PHP2Shell Deep Dive

10 points by moebrowne

Two CVEs in PHP 8.4.26 demonstrate how an out-of-memory (OOM) crash can be exploited to achieve remote code execution (RCE). The article discusses the technical aspects of memory visualization, PHP source internals, and the exploit code involved in this vulnerability chain.

Read the article

Discussion on Hacker News