Exploit catalog

Read-only checker for PHP2Shell (CVE-2026-109618/109619) exposure: local, URL, SSH

Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).

PHP session upload-progress LFI lab and FPM OOM / rfc1867 memory-corruption reproduction (CVE-2026-109618, CVE-2026-109619)

Field notes on containing PHP2Shell (CVE-2026-109618 / CVE-2026-109619) on Apache shared hosting without upgrading PHP: php.ini and .htaccess mitigations, pitfalls, verification.

Microsoft Defender Advanced Hunting queries that track PHP versions in a tenant and flag CVE-2026-109618 and CVE-2026-109619 exposure.

Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).

cve explaination

Script para auditar las url en produccion si es vulnerable con el bug CVE-2026-109618 / CVE-2026-109619 — PHP

Chequeo no invasivo de php2shell (CVE-2026-109618 / CVE-2026-109619): fingerprint de PHP, inferencia de SAPI y veredicto de parche. Python puro, sin dependencias.

Detection + remediation scanner for php2shell (CVE-2026-109618/109619) and react2shell (CVE-2025-55182).

Temporary php2shell (CVE-2026-109618/109619) mitigation for Ubuntu and AlmaLinux 8 / FastPanel

phpwshell poc for CVE-2026-109618

Sigma rules for PHP2Shell (CVE-2026-109618, CVE-2026-109619) post-exploitation

Browser extension that warns when a site's server reports a PHP version vulnerable to PHP2Shell (CVE-2026-109618/109619). Reads headers only, never probes.

Read-only PHP2Shell audit for CVE-2026-109618 and CVE-2026-109619. Discover PHP services and prepare remediation. Linux Bash + Windows PowerShell; EN/PT HTML and CSV reports.

Sigma detection rules for php2shell OOM multipart probing (CVE-2026-109618 / CVE-2026-109619)

ansonhsu-ai/php2shell-cve-2026-109618-ste

Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 / CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具

suominen/CVE-2026-97206

Userscript that warns when a site runs a PHP version affected by php2shell (CVE-2026-109618/109619)

baron-stybd/CVE-2026-109618-CVE-2026-109619

Passive, non-intrusive measurement of how quickly U.S. state, county, city, and tribal government websites patch critical vulnerabilities, starting with PHP2Shell (CVE-2026-109618/109619). One GET request per domain per day. Research by Carroll University; opt-out on request.

Black-box detector, proof harness and ELF offsets extractor for php2shell (CVE-2026-109618 / CVE-2026-109619), plus a reproducible vulnerable lab. Companion tooling for the eness PoC.

h3r2ym/Check-PHP-Docker-CVE-2026-109618---109619

PHP2Shell (CVE-2026-109618/109619) one-click detect & fix tool

initial-access

Reproducible audit trail for the Log4Shell (CVE-2021-44228) and follow-up (CVE-2021-45046) study-group walkthrough

Research brief on Log4Shell (CVE-2021-44228) for an internal security awareness session. Every claim is backed by linked primary sources.

Demo of doc-review process using Log4Shell (CVE-2021-44228) advisory facts

PHP 7.4.33 (Windows, NTS, x64, VC15) rebuilt from the official php-src backport branch PHP-7.4-CVE-2026-109618-109619 (commit 712e60f9), which fixes CVE-2026-109618 and CVE-2026-109619.