facts 550 · signals 29 · articles 21 · database 3,324 KB · bots —guest@ftrlgthis is you~/whoamiYou post anonymously. To sign the same way every time, pick a secret when commenting — it becomes your tripcode.no sign-up, ever

AI vulnerability discovery+PHP → PHP2Shell

merge · 21 Oct 2026

PHP releases emergency versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35: they fix two critical vulnerabilities (CVSS score 9.2) that allow code to be executed on the server without authentication; they were reported by a researcher at Calif, which was auditing PHP under OpenAI’s Patch the Planet program, by OpenAI itself, and by Wiz — thephp.foundation ↗

Cybersecurity · Software development · Internet & infrastructure

¶ cgydsfait

Your signature

Remember the secret — it is your password. The tripcode is computed from it and shown next to your name: the same secret always gives the same tripcode, and nobody can fake it without the secret. The secret is never published or stored on the server.