itsectalk | Unsorted

Telegram-канал itsectalk - IT Security Talk

2900

This is the discussion group for @itsecalert members. Please read the rules at http://yt.gl/rules

Subscribe to a channel

IT Security Talk

any group for learning cybersec ,and hac***g please dm me

Читать полностью…

IT Security Talk

🚨 PHP Security Update – Patch Your Systems ASAP!

Some backported security fixes for older PHP versions are now appearing in Ondřej Surý’s PHP PPA as well.

⚠️ A WAF alone will NOT keep you safe! Even systems protected by a WAF may still be vulnerable.

Update your PHP installations immediately and verify that the patched versions are actually running.

Vulnerability Info on rdintel:
https://yt.gl/php2shell-rdintel

(Image credit: Mattias Geniar on X)

Читать полностью…

IT Security Talk

Anyone has experience in exploiting php2shell ? Is it worth to spend time on it ?
Someone said because of ASLR it's not valuable as it sounds on public

Читать полностью…

IT Security Talk

never gone 🙂 As posted, we will be here when something important drops.

Читать полностью…

IT Security Talk

Yeah, I don't like your flooding. y has been temporarily muted for 3 hours.

Читать полностью…

IT Security Talk

Can I share my telegram channel here about CVE?

Читать полностью…

IT Security Talk

Another one bites the dust...!
Banned A.​.
Reason:
No promoting other chats!

Читать полностью…

IT Security Talk

Hey are you have any Turkish data

Читать полностью…

IT Security Talk

Another one bites the dust...!
Banned BabyG.
Reason:
No promoting other chats!

Читать полностью…

IT Security Talk

Another one bites the dust...!
Banned Knight.
Reason:
No promoting other chats!

Читать полностью…

IT Security Talk

Are there any APT groups recruiting? I’d like to join you.

Читать полностью…

IT Security Talk

Hi 小蜜蜂全球老号周会员老号 ⋆, welcome to IT Security Talk 😋 Please read the rules and make sure to click the button below to unmute yourself!

Читать полностью…

IT Security Talk

This is not work any solve this verification

Читать полностью…

IT Security Talk

He is already logged in so he used his session id

Читать полностью…

IT Security Talk

Another one bites the dust...!
Banned Onyiqnwjdo.
Reason:
Group ads not allowed

Читать полностью…

IT Security Talk

It wouldn't even be acceptable if you rolled your own in-house CA lol!

Читать полностью…

IT Security Talk

"The private keys [...] have been compromised" is strong cover-your-ass-language, when the private key is literally "4"

Among other numbers below 255

Читать полностью…

IT Security Talk

I think this is important too; maybe everyone has already written about it.

eMudhra Intermediate CA Compromise:
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.

emudhra . we-have-a-problem . com

Читать полностью…

IT Security Talk

🚨 High-Severity PHP Vulnerabilities – PHP2Shell
Multiple high-severity vulnerabilities, collectively referred to as PHP2Shell, are expected to affect PHP versions dating back to PHP 5, potentially impacting a significant number of servers worldwide.

⚠️ Important considerations:
Older, end-of-life PHP versions may not receive security patches.
Official security updates are expected to be released later today (October 21).
Administrators should prepare to deploy patches as soon as they become available.

🔗 Official PHP Project Advisory:
https://yt.gl/php2shell

Vulnerability Info on rdintel:
https://yt.gl/php2shell-rdintel

🛡️ Potential Mitigation (UNCONFIRMED)
Disabling PHP’s session upload progress functionality might mitigate the vulnerability:
Add the following to your php.ini:
session.upload_progress.enabled = Off
Then restart PHP-FPM or your web server to apply the change.

⚠️ DISCLAIMER: This workaround has NOT been officially confirmed to prevent exploitation. It is based on preliminary information and should not be considered a substitute for security patches.
We’ll share further updates as more technical details become available.

Читать полностью…

IT Security Talk

Another one bites the dust...!
Banned G.
Reason:
No promoting other chats!

Читать полностью…

IT Security Talk

Hello guys I created telegram bot to be aware of new CVE dm me and I will share the bot 😊

Читать полностью…

IT Security Talk

Hi everyone! I have a small YouTube channel focused on cybersecurity stories and awareness. I’m currently trying to grow my channel and would really appreciate your support. If you’re interested, I’d be grateful if you could check it out and share it with others. Thank you

Читать полностью…

IT Security Talk

or are you guys playing ghost

Читать полностью…

IT Security Talk

hey everyone I have just taken addmission in college (IT branch) . I know nothing about IT so can you guys help me

Читать полностью…

IT Security Talk

Suppose there is an online exam. How can we find out who applied for the exam, and among those applicants, who qualified and who was disqualified?

Читать полностью…

IT Security Talk

Hi Hh, welcome to IT Security Talk 😋 Please read the rules and make sure to click the button below to unmute yourself!

Читать полностью…

IT Security Talk

Contact Instagram support?

Читать полностью…

IT Security Talk

Brother, do you have any recommended articles, blogs, or forums? I want to improve.

Читать полностью…

IT Security Talk

Brother, how did you manage to do that! So awesome

Читать полностью…

IT Security Talk

Can someone here who works in bounty injection refer to PV? Ask a question about changing the proxy and what to do after blocking from the target side? I'm new here and want to learn.

Читать полностью…
Subscribe to a channel