Latest activity

What's new Featured content New posts Latest activity
  • brinkie
    brinkie reacted to ASUS's post in the thread Critical PHP updates with Like Like.
    21 Oct 2026 Security advisory: Critical remote code execution vulnerabilities, update now PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two...
  • ASUS
    ASUS replied to the thread Critical PHP updates.
    not yet, only php official...
  • Tristan
    Tristan replied to the thread Critical PHP updates.
    Is it already in CB as well?
  • ASUS
    ASUS replied to the thread Critical PHP updates.
    21 Oct 2026 Security advisory: Critical remote code execution vulnerabilities, update now PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two...
  • S
    sparek replied to the thread Critical PHP updates.
    Remember when you could update just PHP, without having to wrestle with changes that other updates may make? Oh... those were the days.
  • ASUS
    ASUS reacted to zEitEr's post in the thread Critical PHP updates with Like Like.
    Tested some sites after applied both fixes in PHP and Nginx and some without fixes in Nginx here: - https://php2shell.aikido.io/ and...
  • M
    mcormick replied to the thread Critical PHP updates.
    or might be options for /etc/httpd/conf/extra/httpd-includes.conf until we know more.
  • F
    Freddy replied to the thread Critical PHP updates.
    So your ModSec works? Do you use the default owasp rules or something specific? My test was on a site that doesn't use Cloudflare, so...
  • A
    altayevrim reacted to zEitEr's post in the thread Critical PHP updates with Like Like.
    Tested some sites after applied both fixes in PHP and Nginx and some without fixes in Nginx here: - https://php2shell.aikido.io/ and...
  • M
    mcormick replied to the thread Critical PHP updates.
    I've seen the requests come in, one of them being a really long array in the query string. In my case ModSec blocked the requests. If...
  • zEitEr
    zEitEr replied to the thread Critical PHP updates.
    Tested some sites after applied both fixes in PHP and Nginx and some without fixes in Nginx here: - https://php2shell.aikido.io/ and...
    • 2026-10-21_195358_php2shell.png
  • Clunk
    Clunk replied to the thread Critical PHP updates.
    Had some fun, together with Gemini, forcefully migrating old joomla and wordpress sites which where not governed by installatron on da...
  • F
    Freddy replied to the thread Critical PHP updates.
    I ran the test with all the checkboxes on and it failed on a PHP 8.4 website. The technical details say it got a 403 header but my...
  • A
    altayevrim reacted to mcormick's post in the thread Critical PHP updates with Like Like.
    https://www.aikido.dev/blog/critical-vulnerabilities-in-php-php2shell : Exploitation has been reported in the wild, and the previously...
  • zEitEr
    zEitEr reacted to mcormick's post in the thread Critical PHP updates with Like Like.
    https://www.aikido.dev/blog/critical-vulnerabilities-in-php-php2shell : Exploitation has been reported in the wild, and the previously...
Show older items
Back
Top