ikow/php2shell-poc
- Total stars
- 1,071
- Today · UTC
- +125since 00:37 UTC
More actions
CVE-2026-109618/109619 PHP session.upload_progress Exploit Research — POC & Analysis
Save to My finds to follow releases and star growth. Saved in this browser.
About the project
A proof-of-concept toolkit for two PHP pre-auth RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting PHP 5.4.0 through 8.5.11, with exploits, detection rules, and a lab environment.
Useful for
- Reproduce the OOM-based RCE chain against a local PHP-FPM or mod_php lab container.
- Deploy the provided Suricata, Sigma, or ModSecurity rules to detect session.upload_progress exploitation attempts.
- Verify whether a target PHP version is vulnerable using the included PoC verification scripts.
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate. Read the original README →
Star growth looks organic. Data as of October 22, 2026, 03:36 UTC.
The star-growth assessment does not verify whether the project is safe to run.
Stars per day
Bars show stars per UTC day; the line is a moving average of available history. Gaps mean missing data, not zero growth. Today's bar is incomplete. Red marks spike days.
Why it’s trending
- Star-counter measurements on 2026-10-22 (UTC), 00:37–03:25: 946 → 1071 stars (+125). This is the change over that interval.
- Estimated end-of-day forecast: about +1,011 stars, using observed gains and the previous day.
- The repository is 1 day old and already has 1,071 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #14.
- About 280 forks a day — people are taking the code.
- Recent forks include notable developers: @depycode (237 followers).
Measured growth: the last 7 completed days
The full 7-day window is unavailable; no weekly total or comparison is calculated.
Daily measurements · UTC
- October 15, 2026
- —
- October 16, 2026
- —
- October 17, 2026
- —
- October 18, 2026
- —
- October 19, 2026
- —
- October 20, 2026
- —
- October 21, 2026
- 1,080
Largest measured day in the last 30 days: 1,080 · October 21, 2026. Days with data: 1.
Completed days come from GitHub star history; today and forecasts are excluded from this comparison. History checked: October 22, 2026, 03:35 UTC. Sources and measurement limits →
Three GitHub discoveries in each edition
What they do, why they are gaining interest, and what to check before using them.
Editions at 10:00, 16:00, 22:00 MSK.
Numbers
- Total stars
- 1,071
- Today
- +125 stars measured 2026-10-22, 00:37–03:25 UTC, ≈ 1,011 by evening
- Forks
- 393
- Issues and pull requests
- 4
- Watchers
- 5
- Language
- Python
- Created
- October 21, 2026
- Last push
- October 21, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 22, 2026Top new repositories this week: #14
- October 21, 2026Top new repositories this week: #21
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/ikow/php2shell-poc)