Whackermelon/Php2Shell-POC
Pre-auth remote code execution & reverse shell PoC for CVE-2026-109618 / CVE-2026-109619 - PHP core session upload-progress. One URL in, a reverse shell out.
GitHub repository with 16 stars and 5 forks.
Language: Python
Topics: cve, cve-2026-109618, cve-2026-109619, exploit, exploitation, heap-uaf, penetration-testing, pentest, php, php2shell