⤷ Title: ZDI Leaks Critical Linux Kernel Vulnerabilities to LKML
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #Linux Kernel #remote code execution #vulnerability #ZDI #zero_day
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #Linux Kernel #remote code execution #vulnerability #ZDI #zero_day
Information Security News
ZDI Leaks Critical Linux Kernel Vulnerabilities to LKML
The Zero Day Initiative (ZDI) team at Trend Micro recently experienced an operational mishap. Specifically, researchers inadvertently copied several confidential vulnerability reports to the publi…
⤷ Title: PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:21:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109619 #CVE_2026_115560 #php #PHP2Shell #Remote Code Execution #Web Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:21:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109619 #CVE_2026_115560 #php #PHP2Shell #Remote Code Execution #Web Security
Daily CyberSecurity
PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
TL;DR On October 23, 2026, the PHP team disclosed CVE-2026-115560, a new PHP session vulnerability tied to session upload progress. It can lead to remote code execution, but only in a rare setup. …
⤷ Title: Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:26:22 GMT
════════════════════════
⌗ Tags: #offsec #cve_2026_109618 #php2shell #ethical_hacking #remote_code_execution
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:26:22 GMT
════════════════════════
⌗ Tags: #offsec #cve_2026_109618 #php2shell #ethical_hacking #remote_code_execution
Medium
Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26
Remote Code Execution (RCE) vulnerabilities in core programming language runtimes are rare gems. When CVE-2026-109618 dropped, it…
⤷ Title: PHP Discloses CVE-2026-115560 Session Deserialization Flaw
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 09:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #application security #CVE_2026_115560 #PHP #remote code execution #vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 09:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #application security #CVE_2026_115560 #PHP #remote code execution #vulnerability
Information Security News
PHP Discloses CVE-2026-115560 Session Deserialization Flaw
The PHP Foundation recently published a security disclosure detailing a remote code execution risk. Specifically, maintainers registered the issue as CVE-2026-115560 across national vulnerability …
⤷ Title: PHP2Shell: Simplest Explanation
════════════════════════
𐀪 Author: Chris Christian
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 18:55:44 GMT
════════════════════════
⌗ Tags: #remote_code_execution #rce #cybersecurity #php #php2shell
════════════════════════
𐀪 Author: Chris Christian
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 18:55:44 GMT
════════════════════════
⌗ Tags: #remote_code_execution #rce #cybersecurity #php #php2shell
Medium
PHP2Shell: Simplest Explanation
How a PHP bug can give an attacker control of your server
⤷ Title: HTTP2Shell Vulnerability Expands Node2Shell Risk
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:37:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Brotli #HTTP2Shell #Node2Shell #nodejs #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:37:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Brotli #HTTP2Shell #Node2Shell #nodejs #Remote Code Execution
Daily CyberSecurity
HTTP2Shell Vulnerability Expands Node2Shell Risk
Cybersecurity firm Aikido Security recently published an urgent advisory regarding an expanding decompression flaw. Initially tracked as Node2Shell (CVE-2026-111497), the threat now jeopardizes nu…
⤷ Title: FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:33:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #exploited in the wild #Fortinet #FortiSIEM #Path Traversal #proof_of_concept #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:33:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #exploited in the wild #Fortinet #FortiSIEM #Path Traversal #proof_of_concept #Remote Code Execution
Daily CyberSecurity
FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public
TL;DR Canada’s Cyber Centre updated its Fortinet advisory on October 23, 2026, to warn that CVE-2026-106173 “is being exploited in the wild.” This FortiSIEM vulnerability, rated …
⤷ Title: PHP2Shell: List of Affected Products
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:10:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #patch management #php #PHP2Shell #Remote Code Execution #Vulnerability Tracker
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:10:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #patch management #php #PHP2Shell #Remote Code Execution #Vulnerability Tracker
Daily CyberSecurity
PHP2Shell: List of Affected Products
TL;DR PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, lets unauthenticated attackers run code on servers that use PHP. PHP fixed both flaws on October 21, 2026, but PHP also ships insid…
⤷ Title: PHP2Shell ASLR Bypass Enables Remote Code Execution
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:05:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #PHP Security #PHP2Shell #remote code execution #VulnCheck
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:05:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #PHP Security #PHP2Shell #remote code execution #VulnCheck
Information Security News
PHP2Shell ASLR Bypass Enables Remote Code Execution
Researchers have engineered a reliable exploit against critical memory safety protections. Specifically, cybersecurity analysts at VulnCheck defeated Address Space Layout Randomization (ASLR) on m…
⤷ Title: Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_110264 #CVE_2026_89078 #CVE_2026_97229 #gitlab #Onigmo #Remote Code Execution #Ruby
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_110264 #CVE_2026_89078 #CVE_2026_97229 #gitlab #Onigmo #Remote Code Execution #Ruby
Daily CyberSecurity
Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
TL;DR On October 23, 2026, the Ruby team shipped a Ruby security update in versions 4.0.9, 3.4.12 and 3.3.13. The releases fix memory bugs in Onigmo, Ruby’s regular expression engine. GitLab…