Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell deixa milhões de servidores em versões do PHP sem correção oficial - NotebookCheck.info News
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T121439Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Notebookcheck (Portuguese edition, DeepL translation of Darryl Linington's article), 26 October: the same article recorded in French as notebookcheck-...
What it says, as the collector read it
PHP2Shell deixa milhões de servidores em versões do PHP sem correção oficial - NotebookCheck.info News
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page br/news/notebookcheck-info/php2shell-deixa-milhoes-de-servidores-em-versoes-do-php-sem, snapshot 20261026T121439Z. Copied byte for byte; every file's sha256 is in captures/20261026T121439Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Notebookcheck (Portuguese edition, DeepL translation of Darryl Linington's article), 26 October: the same article recorded in French as notebookcheck-php2shell-laisse-des-millions-de-serveur (Shodan counts by Mallory of about 884,000 exposed hosts on unsupported PHP versions, banner-based; CybelAngel's split by version; minimal source backports only for 7.4, 8.0 and 8.1; version strings can mislead). The claims are recorded on the French edition.
> As correções do PHP2Shell abrangem apenas o PHP 8.2 a 8.5, o que deixa uma grande parte dos hosts PHP expostos à internet em versões que nunca receberam uma versão oficial com as correções.
_Curator's translation:_ "The PHP2Shell fixes cover only PHP 8.2 to 8.5, leaving a large share of internet-exposed PHP hosts on versions that never received an official fix release."
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell deixa milhões de servidores em versões do PHP sem correção oficial - NotebookCheck.info News". Selected mechanically, not read by a person.
Capture notes
Language pt. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261026T121439Z · HTTP 200 · https://www.notebookcheck.info/PHP2Shell-deixa-milhoes-de-servidores-em-versoes-do-PHP-sem-correcao-oficial.1433721.0.html
headers.jsoncb965a37227ae94c02160deaa8edb6fde91e4299b6154832b09fd404bf0694d6 976 bytespage.htmlc258a708bee1cdd1725621eacf9527db023fe4dfb7d4fe9a13b780aaa17495ee 110,891 bytesprovenance.json00a694d9a2001d73b20324a904eb74b75b50f74dd5b793b37b3fe82e72d36e07 1,892 bytesrendered.html26fc2a03916f1e6e96b4cc1388e041112bbe5b9f96eadc21b15c038896f4312c 122,332 bytesscreenshot.jpg9fa3a5f4a8d4d4d33bbc942a43507b04dc9b7ee208b0418a1eff5e67f18c851e 376,886 bytestext.txt222c99da4021fffb47332fde2aeeea69a09ddfc9fe8a006e8bea5e1ab483119f 6,278 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →