PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed PoCs + leak primitive.
☆43May 2, 2026Updated 6 months ago
Alternatives and similar repositories for php-8.5.5-var_destroy-uaf
Users that are interested in php-8.5.5-var_destroy-uaf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆115Oct 30, 2026Updated last week
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 6 months ago
- Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.☆16Aug 30, 2026Updated 2 months ago
- Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)☆33Apr 1, 2025Updated last year
- ☆28Oct 25, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Python for offensive security research☆12Jul 19, 2026Updated 3 months ago
- ☆13Jun 30, 2026Updated 4 months ago
- ☆30Mar 4, 2026Updated 8 months ago
- CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13…☆13Oct 20, 2026Updated 3 weeks ago
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 6 months ago
- ☆20Oct 10, 2025Updated last year
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- XNU AIO kevent use-after-free — kernel panic from app sandbox on iOS 26.2 (no entitlements). Patched in iOS 26.3☆28Mar 21, 2026Updated 7 months ago
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆34Oct 23, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.…☆12May 6, 2024Updated 2 years ago
- Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.☆13Sep 13, 2026Updated last month
- Coding without conditions☆15Jul 19, 2026Updated 3 months ago
- 新的阿里云先知社区文章爬虫☆15Apr 11, 2026Updated 7 months ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- the POC of package.json RCE☆27Jun 24, 2025Updated last year
- Dump Kerberos tickets from the KCM database of SSSD☆59Aug 30, 2026Updated 2 months ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆21Nov 2, 2026Updated last week
- CVE-85884 POC☆39Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656☆106Oct 21, 2026Updated 3 weeks ago
- Base64 Mutator☆13Feb 13, 2021Updated 5 years ago
- Summation of 2 + 3 using Fully Homomorphic Encryption (HElib)☆11Jun 17, 2016Updated 10 years ago
- ☆23Sep 28, 2026Updated last month
- A loader for bitbucket 2022 rce (cve-2022-36804)☆12Jul 6, 2026Updated 4 months ago
- Simple decrypter for Java AdWind, jRAT, jBifrost trojan☆17Jan 17, 2017Updated 9 years ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from …☆112Sep 9, 2026Updated 2 months ago
- museAPI video project☆92Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- stealth userland kit that doesn't use sys_clone/sys_execve call☆35Apr 10, 2025Updated last year
- Fuzzing Framework for Modules in Apache HTTPD Server☆22Jun 13, 2026Updated 4 months ago
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆29Aug 26, 2026Updated 2 months ago
- Java 字节码 facts-only 分析引擎，基于 jar-analyzer-engine 开发，把 JAR/WAR 解析成结构化 SQLite 事实库供 AI 代码审计☆21Jul 8, 2026Updated 4 months ago
- Nodejs漏洞 CVE-2026-111497 POC☆17Oct 24, 2026Updated 2 weeks ago
- POC☆44Jul 21, 2025Updated last year
- A tool to exploit the hash length extension attack in various hashing algorithms☆17Sep 11, 2012Updated 14 years ago
Are these results useful?