php2shell
PoC for CVE-2026-109618 / CVE-2026-109619 (php2shell): PHP session.upload_progress UAF. check = GET fingerprint + bulk JSONL; exploit = smart 618 (multi-path trigger) or 619 with --call. Stdlib only.
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 21, 2026 · 44 upvotes (top 31%)
- Security
- Developer
- Not AI
- Hobby / open-source project
Similar launches
See all 184 similar launches →Could you build this?
No This is a proof-of-concept exploit for a memory-corruption vulnerability in PHP, and building it requires vulnerability research and exploit development skills. Vibe coding cannot produce a reliable working exploit from scratch.
What it would actually take: Building this means analyzing the PHP session upload-progress code path to understand the use-after-free, crafting heap-grooming and trigger sequences, and testing across PHP versions and configurations. That requires specialized memory-safety and exploit-development expertise plus a controlled lab environment.
Competitors
Other products that read as similar to this one : 184 launches clear the similarity bar, closest 8 shown.
Attention rank: #56 of 185 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 347 days after the earliest competitor.
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.81
- php2shell-CVE-2026-109618-CVE-2026-109619-PoC · github · 2026-10-21 · 891 upvotes · similarity 0.77
- CVE-2026-109618-php2shell-lab · github · 2026-10-21 · 23 upvotes · similarity 0.77
- php2shell-exploit · github · 2026-10-22 · 23 upvotes · similarity 0.75
- CVE-2026-109618 · github · 2026-10-21 · 55 upvotes · similarity 0.74
- php2shell-scanner · github · 2026-10-22 · 294 upvotes · similarity 0.74
- php2shell-protection · github · 2026-10-21 · 93 upvotes · similarity 0.70
- cve-2026-109618-php2shell · github · 2026-10-21 · 28 upvotes · similarity 0.70
Other launches for this product
More details
- External ID
- 1428364489
- Company
- n/a
- Product
- php2shell
- Website domain
- github.com
- Cohort
- n/a
- Upvotes percentile
- 0.69
- All tags
- n/a
- AI summary
- proof-of-concept exploit for php2shell session upload progress vulnerability
- Manually corrected
- No