ikow / php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
ikow / php2shell-poc
AhmadHassan-BTed / ShopifyAutoAuth
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
AhmadHassan-BTed / LichArch
Hyper-optimized dark theme suite, native KWin gesture engine, and automated setup launcher for KDE Plasma 6 on Arch Linux.
vllm-project / vllm
A high-throughput and memory-efficient inference and serving engine for LLMs
9bie / php2shell-bypass-aslr-exp
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
openai / php2shell-checker
Checks a website's PHP version headers or a local PHP install against upstream fixed releases for PHP2Shell.
HydraSoft / HydraSoft-DLL-Hijack-Scanner
HydraSoft: dependency-free Windows DLL hijack scanner with centralized remote management — HydraAgent, PHP API, and a web console for endpoint security checks across your fleet.
php / php-src
The PHP Interpreter
eness / php2shell-CVE-2026-109618-CVE-2026-109619-PoC
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
coollabsio / coolify
An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 360+ one-click services on your own servers.
assetnote / php2shell-scanner
High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)
ashishps1 / awesome-system-design-resources
Learn System Design concepts and prepare for interviews using free resources.
madong-code / madong-admin-saas
Standard multi-tenant SaaS admin backend library based on PHP Webman, built-in tenant isolation, RBAC permission, CRUD generator and workflow engine, paired with Vue3 Vben frontend.
NCSC-NL / php2shell
Operational information regarding the 2026 php2shell vulnerabilities
apache / kafka
Apache Kafka - A distributed event streaming platform
HarnessRouter / harnessrouter
HarnessRouter Community Edition: the self-hosted, Apache-2.0 edition of the unified interface for agent harnesses. Run Codex, Claude Code, Hermes, PI, DSH, and more through one API, with sessions, streaming, files, cancellation, and failure handling. Implements the Unified Harness Protocol (UHP), an open standard. Your keys, your infrastructure.
EricTechPro / super-board
Autonomous GitHub Project build → QA → review loop for Claude Code. One-line install.
JoasASantos / php2shell-exploit
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
devploit / php2shell
PHP2Shell: version-aware research toolkit for CVE-2026-109618 / CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.
HOSTED-POWER / php_uploadprogress_guard
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
ashishpatel26 / 500-AI-Machine-learning-Deep-learning-Computer-vision-NLP-Projects-with-code
500 AI Machine learning Deep learning Computer vision NLP Projects with code
syrex1013 / php2shell
CVE-2026-109618/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)
nextcloud / server
☁️ Nextcloud server, a safe home for all your data
pastawithpesto / PS5-14.10-Jailbreak-Research
WebKit jailbreak research for PlayStation 5 firmware 14.10
FreshRSS / FreshRSS
A free, self-hostable news aggregator…
piqganehprlv / ff-external-esp
FreeFire external ESP cheat: player boxes, skeleton ESP, distance readout, item glow — C++ overlay, no injector, educational use only.
sansy02 / SwitchPorter
Switch 截图导出：USB 连接 Nintendo Switch，将截图与视频一键保存到电脑或安卓/ios手机（游戏封面、搜索、时间排序、批量保存、重复检测）
ohmyzsh / ohmyzsh
🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.
dinosn / php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
JoasASantos / php2shell-scanner
Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.
syhunt / php2shell-protection
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
karatektus / pl_mail
Self-hosted, Gmail-style mail client. Multi-account IMAP, threaded conversations, real-time push via IMAP IDLE + Mercure. Built with Symfony, FrankenPHP, Hotwire Turbo. Clone and docker compose up.
pppscn / SmsForwarder
短信转发器——监控Android手机短信、来电、APP通知，并根据指定规则转发到其他手机：钉钉群自定义机器人、钉钉企业内机器人、企业微信群机器人、飞书机器人、企业微信应用消息、邮箱、bark、webhook、Telegram机器人、Server酱、PushPlus、手机短信等。包括主动控制服务端与客户端，让你轻松远程发短信、查短信、查通话、查话簿、查电量等。（V3.0 新增）PS.这个APK主要是学习与自用，如有BUG请提ISSUE，同时欢迎大家提PR指正
VaultAssurance / PHP-Storm
Php Storm 2025 complete standalone setup. Ready-to-run, pre-activated desktop edition with all features unlocked.
Anton-Barinov / php2shell-patches
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
ccxt / ccxt
A unified trading API with more than 100 crypto exchanges and prediction markets in JavaScript / TypeScript / Python / C# / PHP / Go / Java / Rust
dshplugin / dsh-plugin-hub
DeepSeek Harness 社区内置插件市场（dsh-plugin）— 搜索插件、下载并安装 10000+ 人工精选社区插件，每日更新、完全免费。内置在 Harness「设置 → 插件中心」，无需离开应用即可浏览、搜索、安装各类 AI 插件。
docker-library / php
Docker Official Image packaging for PHP
78ResearchLab / PHP2Shell-Full-Chain-Exploit
—
pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
cookiengineer / actual-php2shell
:robot: NO, There is an easy way to exploit this vulnerability! (vibecoded to prove a point)
pentestershell / php2shellbt
Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.
HenryChiao / MIHOMO_YAMLS
一个精心整理的 Mihomo (Clash Meta) 配置文件仓库，通过 GitHub Actions 每日自动同步上游优质规则，提供从入门到进阶的完整解决方案。
murrez / php2shell
php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.
BastionPHP / Bastion
Evidence-based PHP security assessment: patch verification, intrusion tracing, and offline reports.
Qsnh / php2shell-fixed
宝塔面板（BT Panel）上已停止维护的 PHP 版本（5.4 – 8.1）的 PHP2Shell（CVE-2026-109618 / CVE-2026-109619）修复包。仓库里有打好补丁的源码包，以及一键完成编译、替换、回滚的脚本。
is-hp-is-mad / Flutify
Spotify 风格的第三方音乐客户端（Flutter，Windows / Android）
mpyw / php-eol-CVE-2026-109618-109619
PHP 7.4 / 8.0 / 8.1 Docker images with the CVE-2026-109618 / CVE-2026-109619 fix backported
php / frankenphp
🧟 The modern PHP app server
ellite / Wallos
Wallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
Is4yev / php2shell-poc
CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)
jxxghp / MoviePilot
NAS媒体库自动化管理工具
harshpreet931 / harshpreet-hand
I gave Claude Code 120 pages of my handwritten college notes. It gave me back my handwriting as a real font, in 66 minutes for $13.68.
ReynArts / ApexSenseBridge
Bring native PS5 DualSense adaptive triggers, haptics & touchpad features to Flydigi APEX 4, APEX 5 & APEX 6 Pro on Windows. 215+ games, Standalone + Playnite.
FlashProtectorHike / Movavi-Photo-Editor
Complete standalone setup for Movavi Photo Editor 2025. Ready-to-run desktop installation with all features pre-activated.
yaojingang / GEOFlow
Open-source GEO content engineering and multi-site distribution platform with AI quality inspection, illustrated admin help, hosted sites, browser-assisted publishing, and signed updates.
vperetti / php-cve-2026-109618-109619-backports
Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 / CVE-2026-109619) for EOL PHP 5.4 and 7.3
firefly-iii / firefly-iii
Firefly III: a personal finances manager
rectorphp / rector
Instant Upgrades and Automated Refactoring of any PHP 5.3+ code
selkies-project / selkies
Low-Latency Accelerated Web Remote Desktop Streaming Platform for Self-Hosting, Containers, Kubernetes, or Cloud/HPC