1.Anton-Barinov / php2shell-patchesphp2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.cvehestiacpopencartphpphp-fpmphp5+10 moreShellNo license130 total23 forks+8 starsfrom 122 · score 2.20
2.JoasASantos / php2shell-scannerNon-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.crtshcvecve-2026-109618cve-2026-109619phpphp-security+4 morePythonNo license111 total30 forks+2 starsfrom 109 · score 1.10