Catálogo de exploits

Am I vulnerable to PHP2Shell (CVE-2026-109618 / CVE-2026-109619)? Free passive PHP version check by Securin.

suominen/CVE-2026-97206

initial-access

UNTESTED unofficial PHP images (EOL versions) with php2shell (CVE-2026-109618/109619) mitigation backports - one tag per version/SAPI

Claude Code skill: PHP2Shell (CVE-2026-109618/109619) exposure report from the Tenable Hexa AI MCP as HTML, PDF and CSV

Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).

Local/remote defensive audit for CVE-2026-109618 and CVE-2026-109619 ("php2shell") — verification of patched versions, non-restarted processes, and interim mitigations. No exploits; read-only operation.

PHP2Shell remediation guide (CVE-2026-109618 / CVE-2026-109619) for native Linux, Docker and BT Panel

PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE)

initial-access

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients.

initial-access

A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.

PHP-Shell is a local-first, wizard-driven passive black-box assessment prototype for PHP runtime exposure to CVE-2026-109618 and CVE-2026-109619. It provides both a browser UI and a terminal wizard using the same Python engine, and exports DOCX/PDF evidence reports.

GO based scanner for PHP2SHELL(CVE-2026-109618 and CVE-2026-109619)

Chequeo no invasivo de php2shell (CVE-2026-109618 / CVE-2026-109619): fingerprint de PHP, inferencia de SAPI y veredicto de parche. Python puro, sin dependencias.

initial-access

Detection for the critical PHP RCE flaws CVE-2026-109618 and CVE-2026-109619. Reports vulnerable/patched/EOL PHP runtimes by version and config.

Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 / CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具

initial-access

initial-access

initial-access

initial-access

initial-access

CVE-2026-109618 and CVE-2026-109619 exploit

initial-access

CVE-2026-109618 / CVE-2026-109619

Log4Shell (CVE-2021-44228) audit, research notes, and remediation tracking for quarterly security briefing

CVE-2026-109618 / CVE-2026-109619 (php2shell) toolkit - session.upload_progress + LFI RCE proof and OOM precondition detection. Authorised testing only.

Read-only PHP2Shell inventory scanner that checks servers over SSH and optional HTTP/HTTPS, identifies potentially vulnerable PHP versions, and exports a CSV report to help teams prioritize patching for CVE-2026-109618 and CVE-2026-109619.