So where are the real world exploits? Wouldn’t we hear of lots of barely maintained php servers being cracked open everywhere?
This is increasingly a story similar to the boy that cried wolf… next time people will not take such CVEs serious anymore.
Comment on There isn't an easy exploit for this PHP vulnerability
i_am_not_a_robot@discuss.tchncs.de 1 week agoThis is dangerous misinformation. Both PHP bugs are real and together they are exploitable without the server having some other rare problem.
povoq@slrpnk.net@slrpnk.net 6 days ago i_am_not_a_robot@discuss.tchncs.de 6 days ago
It’s too soon. Only people who are on top of things would have already noticed, and then even after people notice they’re probably going to want to do investigations and get PR people and lawyers involved before making any public announcement. We’re more likely to hear the consequences from dark web forums first.
INeedMana@piefed.zip 6 days ago @povoq@slrpnk.net I think i_am_not_a_robot has a point that it’s too soon
For unrelated reason I had to wipe my blocklists on VPS for a moment. Just during a few minutes one of my containers was getting hammered with all kind of
.phprequests.
Even if it wasn’t used in the wild before, it seems that now bots are running in circles with those new toys
stopforgettingit@lemmy.world 6 days ago
You are right, I am wrong. I am deleting my comment. Even if I was right this should still be patched ASAP regardless of what the exploit was.