@GossiTheDog@cyberplace.social
2026-10-22 22:10 UTC
Also update Citrix Netscaler boxes for PHP vuln, particularly if you have mgmt interface facing Internet. Why? You guessed it - ASLR is disabled.
Replies (1)
-
@GossiTheDog@cyberplace.social 2026-10-22 22:19
Also hp system management homepage (installed on HPE Proliant servers) all ship with PHP.. with no ASLR. There doesn’t appear to be a patch for that, you can use it to surf around flat networks as it drops you as SYSTEM/root.