𝕏xFR first seen 9 h ago, last 9 h ago, peak #2

Two critical PHP bugs allow unauthenticated remote code execution

Original: So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is

PHP has disclosed two critical vulnerabilities that allow attackers to run arbitrary code on servers without authentication. The situation is made worse by details leaking before a full patch was available. The flaws are reported to affect widely used software including WordPress, MediaWiki, Magento, Joomla and Laravel, putting a huge share of the web at risk.

Why now: Details of unauthenticated remote code execution flaws leaked before a complete patch, and the affected software powers much of the web

PHPWordPressMediaWikiMagentoLaravel

Open on x →

Evidence

• So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and · fiveoutofnine · 403

Elsewhere

• 𝕏xGB #3 · 8 h ago

API: https://socialmediatrends-api.osmike.com/v1/trends/3173365