Lucene search
+L

3790 matches found

Positive Technologies
Positive Technologies
added 2026/05/04 12:00 a.m.21 views

PT-2026-37049

Name of the Vulnerable Software and Affected Versions Net::IMAP versions prior to 0.4.24 Net::IMAP versions prior to 0.5.14 Net::IMAP versions prior to 0.6.4 Description Several commands in the Net::IMAP Ruby library accept raw string arguments that are sent to the server without validation or...

9.8CVSS5.9AI score0.00783EPSS
SaveExploits0References33
GithubExploit
GithubExploit
added 2026/05/03 8:15 p.m.143 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940-POC cPanel/WHM Authentication Bypass Proof of...

9.8CVSS6AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/02 7:18 p.m.139 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 Exploit PoC – cPanel & WHM Authentication Bypas...

9.8CVSS6.2AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/02 10:00 a.m.122 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 - cPanel & WHM Authentication Bypass Proof of C...

9.8CVSS5.9AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/01 2:57 p.m.191 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940: cPanel/WHM Authentication Bypass Disclaim...

9.8CVSS6AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/01 12:09 p.m.238 views

Exploit for Missing Authentication for Critical Function in Cpanel

cPanelSniper CVE-2026-41940 — c...

9.8CVSS5.9AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/01 9:40 a.m.120 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 Detection & Verification !License: MIThttp...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/01 3:25 a.m.112 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 Auto Exploit !Pythonhttps://img.shields.io/...

9.8CVSS5.5AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/05/01 12:17 a.m.180 views

Exploit for Missing Authentication for Critical Function in Cpanel

================================================================...

9.8CVSS5.9AI score0.98527EPSS
SaveExploits76
NCSC
NCSC
added 2026/04/30 8:00 a.m.17 views

Vulnerability handling functions in cPanel and WHM

cPanel has identified a vulnerability in its cPanel and WHM products, including versions after 11.40 and before the specific patched releases. The vulnerability involves an authentication bypass that occurs due to the injection of CRLF characters in session files, allowing attackers to impersonat...

9.8CVSS6AI score0.98527EPSS
SaveExploits76References1
GithubExploit
GithubExploit
added 2026/04/30 5:17 a.m.180 views

Exploit for CVE-2026-41940

cPanel/WHM Auth Bypass Scanner & Exploit Tool A Go command-li...

9.8CVSS6.3AI score0.98527EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2026/04/29 9:16 p.m.125 views

Exploit for CRLF Injection in Useplunk Plunk

CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw...

8.5CVSS5.7AI score0.00194EPSS
SaveExploits2
NVD
NVD
added 2026/04/29 2:16 p.m.13 views

CVE-2026-5140

Improper neutralization of CRLF sequences 'CRLF injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4...

8.8CVSS0.00481EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/29 1:02 p.m.4 views

CVE-2026-5140

Improper neutralization of CRLF sequences 'CRLF injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4...

8.8CVSS5.8AI score0.00481EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/29 1:02 p.m.44 views

CVE-2026-5140 Authorization Bypass in TUBITAK BILGEM's Pardus Update

Improper neutralization of CRLF sequences 'CRLF injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4...

8.8CVSS0.00481EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/29 1:02 p.m.7 views

CVE-2026-5140 Authorization Bypass in TUBITAK BILGEM's Pardus Update

Improper neutralization of CRLF sequences 'CRLF injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows Authentication Bypass. This issue affects Pardus Update: from 0.6.3 before 0.6.4...

8.8CVSS5.8AI score0.00481EPSS
SaveExploits0References2
Metasploit
Metasploit
added 2026/04/28 12:00 a.m.457 views

cPanel/WHM CRLF Injection Authentication Bypass RCE

Exploits CVE-2026-41940, a CRLF injection in cPanel/WHM's cpsrvd daemon that allows unauthenticated remote code execution as root. The Basic-auth handler writes the password to the raw session file without stripping newlines. Omitting the ob-part of the session cookie bypasses the encoder, so...

9.8CVSS9.6AI score0.98527EPSS
SaveExploits76
Snyk
Snyk
added 2026/04/24 7:19 p.m.13 views

CRLF Injection

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to CRLF Injection through the FormDataPart multipart header construction in the form-data streaming helper. An attacker can inject arbitrary multipart headers by supplying a...

6.9CVSS5.7AI score0.00294EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/24 5:58 p.m.13 views

CVE-2026-42037 Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream

Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into the Content-Type header of each multipart part without sanitizing CRLF \r\n sequences. An attacker w...

5.3CVSS6.3AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/24 5:58 p.m.44 views

CVE-2026-42037 Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream

Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.1, the FormDataPart constructor in lib/helpers/formDataToStream.js interpolates value.type directly into the Content-Type header of each multipart part without sanitizing CRLF \r\n sequences. An attacker w...

5.3CVSS0.00294EPSS
SaveExploits1References1
Rows per page
Query Builder