⤷ Title: Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:26:22 GMT
════════════════════════
⌗ Tags: #offsec #cve_2026_109618 #php2shell #ethical_hacking #remote_code_execution
════════════════════════
𐀪 Author: Cyril Shaji
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 19:26:22 GMT
════════════════════════
⌗ Tags: #offsec #cve_2026_109618 #php2shell #ethical_hacking #remote_code_execution
Medium
Cracking CVE-2026-109618: OffSec Lab Walkthrough to RCE via PHP 8.4.26
Remote Code Execution (RCE) vulnerabilities in core programming language runtimes are rare gems. When CVE-2026-109618 dropped, it…
⤷ Title: PHP Discloses CVE-2026-115560 Session Deserialization Flaw
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 09:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #application security #CVE_2026_115560 #PHP #remote code execution #vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 09:33:11 +0000
════════════════════════
⌗ Tags: #Vulnerability #application security #CVE_2026_115560 #PHP #remote code execution #vulnerability
Information Security News
PHP Discloses CVE-2026-115560 Session Deserialization Flaw
The PHP Foundation recently published a security disclosure detailing a remote code execution risk. Specifically, maintainers registered the issue as CVE-2026-115560 across national vulnerability …
⤷ Title: PHP2Shell: Simplest Explanation
════════════════════════
𐀪 Author: Chris Christian
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 18:55:44 GMT
════════════════════════
⌗ Tags: #remote_code_execution #rce #cybersecurity #php #php2shell
════════════════════════
𐀪 Author: Chris Christian
════════════════════════
ⴵ Time: Sun, 25 Oct 2026 18:55:44 GMT
════════════════════════
⌗ Tags: #remote_code_execution #rce #cybersecurity #php #php2shell
Medium
PHP2Shell: Simplest Explanation
How a PHP bug can give an attacker control of your server
⤷ Title: HTTP2Shell Vulnerability Expands Node2Shell Risk
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:37:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Brotli #HTTP2Shell #Node2Shell #nodejs #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:37:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Brotli #HTTP2Shell #Node2Shell #nodejs #Remote Code Execution
Daily CyberSecurity
HTTP2Shell Vulnerability Expands Node2Shell Risk
Cybersecurity firm Aikido Security recently published an urgent advisory regarding an expanding decompression flaw. Initially tracked as Node2Shell (CVE-2026-111497), the threat now jeopardizes nu…
⤷ Title: FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:33:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #exploited in the wild #Fortinet #FortiSIEM #Path Traversal #proof_of_concept #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:33:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #exploited in the wild #Fortinet #FortiSIEM #Path Traversal #proof_of_concept #Remote Code Execution
Daily CyberSecurity
FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public
TL;DR Canada’s Cyber Centre updated its Fortinet advisory on October 23, 2026, to warn that CVE-2026-106173 “is being exploited in the wild.” This FortiSIEM vulnerability, rated …
⤷ Title: PHP2Shell: List of Affected Products
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:10:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #patch management #php #PHP2Shell #Remote Code Execution #Vulnerability Tracker
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 00:10:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #patch management #php #PHP2Shell #Remote Code Execution #Vulnerability Tracker
Daily CyberSecurity
PHP2Shell: List of Affected Products
TL;DR PHP2Shell, tracked as CVE-2026-109618 and CVE-2026-109619, lets unauthenticated attackers run code on servers that use PHP. PHP fixed both flaws on October 21, 2026, but PHP also ships insid…
⤷ Title: PHP2Shell ASLR Bypass Enables Remote Code Execution
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:05:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #PHP Security #PHP2Shell #remote code execution #VulnCheck
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:05:09 +0000
════════════════════════
⌗ Tags: #Vulnerability #ASLR Bypass #PHP Security #PHP2Shell #remote code execution #VulnCheck
Information Security News
PHP2Shell ASLR Bypass Enables Remote Code Execution
Researchers have engineered a reliable exploit against critical memory safety protections. Specifically, cybersecurity analysts at VulnCheck defeated Address Space Layout Randomization (ASLR) on m…
⤷ Title: Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_110264 #CVE_2026_89078 #CVE_2026_97229 #gitlab #Onigmo #Remote Code Execution #Ruby
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_110264 #CVE_2026_89078 #CVE_2026_97229 #gitlab #Onigmo #Remote Code Execution #Ruby
Daily CyberSecurity
Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
TL;DR On October 23, 2026, the Ruby team shipped a Ruby security update in versions 4.0.9, 3.4.12 and 3.3.13. The releases fix memory bugs in Onigmo, Ruby’s regular expression engine. GitLab…
⤷ Title: Popcorn Time Updater Flaw Threatened a Huge Botnet
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 08:11:59 +0000
════════════════════════
⌗ Tags: #Malware #Abandoned Software #BOTNET #CVE_2026_30612 #Eye Security #Popcorn Time #remote code execution #Shadowserver #Time4Popcorn
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 08:11:59 +0000
════════════════════════
⌗ Tags: #Malware #Abandoned Software #BOTNET #CVE_2026_30612 #Eye Security #Popcorn Time #remote code execution #Shadowserver #Time4Popcorn
Information Security News
Popcorn Time Updater Flaw Threatened a Huge Botnet
A Forgotten Backdoor on Millions of PCs An abandoned build of Popcorn Time kept a dangerous mechanism on millions of computers for years. Through it, anyone could quietly run code with top system …
⤷ Title: Brotli CVE-2026-111497 Vulnerability Triggers Remote Code Execution
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 07:33:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #Brotli #CVE_2026_111497 #Node.js #Node2Shell #remote code execution
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 07:33:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #Brotli #CVE_2026_111497 #Node.js #Node2Shell #remote code execution
Information Security News
Brotli CVE-2026-111497 Vulnerability Triggers Remote Code Execution
A critical flaw within Google’s Brotli compression algorithm has sent shockwaves through the software industry. Specifically, the Brotli CVE-2026-111497 vulnerability permits unauthenticated…
⤷ Title: PHP2Shell Vulnerabilities Trigger Active Exploits
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 28 Oct 2026 08:12:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #PHP #PHP2Shell #remote code execution #vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 28 Oct 2026 08:12:07 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #PHP #PHP2Shell #remote code execution #vulnerability
Information Security News
PHP2Shell Vulnerabilities Trigger Active Exploits
Threat actors have escalated attacks against PHP servers worldwide. Specifically, malicious campaigns targeting PHP2Shell vulnerabilities transitioned from broad network scanning to confirmed comm…
⤷ Title: BeyondTrust Remote Support Flaw CVE-2026-102764 Exploited in the Wild as Full Details and Metasploit Exploit Go Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 00:00:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BeyondTrust #CVE_2026_102764 #exploited in the wild #metasploit #Rapid7 #Remote Code Execution #Remote Support #UNC5221
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 00:00:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BeyondTrust #CVE_2026_102764 #exploited in the wild #metasploit #Rapid7 #Remote Code Execution #Remote Support #UNC5221
Daily CyberSecurity
BeyondTrust Remote Support Flaw CVE-2026-102764 Exploited in the Wild as Full Details and Metasploit Exploit Go Public
TL;DR Rapid7 has published a full technical analysis and a working Metasploit module for CVE-2026-102764. This BeyondTrust Remote Support vulnerability is already exploited in the wild. The flaw s…