nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
7fc419787b71a253a3f19e5b2fda7984aa614d65
PoC-in-GitHub/2026/CVE-2026-109619.json
T

889 lines
31 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1428414546,
"name": "ansible-mitigate-php2shell",
"full_name": "infiniroot\/ansible-mitigate-php2shell",
"owner": {
"login": "infiniroot",
"id": 29702565,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29702565?v=4",
"html_url": "https:\/\/github.com\/infiniroot",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/infiniroot\/ansible-mitigate-php2shell",
"description": "Ansible Playbook that runs through your PHP-FPM and OpenLiteSpeed PHP files and applies a mitigation against CVE-2026-109619.",
"fork": false,
"created_at": "2026-10-21T13:20:07Z",
"updated_at": "2026-10-26T11:22:38Z",
"pushed_at": "2026-10-21T14:12:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-109619",
"openlitespeed",
"php",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1428471565,
"name": "CVE-2026-109619",
"full_name": "santihabib\/CVE-2026-109619",
"owner": {
"login": "santihabib",
"id": 55243343,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55243343?v=4",
"html_url": "https:\/\/github.com\/santihabib",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/santihabib\/CVE-2026-109619",
"description": "CVE-2026-109619: cross-request UAF in PHP session.upload_progress — reproduction, root-cause analysis and full chain to RCE",
"fork": false,
"created_at": "2026-10-21T14:05:29Z",
"updated_at": "2026-10-22T14:11:28Z",
"pushed_at": "2026-10-22T13:56:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"asan",
"cve",
"php",
"security-research",
"use-after-free",
"vulnerability-analysis"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428508956,
"name": "php-cve-2026-109619-checker",
"full_name": "fmdiscioglu\/php-cve-2026-109619-checker",
"owner": {
"login": "fmdiscioglu",
"id": 263761508,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/263761508?v=4",
"html_url": "https:\/\/github.com\/fmdiscioglu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fmdiscioglu\/php-cve-2026-109619-checker",
"description": "Non-destructive affected-version checker for CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) PHP UAF",
"fork": false,
"created_at": "2026-10-21T14:35:46Z",
"updated_at": "2026-10-21T14:39:26Z",
"pushed_at": "2026-10-21T14:35:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-109619",
"php",
"security",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428671778,
"name": "CVE-2026-109619-php2shell-poc",
"full_name": "unlimit0118\/CVE-2026-109619-php2shell-poc",
"owner": {
"login": "unlimit0118",
"id": 110450748,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110450748?v=4",
"html_url": "https:\/\/github.com\/unlimit0118",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/unlimit0118\/CVE-2026-109619-php2shell-poc",
"description": "Minimal PHP session upload progress use-after-free PoC and Docker lab.",
"fork": false,
"created_at": "2026-10-21T16:51:07Z",
"updated_at": "2026-10-30T06:19:21Z",
"pushed_at": "2026-10-21T17:13:57Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428807902,
"name": "php2shell-exploit",
"full_name": "LordX404\/php2shell-exploit",
"owner": {
"login": "LordX404",
"id": 150133351,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150133351?v=4",
"html_url": "https:\/\/github.com\/LordX404",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LordX404\/php2shell-exploit",
"description": "this is a exploit for CVE-2026-109619",
"fork": false,
"created_at": "2026-10-21T18:57:57Z",
"updated_at": "2026-10-22T03:52:03Z",
"pushed_at": "2026-10-21T22:47:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428835527,
"name": "cve-2026-109619",
"full_name": "cozybear-dev\/cve-2026-109619",
"owner": {
"login": "cozybear-dev",
"id": 7195866,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7195866?v=4",
"html_url": "https:\/\/github.com\/cozybear-dev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cozybear-dev\/cve-2026-109619",
"description": null,
"fork": false,
"created_at": "2026-10-21T19:25:19Z",
