NEWS and my views

Tuesday, October 27, 2026

Girl died as soon as she entered the Hotel room - Jhansi - Uttar Pradesh - India

Girl (28 year old newlywed Muskan Simolia) died under mysterious circumstances shortly after entering Room 212 of the Rishabh Hotel in Sipri Bazaar, Jhansi, Uttar Pradesh, India.

Muskan had been staying at her parental home in Jhansi since October 10 to prepare for a competitive railway exam. Her husband, Nilesh, arrived in Jhansi on October 23 and took her out, eventually checking into Room 212 of the Rishabh Hotel.

The CCTV footage captured by the surveillance system shows that on Saturday morning (October 24), the couple and a hotel staff member entered the room. Muskan suddenly collapsed backward within four seconds of entering the room, hitting her head on the floor. She was rushed to the district hospital, where doctors declared her dead on arrival.

Father of Muskan, Ramji Lal Ahirwar, accused Nilesh of murder. He claimed that Nilesh had concealed a previous marriage to another woman living in Indore, which had caused frequent disputes between the couple. The family also questioned the sequence of events leading up to her fall and head injuries.

Nilesh is currently under arrest and is being questioned by the police.

https://www.youtube.com/watch?v=cAbZXexJfFE

muskan , muskan simolia , jhansi , uttar pradesh , india , hotel , room 212 , nilesh , died , collapsed , rishabh hotel

#Jhansi #UttarPradesh #India #Muskan #Room212 #RishabhHotel

Thursday, October 22, 2026

PHP Vulnerabilities October 2026

php , php vulnerabilities , php vulnerable , php security issues , php security risk , php patch , php security patch

PHP ( Personal Home Page first and now PHP: Hypertext Preprocessor ) is one of the most famous server side scripting language since 1995 for web application developers and was/is one of the favorite of many because of its open source nature.

Recently AI dicovered critical vulnerabilities in PHP affecting 70% of the Internet.

These vulnerabilities include memory disclosure and unauthenticated remote code execution in PHP itself, independent of the application running on top of it, putting every affected website in immediate risk.

Every PHP version released in the last decade is affected by at least one of these vulnerabilities, going back to version 5.4. Attackers can exploit them remotely, in some cases fairly easily. Immediate patching is strongly advised.

Even NSA addressed the issue in following words

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

PHP has published a security update to address a critical security issue that may allow attackers to execute commands on any web server running PHP.

The Vulenrabilities fixed in security update are

- CVE-2026-109618: Out-of-memory handling can interrupt PHP while internal request data is only partially initialized. Request cleanup may then treat the invalid data as valid.

- CVE-2026-109619: Request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state before normal initialization resets it.

References :

1. https://www.nsa.gov/press-room/press-releases-statements/press-release-view/article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/

2. https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php

3. https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/

4. https://www.wiz.io/blog/php2shell-php-rce

php , php vulnerabilities , php vulnerable , php security issues , php security risk , php patch , php security patch

#PHP #PhpVulnerabilities #PhpVulnerable #PhpSecurityPatch #PhpPatch