grep -l "PHP-Injection" ./machines [2] sorted: date ▼

namediffosdatetags

Kobold easy linux 2026-03-21 MCP Inspector STDIO RCE for foothold, PHP code injection in PrivateBin container to leak credentials, Docker escape via Arcane container management. mcp·docker·privatebin·php-injection·password-reuse·arcane VariaType medium linux 2026-03-14 Exploited fonttools CVE-2025-66034 designspace path traversal to write a PHP webshell, escalated to user via FontForge archive command injection, then root via setuptools PackageIndex arbitrary file write to cron.d. fonttools·cve-2025-66034·path-traversal·php-injection·lfi·git-exposure·+5

no machines match that filter