RuanSerraAzul/CVE-2026-109619-POC Create: 2026-10-22 13:22:18 +0000 UTC Push: 2026-10-22 13:22:20 +0000 UTC |

maxprog-svg/PHP2Shell-CVE-2026-109618-CVE-2026-109619 PHP2Shell — Exploit for CVE-2026-109618 / CVE-2026-109619 Create: 2026-10-22 13:08:39 +0000 UTC Push: 2026-10-22 13:08:40 +0000 UTC |

0xgetz/php2shell PHP2Shell - PHP version scanner + PHP2Shell exploitation framework (CVE-2026-109618 / CVE-2026-109619). Auto dorking, country filter, WAF/403 bypass, HTML reports. Commercial - $20 via t.me/xiyyyyz Create: 2026-10-22 12:14:42 +0000 UTC Push: 2026-10-22 12:14:56 +0000 UTC |

basesixtythree/B63-POC-CVE-2026-63077 PoC and verification material for CVE-2026-63077 (JetBrains TeamCity agent-polling deserialization RCE) Create: 2026-10-22 11:59:06 +0000 UTC Push: 2026-10-22 11:59:10 +0000 UTC |

AdapptOnAzure/cve-2026-111497-mitigation Create: 2026-10-22 11:53:56 +0000 UTC Push: 2026-10-22 12:43:03 +0000 UTC |

basesixtythree/B63-POC-CVE-2023-46604 PoC and verification material for CVE-2023-46604 (Apache ActiveMQ OpenWire marshaller RCE) Create: 2026-10-22 11:51:51 +0000 UTC Push: 2026-10-22 11:51:55 +0000 UTC |

eagle1maledetto/php5.6-wheezy-cve-2026-109618 PHP 5.6.40 packages for Debian 7 wheezy with the CVE-2026-109618 / CVE-2026-109619 fix (unofficial rebuild of the jessie packaging) Create: 2026-10-22 11:41:07 +0000 UTC Push: 2026-10-22 11:41:14 +0000 UTC |

Marciano-Morinigo/php2shell-CVE-2026-109618-CVE-2026-109619-PoC-Lab Create: 2026-10-22 11:04:09 +0000 UTC Push: 2026-10-22 11:04:10 +0000 UTC |

baron-stybd/CVE-2026-109618-CVE-2026-109619 Create: 2026-10-22 10:57:02 +0000 UTC Push: 2026-10-22 10:57:23 +0000 UTC |

mrmtwoj/php-cve-2026-109618-fixer 🛡️ ACYBER Security Toolkit — Automated detection & patching of CVE-2026-109618 (php2shell RCE) across Ubuntu, Debian, RHEL, CentOS, Rocky & AlmaLinux. Create: 2026-10-22 10:51:18 +0000 UTC Push: 2026-10-22 10:51:20 +0000 UTC |

GlobalsecureAcademy/php2shell-scanner-CVE-2026-109618-CVE-2026-109619- php2shell Scanner Create: 2026-10-22 10:39:58 +0000 UTC Push: 2026-10-22 10:40:00 +0000 UTC |

GlobalsecureAcademy/php2shell-scanner-CVE-2026-109618-CVE-2026-109619 php2shell Scanner Create: 2026-10-22 10:39:58 +0000 UTC Push: 2026-10-22 14:49:35 +0000 UTC |

vitalelele/CVE-2026-109618-PoC CVE-2026-109618 PoC - PHP session upload_progress heap UAF to pre-auth RCE. Docker one-liner demo included. Create: 2026-10-22 10:37:20 +0000 UTC Push: 2026-10-22 10:37:22 +0000 UTC |

3rfanabedi/php-cve-2026-fix Create: 2026-10-22 10:18:40 +0000 UTC Push: 2026-10-22 10:18:41 +0000 UTC |

basesixtythree/B63-POC-CVE-2024-36401 PoC and verification material for CVE-2024-36401 (GeoServer OGC filter evaluation RCE) Create: 2026-10-22 09:58:41 +0000 UTC Push: 2026-10-22 09:58:45 +0000 UTC |

zsy-arch/CVE-2026-62356-POC RedisBloom CMSketch RDB-load integer overflow (CVE-2026-62356) — non-weaponized PoC: deterministic crash/DoS reproducer, analysis & version matrix Create: 2026-10-22 09:48:52 +0000 UTC Push: 2026-10-22 09:49:05 +0000 UTC |

HyeonJi05/ksc2026-cve-transfer Create: 2026-10-22 09:44:03 +0000 UTC Push: 2026-10-22 10:05:27 +0000 UTC |

Uzair-Baig0900/PHP2Shell-CVE-2026-109618-9 PHP2Shell is a critical security vulnerability affecting the PHP core engine, associated with CVE-2026-109618 and CVE-2026-109619. The vulnerabilities arise from improper memory management and request cleanup mechanisms, which can lead to Use-After-Free (UAF) and Type Confusion conditions. Create: 2026-10-22 09:37:03 +0000 UTC Push: 2026-10-22 09:37:04 +0000 UTC |

SmR492/php-7.3-CVE-2026-109618-109619 Source patch for PHP 7.3 (end of life) fixing CVE-2026-109618 and CVE-2026-109619, ported from the official PHP 7.4 security backport Create: 2026-10-22 09:33:05 +0000 UTC Push: 2026-10-22 09:33:08 +0000 UTC |

SmR492/php-7.2-CVE-2026-109618-109619 Source patch for PHP 7.2 (end of life) fixing CVE-2026-109618 and CVE-2026-109619, ported from the official PHP 7.4 security backport Create: 2026-10-22 09:33:00 +0000 UTC Push: 2026-10-22 09:33:02 +0000 UTC |