Tag: PHP Security
-
PHP2Shell: Inside PHP Upload Progress and the RCE I Couldn’t Reproduce
advisories / static analysisMy PHP2Shell investigation: PHP upload-progress internals, CVE-2026-109618 and CVE-2026-109619, a PHP 8.4.4 lab, failed RCE reproduction, and practical mitigations.
-
FreePBX 17: From SQL Injection to Remote Code Execution
advisories / static analysisThere is no excerpt because this is a protected post.