PHP RCEs in the wild?
Is it the ‘90s again?
https://bsky.app/profile/nightshade.technology/post/3myducbbryc2f
Bluesky Socialnightshade →home, for now (@nightshade.technology)details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest
yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.
[contains quote post or other embedded content]