CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit PoC – cPanel & WHM Authentication Bypass Tool by: Ishan Oshada | GitHub ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY. Unauthorized use is illegal. 📋 Table of Contents Vulnerability Overview Exploit Chain Features Installation Quick Start Usage Examples Post-Exploit Actions...

CVE-2026-56705

CVE-2026-56705: Adminer 5.4.3 — Unauthenticated RCE via MSSQL PDO DSN Injection...

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms Fix A drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro ≤ 3.8.1 to mitigate Remote Code Execution CVE-2026-39440, CVSS 9.9. The Vulnerability Field| Value ---|--- CVE ID| CVE-2026-39440 CVSS Score| 9.9 Critical Affected|...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream advisory: sherlock-project/sherlock GHSA advisory NVD...

CVE-2026-5027

CVE-2026-5027 - Langflow Path Traversal to Remote Code Execution Description Langflow versions up to and including 1.8.4 do not sanitize the filename parameter in the POST /api/v2/files endpoint. An attacker can use path traversal sequences ../ to write files to arbitrary locations on the...

cve-2026-64638-banner-poc

CVE-2026-64638 — Universal Banner PoC A single-file, dependency-free PoC generator for the WordPress CVE-2026-64638 reflected HTML-injection on wp-login.php striptags vs. KSES parser differential. It produces a self-submitting trigger page: when the victim opens the file, the page silently POSTs...

CVE-2026-1492

CVE-2026-1492 - WordPress User Registration Plugin Privilege Escalation Exploit Description This repository contains a proof-of-concept exploit for CVE-2026-1492 , a critical vulnerability affecting the WordPress User Registration & Membership plugin. The vulnerability allows unauthenticated...

CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand Blocks Log API Keys in Plaintext CVE ID: CVE-2026-22038 Product: AutoGPT Platform Stagehand integration Affected Versions: All versions up to and including autogpt-platform-beta-v0.6.45 Patched In: autogpt-platform-beta-v0.6.46 Vulnerability Type: CWE-532 —...

CVE-2023-7172

CVE-2023-7172 Overview This project contains a vulnerable version of a Hospital Management System HMS that is susceptible to SQL Injection CVE-2023-7172. SQL Injection is a critical web application vulnerability that can have severe impacts on the security and functionality of a system. CVE Detai...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n RCE Exploit Unauthenticated RCE chain for n8n 1.121.0 CVSS 10.0 Attack Chain 1. CVE-2026-21858 - Content-Type confusion → read /home/node/.n8n/config and database.sqlite 2. Extract encryption key and admin credentials from files 3. Forge admin JWT token 4...

CVE-2026-31281

CVE-2026-31281 Description Totara LMS is vulnerable to HTLM Injection. An attacker can inject malicious HTLM code in a message and send it to all the users in the application, resulting in executing the code and may lead to session hijacking and executing commands on the victim's browser CVSS 3...

CVE-2026-42208-Lab

CVE-2026-42208 — LiteLLM Pre-Auth SQL Injection Timing PoC Local Docker lab and least-harm PoC for CVE-2026-42208, a pre-authentication SQL injection vulnerability in LiteLLM Proxy's API key verification path. This repository demonstrates the difference between a vulnerable LiteLLM instance and a...

CVE-2026-1581-Analysis-Lab

CVE-2026-1581 — wpForo Forum = 2.4.14 Unauthenticated Time‑Based SQL Injection ORDER BY ภาษาไทย Executive Summary...

CVE-2023-51126

CVE-2023-51126 FLIR AX8 up to 1.46.16 is vulnerable to command injection via /usr/www/res.php. VulnerabilityType Other command injection Vendor of Product FLIR Affected Component in /usr/www/res.php. The parameter value can inject the command and exec it. Attack Type Remote Impact Code execution...

CVE-2025-57457

OS Command Injection in CURO UC300 IP Phone An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter. PoC: https://github.com/restdone/CVE-2025-57457/blob/main/oscommandinject.mp4 Step...

CVE-2023-5043

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution 1. Create Ingress can be created without Service and Pod root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-exploit annotations: kubernetes.io/ingress.class: "nginx"...

CVE-2026-24061

CVE-2026-24061 - telnetd auth bypass What it's about Argument injection in telnetd from GNU InetUtils. Versions 1.9.3 to 2.7. CVSS 9.8. On the CISA KEV list since 26.01.2026, meaning it's actively exploited in the wild. The whole trick is that telnetd takes the value of the USER environment...

CVE-2026-40175-poc

CVE-2026-40175 — Axios CRLF Injection / HTTP Request Smuggling PoC Overview A CRLF injection vulnerability caused by AxiosHeaders.set in the Axios HTTP client =1.0.0 1.15.0, 0.31.0 failing to validate \r\n within header values. An attacker can chain this with Prototype Pollution lodash, qs, etc. ...

CVE-2026-20841

CVE-2026-20841 This content corresponds to a part of what is provided through the Monthly Report for PatchPoint subscribers. Overview Microsoft disclosed a patch for an RCE vulnerability in Notepad in February 2026. The vulnerability is a Command Injection vulnerability that occurs in Notepad,...

CVE-2026-22738-POC

CVE-2026-22738 — SpEL Injection RCE in Spring AI SimpleVectorStore Unauthenticated remote code execution via Spring Expression Language SpEL injection in SimpleVectorStore.similaritySearch. Affected Versions | Flag | Default | Description | |---|---|---| | --target | http://localhost:8082 | Base...