In this video I discuss a 24 year old bug in the GNU C Library (tracked as  CVE-2024-2961) that can allow a threat actor to get remote code execution on virtually any PHP application that is running on a system with GlibC (pretty much every Linux Operating system and by extension most websites on the internet)

My merch is available at
https://based.win/

Subscribe to me on Odysee.com
https://odysee.com/@AlphaNerd:8

₿💰💵💲Help Support the Channel by Donating Crypto💲💵💰₿

Monero
45F2bNHVcRzXVBsvZ5giyvKGAgm6LFhMsjUUVPTEtdgJJ5SNyxzSNUmFSBR5qCCWLpjiUjYMkmZoX9b3cChNjvxR7kvh436

Bitcoin
3MMKHXPQrGHEsmdHaAGD59FWhKFGeUsAxV

Ethereum
0xeA4DA3F9BAb091Eb86921CA6E41712438f4E5079

Litecoin
MBfrxLJMuw26hbVi2MjCVDFkkExz8rYvUF

Mental Outlaw's resource offers insights, tutorials, and resources for personal development, productivity, and self-improvement. Readers can learn about mindset techniques, productivity hacks, and personal growth strategies. With articles, videos, and resources, Mental Outlaw provides  guidance and inspiration for achieving success and fulfillment in life.

Mental Outlaw

A 24-year-old bug in the GBC library can be exploited to take over virtually any PHP application.

All PHP Applications are Vulnerable

Just a disclaimer for anyone watching, it is not a bug in PHP and only affects you if you convert TO the specific charset (not from), this is unlikely to lead to an RCE and more likely will lead to a DOS

<a href="https://www.php.net/archive/2024.php#2024-04-24-1" target="_blank" rel="noopener nofollow">https://www.php.net/archive/2024.php#2024-04-24-1</a>

This is freaking !
A such dangerous bug found after more than twenty years.