Tag: Programming
-
GHSA-j82w-28jv-3pmj (addressable): Regular Expression Denial of Service in Addressable templates with certain exploded expressions
Within the URI template implementation in Addressable, templates using the * (explode) modifier with the /, ., ;, ? or & operators (e.g., …
-
EU makes progress towards PHP patching, UK lags behind
Five days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain …
-
Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A critical PHP security release is …
-
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google’s Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python …
-
PHP is in the foundation of 70% of websites – here’s what it is and why a flaw in the software is a major hacking threat
Governments and organizations around the world began scrambling on Oct. 21, 2026, to fix a vulnerability in software that runs their …
-
PHP Issues Patches for Two Critical Flaws, Security Leaders Discuss
“It’s understandable that people are confused about how this unfolded. Word of the vulnerabilities leaked on Y Combinator’s Hacker …
-
What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers
Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities …
-
Government sites go offline worldwide after AI uncovers PHP flaws
Government websites worldwide went offline after artificial intelligence discovered critical security vulnerabilities affecting the PHP …
-
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly …
-
PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source …
-
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t
You cannot fully block the two critical PHP flaws called PHP2Shell before today’s fix, and the one setting being passed around as a …
-
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Two vulnerabilities that could affect the servers underlying many websites have been disclosed ahead of the planned security patches, …
●●●