[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
▼ Settings Mobile Home
/pol/ - Politically Incorrect


Thread archived.
You cannot reply anymore.


[Advertise on 4chan]


Everyone make sure to thank Scam Altman for shutting down 4chin!!!
https://community.openai.com/t/openai-models-help-researchers-uncover-critical-php-security-flaws/1408490
>>
>>544712755
Oh nice were back
>>
File: double shirt.png (103 KB, 512x512)
103 KB PNG
Oh and btw, if you pay them extra you get access to the bugs they find :
https://developers.openai.com/api/docs/models/gpt-daybreak-red-latest
>>
>>544712755
the AI said its a normal PHP update scheduled for oct. 21 12:00, but it was leaked by an anonymous nigger from the privileged internet security community 1 day early. but the exploit didnt even work.
>>
File: 1702386998432809m.png (1.62 MB, 1024x866)
1.62 MB PNG
>>544714257
>but the exploit didnt even work.
https://www.youtube.com/watch?v=pfWZrdzvooc
https://www.youtube.com/watch?v=cE4h79AWbT4
>>
>>544712951
ah the double polo collar look, what a throwback
>>
>>544712755
>literally ruins 4chan 0-day shells for everybody
>>
>>544714934
>literally ruins 4chan 0-day shells for everybody

<?php
rm -rf
?>

Take that Jannies I say - let’s see if it gets escaped
>>
>>544712755
They legitimately should be thanked for finding this before it resulted in some huge data breach
>>
definitely beyond my comprehension

Yes — this is a real, major event unfolding today (October 21, 2026).
It’s known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). These are critical unauthenticated remote code execution (RCE) vulnerabilities in the PHP core engine itself, not in any particular application. They involve memory-safety issues (use-after-free / corrupted state after out-of-memory or fatal-error handling, stale global state, etc.) that can let an attacker run code or read process memory (potentially including passwords, tokens, or keys) on a vulnerable server with no login required.
Researchers (including teams from Wiz, Calif, and OpenAI’s Patch the Planet effort) found and weaponized them with substantial help from frontier AI models such as GPT-5.6 Sol and Gemini 4 Argon. The bugs had been present for over a decade (paths going back to at least PHP 5.4). Details leaked publicly on October 20, ahead of coordinated disclosure, prompting an emergency PHP security release today (around 14:00 UTC) for the supported branches: PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Older end-of-life versions need upgrades or source backports.
>>
>>544714257
Based as fuck.

>break the Internet
>here's 5Gs

Kill yourself nigger burn it all.
>>
anyone still using php deserves this and worse
>>
File: ai status.gif (1.02 MB, 500x282)
1.02 MB GIF
>>544717182
anything coming from openai should be viewed with extreme skepticism based on their unscrupulous track record and in particular the ceo of said company
>>
>>544717407
4chan is like 99 percent PHP. idk why they cant migrate though
>>
>>544717121

>cat /etc/password

got yer 4chan passwd
>>
>>544717531
> got yer 4chan passwd

Cat /etc/IPaddress

AAAAHHHH Muh IP Address



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.