php2shell
CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 21, 2026 · 110 upvotes (top 12%)
- Security
- Dev tools
- Developer
- Not AI
- Hobby / open-source project
Similar launches
See all 256 similar launches →Could you build this?
No A proof-of-concept exploit for a PHP heap use-after-free vulnerability requires deep vulnerability research, memory-corruption expertise, and an understanding of the PHP internals involved. Vibe coding doesn't supply that.
What it would actually take: Reproducing it means analyzing the PHP session upload-progress code path, triggering the use-after-free, and building a reliable heap-grooming exploit against specific PHP builds and configurations. This takes expertise in C memory corruption, PHP engine internals, and exploit development. Responsible handling also requires disclosure and coordination processes.
Competitors
Other products that read as similar to this one : 256 launches clear the similarity bar, closest 8 shown.
Attention rank: #27 of 257 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 338 days after the earliest competitor.
- CVE-2026-109618 · github · 2026-10-21 · 55 upvotes · similarity 0.88
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.80
- CVE-2026-109618-php2shell-lab · github · 2026-10-21 · 23 upvotes · similarity 0.78
- php2shell-exploit · github · 2026-10-22 · 23 upvotes · similarity 0.78
- php_uploadprogress_guard · github · 2026-10-21 · 111 upvotes · similarity 0.75
- php2shell-patches · github · 2026-10-21 · 68 upvotes · similarity 0.71
- php2shell-CVE-2026-109618-CVE-2026-109619-PoC · github · 2026-10-21 · 891 upvotes · similarity 0.69
- php2shell-protection · github · 2026-10-21 · 93 upvotes · similarity 0.69
Other launches for this product
More details
- External ID
- 1428546985
- Company
- n/a
- Product
- php2shell
- Website domain
- github.com
- Cohort
- n/a
- Upvotes percentile
- 0.88
- All tags
- n/a
- AI summary
- proof-of-concept exploit for php session upload progress heap use-after-free
- Manually corrected
- No