CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)
Like syrex1013/php2shell, 0 likes 0 Bookmark syrex1013/php2shell, 0 bookmarks 0 Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Like eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC, 0 likes 0 Bookmark eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC, 0 bookmarks 0 CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis
Like ikow/php2shell-poc, 0 likes 0 Bookmark ikow/php2shell-poc, 0 bookmarks 0 PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Like JoasASantos/php2shell-exploit, 0 likes 0 Bookmark JoasASantos/php2shell-exploit, 0 bookmarks 0 CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)
Like Is4yev/php2shell-poc, 0 likes 0 Bookmark Is4yev/php2shell-poc, 0 bookmarks 0 🤖 NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)
Like cookiengineer/actual-php2shell, 0 likes 0 Bookmark cookiengineer/actual-php2shell, 0 bookmarks 0 PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
Like devploit/php2shell, 0 likes 0 Bookmark devploit/php2shell, 0 bookmarks 0 PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Like dinosn/php-cve-2026-10961x-lab-poc, 0 likes 0 Bookmark dinosn/php-cve-2026-10961x-lab-poc, 0 bookmarks 0 
