PHP2Shell is two PHP engine bugs, CVE-2026-109618 and CVE-2026-109619. One leaves an unfinished HashTable Bucket after a memory-limit bailout; the other leaves a worker-wide pointer into freed request memory. AndrewMohawk shows how both leak ASLR and reach system() before index.php, and why the fix is PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 plus a worker restart.

10 track album

レッドハットは11月1日、Linuxカーネルの脆弱性「CVE-2026-98432」に対応するRHEL向けの修正版を公開した。IPv4のTCP処理に起因するuse-after-freeで、CVSSは

One week after php2shell was patched, it stalls on the open web but reliably roots internet-facing Palo Alto PAN-OS firewalls. Inside the operators and the evidence.

YouTube video by Breach Please

The Internet was exploding with rumours about two huge PHP RCEs. This is how an unfinished HashTable and a pointer left behind by a dead request can leak ASLR addresses and eventually call system().

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP systems.

The Internet was exploding with rumours about two huge PHP RCEs. This is how an unfinished HashTable and a pointer left behind by a dead request can leak ASLR addresses and eventually call system().

PHP2Shell（CVE-2026-109618／109619）への攻撃でMirai系マルウェアPotassiumの配布試行が確認。VulnCheckはASLRを有効化したPHPでもコード実行を実証しました。SophosとUnit 42の侵害成功に関する訂正、攻撃の成立条件、修正版と対策を一次情報から整理

Researchers have engineered a reliable exploit against critical memory safety protections. Specifically, cybersecurity analysts at VulnCheck defeated Address Space Layout Randomization (ASLR) on modern 64-bit systems. Their technical breakthrough transforms the dangerous PHP2Shell vulnerability into a weaponized intrusion vector. Furthermore, this exploit delivers unauthenticated remote code execution across diverse PHP installations. Bypassing ASLR Defenses on x86-64 Servers Historically, ASLR randomizes program memory layouts during system execution.

The June 22, 2026, SANS Internet Storm Center StormCast highlighted a phishing tactic using IPv4-mapped IPv6 addresses to evade detection by obfuscating IPv4 addresses within IPv6 notation (e.g., `::FFFF:<IPv4>`), which scanning tools and blocklists may overlook. F5 patched two critical vulnerabilities in Nginx, including a use-after-free flaw in HTTP/3 enabling remote code execution if ASLR is bypassed, and a buffer overflow requiring specific configurations. Squid proxy was found vulnerable to a Heartbleed-like flaw where attackers could leak HTTP request data from other users via malformed FTP directory listings, with a temporary mitigation being the disabling of FTP support. AMD acknowledged disabling memory encryption on Ryzen 9000 consumer CPUs, promising a BIOS update in July 2026 to re-enable the feature after prior firmware changes rendered BIOS settings ineffective. The episode also noted the host’s travel schedule, limiting podcast releases to Monday through Wednesday that week.

研究者らが、重要なメモリ保護機構を突く信頼性の高いエクスプロイトを開発しました。VulnCheckのサイバーセキュリティアナリストが、最新の64ビットシステムでアドレス空間配置のランダム化（ASLR）を突破したのです。この技術的成果により、危険なPHP2Shell脆弱性は、実際の攻撃に使える侵入経