Nicheloom visits: 37,748 all-time · 9,603 in the last 7 days

The opportunity tracker for new startups.

Today: 1,401 launches · Niche of the day: giveaway and sweepstakes platforms · See what launched today →

php2shell-poc

CVE-2026-109618/109619 --- PHP session.upload_progress pre-auth RCE (chain A/B/C)

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Visit website ↗ Source listing ↗

GITHUB · launched Oct 21, 2026 · 11 upvotes (top 91%)

Similar launches

See all 334 similar launches →

Could you build this?

No This is a working pre-auth remote code execution exploit for a CVE, and building it requires original vulnerability research and exploit development. An AI assistant can help with boilerplate but not with the underlying security analysis.

What it would actually take: Reproducing it means deep understanding of PHP session handling internals (session.upload_progress, the upload-progress race and file-inclusion chain) and of the specific CVE mechanics. You would need C-level PHP source knowledge, a lab with vulnerable PHP builds, and offensive security expertise to produce a reliable PoC.

Competitors

Other products that read as similar to this one : 334 launches clear the similarity bar, closest 8 shown.

Attention rank: #317 of 335 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 347 days after the earliest competitor.

Other launches for this product