David Álvarez Rosa
David Álvarez Rosa's work was selected for the XERJ Corpus Hub, the open reference memory AI coding agents search before they write code. When an agent meets the same problem, it gets this implementation back as a worked example, with the author and the repository attached.
Totals across every corpus @david-alvarez-rosa appears in; a commit selected for two corpora counts once. Files and lines count the selected commits; each corpus indexes the whole repository at its pinned commit.
What an agent can do with the php-rce corpus
david-alvarez-rosa/php-rce: Exploits for CVE-2026-109618 / CVE-2026-109619 to achieve RCE on PHP targets
- Look up how php-rce implements cve, exploit, penetration-testing, with answers cited to file and line.
- Reuse a worked example: the commit “Add exploit chains for CVE-2026-109618/109619” (9 files · Python).
- Answer from php-rce's real Python source instead of memory (Security and vulnerabilities).
- Where does php-rce handle “Add exploit chains for CVE-2026-109618/109619”?
- How does php-rce implement cve?
- What does exploits do in php-rce?
Search the GitHub repository david-alvarez-rosa/php-rce with XERJ (https://hub.xerj.org/corpus/david-alvarez-rosa--php-rce). Run these in a shell, in order, and check each result before the next: 1. xerj --help (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh 2. git clone https://github.com/david-alvarez-rosa/php-rce php-rce && git -C php-rce checkout 9a8f61c87dbc7b1e93aa87306052420a7a19a2d7 3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data 4. xerj autoindex ./php-rce --url http://127.0.0.1:9200 --prefix php-rce --progress plain 5. xerj autoindex map --url http://127.0.0.1:9200 Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt Licence: MIT. Keep the copyright notice and credit the authors.
corpus david-alvarez-rosa--php-rce · Security and vulnerabilities
Related corpora: payloadsallthethings, bandit-plugins, Noxiidus/tracehound, apache/magpie
Code security audit with XERJ · Case study: reference coding for agents
Selected work
david-alvarez-rosa/php-rce
The corpus is the whole repository at the pinned commit, not only the files of the selected commit.
Not installable yet: this corpus is not in the hub registry until its licence review passes, so xerj corpus add and xerj ask cannot fetch it. It becomes installable when this card says live in the hub.
Sign in with GitHub or Hugging Face to see more: every selected commit in full (commit date, every folder, licence review state, pin) and the pack builds of each corpus.
[](https://hub.xerj.org/contributors/david-alvarez-rosa)
Included with the author's permission (email, 2026-10-21), under each repository's own licence, with attribution. Want it removed? Reply to the email or open an issue on xerj-org/xerj.