PoC mới public

Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 1 giờ trước.

⚠ PoC trên GitHub chưa được kiểm duyệt, đã có nhiều repo "PoC" giả chứa mã độc. Chỉ đọc code và chạy trong máy ảo cô lập, không chạy trên máy cá nhân.

CVE-2026-109618 Nghiêm trọng 9.2 8 giờ trước

aduli198/CVE-2026-109618_CVE-2026-109619 ★ 1

PoC for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) zero-depndency, pre-auth RCE via a use-after-free in PHP's session.upload_progress handler. Affects PHP 5.48.5.11 fixed in 8.2.35+
CVE-2026-109618 Nghiêm trọng 9.2 8 giờ trước

dos-security/CVE-2026-109618-CVE-2026-109619 ★ 0

Defensive PHP security advisories and safe verification guidance from DOS Security. CVE-2026-109618 · CVE-2026-109619
CVE-2026-109618 Nghiêm trọng 9.2 8 giờ trước

pattingbabies/php2shell-CVE-2026-109618-109619 ★ 2

Full 1:1 reproduction of php2shell (CVE-2026-109618 / CVE-2026-109619): pre-auth PHP RCE via session.upload_progress OOM corruption and stale cross-request state. Pinned mod_php 8.4.26 / Apache 2.4.69 aarch64 lab, pure HTTP, heap-layout ASLR bypass, no brute force.
CVE-2026-109618 Nghiêm trọng 9.2 8 giờ trước

g41277460-cpu/CVE-2026-109618-CVE-2026-109619-php2shell- ★ 0

cve explaination
CVE-2026-109618 Nghiêm trọng 9.2 8 giờ trước

TheMursalin/CVE-2026-109618 ★ 0

php2shell
CVE-2026-110264 Nghiêm trọng 10.0 9 giờ trước

OppositDeer/Gitlab-RCE-CVE-2026-110264 ★ 1

CVE-2026-110264: GitLab Unauthenticated RCE via Onigmo Regex Integer Overflow
CVE-2026-111497 Chưa chấm 9 giờ trước

dimasma0305/CVE-2026-111497-POC ★ 1

Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness
CVE-2026-109618 Nghiêm trọng 9.2 10 giờ trước

kishwordulal2005/CVE-2026-109618-and-CVE-2026-109619-Exploit ★ 1

CVE-2026-109618 and CVE-2026-109619 exploit
CVE-2026-109618 Nghiêm trọng 9.2 10 giờ trước

ansonhsu-ai/php2shell-cve-2026-109618-ste ★ 0

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2025-14847 Cao 8.7 11 giờ trước

SAIM28826/CVE-2025-14847-poc ★ 1

CVE-2025-14847 proof of concept script for testing
CVE-2026-109618 Nghiêm trọng 9.2 12 giờ trước

absholi7ly/Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shell ★ 1

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 12 giờ trước

HORKimhab/CVE-2026-109618-619 ★ 0

CVE-2026-109618, CVE-2026-109619
CVE-2026-109618 Nghiêm trọng 9.2 12 giờ trước

0k1dok1/CVE-2026-109618-CHECK ★ 0

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 12 giờ trước

LightSpeedC/20261022-research-php-cve ★ 0

PHP の RCE 脆弱性 CVE-2026-109618 / CVE-2026-109619 の調査
CVE-2026-109618 Nghiêm trọng 9.2 13 giờ trước

solymx/php-cve-2026-research ★ 0

Research notes on CVE-2026-109618 / CVE-2026-109619 (PHP) - defensive analysis