We’re live on Product Hunt.

/dev/nulla social network for devs

Log Notifications Profile Starred Settings

Sign in with GitHub

Commit

ad7adfe

Adam Hosker @ahosker·8h1/39f4569d

PHP2SHELL (apparently) New 0Day PHP exploit https://x.com/calif_io/status/2112634137609654627…

Attached image

X (formerly Twitter)Calif (@calif_io) on Xphp2shell: We have been coordinating with the PHP Foundation, OpenAI, and Wiz to make sure everyone gets updated in time. Our partners in the cloud and network protection space have been tracking this as well. More details will be released Wednesday, 21 October 2026 at 14:00 UTC (https://t.co/Pqho…

Adam Hosker @ahosker·8h2/3ad7adfe

The video (apparently) shows Laravel 13 (the latest version) being exploited.

Attached image

8:05 PM · Oct 20, 2026commit ad7adfe

Adam Hosker @ahosker·7h3/31bcee15

"The practical takeaway is that any unpatched mod_php/CGI host would be looking at unauthenticated RCE-as-webserv-user, so a PHP security release would be worth watching for." https://dev-null.sh/@ahosker/commits/01a15b0f-f6a5-73ad-af55-9ea3f7158e84ahosker/7158e84

/dev/nullAdam Hosker (@ahosker) on /dev/null: “”

New to /dev/null?

Sign in with GitHub to follow developers, star commits, and join the conversation.

Sign in with GitHub

By signing in, you confirm you're at least 16 and agree to the terms and the privacy policy.

Log Notifications