CVE-2026-PSA-2026-00043-1

PSA-2026-00043-1 CVE-2026-PSA-2026-00043-1 Proxmox VE 7.0–8.0.3: unauthenticated, single-request root auth bypass Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...

CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML authentication bypass Unauthenticated session forgery on Citrix NetScaler ADC / NetScaler Gateway via the SAML HTTP-Redirect binding handler at GET /cgi/samlauth. CVSS 4.0 9.3, CWE-288. Bulletin CTX696939 2026-08-19, no workarounds. Credit for the...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 Unauthenticated Mobile MCP access can expose Android screen data and provide remote UI-control capabilities through ADB. ⚠️ Security Notice This repository is intended for authorized security research, vulnerability validation, defensive testing, and controlled...

CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

CVE-2026-104198

ZoneMinder versions 1.34.0 through 1.36.38 are vulnerable to a web authentication bypass in web/includes/auth.php. The validateToken() function returns false for malformed or invalid tokens, but the system incorrectly assigns this boolean value to the global $user variable. Since web/index.php on...

CVE-2023-27350-POC

CVE-2023-27350-POC Description: This tool is designed to exploit an authentication bypass vulnerability in PaperCut MF/NG versions 8.0 and above, but prior to versions 20.1.7, 21.2.11, or 22.0.9. The vulnerability allows for unauthorized access to the system and can potentially be used for...

CVE-2022-22978

CVE-2022-22978 Spring-Security bypass Demo When using RegexRequestMatcher in Spring Security and the regex rule contains a dot ., an attacker can bypass authentication by crafting a malicious packet. Affected Range Spring Security 5.5.x Spring Security 5.6.x http://localhost:8080/admin/index%0a...

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

CVE-2026-12352

CVE-2026-12352 Summary An unauthenticated, load-induced authentication bypass was identified in the Digi PortServer TS 4 H MEI, allowing retrieval of a local device configuration file without valid credentials. Under increased concurrent request load, the web server begins serving file contents...

CVE-2026-41940

CVE-2026-41940 | cPanel/WHM Authentication Bypass Detection ╔════════════════════════════════════════════════════════════════════════════╗ ║ cPanel/WHM Authentication Bypass - Detection Artifact Generator ║ ╚════════════════════════════════════════════════════════════════════════════╝ 📌 Descripti...

CVE-2026-41940-AuthBypass-Detector

CVE-2026-41940 Detection & Verification Overview This tool detects cPanel/WHM instances vulnerable to CVE-2026-41940 , a critical authentication bypass discovered by watchTowr Labs. The vulnerability allows an unauthenticated attacker to gain root access to WHM via a CRLF injection in the session...

CVE-2026-41940-cPanel-WHM-Verification-Tool

CVE-2026-41940 cPanel & WHM Verification Tool This repository contains a Python verification script for CVE-2026-41940, a critical authentication bypass vulnerability disclosed in cPanel & WHM. This project is intended for authorized defensive validation only. It is not intended for exploit...

cve-checker-2026

CVE Checker 2026 Multi-OS vulnerability scanner for: CVE-2026-31431 — Linux kernel crypto/algifaead flaw CVE-2026-41940 — cPanel & WHM authentication bypass CVSS 9.8 Supported Operating Systems Family| Distributions ---|--- Debian| Ubuntu, Debian, Linux Mint, Pop!OS RHEL| RHEL, CentOS, AlmaLinux,...

CVE-2026-39987-Lab

CVE-2026-39987 — marimo Pre-Auth Terminal WebSocket RCE Lab Local-only Docker lab for reproducing and understanding CVE-2026-39987 in marimo. This project compares a vulnerable marimo service with a patched marimo service side-by-side, then demonstrates the difference using a least-harm proof...

2026-41940-poc

CVE-2026-41940 - cPanel/WHM Authentication Bypass CVSS 9.8 | Unauthenticated root access via CRLF injection Usage python3 cp.py -t cpanel.target.com detect python3 cp.py -t cpanel.target.com --exploit exploit @nickpaulsec...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: cPanel/WHM Authentication Bypass Analysis Vulnerability Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM affecting all currently supported versions. It allows an unauthenticated attacker to bypass authentication and gain root-level access W...

CVE-2026-42167

CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...

CVE-2026-42167-PoC

CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...

CVE-2026-41940

The recent CVE-2026-41940 vulnerability has raised great concern among server administrators using cPanel/WHM. It is a critical flaw that can allow authentication bypass, enabling unauthorized access to the administrative panel without valid credentials. Considering that WHM is the main control...