Exploit catalog

Portable Agent Skill to verify PHP patch status for the Oct 2026 RCE pair (CVE-2026-109618/619) and audit the CERT-EU mitigations. Verifies, does not exploit.

eMudhra CA Compromise CVE-2026-111943 CVE-2026-114406 CVE-2026-91403 CVE-2026-113812

CVE-2026-109618, CVE-2026-109619

Two small, read-only tools to confirm whether your PHP installations are patched against the critical RCE advisory published 2026-10-21 (CVE-2026-109618 / CVE-2026-109619)

PHP 5.6 security patch, backports, and mitigations for session.upload_progress Use-After-Free (CVE-2026-109618, CVE-2026-109619).

Read-only local checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

Is your site exposed to php2shell (CVE-2026-109618, CVE-2026-109619), the October 2026 PHP remote code execution flaws? A one-file, zero-dependency CLI and GitHub Action that reads what your site shows anyone, with evidence and a curl command for every finding. Also checks the Node.js October 2026 releases.

Guide, self-assessment form and read-only Linux check script for php2shell (CVE-2026-109618 / CVE-2026-109619): find out if you're exposed, patch, and check whether you were compromised.

Windows x64 NTS PHP 7.4 security build for CVE-2026-109618 and CVE-2026-109619

CVE-2026-110264: GitLab pre-auth RCE via Onigmo integer overflow in org-ruby. Docker-based validation, admin check script, attack surface analysis.

Security Ways for AI coding agents. First member audits Node.js repos for the Oct 21, 2026 security release (CVE-2026-111497 Brotli RCE) and opens a patch PR only if affected.

Fast, concurrent, non-intrusive exposure auditor in Go for the GitLab CE/EE unauthenticated RCE (CVE-2026-110264, CVSS 10.0). For defensive use.

The Skill I have been using to patch PHP servers for the vulnerability PHP2Shell (CVE-2026-109618 y CVE-2026-109619)

PHP2Shell — CVE-2026-109618/109619 exploit toolkit: 6 RCE chains, memory disclosure, scanner, detection rules, WAF mitigations, Docker labs. Authorized testing only.

Patches for CVE-2026-109618 and CVE-2026-109619

Go app using Coraza WAF (CVE-2026-114101 bypass)

A temporary shield for **UISP servers running the CRM**, against the **PHP2Shell** vulnerabilities (CVE-2026-109618 and CVE-2026-109619, published 21 October 2026), until Ubiquiti ships a UISP update with a patched PHP.

absholi7ly/Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shell

Verifica se um servidor Linux está vulnerável ao php2shell (CVE-2026-109618 / CVE-2026-109619)

Unofficial security backport: source patch for end-of-life PHP 7.3 addressing CVE-2026-109618 / CVE-2026-109619 (php2shell), ported from the official PHP 7.4 backport. Unsupported, no warranty, limited verification.

Lightweight forensic scanner and IOC checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) targeting Debian, LXC, and Docker environments.

宝塔面板（BT Panel）上已停止维护的 PHP 版本（5.4 – 8.1）的 PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修复包。仓库里有打好补丁的源码包，以及一键完成编译、替换、回滚的脚本。

Wordpress Plugin that checks if your PHP Version is patched against CVE-2026-109618 / CVE-2026-109619

Patched PHP 8.1 Windows binaries (x64/x86, NTS/TS) fixing critical RCE CVE-2026-109618 and CVE-2026-109619. PHP 8.1 is EOL and php.net ships no Windows build of the fix. Built from the official php-src backport with php-windows-builder; SHA-256 checksums and signed build provenance.

CVE-2026-109618 php2shell local lab PoC

UNTESTED unofficial PHP 5.4.45 FPM image with a backport of the php2shell (CVE-2026-109618/109619) mitigation

anldori/CVE-2026-109618

Пассивные Nuclei-шаблоны для обнаружения версий PHP и PHP-приложений в рамках проверки CVE-2026-109618 и CVE-2026-109619 (PHP2Shell)

Backport del fix oficial de CVE-2026-109618 / CVE-2026-109619 (RCE no autenticada de PHP) a ramas EOL 5.4 a 8.1

php2shell