"updated_at": "2026-10-23T19:44:33Z",
"pushed_at": "2026-10-21T19:25:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428837730,
"name": "CVE-2026-109619",
"full_name": "1Nightlovel\/CVE-2026-109619",
"owner": {
"login": "1Nightlovel",
"id": 43220745,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43220745?v=4",
"html_url": "https:\/\/github.com\/1Nightlovel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/1Nightlovel\/CVE-2026-109619",
"description": "php2shellscanner",
"fork": false,
"created_at": "2026-10-21T19:27:27Z",
"updated_at": "2026-10-21T19:28:10Z",
"pushed_at": "2026-10-21T19:28:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428843191,
"name": "CVE-2026-109619",
"full_name": "syrex1013\/CVE-2026-109619",
"owner": {
"login": "syrex1013",
"id": 31669127,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31669127?v=4",
"html_url": "https:\/\/github.com\/syrex1013",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/syrex1013\/CVE-2026-109619",
"description": null,
"fork": false,
"created_at": "2026-10-21T19:33:02Z",
"updated_at": "2026-10-21T19:33:14Z",
"pushed_at": "2026-10-21T19:33:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428995886,
"name": "B63-POC-CVE-2026-109619",
"full_name": "basesixtythree\/B63-POC-CVE-2026-109619",
"owner": {
"login": "basesixtythree",
"id": 220976450,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220976450?v=4",
"html_url": "https:\/\/github.com\/basesixtythree",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/basesixtythree\/B63-POC-CVE-2026-109619",
"description": "PoC and verification material for CVE-2026-109619 (PHP stale worker-global state)",
"fork": false,
"created_at": "2026-10-21T22:30:59Z",
"updated_at": "2026-11-01T20:17:38Z",
"pushed_at": "2026-10-21T22:51:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"b63",
"cve",
"cve-2026-109619",
"php",
"poc",
"rce",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429372496,
"name": "php-cve-2026-109619-lab",
"full_name": "baimaobg\/php-cve-2026-109619-lab",
"owner": {
"login": "baimaobg",
"id": 110097762,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110097762?v=4",
"html_url": "https:\/\/github.com\/baimaobg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/baimaobg\/php-cve-2026-109619-lab",
"description": null,
"fork": false,
"created_at": "2026-10-22T07:06:22Z",
"updated_at": "2026-10-22T07:49:51Z",
"pushed_at": "2026-10-22T07:49:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429567247,
"name": "php2shell_scanner",
"full_name": "Prajjwal-Srivastava\/php2shell_scanner",
"owner": {
"login": "Prajjwal-Srivastava",
"id": 63475552,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63475552?v=4",
"html_url": "https:\/\/github.com\/Prajjwal-Srivastava",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Prajjwal-Srivastava\/php2shell_scanner",
"description": "Scans a PHP host for CVE-2026-109619 (php2shell): fingerprints it, compares PHP version and build date against fixed releases, checks the advisory's producer and consumer preconditions, then prints a VULNERABLE, NOT VULNERABLE or UNKNOWN verdict with the evidence behind it.",
"fork": false,
"created_at": "2026-10-22T10:08:46Z",
"updated_at": "2026-10-22T10:38:02Z",
"pushed_at": "2026-10-22T10:37:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429789367,
"name": "CVE-2026-109619-POC",
"full_name": "RuanSerraAzul\/CVE-2026-109619-POC",
"owner": {
"login": "RuanSerraAzul",
"id": 78482287,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78482287?v=4",
"html_url": "https:\/\/github.com\/RuanSerraAzul",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RuanSerraAzul\/CVE-2026-109619-POC",
"description": null,
"fork": false,
"created_at": "2026-10-22T13:31:06Z",
"updated_at": "2026-10-22T13:38:22Z",
"pushed_at": "2026-10-22T13:33:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1429862002,
"name": "php2shell-poc",
"full_name": "mazdel\/php2shell-poc",
"owner": {
"login": "mazdel",
"id": 65859631,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65859631?v=4",
"html_url": "https:\/\/github.com\/mazdel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mazdel\/php2shell-poc",
