junaire/CVE-2026-109618-exploit
- Total stars
- 116
- Today · UTC
- +1since 10:42 UTC
More actions
Save to My finds to follow releases and star growth. Saved in this browser.
About the project
Working exploit and Docker target for an unauthenticated RCE in PHP's session.upload_progress handling (CVE-2026-109618/109619), affecting versions 5.4.0–8.5.11.
Useful for
- Test your PHP host for the vulnerability by running the exploit against the local Docker target
- Reproduce the session fixation and object injection chain for pentest training
- Match a real app's gadget class and property via the --gadget and --prop flags
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate. Read the original README →
Star growth looks organic. Data as of October 22, 2026, 11:38 UTC.
The star-growth assessment does not verify whether the project is safe to run.
Stars per day
Bars show stars per UTC day; the line is a moving average of available history. Gaps mean missing data, not zero growth. Today's bar is incomplete. Red marks spike days.
Why it’s trending
- Star-counter measurements on 2026-10-22 (UTC), 10:42–11:26: 115 → 116 stars (+1). This is the change over that interval.
- Estimated end-of-day forecast: about +28 stars, using observed gains and the previous day.
- The repository is 1 day old and already has 116 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- Top new repositories this week: #196.
- About 31 forks a day — people are taking the code.
Measured growth: the last 7 completed days
The full 7-day window is unavailable; no weekly total or comparison is calculated.
Daily measurements · UTC
- October 15, 2026
- —
- October 16, 2026
- —
- October 17, 2026
- —
- October 18, 2026
- —
- October 19, 2026
- —
- October 20, 2026
- —
- October 21, 2026
- 98
Largest measured day in the last 30 days: 98 · October 21, 2026. Days with data: 1.
Completed days come from GitHub star history; today and forecasts are excluded from this comparison. History checked: October 22, 2026, 11:37 UTC. Sources and measurement limits →
Three GitHub discoveries in each edition
What they do, why they are gaining interest, and what to check before using them.
Editions at 10:00, 16:00, 22:00 MSK.
Numbers
- Total stars
- 116
- Today
- +1 star measured 2026-10-22, 10:42–11:26 UTC, ≈ 28 by evening
- Forks
- 72
- Issues and pull requests
- 0
- Watchers
- 0
- Language
- Python
- Created
- October 21, 2026
- Last push
- October 21, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- October 22, 2026Top new repositories this week: #196
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/junaire/CVE-2026-109618-exploit)