PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
☆115Oct 30, 2026Updated last week
Alternatives and similar repositories for php-cve-2026-10961x-lab-poc
Users that are interested in php-cve-2026-10961x-lab-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 6 months ago
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 3 weeks ago
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆29Aug 26, 2026Updated 2 months ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆111Oct 21, 2026Updated 3 weeks ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆89Updated this week
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆37Oct 20, 2026Updated 3 weeks ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆26Aug 13, 2026Updated 3 months ago
- For PHP, CTI agencies, and CISA. This is for security hardening and bug awareness only.☆75Nov 4, 2026Updated last week
- ☆47Oct 14, 2026Updated 3 weeks ago
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,962Oct 28, 2026Updated 2 weeks ago
- a lightweight, fast, and fully portable reimplementation of Impacket in TypeScript and JavaScript.☆29Sep 2, 2026Updated 2 months ago
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,001Oct 24, 2026Updated 2 weeks ago
- Proof of concept for CVE-2026-109618/CVE-2026-109619: PHP2Shell☆42Nov 2, 2026Updated last week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Bash script to spray known credentials against multiple services with netexec, inspired by nxcspray and nxc-sweep☆13Sep 2, 2026Updated 2 months ago
- This is an advanced Windows loader framework designed for stealthy code injection, anti-analysis, and evasion. It combines direct system …☆14Aug 6, 2025Updated last year
- CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.☆52Oct 26, 2026Updated 2 weeks ago
- Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability☆42Sep 24, 2026Updated last month
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆63Nov 1, 2026Updated last week
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆1,080Oct 22, 2026Updated 3 weeks ago
- Windows SSH Misconfiguration Discovery Tool - Map lateral movement paths through misconfigured SSH services in Active Directory environme…☆103May 11, 2026Updated 6 months ago
- Security monitoring middleware for IChatClient (Microsoft.Extensions.AI). 55 detectors for prompt injection, hallucination, PII leakage, …☆16Updated this week
- ☆37Sep 6, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- An uncensored local LLM interface built for security engineers. It enables private, filter-free interaction with abliterated models for v…☆25Oct 8, 2026Updated last month
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆30Nov 3, 2026Updated last week
- ☆16Feb 5, 2026Updated 9 months ago
- Certighost POC☆342Jul 28, 2026Updated 3 months ago
- ☆96Jul 24, 2026Updated 3 months ago
- EYES WIDE OPEN☆16Oct 16, 2025Updated last year
- CVE-2026-45504 Microsoft Exchange File Read☆64Jun 24, 2026Updated 4 months ago
- Powershell & Javascript Obfuscator☆50Aug 24, 2026Updated 2 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A comprehensive reference repository of C++ code examples for Windows APIs, organized by function name, prefix, and execution context.☆33Feb 23, 2026Updated 8 months ago
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆144Oct 30, 2026Updated last week
- A poc for https://github.com/laravel/framework/security/advisories/GHSA-f9x3-7vq9-cph6☆13Oct 23, 2026Updated 2 weeks ago
- CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution (ASLR on).☆14Jun 13, 2026Updated 4 months ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 3 months ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 3 weeks ago
- Explore a rich collection of diverse payloads in these GitHub repositories. 🚀☆12Apr 9, 2026Updated 7 months ago
Are these results useful?