php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 21, 2026 · 1524 upvotes (top 1%)
- Security
- Developer
- Not AI
- Hobby / open-source project
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
- php-exploit
- php-security
- +8 more in the details below
Similar launches
See all 253 similar launches →Could you build this?
No This is an exploit proof-of-concept for a PHP vulnerability (CVE). Producing or validating it requires deep security research skills to find and understand the bug, and vibe coding cannot substitute for that.
What it would actually take: Reproducing this requires discovering the underlying session.upload_progress vulnerability through source analysis of PHP internals, then writing a working exploit against specific versions and configurations. The hard part is the vulnerability research itself, which needs experienced security researchers with PHP internals and exploit development expertise, plus test environments for validation.
Competitors
Other products that read as similar to this one : 253 launches clear the similarity bar, closest 8 shown.
Attention rank: #1 of 254 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 347 days after the earliest competitor.
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.88
- php2shell-exploit · github · 2026-10-22 · 23 upvotes · similarity 0.85
- php2shell-CVE-2026-109618-CVE-2026-109619-PoC · github · 2026-10-21 · 891 upvotes · similarity 0.84
- CVE-2026-109618-php2shell-lab · github · 2026-10-21 · 23 upvotes · similarity 0.81
- CVE-2026-109618 · github · 2026-10-21 · 55 upvotes · similarity 0.80
- php2shell-patches · github · 2026-10-21 · 68 upvotes · similarity 0.76
- php2shell-protection · github · 2026-10-21 · 93 upvotes · similarity 0.75
- php2shell-scanner · github · 2026-10-22 · 294 upvotes · similarity 0.74
Other launches for this product
More details
- External ID
- 1428058681
- Company
- n/a
- Product
- php2shell
- Website domain
- github.com
- Cohort
- n/a
- Upvotes percentile
- 1.00
- All tags
- cve-2026-109618, cve-2026-109619, detection-rules, exploit, php-exploit, php-security, php2shell, poc, rce, session-upload-progress, suricata-rules, vulnerability-research, waf-rules, wordpress-security
- AI summary
- proof-of-concept and analysis for php session.upload_progress exploit
- Manually corrected
- No