Duplicate Advisory: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

PoC: php2shell-scanner

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

PoC: php2shell-fixed

宝塔面板（BT Panel）上已停止维护的 PHP 版本（7.0 – 8.1）的 PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修复包。仓库里有打好补丁的源码包，以及一键完成编译、替换、回滚的脚本。

PoC: php2shell-scanner

GO based scanner for PHP2SHELL(CVE-2026-109618 and CVE-2026-109619)

PoC: php2shell

PHP2Shell - CVE-2026-109618/109619 session.upload_progress UAF PoC - multi-target RCE chain - created by 0verDo$ed

PoC: php2shell-CVE-2026-109618-109619

Full 1:1 reproduction of php2shell (CVE-2026-109618 / CVE-2026-109619): pre-auth PHP RCE via session.upload_progress OOM corruption and stale cross-request state. Pinned mod_php 8.4.26 / Apache 2.4.69 aarch64 lab, pure HTTP, heap-layout ASLR bypass, no brute force.

PoC: php2shell

CVE-2026-109618 / CVE-2026-109619 PHP PoC and exploit tool (single-file Go)

PoC: php2shell-check

Read-only exposure checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619). No exploit code.

PoC: php2shell-fix

Find every PHP install on a server (distro packages, aaPanel/DirectAdmin/source builds) and fix CVE-2026-109618 / CVE-2026-109619 (php2shell) using official PHP fixes only

PoC: nodejs-security-check

Agent skill + zero-dependency script: check a Node.js project against the Oct 2026 Node.js security release (Brotli RCE CVE-2026-111497 and 9 more) and bump version pins to the patched release

PoC: CVE-2026-109618_CVE-2026-109619

PoC for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) zero-depndency, pre-auth RCE via a use-after-free in PHP's session.upload_progress handler. Affects PHP 5.48.5.11 fixed in 8.2.35+

PoC: php

Backport del fix oficial de CVE-2026-109618 / CVE-2026-109619 (RCE no autenticada de PHP) a ramas EOL 5.4 a 8.1

PoC: PHP-Shell-v0.1

PHP-Shell is a local-first, wizard-driven passive black-box assessment prototype for PHP runtime exposure to CVE-2026-109618 and CVE-2026-109619. It provides both a browser UI and a terminal wizard using the same Python engine, and exports DOCX/PDF evidence reports.

PoC: CVE-2025-14847-poc

​CVE-2025-14847 proof of concept script for testing

PoC: php2shell-exp

Patch-derived PoC and RCE for the PHP session upload-progress pre-RINIT decode (CVE-2026-109618/109619)

PoC: php2shell-guard

Detection, mitigation, patching and fleet automation for the PHP2Shell RCE pair (CVE-2026-109618 / CVE-2026-109619)

PoC: CVE-2026-12118-POC-

POC for CVE-2026-12118

PoC: Cloudflare-PHP2shell-Detections

Log-only Cloudflare WAF rule to detect php2shell (CVE-2026-109618 / CVE-2026-109619) targeting

PoC: PHP2Shell-Check

Non-invasive vulnerability assessment for CVE-2026-109618 and CVE-2026-109619.

PoC: php2shell-scanner

CVE-2026-109618 scanner and authorized RCE verification

PoC: ITL.PHP2Shell.Hardening

Compensating controls / virtual-patching Helm chart for PHP CVE-2026-109618 and CVE-2026-109619

PoC: php2shell-guard

PHP2Shell (CVE-2026-109618/109619) one-click detect & fix tool

PoC: shadowphp

php2shell, cve-2026-109618, shadow-it, attack-surface, security-tools, python.

PoC: php2shell-advisory

PHP2Shell (CVE-2026-109618 / -109619): plain-English brief + patch runbook for PHP 8.2-8.5, EOL branches, containers and control panels.

PoC: php2shell-guard

Fast, zero-dependency Bash toolkit to audit, scan logs, mitigate, and patch Linux servers against PHP2Shell (CVE-2026-109618 & CVE-2026-109619).

