Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by nickysielicki | Hacker News Reader

Full thread

nickysielicki·

Docker images from Wordpress, joomla, and drupal were all exploitable.

https://www.wiz.io/blog/php2shell-php-rce

View on HN

Name a more iconic trio when it comes to exploits.

But these communities all patched it immediately too. Does that not say something about the iconic trio when it comes to responsiveness?

They've had a lot of practice. Usain Bolt was also really fast because he ran a lot.

Not a trio, but Magento beats all of these 3 combined when it comes to being an exploitable POS.

Windows, Exchange, Active Directory.

Word Outlook IE

Flash, IE5, MS Word

Yeah, I also got a POC working against a live serve.

The author of the article made a critical mistake in gaining my trust. He said the POC's don't work and told me to run it.

--Which-- POC's, Charlie? Why aren't you giving a full listof what you tried. This isn't reddit, and you're not doxxing or attacking anyone. Post the links. Give sources or shut up.

There are two linked in the article

Which POC did you get running against a vanilla unmodified php server. Which server, which OS?

Very weird thing for you to complain about when the writer did list multiple PoCs he tried, and here you are saying there's one that works but you won't share the link.

These? (copy/pasting from the article)

https://github.com/david-alvarez-rosa/php-rce https://github.com/eness/php2shell-CVE-2026-109618-CVE-2026-... https://github.com/ikow/php2shell-poc

Article's very vague about how the RCE actually works. They talk about the memory corruption bugs but not how exactly those become RCE.

Revealing that before people have had time to update, or it is already being exploited widely just increases the risk that more attacks will happen. I'd be sceptical if we don't get info eventually, but for now, things being vague is expected.

Reply on news.ycombinator.com