Catálogo de exploits

Sigma rules for PHP2Shell (CVE-2026-109618, CVE-2026-109619) post-exploitation

Kit para diagnosticar y corregir **PHP2Shell** (CVE-2026-109618 y CVE-2026-109619, RCE sin autenticación en PHP 5.4 a 8.5.11) en servidores Linux de clientes.

UNTESTED unofficial PHP 7.2.34 Apache/mod_php image with a backport of the php2shell (CVE-2026-109618/109619) mitigation

UNTESTED unofficial PHP 5.4.45 Apache/mod_php image with a backport of the php2shell (CVE-2026-109618/109619) mitigation

Read-only Windows & macOS scripts to find PHP and flag versions vulnerable to PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

PHP2Shell (CVE-2026-109618/109619) fix for PHP 5.6: Sury 0261 port, analysis, Remi rebuild spec diff, verify script

Check websites and servers for PHP2Shell (CVE-2026-109618, CVE-2026-109619), verify the fix is running, and hunt for compromise.

Read-only triage script for WordPress sites after PHP2Shell (CVE-2026-109618, CVE-2026-109619). Checks for signs of compromise and writes a report per site.

CVE-2026-109618 / CVE-2026-109619 PHP OOM Corruption PoC

Userscript that warns when a site runs a PHP version affected by php2shell (CVE-2026-109618/109619)

Entorno de Pruebas Didáctico para Clases de Hacking Ético y Ciberdefensa Vulnerabilidades: CVE-2026-109618 (OOM Use-After-Free) y CVE-2026-109619 (Global State Stale Reference) Severidad: CVSS 9.2 (Crítico) - RCE No Autenticado en el Core de PHP

ZeroHack: CVE-2026-109618 / CVE-2026-109619 Lab & PoC Framework

A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.

Check after php

ansonhsu-ai/php2shell-cve-2026-109618-ste

Read-only triage script for the PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619).

PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)

一个快速、批量检测PHP版本是否存在CVE-2026-109618/109619

Complete auto exploit for NGINX PHP-FPM CVE-2026-109618 / CVE-2026-109619

Fixed PHP versions and distro packages for PHP2Shell (CVE-2026-109618, CVE-2026-109619) as JSON. CC0. Data behind php2shell.fyi.

Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)

Diagnóstico, parcheo y mitigación de PHP2Shell (CVE-2026-109618 / CVE-2026-109619) en Ubuntu

Free open-source scanner: is your PHP version vulnerable to php2shell (CVE-2026-109618 / CVE-2026-109619)? Disclosure-only — no exploit probes.

PoC for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) zero-depndency, pre-auth RCE via a use-after-free in PHP's session.upload_progress handler. Affects PHP 5.48.5.11 fixed in 8.2.35+

Is your site exposed to php2shell (CVE-2026-109618, CVE-2026-109619), the October 2026 PHP remote code execution flaws? A one-file, zero-dependency CLI and GitHub Action that reads what your site shows anyone, with evidence and a curl command for every finding. Also checks the Node.js October 2026 releases.

Full 1:1 reproduction of php2shell (CVE-2026-109618 / CVE-2026-109619): pre-auth PHP RCE via session.upload_progress OOM corruption and stale cross-request state. Pinned mod_php 8.4.26 / Apache 2.4.69 aarch64 lab, pure HTTP, heap-layout ASLR bypass, no brute force.

Non-invasive detector for the PHP2Shell RCE pair: CVE-2026-109618 and CVE-2026-109619.

One command to find and fix PHP2Shell (CVE-2026-109618 / CVE-2026-109619) on any Linux server or Mac. Patches every PHP install in place, keeping your current PHP version (distro, Sury or Remi builds), with an opt-in --force upgrade and rollback.

Free Bash script to check servers, SSH hosts and Docker containers for the PHP2Shell RCE flaws (CVE-2026-109618 & CVE-2026-109619). Read-only. Flags PATCHED, VULNERABLE or unsupported PHP versions.

php2shell-enterprise-hardening (CVE-2026-109618 / CVE-2026-109619) - Hyperscale Defense-in-Depth, Non-Breaking Mitigations & Instant Immunity Auditor for PHP Pre-Auth RCE.