home.social

Search

246 results for “zen”

  1. 🚨 This time the bug isn’t in your code, it’s in PHP itself.

    PHP2Shell is two CVEs in the PHP runtime (CVE-2026-109618, CVE-2026-109619) that can lead to unauthenticated RCE.

    When something like this lands, the first question is usually: what exactly is affected, and what do I need to patch?

    I’d rather answer that from the terminal than from twelve browser tabs.

    With the ZEN SecDB CLI:

    1️⃣ secdb search php2shell

    finds both CVEs.

    2️⃣ secdb cve CVE-2026-109618

    gives the full record: description, CVSS 4.0 at 9.2, CVSS 3.1 at 9.8, vectors, references and vendor advisories from Debian, Red Hat, SUSE, Ubuntu, Arch, Gentoo, FreeBSD and others.

    That’s useful because you can quickly check whether your distro already ships a fix, instead of going through each security tracker manually.

    If you run PHP, upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, or use the patched package provided by your distro.

    Configuration mitigations may reduce the risk, but they don’t replace patching.

    And if the server was exposed, it’s probably worth checking whether it was already compromised.

    ZEN SecDB: secdb.nttzen.cloud
    CLI: github.com/giterlizzi/secdb-cli
    CVE-2026-109618: secdb.nttzen.cloud/cve/detail/

    CVE-2026-109619: secdb.nttzen.cloud/cve/detail/


  2. Zen browser is very good, and built on Firefox.

  3. Grief isn’t abstract when someone you love dies. Neither is death when your own life becomes uncertain.

    Zen Master Sebastian Rizzon shares the loss of his teacher and a close friend, followed by his experience of surviving a serious stroke—and reflects on how meditation changed his understanding of loss and mortality.

    Watch:

    youtube.com/watch?v=fc_ZQYjas1s

  4. Bombe in Düsseldorf Mörsenbroich – Entschärfung und Evakuierung am 22.10.2026

    Im Düsseldorfer Stadtteil Mörsenbroich wurde bei Sondierungsarbeiten am 22. Oktober eine amerikanische Fünf-Zentner-Flieger…
    #Duesseldorf #Deutschland #Deutsch #DE #Schlagzeilen #Headlines #Nachrichten #News #Europe #Europa #EU #Düsseldorf #Amerikanische #Anwohner #Bombe #Entschärfung #evakuiert #Fliegerbombe #Franziskus #Germany #Mörsenbroich #Nordrhein-Westfalen #Sankt #Zentner
    europesays.com/de/1359944/

  5. Zentralrat der Juden warnt vor Berliner Koalition: Schuster nennt Linksbündnis „Offenbarungseid“

    Der Zentralrat der Juden warnt vor der sich abzeichnenden Koalition in Berlin. „Grüne und insbesondere die SPD hatten…
    #Berlin #Deutschland #Deutsch #DE #Schlagzeilen #Headlines #Nachrichten #News #Europe #Europa #EU #DieLinke #Hauptstadtbüro #Schule #SPD
    europesays.com/de/1359844/

  6. Zen v0.28.0 is out! 🚀

    New: translated block and error pages, ~60 MB less memory use, security update for compromised intermediate CAs.
    Fixed: exception rules now work like in uBlock Origin and AdGuard.
    Full notes: github.com/irbis-sh/zen-deskto

    #privacy #opensource #freesoftware #foss #adblocker

  7. Zenzap raises $44M for its AI chat app that aims to replace WhatsApp in the workplace

    Zenzap is used by organizations including Starbucks and Taco Bell.

    justpaste.in/news/zenzap-raise

    #aichat #bessemer #whatsapp #workplacecommunication #AI

  8. 🚨 PHP2Shell affects multiple vulnerabilities (CVE-2026-109618, CVE-2026-109619).

    secdb.nttzen.cloud/updates/54f

    ℹ️ Additional details, sightings and PoC:

    - CVE-2026-109618 - RCE via OOM corruption - secdb.nttzen.cloud/cve/detail/
    - CVE-2026-109619 - RCE via stale global state - secdb.nttzen.cloud/cve/detail/


  9. Tom Holland’s dad reveals he was forced to spend a night out at his favourite pub ‘shivering’ in the garden after son’s recommendation left it overrun by Spider Man fans

    Tom Holland‘s father Dominic has revealed his favourite pub has been overrun by Spider-Man fans after his famous…
    #London #Britain #UnitedKingdom #UK #GB #England #Headlines #News #Europe #EU #KingstonuponThames #dailymail #TomHolland #tvshowbiz #Zendaya
    europesays.com/gbr/london/4246

  10. @roughlydaily Christianity and science fostered the illusion that an Absolute Truth exists "out there" and can be locked into a formula or dogma. The Buddha, however, proposed a radical, pragmatic empiricism: there is no hidden "system unit" of reality—stop looking for one. Instead, work directly with the interface of your own mind: alter it, experiment, and watch as pre-conscious illusions and mental systems of "post-factum" dissolve by themselves.
    #zen

  11. "The truth is not attained by letters and knowledge."

    – Dōgen

    Daily #Zen #Buddhism #Dogen

  12. Lo de siempre, corrupción ocultísmo, ...a cascoporro.

    Este partido lo lleva en su 🧬. Marrullerías y corruptelas son su bandera y no es 🇪🇸 🤷‍♀️ #230 #230noibanamoririgual #7291
    #zendal #laquironesa #atico #F1
    #F1 #cribadosandalucia
    #Almeriaconexion
    #PPgestoresdesastrosos #BASTAYADEIMPUNIDAD 🤬ADN DE UN PARTIDO🤦‍♀️🤥.

    PP y Vox mutilan la Ley de la Cámara de Cuentas andaluza para retener el control del órgano que fiscaliza los fondos públicos. Por @DaniCela8 vía @eldiarioes eldiario.es/1_cf82aa

  13. 🚨 [CISA-2026:1020] CISA Adds 6 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 6 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-106931 (secdb.nttzen.cloud/cve/detail/)
    - Name: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: EG Secure Solutions
    - Product: SiteGuard Server Edition
    - Notes: eg-secure.co.jp/siteguard/news ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-110936 (secdb.nttzen.cloud/cve/detail/)
    - Name: Siemens Software Center Uncontrolled Search Path Element Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Siemens
    - Product: Software Center
    - Notes: productcert.siemens.com/produc ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-96652 (secdb.nttzen.cloud/cve/detail/)
    - Name: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Plex
    - Product: Media Server
    - Notes: forums.plex.tv/t/important-sec ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-96654 (secdb.nttzen.cloud/cve/detail/)
    - Name: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Plex
    - Product: Media Server
    - Notes: forums.plex.tv/t/important-sec ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-96655 (secdb.nttzen.cloud/cve/detail/)
    - Name: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Plex
    - Product: Media Server
    - Notes: forums.plex.tv/t/important-sec ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-96656 (secdb.nttzen.cloud/cve/detail/)
    - Name: Plex Media Server External Control of File Name or Path Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Plex
    - Product: Media Server
    - Notes: forums.plex.tv/t/important-sec ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    #ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261020 #cisa20261020 #cve_2026_106931 #cve_2026_110936 #cve_2026_96652 #cve_2026_96654 #cve_2026_96655 #cve_2026_96656 #cve2026106931 #cve2026110936 #cve202696652 #cve202696654 #cve202696655 #cve202696656

Share on Mastodon

Enter the server where you have an account.