Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
☆1,079Oct 22, 2026Updated 2 weeks ago
Alternatives and similar repositories for php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Users that are interested in php2shell-CVE-2026-109618-CVE-2026-109619-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit rese…☆1,962Oct 28, 2026Updated 2 weeks ago
- A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.☆1,570Updated this week
- CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, hea…☆295Oct 30, 2026Updated last week
- php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discover…☆104Oct 23, 2026Updated 2 weeks ago
- High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)☆1,001Oct 24, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆111Oct 21, 2026Updated 3 weeks ago
- Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness☆80Oct 25, 2026Updated 2 weeks ago
- ☆144Oct 21, 2026Updated 3 weeks ago
- ☆45Oct 21, 2026Updated 3 weeks ago
- PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain)…☆115Oct 30, 2026Updated last week
- CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)☆63Oct 22, 2026Updated 2 weeks ago
- Operational information regarding the 2026 php2shell vulnerabilities☆365Updated this week
- XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template☆130Aug 21, 2026Updated 2 months ago
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆34Oct 23, 2026Updated 2 weeks ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)☆52Oct 25, 2026Updated 2 weeks ago
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆815Aug 11, 2026Updated 3 months ago
- A public release of the Steal My Bitcoin challenge☆1,048Nov 3, 2026Updated last week
- For PHP, CTI agencies, and CISA. This is for security hardening and bug awareness only.☆75Nov 4, 2026Updated last week
- PHP 8.5.5 — var_destroy __destruct reentrancy UAF. Sister bug to Calif MAD Bugs finding; survives their proposed patch. ASAN-confirmed Po…☆43May 2, 2026Updated 6 months ago
- CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)☆154Oct 24, 2026Updated 2 weeks ago
- ☆13Jun 30, 2026Updated 4 months ago
- ☆99Oct 22, 2026Updated 2 weeks ago
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆36Oct 28, 2026Updated 2 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆41Oct 21, 2026Updated 3 weeks ago
- Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618/109619 and build detection rules. No exploit included; b…☆33Oct 21, 2026Updated 3 weeks ago
- poc it like it's hot☆1,154Oct 27, 2026Updated 2 weeks ago
- Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabil…☆105Updated this week
- CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress☆31Oct 28, 2026Updated 2 weeks ago
- Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.☆82Oct 22, 2026Updated 2 weeks ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆45Sep 11, 2026Updated 2 months ago
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- CVE-2026-75604 Next.js Windows RCE poc☆109Aug 28, 2026Updated 2 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis☆93Oct 22, 2026Updated 2 weeks ago
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆293May 18, 2026Updated 5 months ago
- NGINX RCE exploits☆932Jul 25, 2026Updated 3 months ago
- CVE-85884 POC☆39Updated this week
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 6 months ago
- CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection☆511May 1, 2026Updated 6 months ago
- Exploits for CVE-2026-109618 / CVE-2026-109619 to achieve RCE on PHP targets☆41Oct 21, 2026Updated 3 weeks ago
Are these results useful?