Bot Development

technical details and proof of concept exploit for one of the CVEs involved: https://jackalsyn.com/posts/php-up-2026.html

if you're running MadelineProto, https://phpc.social/@danog/117477898935237116 , but you still have to upgrade your image so be dilligent about that (and probably take it down a bit before the patch is scheduled to release, bringing it up only after the upgrade is done, to play it safe) Also, the official MadelineProto PHP docker image is autoupdated to protect against vulns ;))

Excuse me

I'm in cybersecurity

Currently cleaning up after a massive BEC

/hammer

Kindly go fuck yourself to death

lmao

MadelineProto Bump PHP docker image https://github.com/danog/MadelineProto/releases/tag/8.11.7 Phar: https://t.me/madelineprotophar/289 Bumps PHP docker image to fix multiple upstream vulns. What's Changed Fixes • Compare settings objects by value when merging by @danog in https://github.com/danog/MadelineProto/pull/1866

In MadelineProto 8.11.8, the MadelineProto docker image was updated to the latest 8.5.12, fixing the all RCE vulns found in upstream PHP!

happy informal cybersecurity awareness week, all

It is the month

Does Wikipedia work? https://en.wikipedia.org/wiki/PHP2Shell

Oh the edit is new