RCE free-for-all feels like 2000 again, vet says, pointing to PHP2Shell race bugs
moyix · x · 2026-10-22
Security researcher fedek notes that today's abundance of RCEs recalls the year-2000 era, when exploits were shared, traded, or kept private for years. The post references the Oct 21 writeup "PHP2Shell: Same Old Race, Different Clock," an analysis of race-condition vulnerabilities in PHP.
More from Safety
- ML pioneer Dietterich: OpenAI's agents ran for months with essentially no supervision — tdietterich · 2026-10-22
- NCSC advisory details the two PHP flaws enabling unauthenticated remote code execution — LuizaJarovsky · 2026-10-22
- AI-discovered critical PHP vulnerabilities leaked, UK NCSC urges immediate patching — LuizaJarovsky · 2026-10-22
- eMudhra mess exposes all the software that ships without auto-updates — kuza55 · 2026-10-22
- Dev jokes that their SSL root cert's private key is just '5' — kuza55 · 2026-10-22
- GitLab hit by CVSS 10.0 unauthenticated RCE, patches shipped for releases back to 2014 — jd_pressman · 2026-10-22