PoC mới public

Repo GitHub mới tạo có chứa mã CVE trong tên. Cập nhật 6 giờ trước.

⚠ PoC trên GitHub chưa được kiểm duyệt, đã có nhiều repo "PoC" giả chứa mã độc. Chỉ đọc code và chạy trong máy ảo cô lập, không chạy trên máy cá nhân.

CVE-2025-69413 Trung bình 5.3 1 ngày trước

fuad00/CVE-2025-69413-PoC ★ 0

CVE-2025-69413 — Gitea API user enumeration PoC via auth error differentiation
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

enactive-systems/CVE-2026-109618-poc ★ 36

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

adriyansyah-mf/CVE-2026-109618-109619-PHP-session.upload_progress-Exploit- ★ 0

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

zerbaliy3v/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks ★ 1

PHP2Shell PHP CVE-2026-109618 and CVE-2026-109619 dorks
CVE-2026-109619 Nghiêm trọng 9.2 1 ngày trước

santihabib/CVE-2026-109619 ★ 0

Cross-request use-after-free in PHP session.upload_progress (CVE-2026-109619) — root-cause analysis and reproducer for PHP 8.5.11
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

charindithjaindu/CVE-2026-109618 ★ 0

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

1o-ya/php-cve-2026-109618-hotfix-guide ★ 0

Emergency mitigation guide and snippets for PHP CVE-2026-109618 / CVE-2026-109619 (php2shell)
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

Okymi-X/CVE-2026-109618 ★ 0

php2shell — CVE-2026-109618 / CVE-2026-109619 PoC | Pre-auth RCE in PHP session.upload_progress (CVSS 9.2)
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

nsrg-fmlorg/php-cve-2026-109618 ★ 0

PHP php2shell (CVE-2026-109618, CVE-2026-109619) fixes for Rocky Linux 8, 9 and 10, following AlmaLinux's
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

EkaterinaMarchetti/Non-intrusive-PHP2Shell-assessment-for-CVE-2026-109618-and-CVE-2026-109619 ★ 0

Non-intrusive PHP2Shell assessment for CVE-2026-109618 and CVE-2026-109619
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

debugactiveprocess/CVE-2026-109618 ★ 0

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

Nayrae/CVE-2026-109618 ★ 2

A working PoC of the PHP2Shell exploit
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

ruddem/php-cve-2026-109618-109619 ★ 1

Bash-based security checker for PHP CVE-2026-109618 and CVE-2026-109619 across Linux, Docker and Kubernetes. Uses configurable fix-version thresholds to flag potentially vulnerable runtimes.
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

LeonelArrua/CVE-2026-109618_CVE-2026-109619_Mitigate ★ 0

Mitigation for CVE-2026-109618 and CVE-2026-109619 for PHP under 8.X
CVE-2026-109618 Nghiêm trọng 9.2 1 ngày trước

pruiz/php-CVE-2026-109618 ★ 1

Repo with stuff wrt CVE-2026-109618 backports & workarounds..