PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed PoCs + leak primitive.
☆43May 2, 2026Updated 5 months ago
Alternatives and similar repositories for php-8.5.5-var_destroy-uaf
Users that are interested in php-8.5.5-var_destroy-uaf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆104Updated this week
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,653Updated this week
- AI jailbreaks: 35 paste-ready AI jailbreak prompts for 25+ frontier and open-weight models - system prompts, AGENTS.md specs, and Ollama …☆424Updated this week
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 5 months ago
- ☆19Oct 10, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆30Mar 4, 2026Updated 7 months ago
- CVE-85884 POC☆35Oct 13, 2026Updated last week
- ☆22Sep 28, 2026Updated 3 weeks ago
- Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.☆13Sep 13, 2026Updated last month
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆19Oct 15, 2026Updated last week
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,143Updated this week
- Next.js RCE☆53Sep 29, 2026Updated 3 weeks ago
- ☆46Oct 14, 2026Updated last week
- Coding without conditions☆15Jul 19, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656☆97Updated this week
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆28Aug 26, 2026Updated last month
- Dump Kerberos tickets from the KCM database of SSSD☆59Aug 30, 2026Updated last month
- Decrypt and extract FortiOS 8.0.0 firmware images.☆30Jun 26, 2026Updated 3 months ago
- Python3 scripts that executes an elf (Linux executable format) completely in memory.☆26Apr 14, 2023Updated 3 years ago
- Summation of 2 + 3 using Fully Homomorphic Encryption (HElib)☆11Jun 17, 2016Updated 10 years ago
- A loader for bitbucket 2022 rce (cve-2022-36804)☆12Jul 6, 2026Updated 3 months ago
- MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and ra…☆69Aug 3, 2026Updated 2 months ago
- A tool to exploit the hash length extension attack in various hashing algorithms☆17Sep 11, 2012Updated 14 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Powershell & Javascript Obfuscator☆49Aug 24, 2026Updated last month
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- Fuzzing Framework for Modules in Apache HTTPD Server☆22Jun 13, 2026Updated 4 months ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆105Updated this week
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆47Mar 16, 2026Updated 7 months ago
- Installation guide for bWAPP on Kali Linux, Ubuntu, and Windows.☆17Sep 23, 2024Updated 2 years ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆44Sep 11, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆35Jul 24, 2026Updated 3 months ago
- Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2☆38Aug 26, 2026Updated last month
- ☆18Feb 17, 2025Updated last year
- Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).☆23Jan 17, 2026Updated 9 months ago
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 3 months ago
- A Ralph Wiggum-style Claude Code plugin for iterative vulnerability hunting...☆15Feb 20, 2026Updated 8 months ago
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆28Feb 14, 2026Updated 8 months ago