CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis
☆93Oct 22, 2026Updated 3 weeks ago
Alternatives and similar repositories for php2shell-poc
Users that are interested in php2shell-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆45Oct 21, 2026Updated 3 weeks ago
- CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)☆52Oct 25, 2026Updated 2 weeks ago
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆116Oct 30, 2026Updated 2 weeks ago
- ☆28Oct 25, 2026Updated 2 weeks ago
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆42Nov 2, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆37Oct 20, 2026Updated 3 weeks ago
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,966Oct 28, 2026Updated 2 weeks ago
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- phpMyAdmin - High 8.1 - Authenticated POST /index.php - 2FA Bypass☆13Oct 28, 2026Updated 2 weeks ago
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- ☆99Oct 22, 2026Updated 3 weeks ago
- High fidelity detection mechanism for node2shell (CVE-2026-111497)☆86Oct 25, 2026Updated 2 weeks ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Nov 6, 2026Updated last week
- Working RCE PoCs: php2shell-8512 on FULLY-PATCHED PHP 8.5.12 (session-gaps, one-shot+interactive, demo video) + session poisoning -> LFI …☆25Oct 23, 2026Updated 3 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆23Sep 28, 2026Updated last month
- Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)☆20Aug 7, 2026Updated 3 months ago
- Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.☆82Oct 22, 2026Updated 3 weeks ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned …☆13Nov 14, 2025Updated last year
- ☆33Apr 14, 2026Updated 6 months ago
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,003Oct 24, 2026Updated 3 weeks ago
- CVE-2026-75604 Next.js Windows RCE poc☆110Aug 28, 2026Updated 2 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE☆199Oct 26, 2026Updated 2 weeks ago
- Certighost POC☆342Jul 28, 2026Updated 3 months ago
- CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, hea…☆297Oct 30, 2026Updated 2 weeks ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆22Nov 2, 2026Updated last week
- Sistema hardware basado en Arduino para detectar Rubber Duckies, evitando su conexión física al PC y permitiendo conectar pendrives o tec…☆13Jul 28, 2022Updated 4 years ago
- Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2☆39Aug 26, 2026Updated 2 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆80Aug 28, 2026Updated 2 months ago
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- Just another EDR killer☆142Jan 21, 2026Updated 9 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- collection of various nuclei templates☆11Apr 18, 2023Updated 3 years ago
- ☆13Mar 6, 2025Updated last year
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ☆23Jun 5, 2026Updated 5 months ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆234Jun 2, 2026Updated 5 months ago
- Bash script to spray known credentials against multiple services with netexec, inspired by nxcspray and nxc-sweep☆13Sep 2, 2026Updated 2 months ago
- ☆72Jul 12, 2026Updated 4 months ago
Are these results useful?