🇧🇷 senior developer | 27 y/o doing useless code since 2011 php and laravel is the way!! talking about: php + rust + postgres + open source @he4rtdevs
discord.gg/he4rt
Joined March 2013
- Tweets41.7K
- Following2.5K
- Followers42.6K
- Likes63.7K
simplesmente desista e vá plantar tomate em algum lugar remoto
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
danielhe4rt.php retweeted
Hey all! Just posted a video: Stop Waiting on Your AI Agent (Use Git Worktrees)
Hope you like, it, any feedback appreciated!!
youtu.be/rVAaE7Ox75U
ah mano a IA não vai acabar com os nossos empregos mas sim com todas as empresas de QUALQUER TECNOLOGIA
‼️ BREAKING ‼️ PHP warns of another UNPATCHED REC vulnerability just 2 days after releasing emergency patches for critical PHP2Shell flaws.
New "CVE-2026-115560" affects only unusual session configurations. PHP has issued urgent mitigation guidance.
Full details → thehackernews.com/2026/10/ur…
Bem mesmo tá o @rasmus de férias infinitas vendo o filho dele (PHP) deixando meio mundo em puro choque kkkkkkk
desliga a internet e vai pro bar
is it time to turn the internet off yet
kb.isc.org/docs/cve-2026-943…
cara
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
As high as CVSS 9.0. Whoops.
phoronix.com/news/LKML-New-T…
além de desligar os servers pode apagar todos os apps tbm
de preferência se comunique por carta ou sinal de fumaça pq todo o resto vai ser comprometido
KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK ZIKA MAIS AI KKKKKKKKKKKKKK
oracle.com/security-alerts/a…
é rapaziada, desliga tudo ai. mas tudo MEMO tlgd?
e eu to achando que hj é só o primeiro dia de um evento colossal em cybersec
An urgent notice from the Railway team
blog.railway.com/p/security-…
danielhe4rt.php retweeted
Of course it'd be better to have vulnerability in PHP at all, but I'm deeply moved by today's events:
1) The absolute profesionalism of everyone involved from @ThePHPF. Thank you!
2) The number & size of sites went off-line at 2PM UTC to patch their servers. PHP totally runs the world!
3) PHP in news reports in press and TV across the world.
danielhe4rt.php retweeted
The #php2shell panic got the severity right and most of the details wrong. It's a 9.2, not a 10.0, and the session.upload_progress flag you were told to switch off belongs to the other CVE. I went through the rumors against the advisory and the diff: daubois.dev/blog/cve-2026-10…
meio mundo aguardando uma pipeline rodar kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk
já deixa uma estrela no repo dos heróis ai
github.com/docker-library/ph…
PHP publicou os fixes, mas foram só as quatro ultima minor versions do PHP 8.
- 8.5.12
- 8.4.27
- 8.3.36
- 8.2.35
Tudo abaixo do PHP 8.2 vai estar vulnerável, é isso guys, ggwp pra internet atual.
literalmente fudeu a nível federal pra uma parte gigante da internet hoje por causa do tal PHP
acharam uma RCE que tá lá há mais de uma década e só vão dar upgrade nas versões LTS
pelo menos uns 30% da internet:
- ou atualiza a versão do php pra LTS
- ou vão ser ownados :D
danielhe4rt.php retweeted
📅 Semana na He4rt:
Seg, 21h: Reunião Semanal
Ter, 20h: English Meetup
Qua, 19h: Aulão na Twitch
📺 twitch.tv/he4rtdevs
