Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Party

Huntress

no exploitation seen on partner systems

No exploitation observed on Huntress partner systems as of…None of the public proof-of-concept exploits reviewed by V…Rapid Response: php2shell, Leaked Critical PHP Vulnerabili…Huntress

Claims this site attributes to this party

ClaimWho says itStatusFact-checkPrimarySources
No exploitation observed on Huntress partner systems as of 20:30 UTC on 21 October; no public exploit code known to Huntress fact timeline →HuntressreportedA2 Reported disputed1/1Huntress
None of the public proof-of-concept exploits reviewed by VulnCheck has the correct mechanism; a lab reproduction of the leaked PoC's precondition produced a clean 200
The Hacker News says the same of the public code. Fastly: working RCE needs knowledge of the running binary's layout on x86_64.
fact timeline →
rjmendez (detection author) citing VulnCheck; HuntressreportedA1 Weak signal status overstated1/2rjmendez, GitHub Huntress

Its sources in the vault

Every party →