🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
https://t.co/L5UcCtwFn3
@bruno_gelb@aylivex Напоминает пожеванные сахарно-песочные печеньки, собственно с таким же названием. Хотя иногда похожие в кофейнях встречаю как бонус к кофе.
Польза - сомневаюсь, сахар + масло 🤷
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!