New CRITICAL PHP vulnerability
- Thread starter bigredfish
- Start date
So we all need to disconnect from the grid for a few days? I have beer, tequila, and ammo in case SHTF.
Whenever I hear about a major vulnerability like this, I always wonder how many of the affected services will never be updated because they are running on devices that are no longer supported, don't have an update mechanism, etc.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Removed
A security researcher just dropped two unpatched critical vulnerabilities on twitter for everyone to see. before a fix even existed
CVEs that let attackers take over servers through PHP’s session handler. fully weaponizable. lab tested. working exploit, and they posted it publicly. on twitter. while millions of servers are still vulnerable
A security researcher just dropped two unpatched critical vulnerabilities on twitter for everyone to see. before a fix even existed
CVEs that let attackers take over servers through PHP’s session handler. fully weaponizable. lab tested. working exploit, and they posted it publicly. on twitter. while millions of servers are still vulnerable
I wonder how long it will take Samsung and LG to patch their internet-connected smart appliances?
Flock leaves their LPR cameras wide open so this is no additional risk.
Flock leaves their LPR cameras wide open so this is no additional risk.
Last edited:
