Harblinger on Nostr: had to take down a couple wikis because of the PHP shitstorm. There's another ...
had to take down a couple wikis because of the PHP shitstorm. There's another exploitation framework that has been posted publicly (not the PHP2SHELL shown in the vid), but I haven't really looked into it so I won't link
php.net is 504ing, so here's the tweet:
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
{
"id":"d3d833c00431ec903e425495dba5477246e5a42da6fbf7428dc9dd66f68dc9e7",
"pubkey":"e11d2ced5ee3b23835a086da4a6b81d0d4d25232bcd1a66cacf5bc00f8149812",
"created_at":1792556867,
"kind":1,
"tags": [
[
"imeta",
"url https://wizard.casa/media/1a7431ca686d3a679f74bb292659b9a1e080b9d47681bfc42d526b56897c80fb.mp4",
"m video/mp4"
],
[
"proxy",
"https://wizard.casa/objects/01a15cb7-205b-7ee1-be05-322d3b452b53",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content":"had to take down a couple wikis because of the PHP shitstorm. There's another exploitation framework that has been posted publicly (not the PHP2SHELL shown in the vid), but I haven't really looked into it so I won't link\n\nphp.net is 504ing, so here's the tweet:\n\nThe PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.\n\nPHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.\n\nhttps://wizard.casa/media/1a7431ca686d3a679f74bb292659b9a1e080b9d47681bfc42d526b56897c80fb.mp4",
"sig":"ee9104cd466e8b495106b1dc6d87abd3767c4cbb3c406d498e2d687d618840df2546a435d3cea86d9e88a7f6101e82f87741252996facf8a22124601e01ec5fb"
}