@GossiTheDog
Weird that using a FreeBSD version EOL'd over 5 years ago has consequences. 
W
wdormann@infosec.exchange
@wdormann@infosec.exchange
Indlæg
-
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. -
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@hanno @GossiTheDog
Ironically, that indeed sounds like something a security product vendor would do.
-
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@GossiTheDog
It's kind of hard to not get ASLR on modern Linux. Did they setkernel.randomize_va_space=0? Or use a not-modern FreeBSD? -
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@GossiTheDog
This is from what I'd expect to be the VM series, as it was snagged from Azure in May of this year.
️ -
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@GossiTheDog
They do? -
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.@xabean @briankrebs
I remember reporting a vulnerability to the Rufus developer, and he was quite rude and condescending in response. -
Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.@GossiTheDog
Looks like Calif may have a PoC called php2shell that works against WordPress. -
Orgs using vibe coded as a sales pitch, Lord.@GossiTheDog
Aside from LinkedIn, Twitter is the perfect place for nonsense.