Laravel framework
5 posts
Day three of PHP2Shell: a third RCE with no patch, a Laravel 9.2 whose fix shipped eight weeks before the advisory, and the config line we chose not to write.
One number said our SSH port was under relentless attack. The other said our firewall had been repelling it for months. On Monday, 12 October we discovered the attack couldn't have succeeded, and the defence had never fired. Both dashboards were honest. Neither was true.
Another day, another Javascript exploit.
Laravel Boost, the AI-assisted development tool for Laravel projects, has released v2.4.0 with several notable improvements focused on security, customization, and efficiency.
Laravel 13 drops today. If you're bracing for another upheaval like v12, you can exhale. This one's different.