PoC: CVE-2025-64702-more

CVE-2025-64702, CVE-2026-12523, CVE-2025-13945

PoC: CVE-2026-104711-POC-NEW-VARIANT

POC for the CVE-2026-104711 NEW-VARIANT

PoC: php2shell-cve-poc

Local Docker lab + Chain A PoC for CVE-2026-109618 / CVE-2026-109619 (PHP 8.2.34)

PoC: php-7.2

PHP 7.2 with security fixes for CVE-2026-109618 and CVE-2026-109619

PoC: php2shell-check

Defensive checker for PHP2Shell (CVE-2026-109618, CVE-2026-109619). Detects PHP version/SAPI on hosts you own and reports mitigation. No exploits.

PoC: CVE-2026-104935

CVE-2026-104935 — Ivanti Connect Secure / Pulse Secure RCE Exploit

PoC: php2shell-windows

一个快速、批量检测PHP版本是否存在CVE-2026-109618/109619

PoC: untested-php2shell-fixed-php-5-4-fpm

UNTESTED unofficial PHP 5.4.45 FPM image with a backport of the php2shell (CVE-2026-109618/109619) mitigation

PoC: php2shell-f5-waf-tools

php2shell (CVE-2026-109618/109619) F5 BIG-IP Advanced WAF check and verification tools

PoC: PHP2shell_nuclei_templates

Пассивные Nuclei-шаблоны для обнаружения версий PHP и PHP-приложений в рамках проверки CVE-2026-109618 и CVE-2026-109619 (PHP2Shell)

PoC: php-critical-rce-advisory

Defensive PHP update guidance and local-only verification for CVE-2026-109618 and CVE-2026-109619.

PoC: php2shell-remediation-guide

PHP2Shell remediation guide (CVE-2026-109618 / CVE-2026-109619) for native Linux, Docker and BT Panel

PoC: php2shell-poc

PoC per php2shell CVE-2026-109618/109619 (Chain D OOM + variante senza upload) — coding by GLM uncensored

PoC: php2shell-detector

Detection for the critical PHP RCE flaws CVE-2026-109618 and CVE-2026-109619. Reports vulnerable/patched/EOL PHP runtimes by version and config.

PoC: -CVE-2026-114509-POC

CVE-2026-114509-POC [Educational Purpose Only]

PoC: CVE-2017-5638-Apache-Struts-Analysis

Analysis of an Apache Struts vulnerability and cybersecurity response.

PoC: php2shell-status

PHP2Shell (CVE-2026-109618/109619) vendor and Linux distro status - AI-generated, verify before acting

PoC: php2shell-scanner

Non-destructive detector for CVE-2026-109618** and **CVE-2026-109619

PoC: php-cve-2026-check

PHP CVE-2026-109618 / CVE-2026-109619 簡易確認スクリプト

PoC: Assignment-

CVE-2023-34362 (MOVEit Transfer SQL Injection Vulnerability).

PoC: php2shell-guard

Open-source PHP security assessment tool for CVE-2026-109618 and CVE-2026-109619. Built with React, TypeScript and Cloudflare Workers.

PoC: php2shell-detection

Non-invasive detector for the PHP2Shell RCE pair: CVE-2026-109618 and CVE-2026-109619.

PoC: php2shell_scan

Read-only PHP2Shell inventory scanner that checks servers over SSH and optional HTTP/HTTPS, identifies potentially vulnerable PHP versions, and exports a CSV report to help teams prioritize patching for CVE-2026-109618 and CVE-2026-109619.

PoC: CVE-2026-109618-CVE-2026-109619-php2shell-

cve explaination

PoC: CVE-2026-109618

php2shell

PoC: ariawave-php2shell-scanner

AriaWave PHP2Shell (CVE-2026-109618 & CVE-2026-109619) Defensive Readiness, SAPI, Apache RLimitMEM & INI Override Scanner + Autonomous Agent Skill (SKILL.md)

PoC: log4shell-audit-lab

Reproducible audit trail for the Log4Shell (CVE-2021-44228) and follow-up (CVE-2021-45046) study-group walkthrough

PoC: php2shell-exp

Profile-driven php2shell chain (CVE-2026-109619 class) for stock php:*-apache images; loopback lab only.

