Nicheloom visits: 28,984 all-time · 11,440 in the last 7 days

The opportunity tracker for new startups.

Today: 1,144 launches · Niche of the day: consumer buying and practical guides · See full report →

php2shell

CVE-2026-109618 / CVE-2026-109619 — PHP session.upload_progress RCE PoC & Vulnerable Lab

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 40 upvotes (top 33%)

Similar launches

See all 279 similar launches →

Could you build this?

No This is a PoC for a specific remote-code-execution vulnerability in PHP session handling, and building it requires original security research and exploit-development expertise that vibe coding cannot supply.

What it would actually take: Reproducing it means deep understanding of PHP's session and upload-progress internals, memory and exploitation techniques, and a controlled vulnerable environment such as Docker. The required expertise is vulnerability research and exploit development, and a rigorous version also needs responsible-disclosure practice.

Competitors

Other products that read as similar to this one : 279 launches clear the similarity bar, closest 8 shown.

Attention rank: #90 of 280 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 332 days after the earliest competitor.

Other launches for this product

More details
External ID
1428316161
Company
n/a
Product
php2shell
Website domain
github.com
Cohort
n/a
Upvotes percentile
0.67
All tags
n/a
AI summary
proof-of-concept exploit for php session upload progress vulnerability
Manually corrected
No