VissViss@mastodon.social
Oct 23, 2026, 8:01 PM@hailey in lab environments, yes. i have several
Replies
Oct 23, 2026, 8:05 PM@Viss in the wild though? There’s so much php out there that surely we would expect to see it
- VissViss@mastodon.socialOct 23, 2026, 8:07 PM
@hailey ive seen only as much as you have - lots of squealing and frothing, lots of arm waving, but not like, mass exploitation. i figure folks are finding the same thing I am - this stuff is pretty narrow, the video showed nginx attacks were possible but didnt leak enough intel to make it easy. ive been doing guided fuzzing for two days now and im seeing rce in my lab environment but i havent just tested in the wild yet. each os/php combo has a specific vector