php-rce

Here are 3 public repositories matching this topic...

mahumadad / php2shell-analysis

Working RCE exploit, IDS/WAF detection rules (Suricata, ModSecurity, Sigma, Cloudflare), Docker lab, and full analysis for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). Only public exploit covering the serializer mismatch → POP chain that bypasses upload_progress mitigations.

exploit deserialization poc php-security modsecurity detection-rules upload-progress suricata-rules sigma-rules waf-rules php-exploit php-rce cve-2026-109618 cve-2026-109619 php2shell heap-uaf pop-chain session-exploit

Updated Oct 21, 2026
Python

gumerzzzindo / php2shell-CVE-2026-109618-109619

Star

Crónica y PoC del patch-day de PHP (21-oct-2026): CVE-2026-109618 / CVE-2026-109619 — RCE pre-auth en mod_php. Primitiva reproducida en stock 8.5.11 y en Nextcloud real. Lab-only.

php security exploit poc rce vulnerability cve php-rce cve-2026-109618 cve-2026-109619

Updated Oct 22, 2026
PHP

aduli198 / CVE-2026-109618_CVE-2026-109619

Star

PoC for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) zero-depndency, pre-auth RCE via a use-after-free in PHP's session.upload_progress handler. Affects PHP 5.48.5.11 fixed in 8.2.35+

php use-after-free php-rce cve-2026-109618 cve-2026-109619 php2shell

Updated Oct 22, 2026
Python

Add this topic to your repo

To associate your repository with the php-rce topic, visit your repo's landing page and select "manage topics."

Learn more