Catálogo de exploits

php70-security-backport/php-7.0.33-CVE-2026-109618-109619.patch

mbadis-dev/php-cve-2026-109618-toolkit

Environment checker (for CVE-2026-109618 and CVE-2026-109619)

WallcroftUK/CVE-2026-109619

Compilación no oficial de PHP 7.4.33 para Windows x64 Thread Safe mediante GitHub Actions, con parches oficiales para CVE-2026-109618 y CVE-2026-109619. Orientada a Apache 2.4 y Wampserver 3.2.6 en Windows Server 2019.

PHP2Shell Helper | A lightweight Linux security audit and remediation helper for PHP2Shell (CVE-2026-109618 and CVE-2026-109619). It locates PHP runtimes, checks versions against the first upstream security fixes, reports instances needing attention, and offers optional emergency service containment after explicit confirmation.

CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab

Fast, zero-dependency Bash toolkit to audit, scan logs, mitigate, and patch Linux servers against PHP2Shell (CVE-2026-109618 & CVE-2026-109619).

php-backport:7.4-apache PHP-7.4-CVE-2026-109618-109619

Verifica se um servidor Linux está vulnerável ao php2shell (CVE-2026-109618 / CVE-2026-109619)

Local Docker lab + Chain A PoC for CVE-2026-109618 / CVE-2026-109619 (PHP 8.2.34)

Free scanner for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

Unofficial fix for CVE-2026-109618 / CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 / 5.3 packages of RHEL, CentOS and Oracle Linux 7 / 6

Comprueba si tu servidor está afectado por CVE-2026-109618/109619 (PHP)

PoC for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) zero-depndency, pre-auth RCE via a use-after-free in PHP's session.upload_progress handler. Affects PHP 5.48.5.11 fixed in 8.2.35+

CVE-2026-110264 — GitLab Unauthenticated RCE (Onigmo regex repeat-ID overflow, CVSS 10.0). Docker-verified crash PoC on ruby 3.4.11 + measured heap analysis. Crash-level, non-weaponized.

Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.

🛡️ ACYBER Security Toolkit — Automated detection & patching of CVE-2026-109618 (php2shell RCE) across Ubuntu, Debian, RHEL, CentOS, Rocky & AlmaLinux.

A passive exposure analyzer for the PHP2Shell bug class (CVE-2026-109618 and CVE-2026-109619). Point it at a URL and it tells you, in one screen: which PHP interpreter is running behind that endpoint, whether that interpreter is past the fix level for its branch, how the deployment (SAPI, CDN, WAF) changes what an attacker could realistically do wi

Non-invasive vulnerability assessment for CVE-2026-109618 and CVE-2026-109619.

Black-box detector, proof harness and ELF offsets extractor for php2shell (CVE-2026-109618 / CVE-2026-109619), plus a reproducible vulnerable lab. Companion tooling for the eness PoC.

CVE-2026-109618, CVE-2026-109619

Signed, tested backports of EOL PHP (7.4/8.0/8.1) for CVE-2026-109618 & CVE-2026-109619 (php2shell)

Refactored POC for CVE-2026-109618/109619 php2shell

Security audit notes for CVE-2025-29927 (Next.js middleware authorization bypass) - upgrade plan for architecture review

PHP2Shell (CVE-2026-109618 / -109619): plain-English brief + patch runbook for PHP 8.2-8.5, EOL branches, containers and control panels.

Passive scanner for PHP CVE-2026-109618 / CVE-2026-109619: subdomain discovery, PHP fingerprinting, local web UI

Fast, passive PHP vulnerability scanner in Go for php2shell (CVE-2026-109618 / CVE-2026-109619): subdomain discovery, CIDR scan, CDN/Cloudflare origin bypass, JSON/CSV output.

CVE-2026-109618 scanner and authorized RCE verification

In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560