New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
PHP RCE leaked with example
PHP RCE leaked before embargo.
https://jackalsyn.com/posts/php-up-2026.html
Might want to patch this fast.
Comments
Bye bye privacy
But also:
Duplicate https://lowendtalk.com/discussion/222337/upcoming-critical-php-security-release#latest
Not an exact duplicate, because this is about the leak, not the upcoming release.
Not technically a "leak" either
How is it not a leak when it was supposed to be embargoed until tomorrow?
until 8 hours from now.
just turn off session upload progress in php.ini until patch released.
I ran this through an AI and it could not reproduce the exploit.
PHP core dev say you can't turn it off from a config.
https://phpc.social/@Girgias/117476477429221001
Thanks for showing how dumb you are.
? You going to explain why? Have you even ran the poc?
You're clueless and I won't explain.
Kind of funny you are pretending to be all knowing by vagueposting when it's clear you didn't even read the details.
In order to properly something exploit or confirm vuln you must understand problem. Llm in your case does all the heavy lifting for you, that means you have no real grasp on issue or qualify to interpret llm results. Llms lie. All the time.
What Levi said. Just pointing out that AI told me my pp is big so it must be true. Very sivir sir.
Wow are you guys really this stupid?
I just said I used AI, which I used it to setup a container with php to run the PoCs to see if it worked.
Not that I didn't read or understand anything.... which this kait guy clearly didn't.
You guys part of the anti-ai boycott ai group? lol
That makes you dumb. Thats all I said. I made 0 claims about the PoC or the vulnerability.
Using AI to do grunt work does not make someone dumb.
However going straight to assuming "this guy used AI, he must have used it for everything and not understand anything" is dumb.
And so is not even reading the linked website and learning the poc is AI slop.
Very much, only low iq dumb people use AI and boast about it online.
It very much does.
So, no stupid people can use llm nowadays? And if anyone points that - automatically become llm racist?! Since when tool usage indicates knowledge about the topic?
The entitlement! Wow. Stop being toxic.
Never did I think lowendtalk would become a place for anti-ai tards to derail a thread, given how many providers here are using AI to rewrite their control panel or billing systems.
We also give them new assholes to shit out of
Look I made a new SSH client but AI wrote it all but I still made it, very cool, very sivir.
You're not doing any favors to this forum or the vps industry.
Not only are you shitting up this thread, you're making vps more expensive with this luddite behavior.
Neither are you
You make VPSs more expensive by using AI and increasing hardware prices.
Checkmate buckaroo.
And I’am bafled from the fact that any Joe in forum can claim expertise on a thing just by by saying “I used AI to do xyz and it was zyx”.
Those statements looks stupid at best. Learn this and do not compromise your public image like this.
Actually yes I actually contributed to this forum by posting awareness of this exploit and testing the claims in the link first hand.
I confirmed that you can't just fix this by disabling upload progress which turned out to be true. What have you done besides sperging out at somebody mentioning they used AI?
The people here using AI make a tiny fraction of the number of people using AI.
This exploit was also found with AI so you can thank AI for making it known instead of leaving NSA and blackhats the only people to know it for years.
https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
You been hacked by AI, 50% of your neurons out of service already.
And your other 2 neurons will go next if you don't act fast.
Fact ridden opinion curated without AI
Do you guys have anything constructive to say besides "AI bad, AI users dumb"?
@angstrom you guys allowing people to derail an entire thread simply because 1 person mentioned they used ai?