poc-cve-2023-3824

PoC CVE 2023-3824

PoC: poc-CVE-2023-3824

CVE-2023-3824 PoC

PoC: CVE-2023-3824

CVE-2023-3824

PoC: CVE-2023-3824

Vulnerability in PHP Phar files, due to buffer overflow, arises from insufficient length checks on file names within the Phar archive. Malicious actors can craft Phar files with long file names, leading to buffer overflow and potential execution of malicious code or data leakage. This vulnerability can be exploited for code execution CVE-2023-3824

PoC: Research-of-CVE-2023-3824-NCA-Lockbit

Research of CVE-2023-3824 (NCA - Lockbit)