{"uuid": "4879a287-d86f-4cea-8ac9-3a67d5fb1c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4577", "type": "exploited", "source": "https://t.me/cibsecurity/77851", "content": "\ud83e\udd85 CVE-2024-4577: Ongoing Exploitation of a Critical PHP Vulnerability \ud83e\udd85\n\n    Overview\u00a0   On May 7, 2024, Devcore Principal Security Researcher Orange Tsai discovered and reported a critical Remote Code Execution RCE vulnerability, CVE20244577, to the PHP official team. This vulnerability stems from errors in character encoding conversions, particularly affecting the \"Best Fit\" feature on Windows operating systems.\u00a0\u00a0   Exploiting this flaw could potentially enable threat actors TAs to remotely execute arbitrary code, posing significant security risks to PHP installations across all versions running on Windows platforms. Recognizing the severity of the issue, the PHP development team promptly addressed CVE20244577 by releasing an official patch on June 6, 2024.\"\u00a0   On June 8th, cybersecurity researchers at Imperva reported the first instance of TAs exploiting ...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-06-14T17:31:16.000000Z"}