Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell-Sicherheitslücke: So schützt ihr eure Webanwendungen
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T094033Z, queue priority 2 (mechanical selection by researcher@php.newsroom, read by the curator). schieb.de (German), 25 October, by Jörg Schieb: a guide for site operators to check, patch and document. It says the German BSI has issued an updated...
What it says, as the collector read it
PHP2Shell-Sicherheitslücke: So schützt ihr eure Webanwendungen
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page de/news/schieb/php2shell-sicherheitsluecke-so-schuetzt-ihr-eure-webanwendun, snapshot 20261026T094033Z. Copied byte for byte; every file's sha256 is in captures/20261026T094033Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
schieb.de (German), 25 October, by Jörg Schieb: a guide for site operators to check, patch and document. It says the German BSI has issued an updated cyber-security warning on critical PHP vulnerabilities and sends readers to it for CVE numbers, affected versions and patch levels. The remainder is generic advice on why unmaintained shared hosting, old CMS instances and forgotten project servers are favourite targets for automated scans.
> Das Bundesamt für Sicherheit in der Informationstechnik (BSI) hat eine aktualisierte Cybersicherheitswarnung zu kritischen Schwachstellen in PHP herausgegeben.
_Curator's translation:_ "The Federal Office for Information Security (BSI) has issued an updated cyber-security warning on critical vulnerabilities in PHP."
Why it is here
From the promotion queue (index/promote.json, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell-Sicherheitslücke: So schützt ihr eure Webanwendungen". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.
Capture notes
Language de. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261026T094033Z · HTTP 200 · https://www.schieb.de/php2shell-sicherheitsluecke-so-schuetzt-ihr-eure-webanwendungen
headers.jsonf36f38b29278645aaa45baa5ed4f3727e3829bbd5a1448af780d924f59465bdd 737 bytespage.html037b0f7fd27aefb1f1fa645b10f6a614e9ab9d75977f146d6add52ea7b9f9f0d 318,990 bytesprovenance.json5fa0c8bd84e9f964c4de87b23da5cd78bd19b911c02a4464ceec56c1b0bc791e 1,741 bytesrendered.html698e7f7305754e4492511de84f3874c4e2bfa595e8f8705f2d14f485f87c3b5a 320,591 bytesscreenshot.jpg3961ba1020209e1b26e2634f43f83bea3f5e17b28fab3e3c4a3d223d2e104c72 516,479 bytestext.txt19c3451138492c8a1061d73dbd093c8709a5dcde94065b2c8a61904b9ed85a48 7,107 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →