Zer061/CVE-2026-109618

选用指南

AI 根据 README 整理 · 2026/10/21 23:51:20

使用方式

通过命令行运行框架，例如执行自测或使用调试符号分析二进制。

查看 README 依据

Source: https://jackalsyn.com/posts/php-up-2026.html Top-level bundle readme (layout, quickstart, credits) # php-up-2026 PHP session.upload_progress UAF validation bundle (presumed CVE-2026-109618 / CVE-2026-109619). Layout: bin/ framework + pocs + trigger, docs/ reports, deltas/ vendor debug symbols. Quickstart: cd bin python3 php_up_framework.py --selftest python3 php_up_framework.py --syms --binary ../deltas/lsphp82-8.2.34-1-bookworm.zval.debug Known deltas (zval_ptr_dtor - zend_call_function): bookworm 0xc930, noble 0xcef0, jammy 0xd060. Credits:

部署要求

需要Python 3环境，并可能需要目标PHP二进制及其调试符号。

查看 README 依据

Source: https://jackalsyn.com/posts/php-up-2026.html Top-level bundle readme (layout, quickstart, credits) # php-up-2026 PHP session.upload_progress UAF validation bundle (presumed CVE-2026-109618 / CVE-2026-109619). Layout: bin/ framework + pocs + trigger, docs/ reports, deltas/ vendor debug symbols. Quickstart: cd bin python3 php_up_framework.py --selftest python3 php_up_framework.py --syms --binary ../deltas/lsphp82-8.2.34-1-bookworm.zval.debug Known deltas (zval_ptr_dtor - zend_call_function): bookworm 0xc930, noble 0xcef0, jammy 0xd060. Credits:

已知限制

仅限授权防御性研究或限定范围参与使用。

查看 README 依据

code/framework: J4ck3LSyN (@J4ck3LSyN) pocs: Andrew Dorman (@acd421) research: Arch&Yuki (@ArchKnight23) assist: A.T.L.A.S Authorized defensive-research / scoped-engagement use only.