slabbdev/php2shell-cve-2026-109618-109619
Local-only PoC lab for CVE-2026-109618 / CVE-2026-109619 (php2shell) — two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A/B (vulnerable vs patched builds), race harness, ASAN proof.
GitHub repository with 13 stars and 6 forks.
Language: Python
Topics: addresssanitizer, cve, docker, php, php-fpm, php2shell, poc, rce, security, upload-progress