PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dùng AI để tìm bug - Phần 1: Tìm SQL Injection trong PHP

blog.viettelcybersecurity.com | vulnerability | #ai-security | #bug-bounty | #php | #sql-injection | #llm | #woocommerce
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Using AI to find bugs, part 1: after regex and AI-written Semgrep rules fell short, sending PHP source to an LLM surfaced a real SQL injection in WooCommerce that was reported and fixed.
Published
Collected

Related coverage

blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
vulnerability · blog.quarkslab.com
Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days
Chamilo is an open source Learning Management System (LMS) widely deployed in schools and enterprises around the world. In this blogpost we explain how we were able to identify multiple vulnerabilities including a full unauthenticated Remote Code Execution chain in the latest version.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
vulnerability · aikido.dev
What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
# What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) Written by Willem Delbare Published on: Oct 21, 2026 **Update, 15:00 CEST: Patches are...
Back