"description": "Zero-dependency Python PoC & Docker Compose reproduction for CVE-2026-109619 via PHP RFC1867 upload progress and opcache.preload. (133 characters)",
"fork": false,
"created_at": "2026-10-22T14:31:20Z",
"updated_at": "2026-10-22T14:31:33Z",
"pushed_at": "2026-10-22T13:57:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430162811,
"name": "PHP2Shell-CVE-2026-109619",
"full_name": "FarhadHosen101\/PHP2Shell-CVE-2026-109619",
"owner": {
"login": "FarhadHosen101",
"id": 168168057,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168168057?v=4",
"html_url": "https:\/\/github.com\/FarhadHosen101",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FarhadHosen101\/PHP2Shell-CVE-2026-109619",
"description": "Advanced Pre-Auth RCE Exploit for PHP session.upload_progress (CVE-2026-109618 & 109619) by Farhad Hosen.",
"fork": false,
"created_at": "2026-10-22T19:04:35Z",
"updated_at": "2026-10-22T19:40:24Z",
"pushed_at": "2026-10-22T19:40:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430215239,
"name": "CVE-2026-109619",
"full_name": "WallcroftUK\/CVE-2026-109619",
"owner": {
"login": "WallcroftUK",
"id": 122221257,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122221257?v=4",
"html_url": "https:\/\/github.com\/WallcroftUK",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WallcroftUK\/CVE-2026-109619",
"description": null,
"fork": false,
"created_at": "2026-10-22T19:58:38Z",
"updated_at": "2026-10-22T20:14:37Z",
"pushed_at": "2026-10-22T20:14:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430508625,
"name": "CVE-2026-109619",
"full_name": "MorphingYU\/CVE-2026-109619",
"owner": {
"login": "MorphingYU",
"id": 291956288,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/291956288?v=4",
"html_url": "https:\/\/github.com\/MorphingYU",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MorphingYU\/CVE-2026-109619",
"description": "CVE-2026-109619 docker本地复现环境+Poc",
"fork": false,
"created_at": "2026-10-23T02:54:54Z",
"updated_at": "2026-10-23T03:05:37Z",
"pushed_at": "2026-10-23T03:04:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430772627,
"name": "CVE-2026-109619",
"full_name": "EQSTLab\/CVE-2026-109619",
"owner": {
"login": "EQSTLab",
"id": 148991397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
"html_url": "https:\/\/github.com\/EQSTLab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-109619",
"description": "PHP2Shell",
"fork": false,
"created_at": "2026-10-23T08:22:09Z",
"updated_at": "2026-10-29T03:32:49Z",
"pushed_at": "2026-10-29T03:32:45Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430853174,
"name": "solid-palm-tree",
"full_name": "DarynOngera\/solid-palm-tree",
"owner": {
"login": "DarynOngera",
"id": 132561478,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132561478?v=4",
"html_url": "https:\/\/github.com\/DarynOngera",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DarynOngera\/solid-palm-tree",
"description": "CVE-2026-109619 \/ CVE-2026-109618 PoC",
"fork": false,
"created_at": "2026-10-23T09:41:48Z",
"updated_at": "2026-10-23T18:28:10Z",
"pushed_at": "2026-10-23T12:55:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431049217,
"name": "br-php2shell",
"full_name": "fellipgomes\/br-php2shell",
"owner": {
"login": "fellipgomes",
"id": 102621764,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102621764?v=4",
"html_url": "https:\/\/github.com\/fellipgomes",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fellipgomes\/br-php2shell",
"description": "Descubra se sites da internet é vulnerável a php2shell CVE-2026-109619",
"fork": false,
"created_at": "2026-10-23T12:57:18Z",
"updated_at": "2026-10-23T15:05:55Z",
"pushed_at": "2026-10-23T13:16:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431107565,
"name": "php2shell",
"full_name": "aarsaputra\/php2shell",
"owner": {
"login": "aarsaputra",
"id": 96281224,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96281224?v=4",
"html_url": "https:\/\/github.com\/aarsaputra",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aarsaputra\/php2shell",
