php situation is insane - YouTube
Low Level explores a critical remote code execution vulnerability discovered in the PHP runtime that affects numerous widespread web platforms. The analysis examines how researchers utilized large language models to uncover complex memory management flaws, specifically focusing on use-after-free patterns that have persisted in the codebase for over two decades. Follow along using the transcript. Low Level explores a critical remote code execution vulnerability discovered in the PHP runtime that affects numerous widespread web platforms. The analysis examines how researchers utilized large language models to uncover complex memory management flaws, specifically focusing on use-after-free patterns that have persisted in the codebase for over two decades. Follow along using the transcript.
Check out the full write up here: https://calif.io/php2shell/ And shout out to LCFR_hax for the work on this: https://x.com/lcfr_hax/ 🏫 MY COURSES Sign-up for my FREE 3-Day C Course: https://lowlevel.academy 🎙️PODCAST Get in depth breakdowns of latest cyber news: https://www.lowdownpod.com/ 🔥NEWSLETTER & MORE Check out my other stuff: https://lowlevel.tv This PHP bug is unironically the worst case scenario. It feels like every day there is a new vulnerability that comes out. And guys, this PHP one is truly the worst case scenario for like the infrastructure of the web as we know it. I…
saved by
related reading
- Let’s Handle 1 Million Requests per Second, It’s Scarier Than You Think!youtube.com
- PHP2Shell by Calif Researchcalif.io
- Greg Brockman on X: "Towards securing the internet" / Xx.com
- Vulnerability Research Is Cooked - Quarrelsomesockpuppet.org
- Assessing Claude Mythos Preview’s cybersecurity capabilities \ Anthropicred.anthropic.com
- Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incidentyoutube.com
- GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blogwiz.io
- From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code - Project Zerogoogleprojectzero.blogspot.com
- Hacking OpenAIhacktron.ai
- Earn $200K by fuzzing for a weekend: Part 1 | secret clubsecret.club
- CLI to Check For PHP Security Vulnerabilitieslaravel-news.com
- Security incident disclosure — July 2026huggingface.co