Catálogo de exploits

Sigma rules for PHP2Shell (CVE-2026-109618, CVE-2026-109619) post-exploitation

Black-box detector, proof harness and ELF offsets extractor for php2shell (CVE-2026-109618 / CVE-2026-109619), plus a reproducible vulnerable lab. Companion tooling for the eness PoC.

一个快速、批量检测PHP版本是否存在CVE-2026-109618/109619

Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.

Unofficial PHP 5.4.45 backport for CVE-2026-109618 and CVE-2026-109619, validated with ASan, PHPT, and VC11.

Field notes on containing PHP2Shell (CVE-2026-109618 / CVE-2026-109619) on Apache shared hosting without upgrading PHP: php.ini and .htaccess mitigations, pitfalls, verification.

🛡️ CVE-2026-109618 / CVE-2026-109619 PHP Exploit Scanner | *A unified scanner and exploitation tool for critical PHP vulnerabilities*

Security audit notes for CVE-2025-29927 (Next.js middleware authorization bypass) - upgrade plan for architecture review

Sealed PHP 5.6.40+sp1 CLI builds (CVE-2026-109618/109619) for macOS and Windows

Read-only PHP2Shell inventory scanner that checks servers over SSH and optional HTTP/HTTPS, identifies potentially vulnerable PHP versions, and exports a CSV report to help teams prioritize patching for CVE-2026-109618 and CVE-2026-109619.

CVE-2026-109618 php2shell local lab PoC

initial-access

Passive, non-intrusive measurement of how quickly U.S. state, county, city, and tribal government websites patch critical vulnerabilities, starting with PHP2Shell (CVE-2026-109618/109619). One GET request per domain per day. Research by Carroll University; opt-out on request.

Localhost-only Docker lab reproducing PHP 2026-10 memory-safety CVEs (CVE-2026-109618/-109619) via official regression tests. Differential vulnerable-vs-fixed, no exploit code.

Environment checker (for CVE-2026-109618 and CVE-2026-109619)

A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.

Lightweight, non-intrusive asset scanner designed to audit public and perimeter network assets for vulnerable PHP versions susceptible to php2shell RCE vectors (CVE-2026-109618 / CVE-2026-109619).

Read-only IOC triage for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). POSIX sh for WordPress, Nextcloud, Laravel, Drupal and plain PHP, on hosts or inside containers.

Certbn/PHP2Shell-CVE-2026-109618-CVE-2026-109619-

PHP2Shell Sentinel is an open-source defensive security tool for PHP administrators to assess runtime patch status, review logs, identify suspicious file changes, and investigate potential exploitation indicators related to CVE-2026-109618 and CVE-2026-109619. Built with Bash for authorized, read-only security triage.

A script to help triage wordpress installs for the recent PHP Critical CVE-2026-109618 and CVE-2026-109619 vulnerabilities.. Read-only security triage and evidence collection for Plesk-hosted WordPress servers.

Check, apply and test AWS WAF mitigations for PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

PHP2Shell (CVE-2026-109618 / CVE-2026-109619) — 8-version matrix, Docker labs, and measured boundaries: what works, what does not.

php2shell (CVE-2026-109618/109619) F5 BIG-IP Advanced WAF check and verification tools

Fix PHP2Shell (CVE-2026-109618 & CVE-2026-109619) PHP RCE vulnerabilities and automatically convert any WordPress or PHP website to a fast Next.js site.

Safe Nmap NSE detection for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) using PHP version fingerprinting. No exploitation or intrusive probing.

Check whether a website’s PHP is patched against CVE-2026-109618 / CVE-2026-109619. Works on cPanel ea-php and CloudLinux alt-php without root access

local

Guided one-file PHP wizard for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Checks if your PHP is patched, applies php.net’s temporary mitigations with backup & undo. Run: curl -fsSL wasdthedebugger.github.io/php2shell/fix | php

Unofficial Windows x64 builds of PHP 7.4.33, 8.0.30 and 8.1.34 patched for CVE-2026-109618 and CVE-2026-109619 (php2shell), for local development. / Versions Windows non officielles de PHP 7.4.33, 8.0.30 et 8.1.34 corrigées des failles CVE-2026-109618 et CVE-2026-109619, pour le développement local.