vivek@kali:~/blog$ grep -r "threat-intel" ./posts/

#zero-day

Security research, ethical hacking tutorials, cybercrime case studies, and threat intelligence from the field.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical Unauthenticated PHP RCE — Deep Technical Analysis, Burp Suite Detection & Blue Team Hunting Guide for Sentinel and Defender CVE-2026-5242
Featured · 16 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical Unauthenticated PHP RCE — Deep Technical Analysis, Burp Suite Detection & Blue Team Hunting Guide for Sentinel and Defender
PHP2Shell is the name for two critical, unauthenticated remote code execution flaws in PHP core (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) that affect roughly 70% of the internet. Details…
Oct 22, 2026 Cyber Awareness
Blue Team Burp Suite CVE-2026-109618 CVE-2026-109619
Read Full Post →
CVE-2025-0282: Ivanti Connect Secure Zero-Day Exploited by Nation-State Hackers Before Anyone Knew It Existed CVE-2026-5178
Exploits
CVE-2025-0282: Ivanti Connect Secure Zero-Day Exploited by Nation-State Hackers Before Anyone Knew It Existed
CVE-2025-0282 is a critical pre-authentication stack buffer overflow in Ivanti Connect Secure VPN (CVSS 9.0). Exploited by China-nexus…
Jul 22, 2026 7 min
China APT CISA emergency CVE-2025-0282
CVE-2024-3400: Palo Alto GlobalProtect Zero-Day with a Perfect CVSS 10.0 Score CVE-2026-5172
Exploits
CVE-2024-3400: Palo Alto GlobalProtect Zero-Day with a Perfect CVSS 10.0 Score
CVE-2024-3400 is a command injection zero-day in Palo Alto Networks PAN-OS GlobalProtect with a perfect CVSS 10.0. Exploited…
5 min
command injection CVE-2024-3400 CVSS 10