Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
“PHP2Shell”敲响企业漏洞警钟，奇安信天戟提供一键速查方案 | 雷峰网
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Leiphone (Chinese), a vendor-sponsored item: Qi An Xin's Tianji offers a one-click check for 'PHP2Shell'. On 21 October PHP was reported to have two s...
What it says, as the collector read it
“PHP2Shell”敲响企业漏洞警钟，奇安信天戟提供一键速查方案 | 雷峰网
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page eg/news/leiphone/category-industrynews-9dejmhebinubut49-html, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Leiphone (Chinese), a vendor-sponsored item: Qi An Xin's Tianji offers a one-click check for 'PHP2Shell'. On 21 October PHP was reported to have two serious vulnerabilities, CVE-2026-109618 and CVE-2026-109619; Qi An Xin's experts say they verified unauthenticated remote arbitrary command execution, that the exploitation barrier is very low, and that the potential impact on China exceeds a million assets. A vendor claim, not an independent count.
> 对我国的潜在影响超百万级资产
_Curator's translation:_ "the potential impact on China exceeds a million assets"
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "“PHP2Shell”敲响企业漏洞警钟，奇安信天戟提供一键速查方案 | 雷峰网". Selected mechanically, not read by a person.
Capture notes
Language ar. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://www.leiphone.com/category/industrynews/9DeJmHEbinuBUT49.html
headers.jsond752b49e5621bb72671a2f7d8befec91ef85f5e3a427337111a932bf7c0b17c4 973 bytespage.html91a62b9977e64a00f20692dcb70e2c9fc1d6384e739d18c1aeb2d20318ea5d1b 55,870 bytesprovenance.jsonedd7c65306d9c9e45aea86da9ca37357084ac74dbcd3884ac6c3fedcb48ae506 1,709 bytesrendered.html378cd0a617e5b89c34d63c8f45cc3258fbfb017539266a05cc278bc635b68463 83,868 bytesscreenshot.jpgbc109ed43d991b64a815bb7fd8467e6eda542c173157a9cf0abd9904d0c8a793 481,959 bytestext.txt296adb9a9c94826ad410ede7c0981b0b98eb1c748e3cf7f926a5ac61f0a33eed 9,726 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →