Leaderboard

Summary On 20 October 2026, the PHP foundation announced an upcoming security release addressing two critical vulnerabilities in PHP that could lead to remote code execution, according to other leaks At this time, no technical details have been made public. CERT-EU advises organisations to prepare for immediate patching of affected assets. Where immediate patching is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix is available. The PHP team has scheduled the release for 21 October 2026 at 14:00 UTC [1]. Technical Details No technical details are currently available for CVE-2026-109618 and CVE-2026-109619, apart from their CVSS scores of 9.2, which indicate the potential for unauthenticated remote code execution Affected Products These vulnerabilities could affect all PHP versions from PHP 5 onwards Recommendations CERT-EU strongly recommends identifying PHP-based applications and preparing to patch as soon as fixed versions become available. Where immediate remediation is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix can be applied. Ref: - https://cert.europa.eu/publications/security-advisories/2026-018 - https://www.php.net/index.php#2026-10-20-1 Important: https://www.vincentschmalbach.com/cve-2026-109618-and-cve-2026-109619-what-you-should-do-now/ https://jackalsyn.com/posts/php-up-2026.html

Eh, dai cu cloudflare in fata (+ fw cu allow in from cf ips), si lasi update pe mai tarziu: https://blog.cloudflare.com/php-vulnerabilities-waf-protection/ PS: omg, n-am mai intrat de cand eram copil, credeam ca s-a sters contu'

Asta e taranul cu Urus care face frauda si castiga milioane, posibil sa fie si Pax.

Mancam o paine si noi si agentii ❤️

Pai pornind de la stiva tcp/ip; e totul o copturǎ :))) Dar de acolo mancam, nu?

Bug bounty era practicat acum 20 ani prin perioada liceului. Apoi de prin facultati oamenii au fost "triati". Este o combinatie de politic, putere, bani, situatii santajabile care au dus la razboaie. Cei care au facut bani multi in Romania au facut calcand pe cadavre, multe lucruri rele, implicatii sexuale. Toate santajabile. Iar banii aia multi pe care i-au facut tin tara blocata prin mita, prin relatii. Altfel ar insemna ca foarte multi dintre ei sa mearga la puscarie pentru faptele comise. Televizorul in 2008 juca un rol important, acum este mai important. Social media a devenit numarul 1 in materie de manipulare a maselor. Santajul este #1 cand vine vorba de manipulare la nivel inalt. Presedinti, premieri, parlamentari, oameni cu putere de decizie. Hats off celor care nu fac parte din cursa sobolanului. Fiecare pune mancare pe masa cum poate.

Ai de plm. Mi-a aparut si mie pe youtube laba asta trista 🤣 > nu are acces la conducta fmm cu radetul tau cu tot..... Dau astia drumul la biti pe teava de canalizare.

Oh, da, nu stiu cat de rau e "hackerul" ala, dar liftul ala comunist cu siguranta e mai periculos.

Ce a fost si ce e, inca, PHP. Zicea cineva ca e COBOL-ul web-ului. Ma chinuiam acum un deceniu sa inteleg $_['GET'] si alte cacaturi (inca nu stiu PHP, m-am axat pe python si m-am dus spre sys admin), dar cum au avansat lucrurile de atunci pana acum. Incredibil. TypeScript, framework-uri Next, AI de acum... Pula mea, imi vine sa imi iau doua telefoane d alea vechi sa mi trimit o manea prin infrarosu. Ce trece vremea. Polonic mai e? Ma(-)ta-i grasa inca? Gecko mai traieste?

PHP e secure, nu are vulnerabilitati

La secunda 1337 incepe "investigatia" in Romania cu un hacker cu cagula din drumul taberei sofer de touareg 2 din 2015+ care incepe sa ne explice cum ca de fapt in el sunt doi lupi :))))

noroc. nu am somn.