ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
ikow / php2shell-poc
Lookouteiseparator / droids-v1.5.2
Published: 2026-10-28
BranchLegendWhirl71 / hexa-v2.6.0
Published: 2026-10-28
Centaurbinexplode / nova-v1.9.2
Published: 2026-10-28
Novavyalimit / vanta-v2.1.0
Published: 2026-10-28
ExitGooseEntrance / relay-v2.2.0
Published: 2026-10-28
UltraSultanHonor / recon-v1.7.0
Published: 2026-10-28
lokyfordev / pulse-toolkit
Published: 2026-10-31
assetnote / php2shell-scanner
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
MchinaMd57764 / AVETemporalPoC-CVE-2026-112705
PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif / Chollima team.
JoasASantos / php2shell-exploit
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE