CVE-2026-71079

A flaw was found in MySQL Connector/ODBC. This vulnerability allows a low privileged attacker with network access to cause a complete denial of service DoS by triggering a hang or frequently repeatable crash of the component. The attacker can exploit this flaw through multiple protocols...

WordPress ACF Extended plugin <= 0.9.2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ACF Extended versions = 0.9.2.6...

CVE-2026-74747

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. A local attacker can manipulate the IP Header Length ihl field within network packets. This manipulation can lead to an out-of-bounds access when the kernel attempts to revalidate embedded headers, potentially causing system...

EUVD-2026-67003

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...

CVE-2025-5947_Exploit

🔍 Exploit del Plugin WordPress — Service Finder sf-booking Panoramica Il plugin Service Finder è un sistema di prenotazione e gestione dei servizi per WordPress. A causa della sua popolarità e complessità, alcune versioni hanno avuto problemi di sicurezza legati a endpoint AJAX non autenticati o ...

CVE-2026-39902

Vulnerability Report: Inserimento Dati RCE Autenticato Ricercatore: K | Prodotto: Cacti ≤ 1.2.30 01 Riepilogo della Vulnerabilità...

cPanelSniper

cPanelSniper CVE-2026-41940 — Bypass dell'autenticazione cPanel & WHM tramite iniezione CRLF nel file di sessione Catena di exploit in 4 fasi · Shell WHM interattiva · Scanner di massa · Pronto per pipeline · Solo stdlib Panoramica cPanelSniper è un framework di exploitation mirato per...

cPanelSniper

cPanelSniper CVE-2026-41940 — Bypass dell'autenticazione cPanel & WHM tramite iniezione CRLF nel file di sessione Catena di exploit in 4 fasi · Shell WHM interattiva · Scanner di massa · Pronto per pipeline · Solo stdlib Panoramica cPanelSniper è un framework di sfruttamento mirato per...

CVE-2026-41940-AuthBypass-Detector

CVE-2026-41940 Erkennung & Verifizierung Überblick Dieses Tool erkennt cPanel/WHM-Instanzen, die anfällig für CVE-2026-41940 sind , eine kritische Authentifizierungsumgehung, die von watchTowr Labs entdeckt wurde. Die Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer, Root-Zugri...

CVE-2026-41940-cPanel-WHM-Verification-Tool

CVE-2026-41940 Инструмент проверки cPanel & WHM Этот репозиторий содержит Python-скрипт для проверки CVE-2026-41940 — критической уязвимости обхода аутентификации, раскрытой в cPanel & WHM. Этот проект предназначен только для авторизованной защитной валидации. Он не предназначен для разработки...

CVE-2026-3844

CVE-2026-3844 — WordPress Breeze Cache Unauthenticated File Upload Übersicht Dieses Repository enthält ein Python-Proof-of-Concept-Skript PoC zur Demonstration einer Unauthenticated Arbitrary File Upload -Schwachstelle, die das WordPress Breeze Cache Plugin ⚠️ Dieses Projekt ist ausschließlich für...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — Sequestro de Execução de Chat Não Autenticado no n8n CVE: CVE-2026-42228 Severidade: Alta Afetados: n8n 1.123.32 Corrigido em: n8n 1.123.32 / 2.17.4 / 2.18.1 Resumo da Vulnerabilidade chat-service.ts :: startSession aceita um executionId da string de consulta do WebSocket e...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Ricerca-Analisi-Rilevamento-Vulnerabilità Bypass critico della validazione del buffer in deserializetensor llama.cpp b8492. Il buffer tensore nullo salta il controllo dei limiti, consentendo R/W arbitrario non autenticato tramite GRAPHCOMPUTE. Bypass ASLR + RCE su TCP 50052...

copy-fail

copy-fail PoC do CVE-2026-31431 USO: wget https://raw.githubusercontent.com/pedromizz/copy-fail/main/poc.py python3 poc.py $ id uid=0root pedromizz :...

CVE-2026-17562

CVE-2026-17562 is an IDOR (Insecure Direct Object Reference) vulnerability in Summit Security Systems AdisyonPro prior to v5.21.0 . The root cause is an authorization bypass through a user-controlled key , allowing attackers to access functionality that is not properly constrained by ACLs. The vu...

CVE-2026-17562 IDOR in Zirve Security's AdisyonPro

Authorization bypass through User-Controlled key vulnerability in Summit Security Systems AdisyonPro allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AdisyonPro: before v5.21.0...

2026-41940-poc

CVE-2026-41940 - cPanel/WHM प्रमाणीकरण बाईपास CVSS 9.8 | CRLF इंजेक्शन के माध्यम से अनधिकृत रूट एक्सेस उपयोग python3 cp.py -t cpanel.target.com पता लगाएं python3 cp.py -t cpanel.target.com --exploit शोषण करें @nickpaulsec...

Principal-HackTheBox

HackTheBox — Principal Schwierigkeit: Mittel Betriebssystem: Linux Plattform: HackTheBox Übersicht Webanwendung, die pac4j-jwt v6.0.3 ausführt — anfällig für CVE-2026-29000. Der öffentliche RSA-Schlüssel ist unauthentifiziert über einen JWKS-Endpunkt zugänglich und kann verwendet werden, um ein...

CVE-2026-42167-Exploit

CVE-2026-42167 मास्टर एक्सप्लॉइट टूल ProFTPD के modsql मॉड्यूल में CVE-2026-42167 कमजोरी का फायदा उठाने के लिए एक पेशेवर सुरक्षा अनुसंधान उपकरण। यह टूल समय-आधारित साइड-चैनल हमलों के माध्यम से सर्वर से संवेदनशील फाइलों को बाहर निकालने के लिए बिना प्रमाणीकरण के SQL इंजेक्शन करता है। "नोट: इस टूल की...

poc-cpanel-cve-2026-41940

POC cPanel CVE-2026-41940 Uno strumento di audit di sicurezza ad alte prestazioni e multi-thread progettato per rilevare CVE-2026-41940 , una vulnerabilità critica di Authentication Bypass in cPanel & WHM scoperta ad aprile 2026. Questo strumento sfrutta una tecnica di CRLF Injection negli header...