PHP2Shell 漏洞细节：Wiz 用 Gemini 4 Argon 复现
帖子详述 PHP2Shell 漏洞：Calif 用 GPT-5.6 Sol 首发发现，Wiz 团队三周后借助 Gemini 4 Argon 等独立复现，影响约 2260 万台服务器，修复版本已发布。
GPT FOUND CRITICAL VULNERABILITIES IN PHP THAT THREATEN 70% OF WEBSITES ON THE INTERNET a researcher at Calif found the first hole back on august 1 using GPT-5.6 Sol. 3 weeks later the Wiz team independently tracked down both bugs, using Gemini 4 Argon, GPT-5.6 Sol and its own Wiz Atlas system they've been named PHP2Shell. a single unauthenticated request is all an attacker needs to run their own code on someone else's server according to Greg Brockman, the bug had been hiding in the code for about 14 years the scale is huge: - any PHP install that serves web requests is at risk - Palo Alto Networks counted 22.6 million vulnerable servers - the Netherlands and Finland temporarily took some government sites offline for 2 months before disclosure, OpenAI worked with the PHP developers, Cloudflare, Wiz and government agencies to prepare fixes under Patch the Planet. admins also got a tool that checks PHP versions still, someone found out about the hole early. Amazon logged an attack attempt on october 17, 4 days before public disclosure fixes are already out in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 now OpenAI is putting $1B into subsidized access to defensive AI tools for organizations with limited resources. the company expects findings like this to spike sharply in the coming months
这条是引用着另一条写的：x.com/mikadzyki_nft/status/2097336663429046689