003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

crlfmap

CRLFMap CRLFMap is a tool to find HTTP Splitting vulnerabilities Why? I wanted to write a tool in Golang for concurrency I wanted to be able to fuzz both parameters and paths Installation root@kitploit: go get github.com/ryandamour/crlfmap Help root@kitploit: Available Commands: help Help about a...

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Critical Authentication Bypass via CRLF Injection in cPanel/WHM cpsrvd Daemon 📋 Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated remote attackers to gain root-level...

CVE-2026-66753-HTTP-Header-Injection-via-Unvalidated-CR-and-LF-in-Header-Values-tiny_http-

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values tinyhttp Assigned CVE ID: CVE-2026-66753 Summary tinyhttp does not reject carriage return or line feed inside HTTP header values, in either direction. On the request side, readnextline ends a header line only on...

CVE-2026-41940

CVE-2026-41940 — Omisión de Autenticación en cPanel/WHM Autor: Dr.Anach | Contacto: @dranach | Licencia: MIT Resumen Inyección CRLF en el manejador de autenticación Basic de cpsrvd → acceso no autenticado a la API de WHM → Ejecución Remota de Código como root. Todos los cPanel desde v11.40...

CVE-2024-40324

CVE-2024-40324 Description A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation. Vulnerability Type CRLF Vendor of Product E-Staff Affected Product Cod...

CVE-2026-41940-Exploit-PoC

🛡️ CVE-2026-41940-Exploit-PoC - Test your cPanel server security easily This software provides a proof-of-concept tool to check systems for the CVE-2026-41940 vulnerability. This vulnerability affects cPanel and WHM installations. It allows bypass of authentication mechanisms through CRLF...

CVE-2026-24061-PoC-Exploit

🚀 CVE-2026-24061 - GNU inetutils-telnetd Authentication Bypass Exploit GNU inetutils-telnetd Edition - CRLF Injection to Authentication Bypass & Instant Root Shell 📌 Overview This exploit leverages CVE-2026-24061 , a critical remote authentication bypass vulnerability in GNU inetutils-telnetd. By...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values rouille Assigned CVE ID: CVE-2026-66746 Summary rouille writes response header values to the client without checking them for carriage return or line feed. An application that places attacker-influenced text into a...

CVE-2026-82854

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

CVE-2026-82854

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail(), the value is concatenated into the MAIL FROM command without sanitiza...

CVE-2026-82854 Nodemailer before 8.0.3 SMTP Command Injection via envelope.size

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

EUVD-2026-68442

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

EUVD-2026-68441

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...

CVE-2026-82853 Nodemailer before 8.0.5 SMTP Command Injection via CRLF

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...

CVE-2026-82853

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed (CRLF) characters, enabling attackers with elev...

EUVD-2026-68439

Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list..comment parameters can inject CRLF sequences to create additional headers in generated RFC822...

CVE-2026-82661

Nodemailer before 8.0.9 fails to sanitize CRLF (carriage return/line feed) characters in list.*.comment fields, enabling attackers who control these parameters to inject arbitrary message headers into generated RFC 822 messages. This can alter mail client behavior and message semantics . The vuln...

CVE-2026-41940

CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...

CVE-2026-41940

CVE-2026-41940 - cPanel/WHM Authentication Bypass This repository contains an English, redacted write-up and a Go-based verification tool for CVE-2026-41940, a cPanel/WHM authentication bypass caused by CRLF injection in Basic Authentication handling. All live target lists, asset exports, scan...