Skip to content
Signalcrest
Back to entity feed
securityentity · corroborated across 3 sources

php2shell

for security engineers, devops

Steadydevtogithubhackernews
Signal score
32
Sources
3
independent communities
Live items
8
Trajectory
↑ Accelerating
7-day est. ~59

Why this scored 32

every term, weighted
Velocity+0.0 / 40

Its fastest-moving item, measured against the pace of its own source

Acceleration+11.5 / 25

Whether that velocity is itself speeding up, as a per-hour rate

Cross-source spread+16.7 / 25

How many independent communities its own items come from

Recency+7.8 / 10

Decays to zero over 14 days, counted from when we first saw it

Saturation penalty−4.2 / 30

Subtracted once something is big and old — sized by its biggest item, aged from when we first saw it

Composite31.7

Weights are hand-tuned, not learned — we're calibrating them against realized trends as history accumulates. On an entity's first sighting there's no previous reading to compare against, so acceleration starts from a neutral prior rather than a measurement, and velocity falls back to engagement over its whole lifetime until a second reading exists. Full methodology

Outlook

low confidence · estimate, not a guarantee

7-day

~59

range 17–70

14-day

~64

range 20–78

30-day

~66

range 17–86

Signal history

7-day window (free)
1489

projected trajectory (estimate, not a guarantee)

The evidence

The live items this entity's score aggregates — every community independently talking about it right now. This is the corroboration, shown, not claimed.

  1. 1
    45

    php2shell by Calif Research

    Calif Research releases php2shell, highlighting new security risks for PHP sites. · for security engineers, php admins

    lobstersEmerging 2 · php2shellsecurity3d ago
  2. 2
    31

    PHP vulnerability PHP2Shell: what the October 21 emergency release fixed and what is still disputed

    Emergency release patches PHP2Shell flaw; some aspects remain contested. · for web developers, security engineers

    devtoSteady 2 · wordpresssecurity2d ago
  3. 3
    31

    Patch Your PHP: What PHP2Shell Means for WordPress Sites

    PHP2Shell vulnerability can let attackers execute code on WordPress sites. · for web devs, security engineers

    devtoSteady 2 · wordpresssecurity1d ago
  4. 4
    19

    Testing the AWS WAF Mitigations for PHP2Shell on Both CloudFront and an ALB

    Shows how to test AWS WAF mitigations against PHP2Shell attacks on CloudFront and ALB. · for security engineers, cloud admins

    devtoSteadysecurity1d ago
  5. 5
    18

    PHP2Shell: Your Code Was Fine, The Engine Was Not

    Reveals engine-level flaws that affect PHP applications despite clean code. · for php devs, security engineers

    devtoSteadysecurity1d ago
  6. 6
    18

    PHP2Shell, explained: the two critical PHP bugs every team needs to patch

    Patch PHP2Shell bugs to prevent remote code execution. · for security engineers, devops

    devtoSteadysecurity2d ago
  7. 7
    17

    PHP2Shell: AI uncovers critical RCE in PHP

    AI discovered a critical remote code execution flaw in php2shell affecting PHP applications. · for security engineers, php devs

    hackernewsSteadysecurity3d ago
  8. 8
    17

    Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

    Amazon disclosed early detection of PHP2Shell exploit, prompting timely patches. · for security engineers, devops

    hackernewsSteadysecurity2d ago
  9. 9
    15

    php2shell-CVE-2026-109618-CVE-2026-109619-PoC — Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrat

    PoC reveals remote code execution vulnerability in php2shell, requiring immediate patching. · for security engineers, php developers

    githubSteadysecurity2d ago
  10. 10
    15

    php2shell-bypass-aslr-exp — A php2shell exploit that requires no modifications to the official version, and does not require display_errors

    php2shell exploit bypasses ASLR without altering core or needing display_errors. · for security engineers, penetration testers

    githubSteadysecurity2d ago