English

Posts with #php2shell

#php2shell

Public posts on X that use #php2shell.

Related hashtags

  1. The Hacker News@TheHackersNews
    🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours. That's not all. → Signs of agentic AI use in post-exploitation activity → Suspected Lazarus-linked operators scanning 216 targets worldwide Full details ↓
    Download
    532901.2K176K
  2. The Hacker News@TheHackersNews
    🚨 CISA adds two PHP2Shell bugs to its KEV catalog after confirming active exploitation. CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution on affected PHP deployments. Read ↓
    266223342.1K
  3. Eric T. S. Gonzales@ETS_Gonzales
    Internal scanner says 100% patched? "Riiight." 🤙 Attackers hit the shadow PHP staging server your agents can't see. ThreatNG maps perimeters outside-in. #AustinPowers #PHP2Shell #EASM #CTEM #PHP #Cybersecurity #ExternalAttackSurface #AttackSurface #PreemptiveCybersecurity #TPRM
    Download
    ThreatNG Security @threatngsec
    Patched #PHP2Shell? Legacy scanners miss Shadow IT. Map your true footprint with external WAF validation, Overwatch, and xSBOM. Read the blog or get a free eval: #AttackSurface #CTEM #CyberSecurity #DigitalRisk #EASM #ExternalAttackSurface #Security #TPRM
    0004
  5. Rafał@rafalohaki
    All public php2shell chains die on 8.5.12. CVE-2026-115560 doesn't. docker compose up -d python3 127.0.0.1 --cmd id → uid=33 PHP 8.5.12. Real exploit left, real page right: PWNED. Link below #infosec #php2shell #PHP
    Download
    The Hacker News @TheHackersNews
    ‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details →
    122019522.6K
  6. The Hacker News@TheHackersNews
    ‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details →
    Download
    2252.2K7.3K1.5M
  7. Trail of Bits✓@trailofbits
    Our demo shows PHP2Shell giving a shell on MediaWiki, Symfony, Laravel, and phpBB. We’ve confirmed exploits work on pre-patch releases of PHP 8.2–8.5. If you haven’t updated, assume attackers can compromise your server, and that exploitation will only get easier.
    Download
    Dan Guido @dguido
    Update: Our PHP exploit is now production-grade. * stock php.ini-production, display_errors=off, normal memory_limit, multi-worker, ASLR, under load * ARM64 + x86-64 targets * MediaWiki, WordPress, phpBB, Laravel * Apache/mod_php and nginx/php-fpm -> root
    145028236.5K
  8. Dan Guido✓@dguido
    Update: Our PHP exploit is now production-grade. * stock php.ini-production, display_errors=off, normal memory_limit, multi-worker, ASLR, under load * ARM64 + x86-64 targets * MediaWiki, WordPress, phpBB, Laravel * Apache/mod_php and nginx/php-fpm -> root
    Download
    33104676109K
  10. Cybersecurity and Infrastructure Security Agency@CISAgov
    Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
    CISA Cyber @CISACyber
    🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗
    177226024.7K
  11. CISA Cyber@CISACyber
    🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗
    Download
    617352.3K296K
  12. .@elkentaro
    React2Shell WP2Shell PHP2Shell Node2Shell Python2Shell HTTP2Shell Broccoli2Shell Log4Shell Spring4Shell Text4Shell Act4Shell #alldashells
    333733417.2K
  13. caveeroo@caveeroo
    HTTP2Shell (CVE-2026-111497) is exploitable outside Node. Unauth RCE against a pinned vulnerable Docker Official Image for WordPress via /xmlrpc.php. One inbound ASLR on, no leak or cross-request grooming. PoC:
    24722034.4K
  14. JFrog Security✓@JFrogSecurity
    🚨 Brotli2Shell goes beyond HTTP2Shell. CVE-2026-111497 is a CVSS 9.2 out-of-bounds write in Google’s Brotli decoder that has been exploited for RCE and impacts far beyond HTTP. JFrog reproduced RIP control in FFmpeg via a crafted JPEG XL file and identified additional attack paths in ClickHouse, .NET, and Apache Arrow, where some fixes were still unavailable at the time of writing. We’ve also released an open-source scanner to uncover potential exposure beyond vulnerable package versions. Full research and technical details in our blog 👇
    13118681242K
  15. mRr3b00t✓@UK_Daniel_Card
    This is one of the funnest internet days of the year! You might not agree with me, but like these are the event we have the boring days for! everyone pulls together, shares research, intel, puts in place WAF block rules etc. etc. this is community going BRRRR time! #PHP2Shell
    Download
    292832320.1K
  16. SOCRadar®✓@socradar
    PHP2Shell: 2 RCE flaws in PHP core, both CVSS 9.2. Check if your site’s PHP version is exposed. The check is passive, free, and needs no signup. #PHP2Shell #CVE
    Download
    08201.8K
  17. The Hacker News@TheHackersNews
    ‼️ ALERT - Someone tried to exploit #PHP2Shell 4 days before the vulnerabilities were publicly disclosed. Amazon caught the October 17 attempt. More exploit attempts followed the patch release. Who had the exploit details early, and how? Full story ↓
    3417670076.9K
  18. The Hacker News@TheHackersNews
    @TheHackersNews
    The new PHP flaw is separate from the two critical #PHP2Shell bugs patched on October 21. CVE-2026-115560 is NOT fixed by those emergency updates. PHP says exploitation requires an unusual session configuration and considers the risk unlikely in practice. No attacks reported.
    337163112K
  19. The Hacker News@TheHackersNews
    ‼️ BREAKING - PHP releases emergency patches for two critical #PHP2Shell RCE flaws (CVSS 9.2) as early exploit attempts emerge. The flaws can enable unauthenticated code execution and expose server memory. 👉 PATCH NOW (CVE-2026-109618, CVE-2026-109619) Details ➜
    Download
    584971.8K161K
  21. mRr3b00t✓@UK_Daniel_Card
    I hear some people think me saying that #Php2shell isn’t going to end the world is because of skills issues! I guess no one can read this… because we all died from the vulnerability apocalypse! /S 😜😜😜😜😜😜😜😜
    Download
    64232K
  25. Show more posts