6
Upcoming Critical PHP Security Release (www.php.net)
submitted 3 weeks ago by [B] to c/lobsters@lemmy.bestiver.se
comment fedilink hide all child comments
 

Comments

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
3 comments in c/cybersecurity@sh.itjust.works view that post
[–] 2 points 2 weeks ago

POC at https://jackalsyn.com/posts/php-up-2026.html

  • permalink
  • fedilink
  • source
    •
    [–] 2 points 2 weeks ago

    Related discussion on hacker news: https://news.ycombinator.com/item?id=50172041

    The demo video has been going around Twitter today and apparently the proof of concept is privately being shared around too. The video shows pasting something in the URL and then gaining a shell on the server. It looks completely catastrophic.

    I think the best course of action is to just shut your server down before the patch goes live and then bring it back after you have patched.

    video here: https://twitter.com/k_firsov/status/2112641845926989944

    (Look for a Nitter instance if you don't want to use twitter)

  • permalink
  • fedilink
  • source
    •
    [–] 1 point 2 weeks ago

    The server has been hugged to death .. I wonder why 😁

  • permalink
  • fedilink
  • source
    •
    2 comments in c/php@programming.dev view that post
    [–] 3 points 3 weeks ago (1 child)

    A critical 9.2 CVE

    Video of PoC: https://mastodon.social/@Viss/117475758985207443

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • 1 comment in c/techsploits@reddthat.com view that post
    [–] 1 point 2 weeks ago

    Seems it's been corrected to not RCE already.

  • permalink
  • fedilink
  • source
    •