php2shell-lab

php2shell-lab English | 日本語 | 中文 A black-box capture-the-flag target built around PHP2Shell — the 2026 PHP engine memory-corruption family CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2, fixed in PHP 8.4.27. The vulnerability is in the engine , not the app: the tiny PHP application layer is...