Daniele Michelin
Author ProfileClaim This Author Profile
Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.
🌐 dev.toSource
PHP2Shell is exploited and on CISA's list. Now a Linux kernel flaw (CVE-2026-46300) can turn it into root. The facts in charts, and what to check today.
🌐 dev.toSource
Two critical PHP flaws, fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35: what to do on Plesk, Synology, shared hosting, Docker and your own servers.
Mitigating PHP2Shell when no update exists yet: php.ini settings for NAS, Plesk and your own servers
🌐 dev.toSource
No PHP update yet on Synology? Three php.ini settings shrink the PHP2Shell attack surface — step by step for Web Station, Plesk and your own servers.