Exploit Development

Security researcher disputes severity of new PHP vulnerability, cites lack of working exploits

A security blogger argues that a newly disclosed PHP vulnerability, widely discussed online for roughly ten hours, lacks a functioning proof-of-concept despite thousands of 'PoC' exploit scripts appearing on GitHub. The author says none of these scripts actually work against a standard PHP server when tested directly, and contrasts the situation with past critical bugs like Log4Shell, Heartbleed and Shellshock, which were exploited within hours of disclosure.