CVE-2026-109618
PoC CVE-2026-109618 / -109619 (PHP session.upload_progress heap UAF)
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 21, 2026 · 55 upvotes (top 25%)
- Security
- Developer
- Not AI
- Hobby / open-source project
Similar launches
See all 305 similar launches →Could you build this?
No The product is a proof-of-concept exploit for a PHP memory-corruption vulnerability. Building a real version requires deep security research expertise in PHP internals and heap exploitation, which vibe coding cannot supply.
What it would actually take: Reproducing this requires reverse-engineering the PHP interpreter's session upload-progress handling and understanding the heap lifecycle that produces the use-after-free. It needs experienced vulnerability researchers with C and PHP engine internals knowledge, plus a controlled test environment. The scraped page contains no usable product information, so the specifics cannot be verified from this data.
Competitors
Other products that read as similar to this one : 305 launches clear the similarity bar, closest 8 shown.
Attention rank: #68 of 306 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 312 days after the earliest competitor.
- php2shell · github · 2026-10-21 · 110 upvotes · similarity 0.88
- php2shell · github · 2026-10-21 · 40 upvotes · similarity 0.82
- php2shell-poc · github · 2026-10-21 · 1524 upvotes · similarity 0.80
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.74
- php2shell · github · 2026-10-21 · 44 upvotes · similarity 0.74
- php2shell-poc · github · 2026-10-21 · 45 upvotes · similarity 0.73
- CVE-2026-109618-php2shell-lab · github · 2026-10-21 · 23 upvotes · similarity 0.71
- php2shell-exploit · github · 2026-10-22 · 23 upvotes · similarity 0.70
Other launches for this product
More details
- External ID
- 1427813903
- Company
- n/a
- Product
- CVE-2026-109618
- Website domain
- github.com
- Cohort
- n/a
- Upvotes percentile
- 0.75
- All tags
- n/a
- AI summary
- proof of concept for php session upload progress heap use-after-free
- Manually corrected
- No