Cisco Talos is tracking the disclosure of two unauthenticated remote code execution (RCE) flaws in PHP core, dubbed “php2shell”, triggered by a plain HTTP request and exploitable before any application code runs, affecting every PHP build since 5.4. Based on the entities involved in the disclosure, artificial
First seen on blog.talosintelligence.com
Jump to article: blog.talosintelligence.com/two-critical-rces-in-php-core/
