Leadership
Ok so, some fun notes:
Cloudflare deployed blocking rules at about 1500 today!
Ubuntu back ported the fixes so this server is now patched!
The world, so far hasn’t ended!
Pwndefend stayed online, whilst many others… did not! That speaks volumes for their defence in depth perhaps….
Let’s see where this PHP cyber journey will go!
Threat Intel
Another day, another vulnerability, as has been so… for basically forever. However if you run PHP you don’t want to sleep on this one, due to some shenanigans there’s been an ‘early release of intel’ (leak) and a patch for PHP is on the way, however there’s also now a PoC in the wild! But the devil, as always is in the details! So let’s explore those, as always this is a fast publish and you should look to the vendor for guidance etc. with that important caveat aside, let’s explore:
Read more “Vulnerabilities in PHP (CVE-2026-109618 / CVE-2026-109619)”
Threat Intel
Yesterday afternoon/early evening a patch for WordPress was released (7.0.2) which address two vulnerabilities which are named: WP2SHELL. This is a fast post (largely generated by Claude Opus) to provide some detail. For reference in our research we have found ~20% of WordPress sites still vulnerable as of a few hours ago (based on a sample), so this is a live scenario and it would be strongly advisable for organisations to take appropriate steps. This morning I’ve built a docker lab of a vulnerable WordPress site and demonstrated hash theft and web shell deployment to a vulnerable lab instance.
I’ve put some resources for people (use at own risk) into a repo: https://github.com/mr-r3b00t/wp2shell/
that includes a scanner, some info on the vulns and a PoC tool!
Vulnerabilities
Given the recent discovery of a critical vulnerability (CVE-2025-64446) in the Fortiweb appliances (exploitable via the management interfaces) I thought I would have a look at what other vulnerabilities have been discovered/published and what Proof of Concept (PoC) exploits exist in 2025.
Read more “Fortiweb Vulnerabilities 2025”