Post

Hello every non-techie webcomics person who gets scared to even touch their website. PLEASE contact your host and make sure they're ready to patch this.

nightshade →home, for now@nightshade.technology

details leaked. this vulnerability is a full unauthenticated unconditional remote code execution exploit against any service running on a PHP version from 5.4 until latest yeah if anything deserves CVSS 11, this is it. this is CATACLYSMICALLY bad.

21/10/26, 5:20 am269 reposts364 likes

Nero Villagallos O'Reilly

@itsnero.com

I know some of you are running comicpress on php 6 or some incredible nonsense. Please, please update.

🔪 To Meet You

@ear-a-corn.bsky.social

✋ Hi, non-techie person here, what does this mean?

Viz 🏳️‍⚧️

@invisibleup.com

Hackers found a backdoor into any website that runs Wordpress, Comicpress, Mediawiki, phpBB, etc. Any of those sites should be taken offline until they can be patched.

🔪 To Meet You

@ear-a-corn.bsky.social

Got it, thank you!

Nero Villagallos O'Reilly

@itsnero.com

Yeah, this! And if you can't get in contact with them, definitely do a backup of your website just in case something happens. (I am a big proponent of doing as many backups as possible haha)

Dex 🔞

@dex.nullpat.ch

within minutes of the full details of this vulnerability being released, attackers will be able to trivially fully take over any website using that software that isn't patched delete everything, redirect to malware, etc.