RE: https://mastodon.social/@Edent/117483785620327786
“There isn't an easy exploit for this PHP vulnerability · Elias Taylor”
https://eliastaylor.com/noexploit/
> One really amusing thing in common with most of these "PoC"s is that they lean on "LFI", or local-file-inclusion, to make the vulnerability. In non-php terms, their exploit chain requires the server to already have a severe code-level vulnerability.
Baldur Bjarnason
npub1hr…3jxyc
2026-10-22 10:07:45 UTC
Author Public Key
npub1hr7087sk4yxl25nmx9c42p0zgk5kyfyvar5xeklezs23hjuenr7qr3jxycSeen on
wss://relay.momostr.pinkPublished at
2026-10-22 10:07:45 UTCEvent JSON
{
"id": "069ccaf093723e6554c9898ebcda304e428b0ed10d5c5942124c621f286c4b6e",
"pubkey": "b8fcf3fa16a90df5527b31715505e245a962248ce8e86cdbf914151bcb9998fc",
"created_at": 1792663665,
"kind": 1,
"tags": [
[
"proxy",
"https://toot.cafe/@baldur/117484005963344373",
"web"
],
[
"proxy",
"https://toot.cafe/users/baldur/statuses/117484005963344373",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://toot.cafe/users/baldur/statuses/117484005963344373",
"pink.momostr"
],
[
"-"
]
],
"content": "RE: https://mastodon.social/@Edent/117483785620327786\n\n“There isn't an easy exploit for this PHP vulnerability · Elias Taylor”\n\nhttps://eliastaylor.com/noexploit/\n\n\u003e One really amusing thing in common with most of these \"PoC\"s is that they lean on \"LFI\", or local-file-inclusion, to make the vulnerability. In non-php terms, their exploit chain requires the server to already have a severe code-level vulnerability.",
"sig": "87438248f698b4f273b8d8874b7dca23a0c02aaecf022e2484898198bcfad64874b1b9730c63784304051ec72335041aab70fdf34ac2ea015fd10e0163555db3"
}