Catálogo de exploits

Defensive triage for PHP2Shell (CVE-2026-109618 and CVE-2026-109619): a read-only check of every PHP SAPI, plus indicator hunting and a patch plan.

Script para auditar las url en produccion si es vulnerable con el bug CVE-2026-109618 / CVE-2026-109619 — PHP

PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)

quick and simple powershell based Internal PHP Version Assessment Checks for PHP versions potentially vulnerable to: CVE-2026-109618 / CVE-2026-109619 (PHP2Shell)

Rebuilds of patched ondrej/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)

initial-access

Sigma rule detection for CVE-2026-109618 vuln

Detect systems affected by PHP2Shell (CVE-2026-109618 / CVE-2026-109619) on Unix and Windows

PHP2Shell (CVE-2026-109618/CVE-2026-109619) multi-server scanner, guarded Linux/Windows remediation scripts, incident report and rollback guidance.

Go edition of the php2shell lab: CVE-2026-109618/109619 Docker lab, chain verifiers, WAF middleware and detection rules.

Deterministic Edge Radar & Reverse Proxy in Rust: Sniffing Autonomous AI Agents, mutating botnets, and PHP-2-Shell (CVE-2026-109618/19) memory exploits.

Am I vulnerable to PHP2Shell (CVE-2026-109618 / CVE-2026-109619)? Free passive PHP version check by Securin.

CVE-2026-109618 / CVE-2026-109619

Patches and Windows build scripts for PHP 5.6-7.4 fixing CVE-2026-109618 / CVE-2026-109619

PHP 7.4.33 (Windows, NTS, x64, VC15) rebuilt from the official php-src backport branch PHP-7.4-CVE-2026-109618-109619 (commit 712e60f9), which fixes CVE-2026-109618 and CVE-2026-109619.

Unofficial rebuild of PHP 7.4 for EL7 (CentOS/RHEL 7) with the php2shell fix (CVE-2026-109618/109619). A stopgap for EOL stacks — upgrading is the real fix.

PHP vulnerability checker for PHP2Shell (CVE-2026-109618/109619): audits servers, Docker images & CI. Backport-aware, zero-dep.

Scan local PHP, Docker images, running containers, URLs and inventories for PHP2Shell exposure (CVE-2026-109618 / CVE-2026-109619). Zero-dependency Node CLI with terminal UI, HTML dashboard and GitHub Action. Read-only, no exploit code.

PHP の RCE 脆弱性 CVE-2026-109618 / CVE-2026-109619 の調査

AriaWave PHP2Shell (CVE-2026-109618 & CVE-2026-109619) Defensive Readiness, SAPI, Apache RLimitMEM & INI Override Scanner + Autonomous Agent Skill (SKILL.md)

CVE-2026-109618 / CVE-2026-109619, PHP session handler stale-pointer RCE PoC, diagnostic tool, and detection rules (Sigma/Suricata). CVSS 9.2 Critical.

CVE-2026-109618 - multipart OOM bailout corruption trigger (PHP < 8.2.35/8.3.36/8.4.27/8.5.12)

shivabalaj/CVE-2026-109618

initial-access

Advanced Pre-Auth RCE Exploit for PHP session.upload_progress (CVE-2026-109618 & 109619) by Farhad Hosen.

CVE-2026-109618 / CVE-2026-109619 (php2shell) toolkit - session.upload_progress + LFI RCE proof and OOM precondition detection. Authorised testing only.

PHP 8.5.12 binaries built for a Raspberry Pi 1B (armv6l+VFPv2). Stopgap solution for CVE-2026-109618 and CVE-2026-109619.

Read-only auditor for CVE-2026-109618 / CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks.

Scans a PHP host for CVE-2026-109619 (php2shell): fingerprints it, compares PHP version and build date against fixed releases, checks the advisory's producer and consumer preconditions, then prints a VULNERABLE, NOT VULNERABLE or UNKNOWN verdict with the evidence behind it.

CVE-2026-109618 and CVE-2026-109619 Detection