Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
ثغرات PHP2Shell: تهديد أمني حرج يضرب خوادم الإنترنت | وكالة خبر للأنباء
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T094033Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Khabar Agency (Yemen, Arabic), 25 October, an agency-wire style explainer: two critical flaws in PHP let attackers run commands on servers remotely wi...
What it says, as the collector read it
ثغرات PHP2Shell: تهديد أمني حرج يضرب خوادم الإنترنت | وكالة خبر للأنباء
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page sa/news/khabaragency/news254841-html, snapshot 20261026T094033Z. Copied byte for byte; every file's sha256 is in captures/20261026T094033Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Khabar Agency (Yemen, Arabic), 25 October, an agency-wire style explainer: two critical flaws in PHP let attackers run commands on servers remotely without credentials; PHP issued urgent updates (including 8.5.12 and 8.4.27) rated 9.2 out of 10; reports say attempts to exploit them were seen even before the official announcement; and administrators should also review server logs, especially as additional flaws such as CVE-2026-115560 appeared that need careful settings. Ordinary users face no direct risk from browsing. No source is named for any figure.
> أثار اكتشاف ثغرتين أمنيتين حرجتين في لغة البرمجة الشهيرة PHP مخاوف واسعة بشأن أمن المواقع الإلكترونية
_Curator's translation:_ "The discovery of two critical security vulnerabilities in the popular PHP programming language has raised wide concern about website security."
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرات PHP2Shell: تهديد أمني حرج يضرب خوادم الإنترنت | وكالة خبر للأنباء". Selected mechanically, not read by a person.
Capture notes
Language ar. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261026T094033Z · HTTP 200 · https://www.khabaragency.net/news254841.html
headers.json68906a7462e0330e41a7586831ef1b2877247ac1924b96cd319d5f6b6485221b 1,934 bytespage.html2de3a4b141834cd746d37c9d633fe92fdb710547295880ea049557fd5911892b 72,381 bytesprovenance.json638d372a4dbb4aed3a663211385241f319a525c73a876c71df29be03de2ebcbb 1,619 bytesrendered.html376e0f5c71a19cd719b939ba252bfd76cb06994af8d74bcf886f180f41c7fe89 78,135 bytesscreenshot.jpgd5dde4fff2c6fa5fc1b19355eb3ca3df94c052644c8a41e257d9f95f68fa74ab 288,667 bytestext.txtdef674a40a74cf63a767c2f4365791ce5f6ea0bb483b90cb303c0aaa9f542cea 6,409 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →