8 matches found
php2shell-check
php2shell-check A read-only triage script for WordPress sites after PHP2Shell CVE-2026-109618 and CVE-2026-109619, the pair of critical remote code execution bugs in the PHP engine disclosed on October 21, 2026. Patching PHP closes the door, but Amazon's honeypots logged an exploitation attempt o...
php2shell-lab
php2shell-lab !labhttps://github.com/qualixar/php2shell-l...
Exploit for CVE-2026-115560
PHP CVE 2026-115560 CHECKER V 1.0 !Pythonhttps://img.shiel...
Exploit for CVE-2026-115560
CVE-2026-115560 — PHP session upload progress serialize-handle...
K000163878: PHP vulnerability CVE-2026-115560
Security Advisory Description Statement from www.php.net: We suggest you set session.uploadprogress.enabled=0 until the next regular bugfix release, to fully protect from an unlikely RCE vector. This setting was already listed as a mitigation in the GHSA-6wmf-4rv5-p3rp advisory for CVE-2026-10961...
CVE-2026-115560
A flaw in PHP's session upload progress handling can lead to remote code execution when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and switches it to php at runtime with iniset before calling sessionstart, while session.uploadprogress.enabled is...