Ilija Tovilo

RCE via stale global state

RCE via OOM corruption

Use-After-Free in SOAP using Apache map

SQL injection in pdo_firebird via NUL bytes in quoted strings

Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding

NULL pointer dereference in SOAP apache:Map decoder with missing <value>

DoS attack via DOMNode::C14N()

SoapServer session-persisted object use-after-free via SOAP header fault

Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()

Out-of-bounds read in urldecode() on NetBSD