POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauth RCE rewrite Python exploit for the unauthenticated Lua-injection RCE in Wing FTP Server ≤ 7.4.3. Designed for shell delivery — one command from check to a working netcat callback. Written some time ago for wingData lab on HTB and open-sourced now. Use only...

CVE-2026-41940-analysis

CVE-2026-41940 — cPanel & WHM Pre-Authentication Root Bypass via Session-File CRLF Injection A Defender-Focused Technical Deep Dive 1. Executive Summary Field| Value ---|--- CVE ID| CVE-2026-41940 CVSS v3.1| 9.8 Critical — Network / Low Complexity / No Privileges / No User Interaction...

CVE-2026-41940_exploit

============================================================================= CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Vulnerability: Session-file manipulation through CRLF injection in cpsrvd's HTTP Basic authentication handler CVE: CVE-2026-41940 CVSS: 9.8 Critical CWE: CWE-9...

CVE-2018-12613

CVE-2018-12613 Local file inclusion bug due to filter bypass using %253f character. Software Affected 1. PHPMyAdmin v.4.8.0 2. PHPMyAdmin v.4.8.1 How to use This PowerShell scripts need three parameters to craft a exploit HTTP request: 1. PHPMyAdmin URL endpoint 2. Cookies for an authenticated us...

CVE-2025-24813

CVE-2025-24813 Tomcat PoC PoC for an authorized CTF/lab environment. It exploits CVE-2025-24813 via partial PUT write of a Tomcat session file, then triggers deserialization with JSESSIONID. Prerequisites Python 3 Python requests module Java JDK java and javac The included...

CVE-2025-24813

CVE-2025-24813 Proof of Concept PoC script for CVE-2025-24813, vulnerability in Apache Tomcat. The script has been modified based on the related link and tailored to my needs. Setup Vulnerable Tomcat Environment Given environment based on the official Tomcat 9.0.90 image. It removes the server's...

CVE-2025-24813-Apache-Tomcat-RCE-PoC

CVE-2025-24813 Apache Tomcat RCE PoC Description This is a Proof of Concept PoC for CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability arises from unsafe deserialization of crafted session files uploaded via HTTP PUT requests, allowing attackers to execu...

PoC_CVE-2020-9484

This repository contains a proof of concept exploit for CVE-2020-9484, along with an example web server that is vulnerable to this exploit. Prerequisites for this vulnerability to be exploitable Affected tomcat versions are: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x...

CVE-2026-41940

🔥 CVE-2026-41940 – Обход аутентификации cPanel и WHM ⚡ Неаутентифицированный root – CRLF-инъекция в session-файл ⚡ «Одна цепочка, чтобы править всеми». 🧠 Суть эксплойта в двух словах ┌─────────────────────────────────────────────────────────────┐ │ Этап 1 ── Создание pre‑auth cookie сессии │ │ Эт...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server whoami root References CVE-2025-47812 W...

Automated-scanner-CVE-2026-41940

CPANEL CVE EXPLOIT English | فارسی Persian ██████╗██████╗ █████╗ ███╗ ██╗███████╗██╗ ██╔════╝██╔══██╗██╔══██╗████╗ ██║██╔════╝██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██║╚██╗██║██╔══╝ ██║ ╚██████╗██║ ██║ ██║██║ ╚████║███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═╝╚═╝...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 이 저장소는 취약점 스캐너 nuclei를 사용하여 서비스가 CVE-2025-24813에 취약할 가능성이 있는지 서버를 방해하거나 어떠한 형태의 손상도 일으키지 않고 스캔하기 위한 yaml-template을 포함하고 있습니다. CVE-2025-24813 CVE-2025-24813은 Apache Tomcat 웹서버 버전 9.0.0-9.0.98, 10.1.0-10.1.34 및 11.0.0-11.0.2에 존재하는 취약점입니다. 이는 서버가 partial PUT을 통한 쓰기 접근을 허용하도록 구성...

cPanelSniper

cPanelSniper CVE-2026-41940 — Обход аутентификации cPanel & WHM через CRLF-инъекцию в файл сессии Цепочка эксплойта из 4 этапов · Интерактивная WHM-оболочка · Массовый сканер · Готовность к пайплайнам · Только stdlib Обзор cPanelSniper — это специализированный фреймворк для эксплуатации...

cPanelSniper

cPanelSniper CVE-2026-41940 — Обход аутентификации cPanel & WHM через CRLF-инъекцию в файл сессии Цепочка эксплойта из 4 этапов · Интерактивная WHM-оболочка · Массовый сканер · Готовность к пайплайнам · Только stdlib Обзор cPanelSniper — это специализированный фреймворк для эксплуатации...

CVE-2026-41940-AuthBypass-Detector

Обнаружение и проверка CVE-2026-41940 Обзор Этот инструмент обнаруживает экземпляры cPanel/WHM, уязвимые к CVE-2026-41940 , критическому обходу аутентификации, обнаруженному watchTowr Labs. Уязвимость позволяет неаутентифицированному злоумышленнику получить root-доступ к WHM через CRLF-инъекцию в...

cpanel-pwn

cpanel-pwn Набор инструментов для тестирования безопасности cPanel/WHM. Реализует обход аутентификации через CRLF-инъекцию CVE-2026-41940 и пост-эксплуатационное повышение привилегий. Инструменты Скрипт| Назначение ---|--- cpanelexploit.py| CVE-2026-41940: CRLF-инъекция → обход аутентификации WHM...

cpanelCVE-2026-41940

🔴 cPanelCVE CVE-2026-41940 — cPanel & WHM Authentication Bypass CVSS 10.0 Critical · Confirmed In‑The‑Wild · Auto Root Login 📖 Overview cPanelCVE is a proof‑of‑concept exploit for CVE-2026-41940, a critical session‑file CRLF injection vulnerability in cPanel & WHM that allows complete root...

cpsniper

cPanelSniper CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection 4-stage exploit chain · Interactive WHM Shell · TRUE STABLE for 10M+ targets · Zero memory usage · stdlib only Overview cPanelSniper is a focused exploitation framework for CVE-2026-41940 , a critical...