If you are looking for proof-of-concept (PoC) code for these or similar vulnerabilities, researchers often host them in dedicated repositories: php/php-src : The official PHP source repository includes a Security Advisories