Welcome to My Blog

On 21 October 2026, PHP shipped emergency patches for two critical, unauthenticated remote-code-execution bugs CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2 that the security community is calling PHP2Shell. One's a memory-corruption bug in how PHP handles out-of-memory errors while parsing form data; the other's a use-after-free hiding in the session upload-progress feature. Both live in PHP core itself, so your login page, your WAF, your app code none of that matters, since PHP processes the request before any of it runs.

What makes this one worse than most is the timeline: honeypots caught exploitation attempts four days before the patch even existed, and multiple security vendors confirm it's now being exploited at scale in the wild. I broke down exactly how both bugs work, what the official patch changes, and because most "PHP2Shell checkers" out there give up the moment a server hides its PHP version I built a free, open-source scanner that can still settle the hidden-version case using an active, non-destructive behavioral check. Full writeup, the patch table, and the tool are all below.

Hey there !

Whether you’re a security pro digging into systems or just starting out with the command line, this cheat sheet packs all the essential Linux commands you’ll actually use. I’ve covered the basics you need for daily tasks, troubleshooting, and security work—all kept simple and practical.

• For beginners: No jargon, just clear and simple.
• For pros: Handy reminders and security-focused tips.

Hope it saves you some terminal headaches!

(Note: This is Part 1—more commands coming soon!)

In this post, you explored the world of Linux file permissions — starting with the basic "who can do what" trio and the different types of access. You learned how to interpret permissions using both the symbolic (-rwxrwxrwx) and numeric (octal) formats, and how to instantly identify file types like directories or symlinks using ls -l. Finally, I covered dangerous permissions to watch out for and the essential commands used to modify them.

This blog (Kunshdeep) has undergone a complete reboot, relaunching as a highly focused platform for cybersecurity, ethical hacking, and tech insights. Expect fresh, in-depth content on cyber threats, practical guides, emerging tech trends, and digital security updates. This new chapter aims to be your go-to source for trustworthy tech knowledge.