Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers

87 points by 882542F3884314B

A custom PHP2Shell exploit has been combined with a kernel local privilege escalation (LPE) vulnerability, allowing attackers to gain root access to 25 servers, including those belonging to the US government. This chain of exploits highlights significant security weaknesses in server configurations and the potential for widespread compromise.

Read the article

Discussion on Hacker News