Harblinger on Nostr: had to take down a couple wikis because of the PHP shitstorm. There's another ...
had to take down a couple wikis because of the PHP shitstorm. There's another exploitation framework that has been posted publicly (not the PHP2SHELL shown in the vid), but I haven't really looked into it so I won't link
php.net is 504ing, so here's the tweet:
> The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
> PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
{
"id":"0ebc9676837a5164b05fb09d988ac13e348d088f0739a4f37b96a362c7505d8d",
"pubkey":"5f964311bd13aa755897ad46f8e0043b6bb8fcb0178f5131c0468830795a1e12",
"created_at":1792556867,
"kind":1,
"tags": [
[
"imeta",
"url https://wizard.casa/media/1a7431ca686d3a679f74bb292659b9a1e080b9d47681bfc42d526b56897c80fb.mp4",
"m video/mp4"
],
[
"proxy",
"https://wizard.casa/objects/01a15cb7-205b-7ee1-be05-322d3b452b53",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://wizard.casa/objects/01a15cb7-205b-7ee1-be05-322d3b452b53",
"pink.momostr"
],
[
"-"
]
],
"content":"had to take down a couple wikis because of the PHP shitstorm. There's another exploitation framework that has been posted publicly (not the PHP2SHELL shown in the vid), but I haven't really looked into it so I won't link\n\nphp.net is 504ing, so here's the tweet:\n\n\u003e The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.\n\n\u003e PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.\nhttps://wizard.casa/media/1a7431ca686d3a679f74bb292659b9a1e080b9d47681bfc42d526b56897c80fb.mp4\n",
"sig":"211d4e3549495cbc271efd1b1c527adf638c10951796fff33bf640df97d72d3003ec8c2240059c01bed203264af6d0b3d4257564c94ca6ea63cef3470dff2df1"
}