NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#web-runtime

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedphp2 php2shell2 aws-waf1 containers1 memory-corruption1 session1

2 stories, newest first · one card per story

Horizon3.ai20d agohigh

PHP2Shell exploitability depends on the runtime, Horizon3 says

Horizon3 validated CVE-2026-109618 and CVE-2026-109619 only under preconditions it is still mapping.

4 min readphp php2shell

1

Hacker News · security20d ago

AWS bulletin lists PHP runtime flaws CVE-2026-109618 and CVE-2026-109619

A WAF rule named PHP2Shell blocks POSTs that pair PHPSESSID with PHP_SESSION_UPLOAD_PROGRESS.

3 sources php aws-waf