PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
☆104Oct 23, 2026Updated this week
Alternatives and similar repositories for php-cve-2026-10961x-lab-poc
Users that are interested in php-cve-2026-10961x-lab-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 5 months ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆105Updated this week
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,653Updated this week
- Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, req…☆95Updated this week
- ☆95Jul 24, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sparo OS is an agentic OS born for the AI era. It explores "AI as a system," making software no longer a fixed tool, but something that…☆25Aug 11, 2026Updated 2 months ago
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆28Aug 26, 2026Updated last month
- ☆15Feb 5, 2026Updated 8 months ago
- Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP e…☆901Updated this week
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆437Updated this week
- Repo for the testing-genai workshop☆14May 8, 2025Updated last year
- Three LLMs review your design plan in parallel — paste 30 lines into your CLAUDE.md, no install needed.☆15May 2, 2026Updated 5 months ago
- Codebase for EMNLP 2025 Findings paper "Text or Pixels? Evaluating Efficiency and Understanding of LLMs with Visual Text Inputs"☆20Nov 14, 2025Updated 11 months ago
- A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned …☆13Nov 14, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Watchtower is a simple AI-powered penetration testing automation CLI tool that leverages LLMs and LangGraph to orchestrate agentic workfl…☆217Oct 14, 2026Updated last week
- Neural network compiler☆17Jun 3, 2022Updated 4 years ago
- Credential and sensitive-data exposure triage for file shares☆16Aug 8, 2026Updated 2 months ago
- ☆63May 1, 2026Updated 5 months ago
- A simple Go program that detects whether the current Windows system is running inside a Hyper-V virtual machine environment(Guest) using …☆11Oct 27, 2024Updated last year
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆85Updated this week
- ☆25Apr 21, 2026Updated 6 months ago
- Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-kno…☆26Aug 31, 2026Updated last month
- Async Rust library to route messages between Kafka, NATS, MQTT, AMQP, databases and HTTP, with Python and Node bindings☆24Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Azure Developer CLI template for deploying Microsoft Entra emergency access account protections☆16Updated this week
- List of distributions that can be bootstrapped from source☆17Apr 21, 2026Updated 6 months ago
- This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…☆20Sep 28, 2026Updated 3 weeks ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,143Updated this week
- Repository to hold Cloud Services (extended support) samples☆11Aug 9, 2022Updated 4 years ago
- Always-on IRC bouncer with a REST-first API (grappa) + irssi-shape PWA client (cicchetto). Beta.☆18Oct 15, 2026Updated last week
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆28Oct 15, 2026Updated last week
- A plugin that automatically creates a virtual mailbox when a new keyword is set on a message.☆10Oct 16, 2024Updated 2 years ago
- This script leverages CVE-2023046604 (Apache ActiveMQ) to generate a pseudo shell. The vulnerability allows for remote code execution due…☆19Jan 24, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- My freelancing work history☆12Dec 18, 2025Updated 10 months ago
- 收集了java XXE漏洞的demo及修复方式☆19Mar 11, 2024Updated 2 years ago
- Docker file to build smartmontools images with all required dependencies☆13Oct 10, 2026Updated last week
- Bash script for checking whether affected versions from the `keyv` and `cacheable` npm supply-chain compromise on August 4, 2026☆20Aug 5, 2026Updated 2 months ago
- Google TV-style home screen for LG webOS TVs☆55Updated this week
- Stealth hybrid URL mapper☆53Updated this week
- Reliable UDP, Author Whg☆15Oct 8, 2019Updated 7 years ago