Today I learned InfoSec's acronym for "did this exploit actually hit me while I was asleep?" is IoC (Indicators of Compromise) and I'm currently searching for those on the #PHP2Shell case. Because it turns out it might have been actively exploited all the way since JUNE!
Either this vuln checker is flawed, or the standard #YunoHost security checks might have saved me from the #PHP2Shell . The results were "inconclusive" both before and after upgrading, so, who knows? php2shell.aikido.io/
like this
OK, the patched versions just arrived. No signs of exploit so far, but I will be checking during the course of the day.
Profoundly Nerdy
in reply to Carlos Solís • • •Carlos Solís
in reply to Profoundly Nerdy • •