Catálogo de exploits

php2shell, cve-2026-109618, shadow-it, attack-surface, security-tools, python.

PHP2Shell (CVE-2026-109618 / -109619): plain-English brief + patch runbook for PHP 8.2-8.5, EOL branches, containers and control panels.

Local Docker lab + Chain A PoC for CVE-2026-109618 / CVE-2026-109619 (PHP 8.2.34)

🛡️ CVE-2026-109618 / CVE-2026-109619 PHP Exploit Scanner | *A unified scanner and exploitation tool for critical PHP vulnerabilities*

PoC and verification material for CVE-2026-96652 (Plex Media Server timeline SSRF, owner-token disclosure chain)

Detection + remediation scanner for php2shell (CVE-2026-109618/109619) and react2shell (CVE-2025-55182).

Patched PHP 7.4 packages for Ubuntu 20.04 (focal) fixing CVE-2026-109618 / CVE-2026-109619: Ondřej Surý's 7.4.33-31 rebuilt for focal, with an installer that detects the server's PHP, upgrades it and can roll back.

ansonhsu-ai/php2shell-cve-2026-109618-ste

Guide opérationnel, outils d’audit et procédure de remédiation pour CVE-2026-109618 et CVE-2026-109619.

Defensive self-check & response toolkit for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Version x SAPI risk check, emergency report, WAF templates. No exploit code.

Signed, tested backports of EOL PHP (7.4/8.0/8.1) for CVE-2026-109618 & CVE-2026-109619 (php2shell)

Diagnóstico, parcheo y mitigación de PHP2Shell (CVE-2026-109618 / CVE-2026-109619) en Ubuntu

Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.

Two small, read-only tools to confirm whether your PHP installations are patched against the critical RCE advisory published 2026-10-21 (CVE-2026-109618 / CVE-2026-109619)

Certbn/PHP2Shell-CVE-2026-109618-CVE-2026-109619-

Detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) PHP RCE exploitation attempts by inspecting POST request bodies with nginx mirror

Refactored POC for CVE-2026-109618/109619 php2shell

Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)

PHP2Shell Helper | A lightweight Linux security audit and remediation helper for PHP2Shell (CVE-2026-109618 and CVE-2026-109619). It locates PHP runtimes, checks versions against the first upstream security fixes, reports instances needing attention, and offers optional emergency service containment after explicit confirmation.

Sistemdeki tüm PHP kurulumlarını CVE-2026-109618/109619 açısından denetleyen Bash betiği

Check if your server is vulnerable to PHP2Shell (CVE-2026-109618 & CVE-2026-109619). Free, open-source scanner with GUI + CLI, no dependencies.

UNTESTED unofficial PHP 7.2.34 FPM image with a backport of the php2shell (CVE-2026-109618/109619) mitigation

Free scanner for php2shell (CVE-2026-109618/109619): finds PHP installs and flags vulnerable versions, per CISA's alert.

Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.

Free self-check for PHP2Shell (CVE-2026-109618, CVE-2026-109619): find every PHP on your server, see if it's exposed, and fix it. Works with AI assistants.

Unofficial fix for CVE-2026-109618 / CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 / 5.3 packages of RHEL, CentOS and Oracle Linux 7 / 6

Free scanner for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

KQL hunting queries for php2shell (CVE-2026-109618/109619) and the eMudhra CA key compromise, for Microsoft Defender XDR and Sentinel

Fleet-wide audit, remediation & IOC scan for CVE-2026-109618/109619 (php2shell). Finds every PHP build ea-php/alt-php/lsphp not just `php -v`. Read-only, no exploit code.

Non-destructive exploitability checker for PHP2Shell (CVE-2026-109618/109619) — probes whether the session.upload_progress use-after-free preconditions are present without dropping shells