dinosn / php-cve-2026-10961x-lab-poc
git clone https://github.com/dinosn/php-cve-2026-10961x-lab-poc.git
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
+9
stars, 24h · #3,766
+107
stars, 7 days · #2,128
+107
stars, 30 days · #6,855
107
★ total · +107% this week
23
forks · 0 open issues
Star history (as recorded here)
LanguagePython
License—
Created2026-10-20 (4d ago)
Last push1d ago
Watchers0
OwnerUser
GitHub topics
cve-2026-109618cve-2026-109619exploitmemory-corruptionphpphp2shellrcerfc1867security-researchsession-upload-progress
Links
- GitHub: github.com/dinosn/php-cve-2026-10961x-lab-poc
- Homepage: https://www.wiz.io/blog/php2shell-php-rce
- Releases · Issues · Hacker News mentions
README
Loading README…