{"vulnerability": "cve-2024-8932", "sightings": [{"uuid": "d9c300ad-6dbd-4d1b-aa1b-340d54ab924b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113525367890405937", "content": "", "creation_timestamp": "2024-11-22T07:14:02.273454Z"}, {"uuid": "1450a384-c458-47e3-9d4b-4fc52a086246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1135", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-8932\n\ud83d\udd39 Description: In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape()\u00a0function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.\n\ud83d\udccf Published: 2024-11-22T06:03:29.764Z\n\ud83d\udccf Modified: 2025-01-10T13:06:52.262Z\n\ud83d\udd17 References:\n1. https://github.com/php/php-src/security/advisories/GHSA-g665-fm4p-vhff", "creation_timestamp": "2025-01-10T14:05:54.000000Z"}, {"uuid": "0287635e-fa8b-426d-989d-8156e04b5ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "seen", "source": "https://t.me/CyberBulletin/1620", "content": "\u26a1\ufe0fPHP Patches Multi Flaws, Including CVE-2024-8932 (CVSS 9.8), Urges Immediate Update.\n\n#CyberBulletin", "creation_timestamp": "2024-11-26T13:02:46.000000Z"}, {"uuid": "de69bb3e-5471-4d2d-8876-bf4a03f44a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "seen", "source": "https://t.me/CyberBulletin/26621", "content": "\u26a1\ufe0fPHP Patches Multi Flaws, Including CVE-2024-8932 (CVSS 9.8), Urges Immediate Update.\n\n#CyberBulletin", "creation_timestamp": "2024-11-26T13:02:45.000000Z"}, {"uuid": "c4ac8235-1001-4c9d-b08c-2da838846c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "seen", "source": "https://t.me/brutsecurity/1137", "content": "CVE-2024-8932, -8929, -11233, -11236, -11234: Multiple vulnerabilities in PHP, 4.8 - 9.8 rating \ud83d\udd25\n\nFive vulnerabilities in some PHP versions, which allowing attackers to leak sensitive information, execute arbitrary code, or launch DoS attacks.\n\nMore then 700k instances at Netlas.io:\n\ud83d\udc49 Link 1 (tag, more precisely): https://nt.ls/yIHH8\n\ud83d\udc49 Dork: tag.php.version:(>=8.1.0 AND <8.1.31) OR tag.php.version:(>=8.2.0 AND <8.2.26) OR tag.php.version:(>=8.3.0 AND <8.3.14)\n\n\ud83d\udc49 Link 2 (not tag, all PHP instances): https://nt.ls/9GJlg\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"php\" OR http.headers.set_cookie:\"PHPSESSID\" OR http.headers.server:\"PHP\"\n\nVendor's advisories: https://github.com/php/php-src/security", "creation_timestamp": "2026-07-09T03:00:11.334063Z"}, {"uuid": "8fe2c702-dac6-4718-b5e1-a88c2733619e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "seen", "source": "https://t.me/brutsecurity/1137", "content": "CVE-2024-8932, -8929, -11233, -11236, -11234: Multiple vulnerabilities in PHP, 4.8 - 9.8 rating \ud83d\udd25\n\nFive vulnerabilities in some PHP versions, which allowing attackers to leak sensitive information, execute arbitrary code, or launch DoS attacks.\n\nMore then 700k instances at Netlas.io:\n\ud83d\udc49 Link 1 (tag, more precisely): https://nt.ls/yIHH8\n\ud83d\udc49 Dork: tag.php.version:(>=8.1.0 AND <8.1.31) OR tag.php.version:(>=8.2.0 AND <8.2.26) OR tag.php.version:(>=8.3.0 AND <8.3.14)\n\n\ud83d\udc49 Link 2 (not tag, all PHP instances): https://nt.ls/9GJlg\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"php\" OR http.headers.set_cookie:\"PHPSESSID\" OR http.headers.server:\"PHP\"\n\nVendor's advisories: https://github.com/php/php-src/security", "creation_timestamp": "2026-07-10T00:00:35.797523Z"}, {"uuid": "2ed8191a-f26a-4df7-956e-64b7724a2865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1137", "content": "CVE-2024-8932, -8929, -11233, -11236, -11234: Multiple vulnerabilities in PHP, 4.8 - 9.8 rating \ud83d\udd25\n\nFive vulnerabilities in some PHP versions, which allowing attackers to leak sensitive information, execute arbitrary code, or launch DoS attacks.\n\nMore then 700k instances at Netlas.io:\n\ud83d\udc49 Link 1 (tag, more precisely): https://nt.ls/yIHH8\n\ud83d\udc49 Dork: tag.php.version:(>=8.1.0 AND <8.1.31) OR tag.php.version:(>=8.2.0 AND <8.2.26) OR tag.php.version:(>=8.3.0 AND <8.3.14)\n\n\ud83d\udc49 Link 2 (not tag, all PHP instances): https://nt.ls/9GJlg\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"php\" OR http.headers.set_cookie:\"PHPSESSID\" OR http.headers.server:\"PHP\"\n\nVendor's advisories: https://github.com/php/php-src/security", "creation_timestamp": "2026-07-11T16:00:02.983246Z"}, {"uuid": "9238d5cf-b479-43d8-b891-2d0d70cdd50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8932", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1137", "content": "CVE-2024-8932, -8929, -11233, -11236, -11234: Multiple vulnerabilities in PHP, 4.8 - 9.8 rating \ud83d\udd25\n\nFive vulnerabilities in some PHP versions, which allowing attackers to leak sensitive information, execute arbitrary code, or launch DoS attacks.\n\nMore then 700k instances at Netlas.io:\n\ud83d\udc49 Link 1 (tag, more precisely): https://nt.ls/yIHH8\n\ud83d\udc49 Dork: tag.php.version:(>=8.1.0 AND <8.1.31) OR tag.php.version:(>=8.2.0 AND <8.2.26) OR tag.php.version:(>=8.3.0 AND <8.3.14)\n\n\ud83d\udc49 Link 2 (not tag, all PHP instances): https://nt.ls/9GJlg\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"php\" OR http.headers.set_cookie:\"PHPSESSID\" OR http.headers.server:\"PHP\"\n\nVendor's advisories: https://github.com/php/php-src/security", "creation_timestamp": "2026-07-12T00:00:45.697995Z"}]}