1.Anton-Barinov / php2shell-patchesphp2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.cvehestiacpopencartphpphp-fpmphp5+10 moreShellNo license130 total23 forks+10 starsfrom 118 · score 2.40
2.JoasASantos / php2shell-scannerNon-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.crtshcvecve-2026-109618cve-2026-109619phpphp-security+4 morePythonNo license111 total30 forks+1 starsfrom 110 · score 0.69