CVE-2026-109618-619

php2shell — PHP 8.4.26 session vulnerability reproduction 中文 | English Under the constraints of being fully remote, HTTP-only, with no sessionstart on the target page and no PHP written on the target side, a single exploit.py achieves RCE on PHP 8.4.26 + Apache prefork + modphp. The official...

php2shell-bypass-aslr-exp

php2shell - Official environment, no displayerrors needed, memorylimit untouched 中文 | English | 日本語 Official prefork configuration MaxRequestWorkers=150. In a fully remote, HTTP-only setting, with only on the target page and no PHP written on the target side, one command reaches RCE: stock offici...

PHP2shell

💀 PHP2shell One-click weaponized PoC for CVE-2026-109618 & CVE-2026-109619 Targeting vulnerable PHP + Apache modphp prefork deployments. ⚠️ WARNING: This tool is provided strictly for authorized security testing, CTFs, and educational research. Do not use this against infrastructure you do not own...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

💀 PHP2shell One-click weaponized PoC for CVE-2026-109618 & CVE-...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Pre-auth RCE — CVE-2026-109618 / CVE-2026-10961...

PHP 8.4.26 Remote Code Execution

PHP core versions after 5.4 contain a vulnerability that can result in remote code execution. This proof of concept targets PHP version 8.4.26 running as modphp with a prefork Apache configuration. !/usr/bin/env python3 """ Exploit credited to 9bie, adjusted using AI by OffSec php2shell - one-cli...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619: PHP Use-After-Free via zen...

php2shell-poc

PHP2Shell: a reproducible PHP request-lifecycle RCE lab...

php2shell-bypass-aslr-exp

php2shell – Official environment; no need for displayerrors,...

CVE-2021-41773

CVE-2021-41773 Apache HTTP服务器漏洞（仅影响2.4.49版本） 需求设置 httpd.conf ... LoadModule cgimodule modules/modcgi.so 取消注释这一行 ... AllowOverride none Require all denied 注释掉这一行或设置为Require all granted ... 参考 https://attackerkb.com/topics/1RltOPCYqE/cve-2021-41773/rapid7-analysis...

Exploit for Use After Free in Apache Http_Server

CVE-2019-0211 — Apache HTTP Server Local Privilege Escalation...

OESA-2026-1026 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

EUVD-2007-3294

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2007-3303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences executed in a worker...

OESA-2025-1762 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2025-1761 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2025-1760 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2025-1303 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2025-1302 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

OESA-2025-1306 php security update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...