Post

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

nightshade →home, for now@nightshade.technology

oh it's bad. oh it's BAD bad. oh this is CATASTROPHIC, drop-whatever-you're-doing-and-patch-NOW levels of bad cert.europa.eu/publications...

sweet little raquel

@computer.fish

in terms of 1 to log4shell how bad is that

21/10/26, 1:41 am0 reposts100 likes

violet, wanted for elf crimes

@sumirewitch.in.bnuuy.world

its *only* the most catasrophically bad form of vulnerability that could be had and its *only* in PHP, which is *checks notes* oh, VERY common its REAL bad

star

@scarletstar.myatproto.social

log4shell+1

nightshade →home, for now

@nightshade.technology

"yes" bad (so bad it goes off the end of the scale)