Exploit catalog

Emergency mitigation for php2shell (CVE-2026-109618 / CVE-2026-109619): disables session.upload_progress on shared hosting (DreamHost, cPanel) at fleet scale

PHP2Shell PoC — CVE-2026-109618 / CVE-2026-109619 Heap use-after-free in PHP session.upload_progress handler (php_session_rfc1867_callback). Affects PHP 5.4+ (session.upload_progress.enabled ON by default).

Escáner defensivo por versión para detectar servidores PHP afectados por PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Comprueba la versión de PHP vía HTTP y la compara con las versiones corregidas. Solo detección, sin exploits.

Pre-auth remote code execution & reverse shell PoC for CVE-2026-109618 / CVE-2026-109619 - PHP core session upload-progress. One URL in, a reverse shell out.

php5 修复CVE-2026-109618-109619

Passive PHP2Shell (CVE-2026-109618, CVE-2026-109619) exposure checker with branded HTML reports. Single-file Python, no dependencies, no exploit payloads.

CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.

Hardens and patches PHP sites you did not build — SAPI-aware mitigation, cache-aware verification, and honest CVE patch tracking. Written for AI agents; php2shell (CVE-2026-109618/109619) is the worked example.

Unofficial PHP 8.1.34 builds for Linux and Windows with the PHP security team’s PHP2Shell fixes (CVE-2026-109618 and CVE-2026-109619), plus build scripts and regression tests.

PHP2Shell (CVE-2026-109618, CVE-2026-109619): 100% reliable DoS PoC for Apache mod_php, with Docker lab and pcap

Read-only checker for php2shell (CVE-2026-109618 / CVE-2026-109619): audit PHP servers and websites, no exploit payloads

Check and apply the php2shell fix (CVE-2026-109618, CVE-2026-109619) on hosts, SSH servers and Docker images

Temporary PHP2Shell mitigation for DirectAdmin PHP-FPM servers (CVE-2026-109618, CVE-2026-109619) using Ansible. Includes deployment, verification and rollback.

Mitigation for CVE-2026-109618 and CVE-2026-109619 for PHP under 8.X

scanner for CVE-2026-109618 / CVE-2026-109619

Independent PHP2Shell research: CVE-2026-109618/109619 status, source-linked PoC audits, and evidence tracker.

Temp fix with Ansible (CVE-2026-109618/CVE-2026-109619)

PHP 5.6.40 with the deb.sury.org security backports (incl. CVE-2026-109618/109619), rebuilt as RPMs for CentOS/RHEL 6 and 7

Non-destructive scanner for CVE-2026-109618 and CVE-2026-109619

Defensive detection toolkit for php2shell (CVE-2026-109618/109619, PHP session.upload_progress UAF): UA-independent shape scanner, estate checker, Suricata/Snort rules

CVE-2026-97629 — nginx TLS session-ticket forgery that can bypass client-certificate (mTLS) authentication. Root cause, one-line patch, proof-of-concept exploit and reproduction evidence. Found and disclosed by PhiNode Labs; credited by F5. Fixed in nginx 1.31.7 / 1.30.6.

CVE-2026-109618

Fix Php2Shell ( CVE-2026-109618 and CVE-2026-109619)

junaire/CVE-2026-109618-exploit

Mitigar CVE-2026-109618 e CVE-2026-109619: Software que permite bloquear requisições HTTP que utilizam multipart/form-data, normalmente empregado no envio de arquivos, em todos os sites hospedados ou somente em sites específicos.

daffa001/php-CVE-2026-109618-CVE-2026-109619

Independent source-level analysis and detection tooling for the PHP session.upload_progress pre-RINIT use-after-free (CVE-2026-109618 / CVE-2026-109619, CVSS 9.2, fixed 2026-10-21). Includes a heap layout study, a reproduction lab, an exposure scanner and a one-line remediation guide.

Read-only checker for PHP2Shell (CVE-2026-109618, CVE-2026-109619): finds vulnerable PHP, services still running old code after an update, and signs of attack. Linux, macOS, BSD, containers, Windows, shared hosting.

haobachang-1/php2shell-CVE-2026-109618-CVE-2026-109619

Debian/Apache mod_php + Sury PHP 7.4 with php2shell EOL mitigation (CVE-2026-109618 / 109619). Bridge for legacy apps. Prefer 8.2.35+.