2900
This is the discussion group for @itsecalert members. Please read the rules at http://yt.gl/rules
any group for learning cybersec ,and hac***g please dm me
Читать полностью…
🚨 PHP Security Update – Patch Your Systems ASAP!
Some backported security fixes for older PHP versions are now appearing in Ondřej Surý’s PHP PPA as well.
⚠️ A WAF alone will NOT keep you safe! Even systems protected by a WAF may still be vulnerable.
Update your PHP installations immediately and verify that the patched versions are actually running.
Vulnerability Info on rdintel:
https://yt.gl/php2shell-rdintel
(Image credit: Mattias Geniar on X)
Anyone has experience in exploiting php2shell ? Is it worth to spend time on it ?
Someone said because of ASLR it's not valuable as it sounds on public
never gone 🙂 As posted, we will be here when something important drops.
Читать полностью…
Yeah, I don't like your flooding. y has been temporarily muted for 3 hours.
Читать полностью…
Can I share my telegram channel here about CVE?
Читать полностью…
Another one bites the dust...!
Banned A..
Reason:
No promoting other chats!
Another one bites the dust...!
Banned BabyG.
Reason:
No promoting other chats!
Another one bites the dust...!
Banned Knight.
Reason:
No promoting other chats!
Are there any APT groups recruiting? I’d like to join you.
Читать полностью…
Hi 小蜜蜂全球老号周会员老号 ⋆, welcome to IT Security Talk 😋 Please read the rules and make sure to click the button below to unmute yourself!
Читать полностью…
He is already logged in so he used his session id
Читать полностью…
Another one bites the dust...!
Banned Onyiqnwjdo.
Reason:
Group ads not allowed
It wouldn't even be acceptable if you rolled your own in-house CA lol!
Читать полностью…
"The private keys [...] have been compromised" is strong cover-your-ass-language, when the private key is literally "4"
Among other numbers below 255
I think this is important too; maybe everyone has already written about it.
eMudhra Intermediate CA Compromise:
The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.
emudhra . we-have-a-problem . com
🚨 High-Severity PHP Vulnerabilities – PHP2Shell
Multiple high-severity vulnerabilities, collectively referred to as PHP2Shell, are expected to affect PHP versions dating back to PHP 5, potentially impacting a significant number of servers worldwide.
⚠️ Important considerations:
Older, end-of-life PHP versions may not receive security patches.
Official security updates are expected to be released later today (October 21).
Administrators should prepare to deploy patches as soon as they become available.
🔗 Official PHP Project Advisory:
https://yt.gl/php2shell
Vulnerability Info on rdintel:
https://yt.gl/php2shell-rdintel
🛡️ Potential Mitigation (UNCONFIRMED)
Disabling PHP’s session upload progress functionality might mitigate the vulnerability:
Add the following to your php.ini:
session.upload_progress.enabled = Off
Then restart PHP-FPM or your web server to apply the change.
⚠️ DISCLAIMER: This workaround has NOT been officially confirmed to prevent exploitation. It is based on preliminary information and should not be considered a substitute for security patches.
We’ll share further updates as more technical details become available.
Another one bites the dust...!
Banned G.
Reason:
No promoting other chats!
Hello guys I created telegram bot to be aware of new CVE dm me and I will share the bot 😊
Читать полностью…
Hi everyone! I have a small YouTube channel focused on cybersecurity stories and awareness. I’m currently trying to grow my channel and would really appreciate your support. If you’re interested, I’d be grateful if you could check it out and share it with others. Thank you
Читать полностью…
hey everyone I have just taken addmission in college (IT branch) . I know nothing about IT so can you guys help me
Читать полностью…
Suppose there is an online exam. How can we find out who applied for the exam, and among those applicants, who qualified and who was disqualified?
Читать полностью…
Hi Hh, welcome to IT Security Talk 😋 Please read the rules and make sure to click the button below to unmute yourself!
Читать полностью…
Brother, do you have any recommended articles, blogs, or forums? I want to improve.
Читать полностью…
Brother, how did you manage to do that! So awesome
Читать полностью…
Can someone here who works in bounty injection refer to PV? Ask a question about changing the proxy and what to do after blocking from the target side? I'm new here and want to learn.
Читать полностью…