Nicheloom visits: 28,984 all-time · 11,440 in the last 7 days

The opportunity tracker for new startups.

Today: 1,144 launches · Niche of the day: consumer buying and practical guides · See full report →

CVE-2026-109618-php2shell-lab

PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 23 upvotes (top 52%)

Similar launches

See all 220 similar launches →

Could you build this?

No The product is a Docker lab and proof of concept for a memory-corruption vulnerability in PHP. Producing a working exploit and a faithful lab requires security research expertise that vibe coding cannot substitute for.

What it would actually take: Reproducing it means understanding the PHP session upload-progress code path at source level, reproducing the use-after-free under a debugger or sanitizer build, and developing a reliable exploit primitive. Then the Docker lab is packaged around a vulnerable PHP build. This requires vulnerability research skills in C internals and memory corruption exploitation, plus responsible-disclosure context.

Competitors

Other products that read as similar to this one : 220 launches clear the similarity bar, closest 8 shown.

Attention rank: #129 of 221 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 342 days after the earliest competitor.

Other launches for this product

More details
External ID
1428038610
Company
n/a
Product
CVE-2026-109618-php2shell-lab
Website domain
github.com
Cohort
n/a
Upvotes percentile
0.48
All tags
n/a
AI summary
docker lab and poc for php session upload progress vulnerability
Manually corrected
No