m2sousa/CVE-2026-109618-CVE-2026-109619 CVE-2026-109618 Proof-of-concept. Create: 2026-10-21 07:42:58 +0000 UTC Push: 2026-10-21 07:42:59 +0000 UTC |

0x4148/CVE-2026-109618-php2shell-lab PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress. Create: 2026-10-21 07:35:51 +0000 UTC Push: 2026-10-21 07:35:53 +0000 UTC |

WoYinDao/CVE-2026-109618-CVSS-9.2-Critical PHP session.upload_progress RCE pair (CVSS v4.0 9.2 Critical x2) — full analysis, verified primitives, RCE chain, UAF weaponization harness, per-build symbol extraction Create: 2026-10-21 07:29:15 +0000 UTC Push: 2026-10-21 07:29:17 +0000 UTC |

AmpedWasTaken/PHP2Shell-CVE-2026-109618-CVE-2026-109619 Create: 2026-10-21 07:13:56 +0000 UTC Push: 2026-10-21 07:13:58 +0000 UTC |

Envincion/CVE-2026-51954 Create: 2026-10-21 06:12:52 +0000 UTC Push: 2026-10-21 06:13:14 +0000 UTC |

OJ01-creates/CVE-2026-77680-Security-Analysis Cybersecurity research and vulnerability analysis Create: 2026-10-21 06:03:02 +0000 UTC Push: 2026-10-21 06:03:03 +0000 UTC |

BIBILZERODAY/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE Create: 2026-10-21 04:41:56 +0000 UTC Push: 2026-10-21 04:42:06 +0000 UTC |

BIBILZERODAY/CVE-2026-104736-Mass-Webshell-CVE Create: 2026-10-21 04:41:12 +0000 UTC Push: 2026-10-21 04:41:25 +0000 UTC |

xuehuolll/CVE-2026-109618-109619-audit CVE-2026-109618 / CVE-2026-109619 audit: the claimed PHP session.upload_progress UAF does not exist in released PHP. ASAN ablation, published-PoC test results, one-command lab. Create: 2026-10-21 04:38:46 +0000 UTC Push: 2026-10-21 04:54:27 +0000 UTC |

xuehuolll/php2shell-CVE-2026-109618-109619 CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis. Create: 2026-10-21 04:38:46 +0000 UTC Push: 2026-10-21 16:23:24 +0000 UTC |

christinasm1th/CVE-2023-47250-break-fix Controlled break-fix demo and Bash automation for CVE-2023-47250, an X11 session access-control vulnerability (Kali Linux). Create: 2026-10-21 04:24:11 +0000 UTC Push: 2026-10-21 04:24:45 +0000 UTC |

19h/CVE-2026-109618 Create: 2026-10-21 03:22:41 +0000 UTC Push: 2026-10-21 03:22:43 +0000 UTC |

Zer061/CVE-2026-109618 PoC CVE-2026-109618 / -109619 (PHP session.upload_progress heap UAF) Create: 2026-10-21 03:06:03 +0000 UTC Push: 2026-10-21 03:06:04 +0000 UTC |

SeanDishman/php2shell-CVE-2026-109618-CVE-2026-109619 Example lab for CVE-2026-109618 / CVE-2026-109619 (php2shell): unpatched PHP session.upload_progress site + Python client. Create: 2026-10-21 02:43:26 +0000 UTC Push: 2026-10-21 16:51:11 +0000 UTC |

SleepTheGod/cve-2026-9618-Patch cve-2026-9618 Poc Patch Create: 2026-10-21 02:02:58 +0000 UTC Push: 2026-10-21 02:02:59 +0000 UTC |

asvorg/CVE-2026-59774-poc PoC for Gitea versions before 1.27.1 is vulnerable to Path Traversal (CWE-22), which leads to unauthenticated arbitrary file read / information disclosure leading to RCE Create: 2026-10-21 00:13:02 +0000 UTC Push: 2026-10-21 17:50:57 +0000 UTC |

fahise/cve-2018-16763 cve-2018-16763-exploit Create: 2026-10-21 00:01:18 +0000 UTC Push: 2026-10-21 00:01:42 +0000 UTC |

fahise/cve-2026-62911 cve-2026-62911-exploit Create: 2026-10-20 23:58:27 +0000 UTC Push: 2026-10-20 23:58:29 +0000 UTC |

iroanyadavid0-sys/CVE-2024-30088-Microsoft-Windows-Kernel- CVE-2024-30088 is a Microsoft Windows Kernel elevation-of-privilege vulnerability Create: 2026-10-20 23:50:40 +0000 UTC Push: 2026-10-20 23:50:42 +0000 UTC |

hidavidi123/CVE-2024-30088 CVE-2024-30088 is a Microsoft Windows Kernel elevation-of-privilege vulnerability. An attacker who already has low-privileged local access to an affected Windows computer may exploit it to obtain SYSTEM privileges. Create: 2026-10-20 23:21:36 +0000 UTC Push: 2026-10-20 23:21:38 +0000 UTC |