{"id":6937,"date":"2026-10-29T10:01:44","date_gmt":"2026-10-29T02:01:44","guid":{"rendered":"https:\/\/www.alfredivy.sg\/blogger\/?p=6937"},"modified":"2026-10-29T10:01:47","modified_gmt":"2026-10-29T02:01:47","slug":"php2shell-have-critical-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.alfredivy.sg\/blogger\/2026\/10\/php2shell-have-critical-vulnerabilities\/","title":{"rendered":"PHP2Shell have critical vulnerabilities"},"content":{"rendered":"\n<p class=\"has-drop-cap wp-block-paragraph\">This must be black October for cybersecurity and webmasters.   PHP2Shell have 2 critical vulnerabilities.  PHP is a widely used scripting language in many websites and web applications, eg WordPress a popular website software.  Some European websites went dark while administrators patch their software.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.csa.gov.sg\/alerts-and-advisories\/alerts\/al-2026-151\">https:\/\/www.csa.gov.sg\/alerts-and-advisories\/alerts\/al-2026-151<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Till date there has been no public announcement of these vulnerabilities being exploited. So a guy set up a website with a crypto wallet and the vulnerable PHP, eg honeypot.  He was hacked in 19 hours.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.theregister.com\/security\/2026\/10\/26\/uk-pentester-killa-claims-2k-bitcoin-prize-in-php2shell-capture-the-flag-contest\/5305429\">https:\/\/www.theregister.com\/security\/2026\/10\/26\/uk-pentester-killa-claims-2k-bitcoin-prize-in-php2shell-capture-the-flag-contest\/5305429<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In recent months there have increased use of AI to review code, revealing bugs and backporting of fixes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This must be black October for cybersecurity and webmasters. PHP2Shell have 2 critical vulnerabilities. PHP is a widely used scripting language in many websites and web applications, eg WordPress a popular website software. Some European websites went dark while administrators&hellip; <\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[237],"tags":[646],"class_list":["post-6937","post","type-post","status-publish","format-standard","hentry","category-security","tag-php"],"_links":{"self":[{"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/posts\/6937","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/comments?post=6937"}],"version-history":[{"count":1,"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/posts\/6937\/revisions"}],"predecessor-version":[{"id":6939,"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/posts\/6937\/revisions\/6939"}],"wp:attachment":[{"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/media?parent=6937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/categories?post=6937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.alfredivy.sg\/blogger\/wp-json\/wp\/v2\/tags?post=6937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}