Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine

Laravel <= v8.4.2 debug mode: Remote code execution

Secret fragments: Remote code execution on Symfony based websites

Breaking PHP's mt_rand() with 2 values and no bruteforce