Posts

Teo En Ming's Donations to Various Open Source Projects in 2026

Subject: Teo En Ming's Donations to Various Open Source Projects in 2026 [OPNsense] https://github.com/sponsors/opnsense [KDE] https://kde.org/community/donations/previousdonations.php https://kde.org/community/donations/previousdonations/ https://kde.org/anniversaries/30/ https://kde.org/fundraisers/plasma6member/ [ArchLinux] https://archlinux.org/donate/ [Linux Mint] https://linuxmint.com/donors.php [FreeBSD] https://freebsdfoundation.org/our-donors/donors/?donationType=individual&donationYear=2026 [Linux Lite OS] https://www.linuxliteos.com/donate.html EOF

[CONFIRMED] PHP in my Linux servers have been patched

Subject: [CONFIRMED] PHP in my Linux servers have been patched Good day from Singapore, I can now confirm that the PHP installations in my Linux servers have been patched for the PHP2Shell security vulnerabilites. ===[Virtualmin master server based on AlmaLinux 9.8]=== [root@ns1 ~]# rpm -qa | grep php | grep 8.0.30-8.el9_8.alma.1 php-common-8.0.30-8.el9_8.alma.1.x86_64 php-pdo-8.0.30-8.el9_8.alma.1.x86_64 php-mysqlnd-8.0.30-8.el9_8.alma.1.x86_64 php-cli-8.0.30-8.el9_8.alma.1.x86_64 php-fpm-8.0.30-8.el9_8.alma.1.x86_64 php-gd-8.0.30-8.el9_8.alma.1.x86_64 php-intl-8.0.30-8.el9_8.alma.1.x86_64 php-mbstring-8.0.30-8.el9_8.alma.1.x86_64 php-opcache-8.0.30-8.el9_8.alma.1.x86_64 php-process-8.0.30-8.el9_8.alma.1.x86_64 php-xml-8.0.30-8.el9_8.alma.1.x86_64 Confirming blog post: https://almalinux.org/blog/2026-10-21-php2shell-cve-2026-109618-cve-2026-109619/ ===[Webmin slave server based on Rocky Linux 9.8]=== There are no PHP installations in this Linux Server. So there is nothing to patch. ==...

Network Scanner can detect PHP2Shell

Subject: Network Scanner can detect PHP2Shell Good day from Singapore, I received an email informing me that a commercial network scanner can detect PHP2Shell security vulnerabilities in your web servers. It is called NetScan. For your information only. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individuals Singapore 22 Oct 2026 Thursday 11.05 pm Singapore Time REFERENCES ============ [1] https://discourse.thephp.foundation/t/php-network-scanner-can-detect-php2shell/6297 [2] mail-archive.com - NIL [3] marc.info - NIL [4] https://news-web.php.net/php.general/328886

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Subject: Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched Good day from Singapore, Here is an article which I would like to share. Article: Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched Link: https://www.wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched/ Date of article: 21 Oct 2026 Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individuals Singapore 22 Oct 2026 Thursday 10.50 pm Singapore Time REFERENCES ============== [1] https://discourse.thephp.foundation/t/php-hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched/6296 [2] mail-archive.com - NIL [3] marc.info - NIL [4] https://news-web.php.net/php.general/328885

PHP security vulnerabilities on my Ubuntu 26.04 LTS Linux Server

Subject: PHP security vulnerabilities on my Ubuntu 26.04 LTS Linux Server Good day from Singapore, Can I check and confirm with you whether the PHP security vulnerabilities disclosed on 21 Oct 2026 have been fixed on my Ubuntu 26.04 LTS Linux Server? teo-en-ming@secretserver:~$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description:    Ubuntu 26.04 LTS Release:        26.04 Codename:       resolute teo-en-ming@secretserver:~$ php -v PHP 8.5.4 (cli) (built: Oct 19 2026 14:35:18) (NTS) Copyright (c) The PHP Group Built by Ubuntu Zend Engine v4.5.4, Copyright (c) Zend Technologies     with Zend OPcache v8.5.4, Copyright (c), by Zend Technologies teo-en-ming@secretserver:~$ dpkg -l | grep -E '^ii  php' ii  php                                     2:8.5+99ubuntu1            ...

PHP security vulnerabilities on my AlmaLinux 9.8

Subject: PHP security vulnerabilities on my AlmaLinux 9.8 Good day from Singapore, Can I check and confirm with you whether the PHP security vulnerabilities disclosed on 21 Oct 2026 have been fixed in my AlmaLinux 9.8? [root@ns1 ~]# cat /etc/os-release NAME="AlmaLinux" VERSION="9.8 (Olive Jaguar)" ID="almalinux" ID_LIKE="rhel centos fedora" VERSION_ID="9.8" PLATFORM_ID="platform:el9" PRETTY_NAME="AlmaLinux 9.8 (Olive Jaguar)" ANSI_COLOR="0;34" LOGO="fedora-logo-icon" CPE_NAME="cpe:/o:almalinux:almalinux:9::baseos" HOME_URL="https://almalinux.org/" DOCUMENTATION_URL="https://wiki.almalinux.org/" BUG_REPORT_URL="https://bugs.almalinux.org/" ALMALINUX_MANTISBT_PROJECT="AlmaLinux-9" ALMALINUX_MANTISBT_PROJECT_VERSION="9.8" REDHAT_SUPPORT_PRODUCT="AlmaLinux" REDHAT_SUPPORT_PRODUCT_VERSION="9.8" SUPPORT_END=2032-06-01 [root@...

Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat

Subject: Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat Good day from Singapore, Here is an article which I would like to share. Article: Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat Link: https://www.channelnewsasia.com/singapore/php-vulnerabilities-csa-singapore-firms-cybersecurity-6482006?cid=telegram_cna_social_28112017_cna Date of article: 22 Oct 2026 05:33PM (Updated: 22 Oct 2026 05:44PM) "Singapore organisations are being urged to fix critical security flaws that could allow hackers to take control of websites without passwords.  The Cyber Security Agency says the threat is immediate" Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individuals Singapore 22 Oct 2026 Thursday 6.30 pm Singapore Time REFERENCES =============== [1] https://discourse.thephp.foundation/t/php-singapore-organisations-urged-to-patch-critical-php-flaws-immediately-amid-cyberattack-thre...