690: The S in PHP is for Security

A major PHP flaw puts servers everywhere at risk; so we hack ours. Meanwhile, open source helps debloat our smart TVs.
Sponsored By:
Managed Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.
Incogni: They can't harm you if they can't find you! Take back control of your personal data today. Go to incogni.com/unplugged and use code unplugged for 60% off an annual plan. It's completely risk-free with a 30-day money-back guarantee.
Namecheap: Use code UNPLUGGED for an extra 15% off VPS hosting.
Support LINUX Unplugged
Links:
Web Boost — Send us a boost via sats or USD
Jupiter Uplink
💥 Gets Sats Quick and Easy with Strike
📻 LINUX Unplugged on Fountain.FM
ConnecTen Internet: promo Jupiter35
MP3: Clanker Therapy 3: What Have You Been Building?
YouTube: Clanker Therapy 3: What Have You Been Building?
Bootleg: Clanker Therapy 3: What Have You Been Building? | Members Stream
PHP Security Release for PHP2Shell
PHP2Shell: PHP Remote Code Execution
Understanding PHP2Shell
CVE-2026-109618 - PHP RCE via OOM corruption
CVE-2026-109619 - PHP RCE via stale global state
Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
PHP: OOM corruption advisory
PHP: stale global state advisory
PHP's October 23 follow-up
Steal My Bitcoin - a PHP RCE challenge! — Made this because I'm curious if anyone out there has figured out how to actually use this PHP RCE we spent the last few days panicking over. Have fun!+ https://news.ycombinator.com/item?id=50224916
People are using AI to make their smart TVs dumb again
CleanYourTV — Debloat any Android or Google TV over Wi-Fi and get an Apple TV-style home.
CleanYour.TV: remove ads and bloat from Android TV and Google TV
cleanyourtv/addons/frigate-glance
cleanyourtv/addons/smart-home
cleanyourtv/addons/tv-hub
humblemuzzu/dumbtv — Take the ads, tracking and clutter out of your Fire TV over ADB, no root. Every step can be undone. Comes with its own open-source home screen.
Amazon.com: Xiaomi TV Box S 3rd Gen
The LLM-gen-AI Elephant in Our FOSS Room :: SeaGL 2026 :: pretalx
KSMBD: Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List
android-nixpkgs: Nix-packaged Android SDK
LCARS - Wikipedia
agent-shell - Emacs Agent Shell — Brings your favorite AI agents to Emacs, keeping you at home.
HouseWaves — Home Assistant Whole-Home Multi-Room Speakers
LeadStinger
Niri — A scrollable-tiling Wayland compositor.
Umbriel — Umbriel is a Wayland compositor designed for daily use, with scrolling, dwindle, master, and floating layouts, per-output workspaces, window rules, blur, shadows, and fluid animations.
NetBird - Open Source Zero Trust Networking
noblepayne/meshSidecar: Mesh network sidecars for NixOS Services
Vero V - OSMC — Vero V is OSMC’s fifth flagship streaming media player that’s designed for fast, “future-proof” 4K playback, including AV-1 and HDR formats. It uses an AMLogic S905X4 processor with 4GB RAM and 32GB eMMC storage, and it connects with HDMI 2.1, gigabit Ethernet, and Wi‑Fi.
HelixNotes - GitLab — A local, open-source Markdown note-taking app. No cloud, no account, no telemetry.
Pick: Telescope — Use your phone's camera as a webcam on Linux or Windows, telephoto and wide lenses included.
Telescope features.md - Telescope Docs
Telescope: your phone as a webcam on Linux & Windows
Pick: plex2jellyfin — Migrate your Plex library to Jellyfin and keep it clean forever. Mass rename, dedupe, consolidate, then a daemon guards new downloads.