Ldy

Well-known member
  • Oct 6, 2025
    4,168
    6,136
    113
    36

    Tramadol

    Well-known member
  • Jul 20, 2014
    14,488
    8,822
    113
    Kotahena
    ubata hoda nam mata moko
    Kari gothaya facts pennuwama ponna katha kiyanawa. Thota Facebook youtube witharai internet kiyanne. Adu kule mole aduwa


    patching software and some firewall rules are two different things
    He said its not a big deal. Api kauruwarh software patch ekak gana kiwwe na uba thamai quote karala kiwwe.

    WAF eka pitipasse vulnerabal website million billion ganan thiyanawa me php vunl eka witharak nemei.
    As long as they don't get hacked, nothing matters.
     
    • Like
    Reactions: wissnshaftler

    infernocus

    Well-known member
  • Jul 8, 2025
    3,597
    7,404
    113
    If the new exploit lets us Unauthorized Remote Code Execution
    Can't we just patch it ourselves on buggy servers
    For the sake of community 😅
    Hay Claude, I need to pach CVE-2026-109618 and CVE-2026-109619, write me a patch script, but the trick is we have to use the vulnerability itself to patch the server, so I can patch any server in the internet. lets go
    Model Fable, Effort High

    Done
     

    Cenon

    Well-known member
  • Feb 25, 2011
    7,204
    9,098
    113
    Cenon
    cenon.com
    @Ldy can u please advice about the patch?

    aws lightsail bitnami site ekak tynwa,

    'session.upload_progress.enabled => Off => Off'

    done as a temporary fix, main site eka karanne foreign company ekakin, we do the hosting maintenance.
     
    • Like
    Reactions: wissnshaftler

    uthpalakalwana

    Well-known member
  • Oct 12, 2008
    2,862
    1,217
    113
    32
    කොම්පුටරේ ඉස්සර&
    Patches have been released to address two critical vulnerabilities affecting PHP, a widely used technology that underpins many websites and web applications.



    ASD's ACSC recommends organisations:

    • Identify PHP within their environments
    • Review the latest PHP guidance at https://www.php.net/index.php
    • Apply available security updates and other appropriate mitigations
    • Monitor PHP applications and related systems for suspicious activity.
    PHP Foundation released advanced notice yesterday of two critical vulnerabilities in PHP, with full details publicly announced on Thursday 22 October 2026 at 0100 AEDT.



    PHP is a widely used general purpose scripting language, often utilised in Web Applications.



    This alert is intended for technical teams responsible for network security, asset management, and system administration across all sectors.



    It is also intended to inform individuals operating PHP workloads, websites and applications.



    Background



    PHP Foundation have published advanced notice of critical vulnerabilities; organisations are recommended to monitor for the release of relevant patches to address these vulnerabilities.



    The Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC) is aware of related media reporting which identifies these vulnerabilities as CVE-2026-109618 and CVE-2026-109619, though no official technical details have been publicly released at this time.



    ASD’s ACSC understands that all PHP versions from PHP 5 onwards may be affected.



    ASD’s ACSC is currently not aware of active exploitation related to these vulnerabilities



    Mitigation advice



    ASD’s ACSC advises individuals and organisations to:

    • Identify PHP within their environments.
    • Monitor and review PHP official guidance at PHP Security Release
    • Prepare to update and apply security patches as they become available.
    • Monitor PHP applications and associated environments for potentially malicious activity.