Wednesday 29 July 2026 00:52:59 GMT+02:00
Netcrook
#NULL dereference
When a Database Shortcut Becomes a Crash Vector in PHP
A flaw in PHP’s PostgreSQL driver shows how emulated prepares can turn a routine parameter path into a process-level denial of service.
PHP’s Quiet Fault Line: Two PDO Driver Bugs Show How Fast a Small Error Becomes an Incident
A pair of high-severity flaws in PHP’s database layer underline a familiar danger in web security: when a driver misreads memory or bytes, the result can be a crash or a SQL injection path, even in code that looks ordinary.