cred0core/Sigma-rule-CVE-2026-109618 Sigma rule detection for CVE-2026-109618 vuln Create: 2026-10-22 09:21:34 +0000 UTC Push: 2026-10-22 09:21:51 +0000 UTC |

gei-git/php2shell-CVE-2026-109618-CVE-2026-109618- Create: 2026-10-22 09:07:26 +0000 UTC Push: 2026-10-22 09:07:28 +0000 UTC |

h3r2ym/Check-PHP-Docker-CVE-2026-109618---109619 Create: 2026-10-22 08:53:11 +0000 UTC Push: 2026-10-22 08:53:12 +0000 UTC |

hypnguyen1209/CVE-2026-111497 Node.js Brotli Decoder OOB Write to RCE Create: 2026-10-22 08:50:39 +0000 UTC Push: 2026-10-22 08:50:58 +0000 UTC |

leonlai-tw/php-eol-cve-2026-109618-109619 Unofficial patches for PHP CVE-2026-109618 / CVE-2026-109619 (RCE, CVSS 9.2) on EOL platforms: PHP 7.3 on CentOS/RHEL 7 (Remi), PHP 5.4 on Amazon Linux 2, PHP 5.3 on Amazon Linux 1 Create: 2026-10-22 08:48:51 +0000 UTC Push: 2026-10-22 08:52:37 +0000 UTC |

rmnelson/php-5.3.29-cve-2026-109618-109619 Unofficial PHP 5.3.29 backport of the php2shell fix (CVE-2026-109618, CVE-2026-109619) for Apache mod_php Create: 2026-10-22 08:41:09 +0000 UTC Push: 2026-10-22 08:41:13 +0000 UTC |

fardinbarashi/PHP-CVE-2026-109618-and-CVE-2026-109619 Check after php Create: 2026-10-22 08:34:42 +0000 UTC Push: 2026-10-22 08:34:44 +0000 UTC |

Wadewfsssss/CVE-2026-109618-POC CVE-2026-109618 / CVE-2026-109619 — PHP OOM state-corruption RCE. Default-config one-click exploit (chunked post_max_size bypass, Apache mod_php prefork, multi-worker via keep-alive). Patched in 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12. Create: 2026-10-22 08:32:39 +0000 UTC Push: 2026-10-22 08:32:45 +0000 UTC |

nh4ttruong/cve-2026-110264-poc Benign PoC carrier for CVE-2026-110264 Create: 2026-10-22 08:31:03 +0000 UTC Push: 2026-10-22 08:31:17 +0000 UTC |

LeminEly/CVE-2026-109618-109619 PoC demonstrations for PHP vulnerabilities CVE-2026-109618 & CVE-2026-109619 Create: 2026-10-22 08:19:22 +0000 UTC Push: 2026-10-22 08:19:23 +0000 UTC |

xPloits3c/PHP2Shell-CVE-2026-109618-CVE-2026-109619-PoC Local/remote defensive audit for CVE-2026-109618 and CVE-2026-109619 ("php2shell") — verification of patched versions, non-restarted processes, and interim mitigations. No exploits; read-only operation. Create: 2026-10-22 07:57:06 +0000 UTC Push: 2026-10-23 18:19:30 +0000 UTC |

shivabalaj/CVE-2026-109618 Create: 2026-10-22 07:48:44 +0000 UTC Push: 2026-10-22 07:48:45 +0000 UTC |

uday952/CVE-2026-12118-POC POC for the CVE-2026-12118 Create: 2026-10-22 07:29:26 +0000 UTC Push: 2026-10-22 07:29:47 +0000 UTC |

bagsiz/focal-php74-security Patched PHP 7.4 packages for Ubuntu 20.04 (focal) fixing CVE-2026-109618 / CVE-2026-109619: Ondřej Surý's 7.4.33-31 rebuilt for focal, with an installer that detects the server's PHP, upgrades it and can roll back. Create: 2026-10-22 07:24:13 +0000 UTC Push: 2026-10-22 07:24:14 +0000 UTC |

mbadis-dev/php-cve-2026-109618-toolkit Create: 2026-10-22 07:17:58 +0000 UTC Push: 2026-10-22 07:18:00 +0000 UTC |

HORKimhab/CVE-2025-64702 https://github.com/FoxIO-LLC/blog_poc/tree/main/headeraccordions Create: 2026-10-22 07:17:14 +0000 UTC Push: 2026-10-22 07:17:19 +0000 UTC |

HORKimhab/CVE-2025-64702-more https://github.com/FoxIO-LLC/blog_poc/tree/main/headeraccordions Create: 2026-10-22 07:17:14 +0000 UTC Push: 2026-10-22 07:17:19 +0000 UTC |

suominen/CVE-2026-97206 Create: 2026-10-22 07:12:04 +0000 UTC Push: 2026-10-22 07:12:05 +0000 UTC |

baimaobg/php-cve-2026-109619-lab Create: 2026-10-22 07:06:22 +0000 UTC Push: 2026-10-22 07:06:24 +0000 UTC |

maxprog-svg/CVE-2026-104935 CVE-2026-104935 — Ivanti Connect Secure / Pulse Secure RCE Exploit Create: 2026-10-22 07:05:20 +0000 UTC Push: 2026-10-22 07:05:21 +0000 UTC |