home.social

Search

1000 results for “php”

  1. ekiledjian @edwardk

    PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches

    PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws, The Hacker News reports. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way; PHP considers it an unlikely risk, is not issuing an emergency fix, and recommends a configuration change instead. thehackernews.com/2026/10/urge

  2. packet storm @packet_storm

    PHP 8.5.11 Pre-RINIT Session Unserialize Code Execution packetstorm.news/files/237302

    #exploit
  3. Shawn Hooper (he/him) 🇨🇦 @shawnhooper

    I must have missed this announcement while dealing with the this week.

    Anthropic leasing a data centre in Nova Scotia.

    betakit.com/anthropic-signs-le

    #phpocalypse
  4. packet storm @packet_storm

    PHP 8.4.26 Stale Session Global State Remote Code Execution packetstorm.news/files/237277

    #exploit
  5. randomwizard @randomwizard

    Ha. I was just writing about how, there is a lot of dunking on php anytime it is mentioned, anytime it has a flaw, but you do not see as much vitriol and complaints when javascript or ruby or other languages have issues.

    Lo and behold, there was a remote execution flaw in node and you do not see the news cycle spinning a story that the internet is doomed.

    el-balad.com/17060179

    #php #javascript #ruby #programming
  6. packet storm @packet_storm

    PHP 7.2.24 Legacy Security Backports packetstorm.news/files/237274

    #advisory
  7. packet storm @packet_storm

    PHP 7.0.33 PHP2Shell Patch packetstorm.news/files/237273

    #advisory
  8. packet storm @packet_storm

    PHP 8.4.26 mod_php Remote Code Execution packetstorm.news/files/237269

    #exploit
  9. packet storm @packet_storm

    PHP 8.4.26 session.upload_progress Remote Code Execution packetstorm.news/files/237267

    #exploit
  10. jbz @[email protected]

    🙀 There's a third PHP2Shell bug, but it won't get an emergency fix theregister.com/security/2026/

    #php #php2shell #cybersecurity

    #php #php2shell #cybersecurity
  11. Nuno Maduro @[email protected]

    PHP Internals: What Really Happened (w/ Derick Rethans)

    phpc.tv/w/fViP6QXgRAQ3P37tzya5

    #javascript #laravel #php
  12. Heliograph @[email protected]

    #php you said?

    #php
  13. jbz @[email protected]

    The PHP internet crisis could just be the beginning - Sky News

    youtube.com/watch?v=BpyQtylJqnE

    #php #php2shell #ai #cybersecurity

    #php #php2shell #ai #cybersecurity
  14. nunomaduro @[email protected]

    php vulnerabilities: time to clarify what really happened

    here's my conversation with derick rethans, a member of php internals. we go through the full timeline and the facts

    watch here: youtu.be/5X5csEbmHqs?si=uAk74D

    #php

    #php
  15. Yrjänä Rankka 🌻 @[email protected]

    This is what you call if malloc fails. Not longjmp somewhere and hope to recover somehow. Let systemd or init or whatever supervisor process you have do the recovery 😀

    int gpf ()
    {
    *(long *) -1 = -1;
    return 0;
    }

    #php

    #php
  16. Yrjänä Rankka 🌻 @[email protected]

    So now I’m allowed to feel smug?
    Whenever evaluating a service to use on my systems, made with #php always meant a hard pass. Comes from the time I had to implement ODBC connection pooling for it for a work project back in the days of yonder, when dad bought an oil lamp.

    #php
  17. Japan @[email protected]

    PHP security flaws prompt Japan to take websites down while US keeps them up

    Cybersecurity Japanese companies halt online services out of abundance of caution Companies have rushed to patch vulnerabilities in PHP, a programming language used by roughly 70% of websites. © Reuters MASAHARU BAN and…
    #Japan #JP #JapanNews #flaws #keeps #news #PHP #prompt #security #take #them #us #websites
    alojapan.com/1557379/php-secur

    #websites #us #them #take #security #prompt
  18. Rachel Lawson @[email protected]

    Yeah, don’t look at php.net until Monday morning. Have the weekend off 😆
    #Php

    #php
  19. Analyst207 @[email protected]

    PHP Foundation Flags Third RCE Flaw in PHP2Shell Chaos

    The PHP Foundation has identified a third remotely executable code (RCE) flaw related to PHP2Shell, but is downplaying its impact, saying it requires a highly unlikely combination of configuration and code to be triggered. The issue, tracked as CVE-2026-115560, will be patched in the next regular PHP release rather than as an emergency hotfix.

    osintsights.com/php-foundation

    #Php #RceFlaw #Cve2026115560 #Php2shell #RemoteCodeExecution

    #php #rceflaw #cve2026115560 #php2shell #remotecodeexecution
  20. Dev Community @[email protected]
    A page can look protected in an administrator session and still behave incorrectly for the people who...#php #tutorial #wordpress #software #coding #development #engineering #inclusive #community
    WordPress Page Access Control: Rule Precedence, Roles, and Cache Gotchas
    #php #inclusive #engineering #tutorial #development #coding
  21. Bytes Europe @[email protected]

    PHP security flaws prompt Japan to take websites down while US keeps them up byteseu.com/2474209/ #flaws #Japan #keeps #PHP #prompt #Security #take #them #US #websites

    #websites #us #them #take #security #prompt
  22. sb the chippy-choppy @[email protected]

    I love #PHP. Always have.

    #php
  23. Sephster @sephster

    If you don't enjoy writing PHP or have a poor opinion of it, that's your prerogative, but for the love of everything good, keep it to yourself for a wee while eh? Have some compassion as it has been a pretty tough week

    #php
  24. packet storm @packet_storm

    PHP2Shell Exposure: 73% of 2.2 Million Version-Disclosing PHP Services Run Unsupported Branches packetstorm.news/news/view/462

    #news
  25. Sergio Lima @[email protected]
    Eu atualizei o #PHP no servidor compartilhado que mantenho 90% dos meus projetos, mas a verdade é que todo o "auê" em torno de uma vulnerabilidade no PHP era 95% FOMO e só 5% catastrófico, segundo este artigo aqui: eliastaylor.com/noexploit/ publicado na Hack news daily de 19/10/2026
    #php
  26. 🌈 Lascapi ⁂ @[email protected]

    > The growth of AI-assisted research also means the PHP security team receives far more reports than before [...] the team has published 15 CVEs since July 1st and worked through more than 100 reports that turned out to be invalid, duplicates, or not reproducible.

    #php #security #php2shell

    thephp.foundation/blog/2026/10

    #php #security #php2shell
  27. Otto Schmilinsky @[email protected]

    Para los que vivís bajo una roca #PHP

    #php
  28. Tino Eberl @[email protected]

    Das wird noch „lustig“. 🤮

    heise.de/news/php2shell-Millio

    #php2shell #php

    #php2shell #php
  29. Socket @socketsecurity

    Good news, everyone! exploits are a massive fail (so far)

    #php2shell
  30. Zalasur 🐸🇺🇦 @[email protected]

    BREAKING: Critical #PHP upgrades across the world are put on hold on news that #Factorio 2.1 has been released as stable.

    #php #factorio
Next page
Share on Mastodon

Enter the server where you have an account.