PoC: php72-php2shell-backport

Unofficial backport of php commit (Avoid state corruption via bailout, branch PHP-7.4-CVE-2026-109618-109619) to the final PHP 7.2 release, 7.2.34. Not reviewed by the PHP team. Use as a bridge until you are on a supported PHP.

PoC: CVE-2026-111497-POC

Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness

PoC: php2shell-ubuntu-fix

Diagnóstico, parcheo y mitigación de PHP2Shell (CVE-2026-109618 / CVE-2026-109619) en Ubuntu

PoC: PHP2Shell

Script para auditar las url en produccion si es vulnerable con el bug CVE-2026-109618 / CVE-2026-109619 — PHP

PoC: CVE-2026-109618-and-CVE-2026-109619-Exploit

CVE-2026-109618 and CVE-2026-109619 exploit

PoC: php74-windows-security-build

Windows x64 NTS PHP 7.4 security build for CVE-2026-109618 and CVE-2026-109619

PoC: php2shell-scanner

Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 / CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具

PoC: php2shell-poc

CVE-2026-109618 / CVE-2026-109619 PHP OOM Corruption PoC

PoC: php2shell-mitigation

Temporary php2shell (CVE-2026-109618/109619) mitigation for Ubuntu and AlmaLinux 8 / FastPanel

PoC: php2shell-check

Non-destructive checker, porting analysis and self-built patches for CVE-2026-109618 / CVE-2026-109619

PoC: php2shell-exposure-check

Passive, non-exploiting checker that inventories PHP version disclosure across a list of websites and assesses patch status for CVE-2026-109618 / CVE-2026-109619 (PHP2Shell).

PoC: php2shell

CVE-2026-109618 / CVE-2026-109619

PoC: php2shell-response-kit

Guide, self-assessment form and read-only Linux check script for php2shell (CVE-2026-109618 / CVE-2026-109619): find out if you're exposed, patch, and check whether you were compromised.

PoC: php2shell

CVE-2026-109618 / CVE-2026-109619 (php2shell) toolkit - session.upload_progress + LFI RCE proof and OOM precondition detection. Authorised testing only.

PoC: consul

Security-maintained Consul v1.16.4, the last MPL-2.0 release: ReadyStack backports (CVE-2024-10005, CVE-2024-10006). See READYSTACK.md.

PoC: php2shell-exploit-labstyle

Research notes, a calibrated exploit and a detection template for the PHP session upload-progress RCEs (CVE-2026-109618 / CVE-2026-109619).

PoC: php-backport-7.4-apache

php-backport:7.4-apache PHP-7.4-CVE-2026-109618-109619

PoC: php2shell-checker

Chequeo no invasivo de php2shell (CVE-2026-109618 / CVE-2026-109619): fingerprint de PHP, inferencia de SAPI y veredicto de parche. Python puro, sin dependencias.

PoC: aws-php2shell-mitigation

PHP2Shell (CVE-2026-109618/109619) remediation guide on AWS + AWS WAF CloudFormation template (China regions validated)

PoC: php2shell-check

Safe, passive, read-only detector for the PHP2Shell CVEs (CVE-2026-109618 / CVE-2026-109619). Reads only self-disclosed PHP version info via a single polite GET and classifies against the affected range. Never exploits.

PoC: php2shell-security-toolkit

PHP2Shell (CVE-2026-109618/CVE-2026-109619) multi-server scanner, guarded Linux/Windows remediation scripts, incident report and rollback guidance.

PoC: php2shell

Patch the PHP inside Ubiquiti UISP against php2shell (CVE-2026-109618/109619) — rebuilds the binary, not a request filter.

PoC: php2shell-check

Quick vulnerability checker for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) — detection only, no exploit

PoC: php-vulnerability-checker-october-2026

Check Linux servers and Docker containers for PHP versions affected by CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). Includes a copy-and-paste Bash script.

PoC: php73-php2shell-patch

Unofficial security patch for PHP 7.3 (EOL) fixing PHP2Shell RCE — CVE-2026-109618 & CVE-2026-109619. Backported from the official PHP 7.4 fix. PHP 7.3 漏洞修复补丁

PoC: php2shell-check

Is your site exposed to php2shell (CVE-2026-109618, CVE-2026-109619), the October 2026 PHP remote code execution flaws? A one-file, zero-dependency CLI and GitHub Action that reads what your site shows anyone, with evidence and a curl command for every finding. Also checks the Node.js October 2026 releases.

