CVE-2026-41940

CVE-2026-41940 | Detección de Bypass de Autenticación en cPanel/WHM ╔════════════════════════════════════════════════════════════════════════════╗ ║ cPanel/WHM Authentication Bypass - Detection Artifact Generator ║ ╚════════════════════════════════════════════════════════════════════════════╝ 📌...

portscan-CVE-2026-41940

portscan-CVE-2026-41940 CIDRs de IP presumiblemente como entrada, ya sea por línea de comandos o archivo y comprueba si los puertos 2083 y 2087 están abiertos portscan-CVE-2026-41940 CIDRs de IP presumiblemente como entrada, ya sea por línea de comandos o archivo y comprueba si los puertos 2083 y...

cpanelCVE-2026-41940

🔴 cPanelCVE CVE-2026-41940 — Bypass de autenticación en cPanel y WHM CVSS 10.0 Crítico · Confirmado en la naturaleza · Inicio de sesión root automático 📖 Descripción general cPanelCVE es un exploit de prueba de concepto para CVE-2026-41940, una vulnerabilidad crítica de inyección CRLF en archivos...

cve-2026-41940-PoC-Linux

CVE-2026-41940 PoC - Compatible con Linux/Termux Versión compatible con Linux y Termux del exploit de omisión de autenticación CVE-2026-41940 de cPanel/WHM. Instalación Para Termux Android: root@kitploit: pkg update && pkg upgrade pkg install python3 python3-pip git git clone...

CVE-2026-41940-Linux

CVE-2026-41940 — WHM/cPanel 漏洞利用工具 Linux ⚠️ 免责声明： 此工具仅适用于授权的渗透测试和教育目的 。未经明确书面许可，使用此工具对系统进行攻击是非法的 。开发者对任何滥用或造成的损害概不负责。 📌 描述 CVE-2026-41940 是一个针对运行在端口 2087 上的 WHM（WebHost Manager）/ cPanel 服务器漏洞的利用工具。该工具具有基于 PyQt5 构建的图形用户界面（GUI），专为 Linux 系统设计。 目标： WHM / cPanel 服务器 端口： 2087 界面： 图形界面（PyQt5） 语言： Python ...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 — WHM/cPanel Exploit Tool Linux ⚠️ DISCL...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 — WHM/cPanel Kimlik Doğrulama Atlama Araştırma...

Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM

What is CVE-2026-41940? CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM, including DNSOnly, in versions after 11.40. The flaw, discovered by WatchTowr Labs, exists in the login flow and allows unauthenticated remote attackers to gain unauthorized access to...

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately

cPanel has released security updates to address a security issue impacting various authentication paths that could allow an attacker to obtain access to the control panel software. The problem affects all currently supported versions of cPanel and WebHost Manager WHM, according to an alert...

CVE-2026-2087

SourceCodester Online Class Record System 1.0 is affected by a SQL injection in /admin/login.php via the user_email parameter. The vulnerability can be triggered remotely and an exploit has been published, with multiple sources noting high risk potential. Affected component is the login handling ...

CVE-2019-2087

In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118149009...

CVE-2025-2087

A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The explo...

CVE-2025-2087

A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The explo...

CVE-2025-2087 StarSea99 starsea-mall update cross site scripting

A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The explo...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-2087)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-2087

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form name values in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-2087 Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form name values in all versions up to, and including, 2.4.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-2087

CVE-2024-2087 – Brizy (Brizy – Page Builder) for WordPress is a Stored Cross-Site Scripting (XSS) in which form name values are not properly sanitized/escaped, affecting all versions up to 2.4.43. This allows unauthenticated attackers to inject arbitrary JavaScript that executes when users load t...

WordPress Brizy Plugin <= 2.4.43 is vulnerable to Cross Site Scripting (XSS)

Software Brizy Type Plugin Vulnerable versions = 2.4.43 Fixed in 2.4.44 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2087 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ead457b1b8e9 Credits wesley wcraft Required...

Amazon Linux 2 : python-pillow (ALAS-2023-2087)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2087 advisory. An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invali...