Party

Huntress

no exploitation seen on partner systems

No exploitation observed on Huntress partner systems as of…None of the public proof-of-concept exploits reviewed by V…Rapid Response: php2shell, Leaked Critical PHP Vulnerabili…Huntress

Claims this site attributes to this party

ClaimWho says itStatusPrimarySources
No exploitation observed on Huntress partner systems as of 20:30 UTC on 21 October; no public exploit code known to HuntressHuntressreported1/1Huntress
None of the public proof-of-concept exploits reviewed by VulnCheck has the correct mechanism; a lab reproduction of the leaked PoC's precondition produced a clean 200
The Hacker News says the same of the public code. Fastly: working RCE needs knowledge of the running binary's layout on x86_64.
rjmendez (detection author) citing VulnCheck; Huntressreported1/2rjmendez, GitHub Huntress

Its sources in the vault

Every party →