Comment on There isn't an easy exploit for this PHP vulnerability
povoq@slrpnk.net@slrpnk.net 6 days ago So where are the real world exploits? Wouldn’t we hear of lots of barely maintained php servers being cracked open everywhere?
This is increasingly a story similar to the boy that cried wolf… next time people will not take such CVEs serious anymore.
i_am_not_a_robot@discuss.tchncs.de 6 days ago
It’s too soon. Only people who are on top of things would have already noticed, and then even after people notice they’re probably going to want to do investigations and get PR people and lawyers involved before making any public announcement. We’re more likely to hear the consequences from dark web forums first.
@povoq@slrpnk.net I think i_am_not_a_robot has a point that it’s too soon
For unrelated reason I had to wipe my blocklists on VPS for a moment. Just during a few minutes one of my containers was getting hammered with all kind of
.phprequests.Even if it wasn’t used in the wild before, it seems that now bots are running in circles with those new toys