REVERSALXMODS
رفتن به کانال در Telegram
You are welcome. 💬 Request: https://t.me/reversalxmods1 ❓ For Educational Purposes Only 🔥 Support Developers! If You Like It, Buy It. 🏘 All pages t.me/reversalxlinks
نمایش بیشتر2 668
مشترکین
اطلاعاتی وجود ندارد24 ساعت
-67 روز
-1530 روز
آرشیو پست ها
2 668
‼️ A hacker cracked "Steal my Bitcoin", a server left on unpatched PHP to test the PHP2Shell flaws, in 19 hours.
He published the exploit, which worked in 7 of his 10 lab runs.
The key he took didn't open the $2,000 prize wallet. The creator had loaded the wrong one, he says.
https://x.com/jamespavur/status/2114501212313653696?s=46
https://x.com/IntCyberDigest/status/2114673896658272598
2 668
+1
❗️ A developer hid a Bitcoin key on a PHP server left unpatched against PHP2Shell, the critical flaws fixed on Oct 21, and dared anyone to steal it.
17 hours on, the wallet holds ~$2,000 and nobody has taken it.
The developer says someone is crashing PHP but "still no RCE yet".
https://news.ycombinator.com/item?id=50224916
2 668
💯 AGENT CODE:
ADSE25551
🤝 NB: Please remember to always use agent code in order to be eligible for discounted prices in the future.
🍟 Got questions? Please write to me @LilyxBot Thank you.2 668
💯 AGENT CODE:
ADSE25551
🍄 NB: Please remember to use agent code in order to be eligible for discounted prices in the future.
🚨 NB: Eligible only if your MTN sim is registered with a Ghana Card bearing female name
🌮 Got questions? Please write to me @LilyxBot
💯 Thank you.2 668
🚨 SCAM WARNING — PLEASE BE CAREFUL
There is someone on Telegram using the name Sylvester / LOAP who approaches girls with what sounds like an online job opportunity.
His story is that he has a female client who is into girls. He claims she blocked him because he refused to do a video call with her, so he needs another girl to chat with her instead.
He will tell you to use your real identity, be honest with her, and chat with her as yourself, promising that you will receive a 30% cut.
⚠️ PLEASE DO NOT FALL FOR THIS. He may eventually try to get your private/intimate pictures and then use your nudes to threaten or extort you.
Do NOT send him your nudes, Ghana Card, personal documents, passwords, money, or any other sensitive information.
I’m sharing this so people can recognize his approach and avoid becoming victims. Please stay alert and warn others.
2 668
+1
❗️ A Hacker News user apologised for posting the PHP2Shell CVE IDs two days early, saying his contact told him there was no embargo.
PHP moved its patch up a day as the IDs spread.
Amazon says attackers were already trying the exploit on 17 October, three days before his post.
https://news.ycombinator.com/item?id=50193416
2 668
+1
‼️ BREAKING: Trend Micro posted several unpatched Linux kernel flaws to public mailing lists.
Two are critical remote code execution bugs in the kernel's SMB server, and one includes proof-of-concept code.
Linux maintainer Greg told them to "fix your submission process."
https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
2 668
+1
🚨 The AI gateway library LiteLLM was hijacked again in a supply chain attack.
It hid malware that runs whenever Python starts and steals SSH keys, cloud secrets and Claude Code configs.
It also raids LiteLLM's own database for every AI provider key stored.
https://www.aikido.dev/blog/litellm-compromised-infostealer-rat
2 668
+1
‼️BREAKING: PHP has released its fix for the two leaked flaws, which can let attackers run code on servers without logging in.
"There are no complete mitigations, updating is the only safe choice," PHP says.
Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now.
PHP says Apache with mod_php is most at risk, with a demonstrated exploit that fires before any application code runs.
PHP 8.1 and older get no official update, though PHP has published source backports for 7.4, 8.0 and 8.1.
Source: https://www.php.net/archive/2026.php#2026-10-21-5
