dinosn /php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- Stars
- 114 stars
- Forks
- 27 forks
- Language
- Python
- License
- Not reported
- Created
- Oct 20, 2026
- Last push
- Oct 30, 2026
- Updated
- Nov 2, 2026
Admitted to the Repository Index on Oct 24, 2026: +106 stars in 7 days.
Star History
15 days recorded, Oct 20, 2026 – Nov 3, 2026 (UTC). Net change +114 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour. Add ?theme=light or ?theme=darkto the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/dinosn/php-cve-2026-10961x-lab-poc)Badge
[](https://awesomerepos.com/dinosn/php-cve-2026-10961x-lab-poc)Timeline
It gained stars on 8 of the 15 days recorded since Oct 20, 2026.
Its largest 7 days were Oct 21, 2026 to Oct 27, 2026: 113 stars.
- Created on the Repository Host
- Largest star day recorded: +65 stars
- +31 stars in one day
- Reached 100 stars, 3 days after it was created
- +9 stars in one day
- Entered the Repository Index: +106 stars in 7 days
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 11 Observations, Oct 25, 2026 – Nov 4, 2026. Forks +3. AwesomeRepos saw a new push on 5 of 10 days.
- Oct 26, 2026: new push
- Oct 27, 2026: new push
- Oct 28, 2026: new push
- Oct 29, 2026: new push
- Oct 30, 2026: no new push
- Oct 31, 2026: new push
- Nov 1, 2026: no new push
- Nov 2, 2026: no new push
- Nov 3, 2026: no new push
- Nov 4, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How AwesomeRepos defines each check
Maintenance
2 of 4 checks (2 without data)Yes: Not archived
GitHub does not mark the repository as archived. Source
Yes: A push in the last 90 days
Last push on 2026-10-30, 5 days ago. Source
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
0 of 3 checks (2 without data)No: A release in the last 365 days
No GitHub release (read on 2026-11-04). Source
No data: The newest release tag is a semantic version
No data: no release.
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
0 of 3 checks (2 without data)No: A licence
GitHub finds no licence. Source
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Observations
Latest Observation, Nov 4, 2026: 114 stars, 27 forks, last push Oct 30, 2026, not archived. One of 11 Observations since Oct 25, 2026.