Gi1gamesh123/php-unserialize-uaf-rce
PHP Serializable var_hash UAF -> RCE (php2shell/MADBugs) — repro + adapted EXP, php8.3.6 verified, disable_functions bypass 10/10
GitHub repository with 11 stars and 9 forks.
Language: PHP
Topics: cve-2026-109618, disable-functions-bypass, exploit, php, poc, rce, uaf, unserialize