English

Posts with #php5

#php5

Public posts on X that use #php5.

Related hashtags

  1. Libu 🍁🍂@LibuWangxian
    My theory for what happend to AO3: They didn't hear about the PHP thing in time, someone got into the website and started changing/deleting stuff. They hoped it was a small hack and could restore it quickly. Turns out the entire website is vulnerable and have to rebuild much more
    Download
    8917222.9K
  2. HackerOnTwoWheels✓@HackerOn2Wheels
    Signing servers were running on PHP 😔
    Bitcoin News @BitcoinNewsCom
    CRITICAL QUESTION EMERGES IN BINANCE HACK OVER HOW ATTACKERS GAINED CONTROL OF ITS WALLET Attackers reportedly used EIP-7702 delegation to redirect Binance’s wallet to malicious code, allowing funds to be drained. But how did they obtain authorization? Two possibilities are being investigated: 1) a stolen private key or 2) a malicious authorization signature obtained through a compromised signing process. Neither has been confirmed. If the private key wasn’t stolen, the attack could expose a major vulnerability in how exchanges authorize transactions, rather than how they secure private keys.
    47484.9K
  3. Bitcoin News✓@BitcoinNewsCom
    CRITICAL QUESTION EMERGES IN BINANCE HACK OVER HOW ATTACKERS GAINED CONTROL OF ITS WALLET Attackers reportedly used EIP-7702 delegation to redirect Binance’s wallet to malicious code, allowing funds to be drained. But how did they obtain authorization? Two possibilities are being investigated: 1) a stolen private key or 2) a malicious authorization signature obtained through a compromised signing process. Neither has been confirmed. If the private key wasn’t stolen, the attack could expose a major vulnerability in how exchanges authorize transactions, rather than how they secure private keys.
    335831569.7K
  4. Laravel@laravel
    We’ve published a post-mortem on our response to the October PHP and Node.js security releases, covering the in-place patching of Laravel Cloud, the impact on Forge, Envoyer, and Vapor, and what we’re changing →
    142417326.2K
  5. Tom's Hardware@tomshardware
    PHP vulnerability post-mortem reveals bug was known two years ago — Small team of maintainers knew of the issue before it was made public, as new PHP2Shell chained exploit ravages servers
    421714.1K
  6. GGSec@GGASecDe
    Closing out #php2shell: a universal black-box PoC for PHP's session upload-progress bug. One pure-HTTP chain - arm the allocator, spray fake refs, leak the heap, beat ASLR, turn a destructor into system(). Verified blind on Debian 13 PHP 8.4.24, x86-64 + arm64: RCE as www-data.
    Download
    37526.5K
  8. Jay Rogers 👨‍💻✓@jaydrogers
    Compiling PHP from source is coming along well 😃 So when the next PHP panic hits, we'll be able to deploy security updates within ~24 minutes instead of waiting on upstream dependencies (which took about 4 hours) ⚡️
    Download
    1021065.9K
  9. Matt Johansen✓@mattjay
    in case anyone is curious how many PHP servers are still vulnerable on the Internet. 29 million.
    Download
    1416775.9K
  10. Zack Korman✓@ZackKorman
    The fact that the PHP vulnerability didn't immediately turn into mass chaos is only "surprising" to people who don't know anything about cybersecurity (or people trying to sell you something).
    Download
    5456750230K
  11. dawon 🇺🇸✓@_imdawon
    NEW PHP RCE???
    Download
    Cloudflare Changelog @CFchangelog
    Updated WAF rules to block new PHP RCE attacks found via the 2026-11-03 CTF challenge. Keep your apps safe against CVE-2026-109618 and CVE-2026-115560.
    35884.9K
  12. Cloudflare Changelog✓@CFchangelog
    Updated WAF rules to block new PHP RCE attacks found via the 2026-11-03 CTF challenge. Keep your apps safe against CVE-2026-109618 and CVE-2026-115560.
    4138311.5K
  13. 🦅✓@jayy0x01
    my turn , here is my poc for CVE-2026-109618 / CVE-2026-109619 ,exact build PHP 8.5.11 / Apache mod_php . Includes fresh-leak validation, evidence handling and an execution diagram. Exact-build only not a universal PHP exploit. For authorized lab research. #AppSec #PHPの脆弱性だと思うもの #infosec #PHP
    414816.5K
  14. Arcade Heroes - The Saviors of Coin-op Newsblog✓@arcadeheroes
    The PHP situation has hit Japan's arcades pretty hard - lost revenue, many games not working. No game should be inoperable if there isn't internet; I hope the industry learns from this quickly. That says something for offline only games though, doesn't it?
    127252025.1K
  15. 国家サイバー統括室(注意・警戒情報)@cyber_forecast
    【注意喚起】 2026年10月30日、PHPの複数の脆弱性（CVE-2026-109618、CVE-2026-109619）に関するJPCET/CCの注意喚起の件に関連して、オランダの国家サイバーセキュリティセンター（NCSC-NL）が本脆弱性の影響を受ける可能性がある製品一覧や対策情報などをまとめたリポジトリーを公開しています。
    214952.4K979K
  16. ExploitGrid@exploitgrid
    🚨 PoC released: CVE-2026-116512 (CVSS 9.8), unauthenticated RCE in the Project Manager #WordPress plugin (<= 4.1.1). Unsanitized 'id' param reaches a PHP function call. No login needed. Update to 4.1.2. PoC: #CyberSecurity
    212672.5K
  17. 田丸浩史@hiroshiofsteel
    PHPの問題ってもう終わったの？えっちなサイトを踏んでも、もう大丈夫なの？日課なんですけど･･････？（こっちは迷惑してるんですよ！みたいな疑心の顔で）
    233933516.1K
  18. コトブキヤ宣伝✓@kotobukiyas
    【お知らせ】 PHPの脆弱性対応に伴い実施しておりました各サイトのメンテナンスが完了いたしました。 メンテナンス期間中は、ご不便をおかけいたしましたことをお詫び申し上げます。 ご理解とご協力をいただき、誠にありがとうございました。
    415145937.5K
  19. Lukas Frey@_LukasFrey
    Flock PHP 1.0 is here! 🥳 The free and open source local development environment for Laravel and PHP, native on macOS, Windows and Linux. No paid tier, every feature included. Out of beta and ready for your projects.
    Download
    324740220.2K
  20. Vincenzo Petrucci✓@nahime0
    A PHP Hello World, compiled by elephc: one 791 KB static binary. 🐘 No PHP installed. No shared libraries: ldd says "not a dynamic executable". Compiles in ~115 ms, runs in 0.5 ms. Ship PHP as a single file.
    Download
    10161629.4K
  21. Les-Tilleuls.coop@coopTilleuls
    PHP 8.6 arrive le 19 novembre, c'est une version mineure qui apporte de vraies avancées structurelles pour l'écosystème. Notre équipe a décortiqué les changements notables à prévoir, à découvrir sur notre blog :
    Download
    17412.4K
  22. AlmaLinux@AlmaLinux
    ICYMI, the patched PHP packages for CVE-2026-109618 and CVE-2026-109619 have been rolled out to the production repositories for every PHP stream on AlmaLinux 8, 9, and 10. Learn more about the CVEs and get the patched packages ⤵️
    110533.7K
  23. Show more posts