Post

Hello every non-techie webcomics person who gets scared to even touch their website. PLEASE contact your host and make sure they're ready to patch this.

nightshade →eth0:2026@nightshade.technology

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

within minutes of the full details of this vulnerability being released, attackers will be able to trivially fully take over any website using that software that isn't patched delete everything, redirect to malware, etc.

1 repost6 likes

No replies yet.