Top all-time · #24983
zmain
Personal blog · zmain.info/blogsecurityprogramming
zmain is a personal blog at zmain.info about security and programming. Since 2026, 3 different Hacker News readers have linked it 3 times, most often “Plex2Shell: Unauthenticated RCE in Plex Media Server”. No feed was found, so read it on the site itself.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN readers link zmain's write-up of Plex2Shell, a proof-of-concept exploit chaining several Plex Media Server CVEs. The comments cite it as a source on in-the-wild Plex attacks and specific flawed endpoints.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Portfolio and blog of a software developer and security researcher — open source projects, vulnerability disclosure writeups, and technical notes.
Most-linked posts?
- Plex2Shell: Unauthenticated RCE in Plex Media Server3 people · 3 mentions · first linked 2026-10-17
What Hacker News says?
Lots of reports on Reddit about people getting popped. Other payloads too, like a DDOS node. Plex2Shell is the proof-of-concept exploit that is feeding this. An LLM chained together several CVEs: https://zmain.info/blog/plex2shell
Comment linking /blog/plex2shell
on “Plex vulnerabilities being exploited in the wild to drop a cryptominer”Submitted Plex2Shell: Unauthenticated RCE in Plex Media Server as a story · 3 points
HN discussionhttps://zmain.info/blog/plex2shell Some of those individual bugs are egregious. A guard that doesn't work at all? A /player/timeline endpoint that doesn't check the token value?
Comment linking /blog/plex2shell
on “Plex Media Server Unauth RCE Exploit”