PHP2Shell is a pair of critical remote code execution flaws in PHP (CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2). The PHP project released the fixed versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on 21 October 2026 at 14:00 UTC. Over the following days, I had Claude Opus 5.5, track 33 vendors that ship PHP to see when each one had a patched package available. The vendors include Linux distributions, BSDs, third-party repositories, Windows package managers, hosting panels, container images and NAS firmware.
Continue reading How fast did vendors ship the PHP2Shell fix?Category Archives: IT & Hacking
Tunnelblick IPv6 DNS – get it working
Basically – If you are using OpenVPN with IPv6 support, MacOS will not recognize it and only allow IPv4 DNS resolution.
References:
https://openvpn.net/vpn-server-resources/limited-ipv6-support-built-into-the-access-server/
https://apple.stackexchange.com/questions/304215/how-to-add-aaaa-flag-ipv6-to-dns-resolver-configuration-on-sierra
https://www.tunnelblick.net/cUsingScripts.html
https://tunnelblick.net/cConfigT.html#creating-and-installing-a-tunnelblick-vpn-configuration
Bontempi PM 747 Drivers
Recently, I’ve been looking for Windows drivers for a Bontempi PM 747 keyboard. As the official site has been useless for years, and Bontempi has been bought a couple of times, I had to go search the Internet Archive.
Continue reading Bontempi PM 747 DriversOukitel WP5 Recovery (Boot Loop)
So. I got an new phone and tried to root it straight away. I bricked it, but managed to fix it again.
Continue reading Oukitel WP5 Recovery (Boot Loop)