Nicheloom visits: 28,984 all-time · 11,440 in the last 7 days

The opportunity tracker for new startups.

Today: 1,144 launches · Niche of the day: consumer buying and practical guides · See full report →

php2shell-CVE-2026-109618-109619

CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 33 upvotes (top 38%)

Similar launches

See all 235 similar launches →

Could you build this?

No This is a pre-authentication remote code execution exploit chain for a PHP vulnerability, which requires deep vulnerability-research expertise.

What it would actually take: Reproducing it means analyzing PHP's session upload-progress internals, building a memory-corruption or ASLR-bypass chain, and validating it against target builds. This needs specialist exploit development skills, and the output is offensive security tooling with significant misuse risk.

Competitors

Other products that read as similar to this one : 235 launches clear the similarity bar, closest 8 shown.

Attention rank: #99 of 236 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 347 days after the earliest competitor.

Other launches for this product

More details
External ID
1427882263
Company
n/a
Product
php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Website domain
github.com
Cohort
n/a
Upvotes percentile
0.62
All tags
asan, aslr, cve, cve-2026-109618, cve-2026-109619, exploit, php, poc, rce, security, security-research, session-upload-progress, vulnerability-research
AI summary
php session upload progress pre-auth rce exploit research and poc
Manually corrected
No