{"id":183970,"date":"2026-10-23T11:41:04","date_gmt":"2026-10-23T09:41:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/dlya-uyazvimostej-php2shell-anonsirovan-pervyj-eksploit-obhodyashhij-randomizacziyu-adresov"},"modified":"2026-10-23T11:41:09","modified_gmt":"2026-10-23T09:41:09","slug":"first-exploit-bypassing-address-randomization-announced-for-php2shell-vulnerabilities","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/first-exploit-bypassing-address-randomization-announced-for-php2shell-vulnerabilities","title":{"rendered":"P\u00ebr dob\u00ebsit\u00eb PHP2Shell \u00ebsht\u00eb njoftuar eksploitimi i par\u00eb q\u00eb anashkalon randomizimin e adresave","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
K\u00ebrkuesit nga kompania VulnCheck kan\u00eb raporte q\u00eb kan\u00eb marr\u00eb eksploitin e par\u00eb p\u00ebr vulnerabilitetin PHP2Shell (CVE-2026-109618), i cili kalon mekanizmin e rast\u00ebsishm\u00ebris\u00eb s\u00eb adresave (ASLR) n\u00eb sistemet x86-64 me konfigurim standard PHP. Eksploitin lejon sulmin e sistemeve me PHP 8.4.10-8.4.26 n\u00eb konfigurimin default. M\u00eb par\u00eb, v\u00ebshtir\u00ebsia e p\u00ebrcaktimit t\u00eb p\u00ebrb\u00ebrjes s\u00eb memories n\u00eb modulin mod_php pengonte zbatimin e eksploitit q\u00eb lejonte ekzekutimin e kodit n\u00eb sisteme reale. P\u00ebr ta kaluar ASLR, eksploitin p\u00ebrfshin nj\u00eb rrjedhje t\u00eb informacionit mbi adresat n\u00eb kodin e paraqitjes s\u00eb mesazheve t\u00eb gabimeve. <\/p>\n
Raportohet se qasja n\u00eb exploit-in e pun\u00ebs \u00ebsht\u00eb ofruar vet\u00ebm klient\u00ebve q\u00eb merren me mbrojtjen e informacionit, por sulmuesit mund t\u00eb riprodhojn\u00eb teknik\u00ebn e p\u00ebrdorur duke p\u00ebrdorur AI. P\u00ebr t\u00eb shmangur bllokimin e rrjedhjes s\u00eb informacionit mbi shtrirjen e adresave, duhet t\u00eb vendosni n\u00eb php.ini parametrin \"display_errors=off\", p\u00ebrve\u00e7 rekomandimeve t\u00eb m\u00ebparshme t\u00eb publikuara. VulnCheck gjithashtu p\u00ebrmend se n\u00eb GitHub jan\u00eb shfaqur qindra prototipa exploit-esh, por vet\u00ebm disa jan\u00eb vler\u00ebsuar si funksional\u00eb dhe vet\u00ebm nj\u00eb prototip ka arritur t\u00eb kaloj\u00eb ASLR.<\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, drejtoresha e Cloudflare raportoi se kompania po regjistron miliona p\u00ebrpjekje p\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin PHP2Shell, megjithat\u00eb, vet\u00ebm 10 or\u00eb para shpalljes s\u00eb pranis\u00eb s\u00eb vulnerabiliteteve, kishte tashm\u00eb mij\u00ebra p\u00ebrpjekje, dhe dy or\u00eb pas publikimit zyrtar t\u00eb informacionit, shifrat arrit\u00ebn qindra mij\u00ebra. Duket se n\u00eb sulme p\u00ebrdoren prototipa eksploit\u00ebsh q\u00eb vet\u00ebm regjistrojn\u00eb pranin\u00eb e versioneve vulnerable PHP, pasi deri tani nuk ka informacion p\u00ebr fakte t\u00eb konfirmuara t\u00eb hackimit p\u00ebrmes vulnerabiliteteve PHP2Shell.<\/p>\n
Sipas kompanis\u00eb Amazon, p\u00ebrpjekjet e para p\u00ebr shfryt\u00ebzim jan\u00eb regjistruar nga sisteme honeypot t\u00eb angazhuara m\u00eb 17 tetor, pra 3 dit\u00eb para rrjedhjes s\u00eb informacionit t\u00eb par\u00eb mbi identifikuesit CVE. Aktiviteti u intensifikua m\u00eb 21 tetor, 12 or\u00eb para publikimit t\u00eb p\u00ebrdit\u00ebsimeve korrigjuese t\u00eb PHP, dhe gjat\u00eb k\u00ebsaj kohe jan\u00eb regjistruar p\u00ebrpjekje sulmi duke p\u00ebrdorur disa variacione t\u00eb prototipave t\u00eb eksploit\u00ebve. Kompania Hadrian gjithashtu ka regjistruar p\u00ebrpjekjet e sulmeve para publikimit zyrtar t\u00eb informacionit. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"