PHP2Shell – A Pair of Critical PHP Vulnerabilities

A few days ago, a major announcement was made. PHP, the software that powers many websites on the Internet, had two major vulnerabilities.

The PHP vulnerabilities are designated as: CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 Critical).

In a nutshell, the vulnerabilities allow attackers to exploit flaws in PHP’s memory handling by sending specially crafted web requests that cause out-of-memory conditions or fatal errors on the victim’s server. This can leave internal data uninitialized, or cause PHP workers to retain pointers to memory that has already been freed.

When PHP later accesses this invalid memory, attackers may manipulate its contents to redirect program execution, potentially achieving unauthenticated RCE with the privileges of the affected web-server process.

PHP has released fixes in versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Updating is highly recommended.

These vulnerabilities are excellent examples of an open-source project not being inherently secure, just because it is open source. For the record, I do not assume closed-source is inherently secure either.

Visit the links below to get more information:

 


Posted in Cloud, Computers, General, Internet and Servers, Operating Systems, Programming, Security, Software

How to Check GPU Usage and Information in Windows 11

In this tutorial, I will show you how to view the basic statistics for your GPU.


1. Open Task Manager

Open Task Manager by pressing Ctrl + Shift + Esc on your keyboard, or by right-clicking the Start button Windows Startand selecting Task Manager.Open Task Manager

 

2. Performance Tab

In the left-hand menu (for the Task Manager), click the โ€œPerformanceโ€ tab.Windows 11 - Task Manager Side Menu

 

3. Select your GPU

From the list, click your listed GPU. If you have more than one GPU (e.g., a laptop with dual graphics), you will see multiple GPUs listed.Windows 11 - Task Manager GPU

 

4. Check your Specs

You will now see various, real-time graphs. At the bottom, you will notice “Dedicated GPU memory“. This shows you how much video memory you are currently using (left side) and how much total, dedicated video memory you have available (right side).Windows 11 - Task Manager GPU Info

 

The Task Manager only shows a few statistics for your GPU. For more detailed information, you can use the GPU-Z or HWiNFO software.

That is the end of this tutorial. I hope this has been helpful to someone.


Posted in Computers, Operating Systems, Software, Tips & Tutorials

Happy 4th of July (2026)

๐“Ÿ๐“ป๐“ช๐”‚ ๐“ฏ๐“ธ๐“ป ๐“ธ๐“พ๐“ป ๐“๐“ช๐“ฝ๐“ฒ๐“ธ๐“ท ๐“ช๐“ท๐“ญ ๐“ฒ๐“ฝ๐“ผ ๐“›๐“ฎ๐“ช๐“ญ๐“ฎ๐“ป๐“ผ๐“ฑ๐“ฒ๐“น!

“Blessed is the nation whose God is the Lord” – Psalm 33:12a (NASB)

“and My people who are called by My name humble themselves and pray and seek My face and turn from their wicked ways, then I will hear from heaven, will forgive their sin and will heal their land.” – 2 Chronicles 7:14 (NASB)

This image has an empty alt attribute; its file name is 4th_of_July_2020_enhanced.jpg
ย 
ย 
ย 

ย 


Posted in Holiday

Reports Claim Hackers Stole Thousands of GitHub Private Repositories

Some of my readers, especially longtime ones, may remember that I have warned multiple times about being careful which extensions you choose to install in your web browser. Installing the wrong one, especially one that contains malicious code, can compromise your computerโ€™s security.

This time, it is a lesson on being careful which extension you install in Visual Studio Code (a.k.a. VS Code). In a nutshell, an employee at GitHub installed (or at least updated) an extension that had been contaminated with malware code. The extension then proceeded to steal the employee’s credentials and gain access to tons of GitHub’s own private repositories.

The report claimed the malware stole:

  • AWS keys
  • Database passwords
  • Kubernetes tokens
  • SSH credentials

I would venture a guess that other IP (intellectual property) was stolen too.

I will let you read the full report from X below.

ย 


Posted in Cloud, Computers, General, Internet and Servers, Operating Systems, Security, Software