Posts tagged #CVE

SecurityOctober 27, 202610 min read

The Ruby Bug Behind GitLab’s CVEs, Explained Like You’re Not a Programmer

GitLab had to patch four security holes recently, and the real problem turned out to be hiding inside Ruby itself — the language GitLab is built with. Here's what actually happened, explained in plain English with a simple example.

#Ruby #Security

SecurityOctober 24, 20269 min read

PHP2Shell: Inside CVE-2026-109618 and CVE-2026-109619, the Critical Unauthenticated RCE in Core PHP

Two critical, unauthenticated remote code execution flaws in the PHP engine itself — not in your application code. What triggers them, who's exposed, how to check, and exactly how to patch.

#PHP #Security