1.ikow / php2shell-pocCVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.cve-2026-109618cve-2026-109619detection-rulesexploitphp-exploitphp-security+8 morePythonMIT1.9K total649 forks+132 starsfrom 1,790 · score 4.89
2.devploit / php2shellCVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.cve-2026-109618cve-2026-109619exploitmod-phppenetration-testingphp+14 morePythonMIT275 total76 forks+106 starsfrom 161 · score 4.67