PHP2Shell
From: https://www.theregister.com/security/2026/10/22/php2shell-exploit-bypasses-protections-designed-to-stop-remote-code-execution/5304883 The team told us that it’s a “significant advance” because up until now, ASLR has been a major barrier to exploiting PHP2Shell on real-world servers. They don't expect that to hold, though. “Adversaries are clearly spending time (and tokens) on this bug,” Spencer McIntyre, director of exploit development at VulnCheck, told The Register. The PHP2Shell mess grew even bigger on Thursday amid reports of attackers abusing the security flaws days before they were disclosed and UK government websites proactively going dark. There is so much going on in these two sentences: ASLR being bypassed (based on my admittedly shallow understanding of ASLR, it's kind of unbelievable how sophisticated the attacks have become) "leak" of a major global vulnerability, sending everyone scrambling no real mitigation possible only recommendation: turn th...