I came across the link via https://mastodon.social/@CuratedHackerNews/117481600704689796
Last time I touched php it was ~20 years ago and maybe for a month. Could someone with actual php understanding weigh in?
Somehow, somewhere between the lines, my understanding was that there have been observances of the vuln being used in the wild before the 14 UTC. And that wasn’t from reading news sites


What do you mean “DNS exploit”? Neither 109618 nor 109619 mention dns in the exploit path…
The eMudhra CA certificate breach.
What does that have to do with the PHP vulns?