Stefan Esser

SLCyber researchers demonstrated a post-exploitation chain, wp2root, that escalates WordPress core remote code execution to Linux root in under an hour using OpenAI's Codex. The chain exploits a use-a…

A security researcher has discovered and exploited a 21-year-old use-after-free vulnerability in PHP's `unserialize()` function, affecting code paths that have been vulnerable since PHP 5.1 shipped in…