Nicheloom visits: 37,748 all-time · 9,603 in the last 7 days

The opportunity tracker for new startups.

Today: 1,401 launches · Niche of the day: giveaway and sweepstakes platforms · See what launched today →

php2shell

CVE-2026-109618 / CVE-2026-109619 — unauthenticated RCE in PHP's session.upload_progress handler (CVSS 9.2). Reproducible Docker lab against stock WordPress and Laravel on PHP 8.4.26, plus a read-only on-host audit script.

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 12 upvotes (top 86%)

Similar launches

See all 208 similar launches →

Could you build this?

Partial A Docker lab and host audit script for a known CVE are mostly vibe-codeable, but building a faithful reproduction and an accurate audit still needs real understanding of the vulnerability.

What it would actually take: The lab needs Docker images for vulnerable PHP 8.4.26 with stock WordPress and Laravel, plus a reproduction of the upload-progress exploit path. The audit script must correctly detect the vulnerable configuration, which needs security expertise to validate.

Competitors

Other products that read as similar to this one : 208 launches clear the similarity bar, closest 8 shown.

Attention rank: #190 of 209 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 347 days after the earliest competitor.

Other launches for this product