jayy-hub1490/php2shell-CVE-2026-109618-CVE-2026-109619-recon-exploitation-toolkit exploit & detection kit for PHP2Shell (CVE-2026-109618/109619) — exploitation, IOC hunting, Sigma/ModSec rules, recon with PATCHED/VULNERABLE verdicts. Lab-verified. · by @jayy0x01 Create: 2026-10-21 14:37:40 +0000 UTC Push: 2026-10-21 14:37:42 +0000 UTC |

wind884/CVE-2026-109618-109619-PHP2Shell Before the first line of PHP: bilingual source analysis of CVE-2026-109618 and CVE-2026-109619 / PHP 请求生命周期漏洞中英文源码分析 Create: 2026-10-21 14:36:21 +0000 UTC Push: 2026-10-21 14:36:24 +0000 UTC |

goodcoddeo/pterodactyl_PHP-CVE-2026-10961x Create: 2026-10-21 14:27:47 +0000 UTC Push: 2026-10-21 14:27:48 +0000 UTC |

rdwr-namikb/php2shell-cve-2026-109618-109619-lab Local verification lab for CVE-2026-109618 / CVE-2026-109619 (php2shell): PHP 8.4.4 vs 8.4.27 Create: 2026-10-21 14:26:55 +0000 UTC Push: 2026-10-21 14:26:56 +0000 UTC |

fmdiscioglu/php-cve-2026-109618-checker Non-destructive affected-version checker for CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) PHP OOM/longjmp UAF Create: 2026-10-21 14:24:08 +0000 UTC Push: 2026-10-21 14:24:10 +0000 UTC |

vperetti/php-cve-2026-109618-109619-backports Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 / CVE-2026-109619) for EOL PHP 5.4 and 7.3 Create: 2026-10-21 14:20:57 +0000 UTC Push: 2026-10-21 14:21:03 +0000 UTC |

fuad00/CVE-2025-69413-PoC CVE-2025-69413 — Gitea API user enumeration PoC via auth error differentiation Create: 2026-10-21 14:20:25 +0000 UTC Push: 2026-10-21 14:20:29 +0000 UTC |

enactive-systems/CVE-2026-109618-poc Create: 2026-10-21 14:20:15 +0000 UTC Push: 2026-10-21 14:20:16 +0000 UTC |

adriyansyah-mf/CVE-2026-109618-109619-PHP-session.upload_progress-Exploit- Create: 2026-10-21 14:18:48 +0000 UTC Push: 2026-10-21 14:19:28 +0000 UTC |

fmdiscioglu/php-cve-2026-109619-checker Create: 2026-10-21 14:16:29 +0000 UTC Push: 2026-10-21 14:16:34 +0000 UTC |

nirzadokox/php2shell-PoC-for-CVE-2026-109618-CVE-2026-109619 Proof-of-concept for the two critical `session.upload_progress` vulnerabilities in PHP core (php2shell) Create: 2026-10-21 14:13:08 +0000 UTC Push: 2026-10-21 14:13:10 +0000 UTC |

zerbaliy3v/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks Create: 2026-10-21 14:12:22 +0000 UTC Push: 2026-10-21 14:12:24 +0000 UTC |

santihabib/CVE-2026-109619 Cross-request use-after-free in PHP session.upload_progress (CVE-2026-109619) — root-cause analysis and reproducer for PHP 8.5.11 Create: 2026-10-21 14:05:29 +0000 UTC Push: 2026-10-21 14:06:20 +0000 UTC |

charindithjaindu/CVE-2026-109618 Create: 2026-10-21 14:05:08 +0000 UTC Push: 2026-10-21 14:05:16 +0000 UTC |

bobbymaher/php-7.3.33-2026-10-21-CVE-patched php-7.3.33 patched Create: 2026-10-21 14:01:55 +0000 UTC Push: 2026-10-21 14:01:56 +0000 UTC |

nirzadokox/php2shell---PoC-for-CVE-2026-109618-CVE-2026-109619 Proof-of-concept for the two critical `session.upload_progress` vulnerabilities in PHP core (php2shell) Create: 2026-10-21 14:00:28 +0000 UTC Push: 2026-10-21 14:00:29 +0000 UTC |

1o-ya/php-cve-2026-109618-hotfix-guide Emergency mitigation guide and snippets for PHP CVE-2026-109618 / CVE-2026-109619 (php2shell) Create: 2026-10-21 13:58:44 +0000 UTC Push: 2026-10-21 13:58:46 +0000 UTC |

Okymi-X/CVE-2026-109618 php2shell — CVE-2026-109618 / CVE-2026-109619 PoC | Pre-auth RCE in PHP session.upload_progress (CVSS 9.2) Create: 2026-10-21 13:53:04 +0000 UTC Push: 2026-10-21 13:53:13 +0000 UTC |

nsrg-fmlorg/php-cve-2026-109618 PHP php2shell (CVE-2026-109618, CVE-2026-109619) fixes for Rocky Linux 8, 9 and 10, following AlmaLinux's Create: 2026-10-21 13:48:21 +0000 UTC Push: 2026-10-21 13:48:22 +0000 UTC |

EkaterinaMarchetti/Non-intrusive-PHP2Shell-assessment-for-CVE-2026-109618-and-CVE-2026-109619 Non-intrusive PHP2Shell assessment for CVE-2026-109618 and CVE-2026-109619 Create: 2026-10-21 13:36:23 +0000 UTC Push: 2026-10-21 13:36:29 +0000 UTC |