2026-41940-poc

CVE-2026-41940 - cPanel/WHM 身份验证绕过 CVSS 9.8 | 通过 CRLF 注入实现未认证的 root 访问 使用方法 python3 cp.py -t cpanel.target.com 检测 python3 cp.py -t cpanel.target.com --exploit 利用 @nickpaulsec...

CVE-2026-Mastodon-Streaming-CRLF-Injection

CVE-2026-XXXXX: Mastodon Streaming Server — HTTP 响应头注入（CRLF 注入） 漏洞概览...

CVE-2026-34975

CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw MIME construction Severity : High CVSS 8.5 CWE : CWE-93 — Improper Neutralization of CRLF Sequences 'CRLF Injection' Affected : useplunk/plunk = 0.7.1 Fixed in : 0.8.0 Advisory : GHSA-2mvm-rg5v-7hfq NVD :...

cve-2026-41940-PoC

CVE-2026-41940 ⚠ 本工具仅用于教育或漏洞赏金目的。严禁在受控环境之外进行未经授权的使用。 描述 该工具用于利用 CVE-2026-41940，这是 cPanel 与 WHM 中的一个严重身份验证绕过漏洞（CVSS 10.0），允许未认证攻击者通过 Authorization 标头向服务端会话文件注入 CRLF 序列，从而获得根级 WHM 访问权限——无需任何凭据。 工作原理 从总体上看，CVE-2026-41940 的利用源于 cPanel/WHM...

CVE-2026-41940

CVE-2026-41940 — cPanel/WHM 认证绕过 作者: Dr.Anach | 联系方式: @dranach | 许可证: MIT 概述 cpsrvd Basic 认证处理器中的 CRLF 注入 → 未认证的 WHM API 访问 → 以 root 身份远程执行代码。影响所有自 v11.40 以来的 cPanel 版本。 攻击链 | 步骤| 请求 ---|---|--- 1| 创建会话| GET /login/?user=root 2| CRLF 注入| Authorization: Basic — 密码携带 \r\n 载荷 3| 缓存提升| GET...

audit-axios

audit-axios 扫描本地仓库中易受攻击的 axios 版本，并以交互方式修补。 针对 CVE-2026-40175 — CRLF 头注入，可导致请求走私与 SSRF。CVSS 9.9，影响所有 axios 1.15.0 版本。 快速开始 root@kitploit: npx audit-axios /Workspace /Projects 用法 root@kitploit: 交互式 — 复选框选择 + 批量操作 audit-axios /Workspace /Projects 仅扫描（适合 CI，存在漏洞时退出码为 1） audit-axios --scan-only...

CVE-2026-41940

CVE-2026-41940 – cPanel/WHM 认证绕过 + Root 密码修改器 此脚本利用 cPanel/WHM 上的认证绕过漏洞（CVE-2026-41940），通过 CRLF 注入技术伪造管理员会话。成功利用后，脚本可在 WHM 中修改 root 用户的密码，并通过 Telegram 发送通知。 警告：仅用于对您拥有或已获得书面授权的系统进行安全测试。滥用此脚本进行非法访问违反法律。 📦 安装依赖（PIP） 此脚本需要 Python 3.6+ 和两个外部库。运行以下命令： pip install requests urllib3 requests – 用于发送灵活的 HT...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940：cPanel/WHM 身份验证绕过分析 漏洞概述 CVE-2026-41940 是 cPanel 与 WHM 中的一个严重身份验证绕过漏洞，影响所有当前受支持的版本。该漏洞允许未经身份验证的攻击者绕过身份验证，并获得 root 级访问权限（WHM）或用户级访问权限（cPanel）。 技术根本原因 该漏洞源于 Cpanel/Session.pm 中的两个主要问题： 1. saveSession 中的 CRLF 注入：saveSession 函数在将输入写入磁盘上的会话文件之前，未对其进行适当的清理。具体来说，它未能从 pass 字段中去除换行符（\n）。 2...

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

CVE-2026-41940 - Exploit de bypass de autenticación en cPanel y WHM Bypass crítico de autenticación mediante inyección CRLF en el daemon cpsrvd de cPanel/WHM 📋 Overview CVE-2026-41940 es una vulnerabilidad crítica de bypass de autenticación en cPanel y WHM que permite a atacantes remotos no...

CVE-2026-41940-POC

CVE-2026-41940 – PoC de Bypass de Autenticación en cPanel/WHM Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2026-41940, que demuestra un bypass de autenticación en múltiples pasos en cPanel/WHM mediante inyección CRLF y envenenamiento de sesión. Aviso legal: Este código ...

EUVD-2026-69701

Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections...

CakePHP: SmtpTransport vulnerable to CRLF header injection

Impact Custom mail headers added with Message::setHeaders or addHeaders do not have CRLF replaced allowing header injection if user controlled data is added to message headers without stripping CRLF bytes. Patches 5.3.7, 5.2.14, 5.1.9, 4.6.5, 4.5.12 contain fixes for this issue. Workarounds You c...

EUVD-2026-65123

CakePHP: SmtpTransport vulnerable to CRLF header injection...

HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers

Summary HTTPX2 serializes the per-file Content-Type and custom headers supplied through the files= tuple API directly into the multipart/form-data body without validating custom header names or values. An attacker who can influence upload metadata passed to HTTPX2 can use CR or LF characters to...

GHSA-H4X7-GW46-3WM6 HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers

Summary HTTPX2 serializes the per-file Content-Type and custom headers supplied through the files= tuple API directly into the multipart/form-data body without validating custom header names or values. An attacker who can influence upload metadata passed to HTTPX2 can use CR or LF characters to...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.324 Vulnerability Details CVEID:CVE-2025-11468 DESCRIPTION: When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis...

EulerOS 2.0 SP12 : perl-HTTP-Tiny (EulerOS-SA-2026-3369)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx...

EUVD-2026-72090

The JetFormBuilder WordPress plugin before 3.6.5.2 does not validate or strip line breaks from address values it sources from submitted form fields before adding them to the headers of the e-mails it sends, allowing unauthenticated users to inject arbitrary e-mail headers, add hidden recipients a...

OESA-2026-3668 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior ...

OESA-2026-3665 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior ...