Catálogo de exploits

initial-access

PHP2Shell (CVE-2026-109618/109619) one-click detect & fix tool

initial-access

Read-only triage script for the PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619).

initial-access

Go app using Coraza WAF (CVE-2026-114101 bypass)

initial-access

initial-access

Node.js Brotli Decoder OOB Write to RCE

initial-access

AdapptOnAzure/cve-2026-111497-mitigation

Zero-dependency Python PoC & Docker Compose reproduction for CVE-2026-109619 via PHP RFC1867 upload progress and opcache.preload. (133 characters)

initial-access

Read-only auditor for CVE-2026-109618 / CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks.

Is your site exposed to php2shell (CVE-2026-109618, CVE-2026-109619), the October 2026 PHP remote code execution flaws? A one-file, zero-dependency CLI and GitHub Action that reads what your site shows anyone, with evidence and a curl command for every finding. Also checks the Node.js October 2026 releases.

Reproducible Docker lab + PoC: Keycloak manage-users -> realm-admin escalation via composite roles (CVE-2026-94000 variant). Validated on 26.8.1.

Find CA bundles in venvs, node_modules, wheels, jars, container images and binaries that still trust a revoked CA (eMudhra 2026, CVE-2026-111943) and the package to upgrade. Offline Rust CLI, SARIF output.

Read-only, on-server PHP2Shell (CVE-2026-109618/109619) check. Finds every PHP runtime (CLI, FPM, mod_php, cPanel/Plesk), distro backports, workers still needing a restart, and signs of compromise. No exploit traffic, changes nothing.

Unofficial PHP 5.3.29 backport of the php2shell fix (CVE-2026-109618, CVE-2026-109619) for Apache mod_php

Agente de seguridad que detecta y tria php2shell (CVE-2026-109618/109619) en webs y proyectos PHP. Instalable en opencode, Claude Code, Codex, Gemini CLI y otros. Pruebas activas solo con autorización.

php2shell vulnerability scanner (CVE-2026-109618 / CVE-2026-109619) — detects vulnerable PHP servers even when version is hidden. No exploitation performed.

One-shot RCE proof of concept for the PHP session.upload_progress use-after-free vulnerabilities (CVE-2026-109618 / CVE-2026-109619).

Patches and Windows build scripts for PHP 5.6-7.4 fixing CVE-2026-109618 / CVE-2026-109619

Guide opérationnel, outils d’audit et procédure de remédiation pour CVE-2026-109618 et CVE-2026-109619.

Defensive self-check & response toolkit for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Version x SAPI risk check, emergency report, WAF templates. No exploit code.

Signed, tested backports of EOL PHP (7.4/8.0/8.1) for CVE-2026-109618 & CVE-2026-109619 (php2shell)

Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.

CVE-2026-110264: GitLab pre-auth RCE via Onigmo integer overflow in org-ruby. Docker-based validation, admin check script, attack surface analysis.

Rebuilds of patched ondrej/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)

Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness