Unverified50% confidenceFactExact time
If PHP-FPM's listening socket is misconfigured (for example, listening on 0.0.0.0 with no access control), attackers may communicate directly with FPM and bypass the web server's security rules.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIf the PS5 uses RTMPS and strictly verifies the server certificate, even if the attacker controls the local network and redirects DNS, a forged server cannot pass the TLS handshake, thereby preventing hijacking.69% similarUnverifiedSSRF利用中常被检测的危险协议包括file://（读取本地文件）、dict://（探测端口开放状态）、ftp://（有时可绕过过滤）66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1084787API
curl https://kongchang.com/api/v1/knowledge/claims/1084787MCP
get_claim(id=1084787)