PoC: php56-session-uaf-patch

PHP 5.6 security patch, backports, and mitigations for session.upload_progress Use-After-Free (CVE-2026-109618, CVE-2026-109619).

PoC: php-patch-check

Two small, read-only tools to confirm whether your PHP installations are patched against the critical RCE advisory published 2026-10-21 (CVE-2026-109618 / CVE-2026-109619)

PoC: CVE-2026-109618-619

CVE-2026-109618, CVE-2026-109619

PoC: log4shell-audit-1

Log4Shell (CVE-2021-44228) audit, research notes, and remediation tracking for quarterly security briefing

PoC: php74-el7-php2shell

Unofficial rebuild of PHP 7.4 for EL7 (CentOS/RHEL 7) with the php2shell fix (CVE-2026-109618/109619). A stopgap for EOL stacks — upgrading is the real fix.

PoC: php-legacy-windows-builds

Patches and Windows build scripts for PHP 5.6-7.4 fixing CVE-2026-109618 / CVE-2026-109619

PoC: php-patch-verify

Portable Agent Skill to verify PHP patch status for the Oct 2026 RCE pair (CVE-2026-109618/619) and audit the CERT-EU mitigations. Verifies, does not exploit.

PoC: 20261022-research-php-cve

PHP の RCE 脆弱性 CVE-2026-109618 / CVE-2026-109619 の調査

PoC: phptshell

Production-grade defensive CLI to audit, patch, and hunt PHP2Shell (CVE-2026-109618/19) memory-safety exploits without downtime.

PoC: php2shell-lab

Independent PHP2Shell lab: CVE-2026-109618/109619 differential validation, FastCGI harness and reproducible results

PoC: php-cve-2026-research

Research notes on CVE-2026-109618 / CVE-2026-109619 (PHP) - defensive analysis

PoC: xampp-security-update

XAMPP for Windows の PHP を PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修正版の PHP 8.2.35 に入れ替える非公式スクリプト

PoC: uisp-php2shell-guard

A temporary shield for **UISP servers running the CRM**, against the **PHP2Shell** vulnerabilities (CVE-2026-109618 and CVE-2026-109619, published 21 October 2026), until Ubiquiti ships a UISP update with a patched PHP.

PoC: php7.4-fix

PHP 7.4.33 (Windows, NTS, x64, VC15) rebuilt from the official php-src backport branch PHP-7.4-CVE-2026-109618-109619 (commit 712e60f9), which fixes CVE-2026-109618 and CVE-2026-109619.

PoC: php-focal-backports

Rebuilds of patched ondrej/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)

PoC: atarus-phpcheck

Detection and inventory tool for PHP core CVE-2026-109618 and CVE-2026-109619: finds PHP installs, checks versions and mitigating settings, never triggers the bugs. Python 3 standard library only.

PoC: CVE-2026-111943-Remediator

针对 CVE-2026-111943（eMudhra / emSign 根证书密钥熵坍塌惨案）的突发供应链应急排查与修复工具：一键清洗 Kali、Python、Node.js、uv、Go、Java 与 Docker 中的致命弱私钥信任链。Emergency audit & remediation toolkit for CVE-2026-111943 (eMudhra / emSign CA Private Key Entropy Collapse). Purges weak intermediate/root CAs across Kali, Python, Node.js, Rust uv, Go, Java, and Docker toolchains.

PoC: php2shell-check

Passive PHP2Shell (CVE-2026-109618, CVE-2026-109619) exposure checker with branded HTML reports. Single-file Python, no dependencies, no exploit payloads.

PoC: CVE-2026-109618-109619-checker

Passive PHP version checker for CVE-2026-109618 / CVE-2026-109619 (php2shell)

PoC: php2shell-checker

php2shell (CVE-2026-109618 / CVE-2026-109619) PHP version checker

PoC: CVE-2026-86478

CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)

PoC: Am-I-Pwned

PHP2Shell (CVE-2026-109618/109619) exposure check: find which of your accounts sit on sites running PHP, rank the risk, and know what to delete first. Passive only.