List of Magento extensions with known security issues.
- magento
- extensions
- vulnerability
Repository Index
47,133 repositories indexed
73–96 of 109 · Most stars
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
The repository host gives no description.
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
JWT auth for Laravel and Lumen
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.
- cakephp-plugin
- acl
- multi-role
- php
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Authentication plugin for CakePHP. Can also be used in PSR7 based applications.
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
- crtsh
- cve
- cve-2026-109618
- cve-2026-109619
Authenticate users in your Symfony app via a single query parameter (e.g. email and newsletter links).
PSR7 Middleware for authorization
Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
:honey_pot: A simple and effective phpmyadmin honeypot
Bundle allows you to create doctrine entities with fields that will be protected by encryption algorithms such as AES
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
- android-hacking
- baseband
- bootloader-unlock
- checkm8
A CakePHP plugin which allows you to authenticate using social providers like Facebook/Google/Twitter.
- cakephp-plugin
- social-providers
- middleware
- php
OpenID-Login through Steam for your website
- steam-login
- steam-api
- steam
- openid-client
Honeypot type for Symfony forms
Two-factor authentication plugin