"description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design",
"fork": false,
"created_at": "2026-10-23T13:49:52Z",
"updated_at": "2026-11-02T10:48:33Z",
"pushed_at": "2026-10-29T14:37:38Z",
"stargazers_count": 122,
"watchers_count": 122,
"has_discussions": false,
"forks_count": 61,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit",
"penetration-testing",
"php",
"php2shell",
"php2shell-cve",
"php2shell-cve-2026",
"php2shell-vulnerability",
"poc",
"rce",
"rce-scanner",
"security",
"shell",
"shell-backdoor",
"vulnerability-research"
],
"visibility": "public",
"forks": 61,
"watchers": 122,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431753543,
"name": "cve-2026-109619",
"full_name": "Taz1920\/cve-2026-109619",
"owner": {
"login": "Taz1920",
"id": 77246405,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77246405?v=4",
"html_url": "https:\/\/github.com\/Taz1920",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Taz1920\/cve-2026-109619",
"description": "CVE-2026-109619 PoC lab",
"fork": false,
"created_at": "2026-10-24T02:50:01Z",
"updated_at": "2026-10-24T02:51:47Z",
"pushed_at": "2026-10-24T02:51:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431777171,
"name": "php-stale-global-uaf",
"full_name": "abraxas\/php-stale-global-uaf",
"owner": {
"login": "abraxas",
"id": 299946762,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/299946762?v=4",
"html_url": "https:\/\/github.com\/abraxas",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abraxas\/php-stale-global-uaf",
"description": "PHP 8.5.11 - Critical - Remote - UAF - CVE-2026-109619 PHP2Shell. Same-worker fatal backtrace then INI diagnostic on Apache mod_php. Lab vs 8.5.12. Advisory RCE inferred.",
"fork": false,
"created_at": "2026-10-24T03:31:26Z",
"updated_at": "2026-10-28T18:03:34Z",
"pushed_at": "2026-10-28T18:03:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434301844,
"name": "php2shell-CVE-2026-109619",
"full_name": "dev-maple\/php2shell-CVE-2026-109619",
"owner": {
"login": "dev-maple",
"id": 319780793,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/319780793?v=4",
"html_url": "https:\/\/github.com\/dev-maple",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dev-maple\/php2shell-CVE-2026-109619",
"description": "CVE-2026-109619 (PHP2Shell): Pre-Auth Remote Code Execution (RCE) via PHP-FPM Stale Global State Deserialization UAF. Reproducible Docker lab, interactive shell, reverse shell & WAF\/IDS rules.",
"fork": false,
"created_at": "2026-10-26T11:42:12Z",
"updated_at": "2026-10-27T09:21:37Z",
"pushed_at": "2026-10-27T09:21:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-109619",
"cybersecurity",
"deserialization",
"exploit",
"fastcgi",
"infosec",
"modsecurity",
"php",
"php-fpm",
"php2shell",
"poc",
"rce",
"remote-code-execution",
"reverse-shell",
"security-research",
"semgrep",
"suricata",
"uaf",
"use-after-free",
"vulnerability"
],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1439502453,
"name": "php2shell-detections",
"full_name": "solidevil14\/php2shell-detections",
"owner": {
"login": "solidevil14",
"id": 63005199,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63005199?v=4",
"html_url": "https:\/\/github.com\/solidevil14",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/solidevil14\/php2shell-detections",
"description": "Suricata rules + CI-proven regression suite for the php2shell PHP RCE chain (CVE-2026-109619 \/ CVE-2026-109618)",
"fork": false,
"created_at": "2026-10-30T09:08:16Z",
"updated_at": "2026-10-30T10:59:21Z",
"pushed_at": "2026-10-30T10:59:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1443188081,
"name": "PHP2ShellPOC-CVE-2026-109619",
"full_name": "K2uci\/PHP2ShellPOC-CVE-2026-109619",
"owner": {
"login": "K2uci",
"id": 148832097,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148832097?v=4",
"html_url": "https:\/\/github.com\/K2uci",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/K2uci\/PHP2ShellPOC-CVE-2026-109619",
"description": null,
"fork": false,
"created_at": "2026-11-02T16:12:42Z",
"updated_at": "2026-11-02T16:38:15Z",
"pushed_at": "2026-11-02T16:38:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink