Türkçe

#HTTP2Shell içeren gönderiler

#HTTP2Shell

X'te #HTTP2Shell kullanan herkese açık gönderiler.

İlgili etiketler

  1. Cybersecurity and Infrastructure Security Agency@CISAgov
    Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
    CISA Cyber @CISACyber
    🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗
    177226024.8K
  2. CISA Cyber@CISACyber
    🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗
    İndir
    617352.3K296K
  3. The Hacker News@TheHackersNews
    🚨 PHP2Shell exploited in real-world attacks. An attacker chained PHP2Shell with a Linux kernel flaw to gain root access to 25 servers across four countries, including three in a U.S. government-affiliated environment. The intrusion extended into the internal network, where the attacker targeted Active Directory. Suspected China nexus. Signs of AI-assisted tooling. Read the full report:
    İndir
    4212058060.6K
  4. The Hacker News@TheHackersNews
    UPDATE: Palo Alto Networks Unit 42 has retracted its earlier assessment linking the European government agency attack to PHP2Shell exploitation. The attack involved a vulnerable PHP application, but Unit 42 says it cannot confirm initial access was tied to the specific PHP2Shell CVEs. We've updated our report ↓
    The Hacker News @TheHackersNews
    🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours. That's not all. → Signs of agentic AI use in post-exploitation activity → Suspected Lazarus-linked operators scanning 216 targets worldwide Full details ↓
    174722941.6K
  5. The Hacker News@TheHackersNews
    🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours. That's not all. → Signs of agentic AI use in post-exploitation activity → Suspected Lazarus-linked operators scanning 216 targets worldwide Full details ↓
    İndir
    532901.2K176K
  6. The Hacker News@TheHackersNews
    🚨 Palo Alto Networks confirms active attacks exploiting PHP2Shell flaws in internet-exposed PAN-OS management interfaces. The flaws allow unauthenticated remote code execution. Multiple PAN-OS versions are affected, with some fixes still pending. Read ↓
    İndir
    146624249.2K
  7. Hostinger✓@Hostinger
    PHP2Shell: unauthenticated RCE, CVSS 9.2, exploited in the wild. We've patched across all hosting and tested the public exploit against our stack. No successful execution. Nothing to do on your side. Self-hosting? 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35.
    53203.1K
  8. Rafał@rafalohaki
    All public php2shell chains die on 8.5.12. CVE-2026-115560 doesn't. docker compose up -d python3 127.0.0.1 --cmd id → uid=33 PHP 8.5.12. Real exploit left, real page right: PWNED. Link below #infosec #php2shell #PHP
    İndir
    The Hacker News @TheHackersNews
    ‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details →
    122019522.7K
  9. The Hacker News@TheHackersNews
    ‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws. New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance. Full details →
    İndir
    2252.2K7.3K1.5M
  10. CISA Cyber@CISACyber
    We added #PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to our Known Exploited Vulnerabilities Catalog. Visit & apply mitigations to protect your org. #Cybersecurity #InfoSec #RCE
    İndir
    168221120.9K
  11. Trail of Bits✓@trailofbits
    Our demo shows PHP2Shell giving a shell on MediaWiki, Symfony, Laravel, and phpBB. We’ve confirmed exploits work on pre-patch releases of PHP 8.2–8.5. If you haven’t updated, assume attackers can compromise your server, and that exploitation will only get easier.
    İndir
    Dan Guido @dguido
    Update: Our PHP exploit is now production-grade. * stock php.ini-production, display_errors=off, normal memory_limit, multi-worker, ASLR, under load * ARM64 + x86-64 targets * MediaWiki, WordPress, phpBB, Laravel * Apache/mod_php and nginx/php-fpm -> root
    145028236.5K
  12. Dan Guido✓@dguido
    Update: Our PHP exploit is now production-grade. * stock php.ini-production, display_errors=off, normal memory_limit, multi-worker, ASLR, under load * ARM64 + x86-64 targets * MediaWiki, WordPress, phpBB, Laravel * Apache/mod_php and nginx/php-fpm -> root
    İndir
    33104676109K
  13. Tanya Janca | Shehackspurple@shehackspurple
    Patching a vulnerability doesn't kick an attacker out of your system. We've been talking about PHP2Shell for almost a week now. The patches are available, and hopefully everyone has been updating. But there's an important new development. 1/9
    41610829.2K
  14. The Hacker News@TheHackersNews
    ‼️ PHP2Shell exploit attempts hit millions as attackers try to deploy Mirai malware. Exposed attacker servers reveal RCE tooling. No successful compromises confirmed so far. Inside the payloads, exploit tools, and failed attempts →
    199436063.1K
  15. .@elkentaro
    React2Shell WP2Shell PHP2Shell Node2Shell Python2Shell HTTP2Shell Broccoli2Shell Log4Shell Spring4Shell Text4Shell Act4Shell #alldashells
    333733417.2K
  16. Aikido✓@AikidoSecurity
    Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.” A significant blast radius. This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression. Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
    İndir
    1188523.5K811K
  17. J e r r y✓@lordjerry0x01
    php2shell poc is available now. go and exploit
    探姬 | Hello-CTF 🚩 @ProbiusOfficial
    php2shell稳定利用：
    61628438.8K
  19. Calif✓@calif_io
    Calif researchers are at Unprompted, presenting zero-click attacks and php2shell. You don't want to miss this! Tue Oct 27, Stage 1, 16:45, "0-Click Remote Exploits in an AI World" with @pwnlambda and @brucedang Wed Oct 28, Stage 1, 14:45, "PHPocalypse: Finding, Exploiting, and Disclosing php2shell" with @lcfr_hax and @XorNinja
    195956142.5K
  20. Thomas Poppelgaard✓@_POPPELGAARD
    ✅ php2shell is fixed on @citrix @NetScaler (CTX697263, updated today): 14.1-73.49 · 13.1-64.32 · 14.1-73.49 FIPS · 13.1-37.286 FIPS/NDcPP One build for everything – also fixes CTX697096, CVE-2026-88779 and CVE-2026-107406. 🛠️ Checker v1.18: #NetScaler #Citrix #php2shell
    İndir
    23111.5K
  21. Socket@SocketSecurity
    Good news, everyone! PHP2Shell exploits are a massive fail (so far) 🤞
    İndir
    413956.4K
  22. CISA Cyber@CISACyber
    Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.
    CISA Cyber @CISACyber
    🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗
    2116761571.2K
  23. BleepingComputer✓@BleepinComputer
    CISA ordered US federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild.
    1322849.5K
  24. X✓@TheMsterDoctor1
    Php2shell-scanner Tool for scanning php2shell using 3 methods: via URL, localhost, SSH
    İndir
    04529713.3K
  25. Daha fazla gönderi göster