Threat Pulse 62High
Italy and India issue PHP2Shell alerts; CERT-AgID finds 650 vulnerable public-administration URLs
Severity 5ActiveconfirmedGovernmentWeb servers and gateways

Italy's ACN and CSIRT Italia urged immediate updates, disabling session.upload_progress and considering taking services offline; CERT-AgID found 650 potentially vulnerable URLs among public-administration addresses and notified the offices. India's CERT-In issued a PHP2Shell advisory for small businesses (MSMEs).

What to do: Patch PHP now; if you cannot, disable session.upload_progress or take the service offline.

· 11 days ago · 650 public-administration URLs (Italy) · acn.gov.it
Sourcesacn.gov.itcert-agid.gov.it
On X
@AgidCertverifiedOct 25, 11:34 UTC

#PHP2Shell: 650 potentially vulnerable URLs among the addresses listed in IPA. The administrations concerned have been notified. (translated from Italian)

Open on X
@IndianCERTverifiedOct 25, 12:43 UTC

CERT-In has published: Advisory to MSME, remote code execution vulnerabilities in PHP (PHP2Shell); Compromise of LiteLLM PyPI Package and Docker Images.

Open on X
Why this score

Advisory (verified sweep, Oct 25 PM); advisory cap 5

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.