An unauthenticated remote code execution flaw in PHP is already being exploited, but no affected versions, fixed release or severity score have been published yet, leaving defenders unable to patch.
Two things live here.
Advisories — a running brief on the vulnerabilities that matter to people running network and edge infrastructure. Every CISA KEV addition, plus critical flaws in firewalls, VPN gateways, routers and management planes. What it is, what to do about it, and what to tell your leadership — in that order. Sources and the checks every post passes are set out in the methodology.
The workshop — longer write-ups from a home lab: virtualisation, self-hosted AI image and speech generation, build automation, and the things that broke on the way. Slower, and considerably less urgent.
Latest advisories
PHP Stale Internal Request-State Vulnerability
A memory-handling bug in PHP’s core request processing lets stale pointers from a freed request linger into the next one, giving unauthenticated attackers a path to remote code execution.
Arista VeloCloud Orchestrator SQL Injection Vulnerability
Any authenticated user on an on-prem VeloCloud Orchestrator can use SQL injection to escalate to a local superuser operator account, exposing internal functions never meant to be reachable remotely, and it’s already being exploited.
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server …
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
A low-privilege user on a host running SiteGuard Server Edition can inject OS commands that execute with root or SYSTEM rights, turning a minor foothold into full control of the machine.
Plex Media Server External Control of File Name or Path Vulnerability
Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained …
From the workshop
Three AI reviews of the same project, and where they disagreed
I gave three AI models the same data about a project of mine and asked each, separately, why it was not growing. The consensus turned out to be the least useful part.
Auditing a homelab after it breaks: what the documentation got wrong
After a failure I went through my own infrastructure line by line and compared it to my notes. Six things were wrong, and all six were wrong in the same direction.
Proxmox on a second-hand workstation
Why an old dual-socket workstation beats a mini PC for a home hypervisor, and the three decisions that determine whether the thing is still running in a year.