RepoAlerts
SponsorGet alerts

Anton-Barinov/php2shell-patches

Get alerts like thisView on GitHubShare on X

Can I trust it?

Be careful with this one.

  • Warnings Check

    Very new: it was created 2 days ago. Wait a little before installing it.

  • Stars from real accounts No data

    We haven't checked its stars for fakes yet.

  • Active OK

    Last change today.

  • Licence Careful

    No licence: legally you can't reuse the code, unless the README says otherwise.

Quick checks from public data. They help, but they are no guarantee.

What it is

Patch files that backport fixes for CVE-2026-109618 and CVE-2026-109619 (php2shell) to end-of-life PHP 5.6, 7.x, 8.0 and 8.1, which receive no official fix. Offers a minimal official-style variant that disables session upload progress, and an enhanced community variant that…

Who it's for

System administrators running legacy PHP servers, such as OpenCart, WordPress or HestiaCP hosts, that cannot upgrade immediately

How to use it

Ask your AI to set it up

Paste this into Claude, ChatGPT or your coding assistant.

Help me install and set up Anton-Barinov/php2shell-patches in my project. Follow its README: https://github.com/Anton-Barinov/php2shell-patches. Explain each step and check it is safe before running anything.

Read the README

Star curve

72From 0 to 72 stars between 21 Oct 2026 and 23 Oct 2026.

Get alerts for repos like this

We'll email you when something in Dev infrastructure starts rising. Free, once a week, only what matches.

19,299 GitHub repos watched and ranked every hour. Figures as of 23 October 2026.

What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy

For maintainers

Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.

[![Anton-Barinov/php2shell-patches on RepoAlerts](https://repoalerts.com/badge/Anton-Barinov/php2shell-patches.svg)](https://repoalerts.com/repo/Anton-Barinov/php2shell-patches?ref=badge)
Share on X
  • eness/php2shell-CVE-2026-109618-CVE-2026-109619-PoC

    Proof-of-concept exploit for two PHP core vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that allow remote code execution in vulnerable PHP environments. Includes a README with affected version

    Shell · 901 stars · +901 this week · 2 days old

  • Qsnh/php2shell-fixed

    Patched PHP source tarballs and a one-command script that rebuilds, replaces and rolls back end-of-life PHP 5.4 to 8.1 installations managed by BT Panel, fixing CVE-2026-109618 and CVE-2026-109619 (PH

    Dev infrastructureShell · 45 stars · +45 this week · 1 day old

  • syrex1013/php2shell

    Proof-of-concept exploit and lab for CVE-2026-109618 and CVE-2026-109619, a heap use-after-free in PHP's session.upload_progress handling. Includes a Docker lab reproducing the stale-pointer write on

    Python · 112 stars · +112 this week · 2 days old

  • aancw/php2shell-scanner

    Scanner that detects exposure to the PHP core RCEs CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). It runs a blackbox HTTP check against web targets, host checks on the local machine, or host checks

    CLI toolWeb & UIGo · 36 stars · +36 this week · 1 day old

  • JoasASantos/php2shell-exploit

    Python exploit framework for CVE-2026-109618 and CVE-2026-109619, a use-after-free in PHP's session.upload_progress handler that is described as enabling pre-auth remote code execution over HTTP. Incl

    Python · 39 stars · +39 this week · 1 day old

  • devploit/php2shell

    Research toolkit for the PHP session.upload_progress pre-auth RCE chain (CVE-2026-109618 / CVE-2026-109619) in mod_php. Provides a version-aware dispatcher, per-build profiles, Docker laboratories, he

    Python · 102 stars · +102 this week · 1 day old