challack

Código de prueba de concepto para CVE-2016-5696 Este código permite actualmente restablecer conexiones o inyectar datos en sesiones. El ataque está implementado tanto contra clientes como contra servidores. Para información detallada, consulte la publicación original: Explotaciones TCP fuera de...

CVE-2025-32432

CraftCMS CVE-2025-32432 漏洞利用工具集 基于SensePost研究的CraftCMS远程代码执行漏洞利用工具。 📁 文件说明 🎯 主要工具 1. finalpoc.py - 最终优化的POC 支持信息泄露和远程代码执行 自动asset ID发现 多种session注入方法 详细的调试模式 2. test.py - 基于原始SensePost文章的简化版本 包含自动asset ID获取功能 使用yii\rbac\PhpManager方法 3. automatedtesting.py - 自动化测试框架 并发测试多个目标 详细的测试报告 JSON结果输出 📋...

CVE-2026-41940

CVE-2026-41940：cPanel/WHM 认证绕过（单目标与多目标） 免责声明： 本文档及关联脚本 exploit.py 仅供教育目的、安全研究和授权的渗透测试使用。请勿将此软件用于您不拥有或未经明确许可测试的系统。 概述 exploit.py 是一个演示 cPanel & WHM 中认证绕过漏洞（CVE-2026-41940）的脚本。该漏洞允许未经认证的攻击者通过 CRLF 注入漏洞将 root 会话注入守护进程缓存，最终无需有效凭据即可获得 root 级别的 WHM 访问权限。 漏洞分析与利用流程 该漏洞利用基本认证处理机制中的...

CVE-2019-11043

CVE-2019-11043 0th3rs 安全团队 ====================== 在 PHP 7.1.x 低于 7.1.33、7.2.x 低于 7.2.24 以及 7.3.x 低于 7.3.11 的版本中 已在 PHP 7.2.20/7.3.10 下测试 使用说明 1、较为稳定,只要爆破出query长度和Header头字段长度 2、autosession检测漏洞存在性 3、实现判断目标worker进程数实现健壮性 4、全worker进程污染 Nginx 配置 location ^/.php/|$ fastcgisplitpathinfo ^.+?.php/.$;...

cPanel-WHM-AuthBypass-Session-Checker

Herramienta de Validación de Sesión CVE-2026-41940 Una herramienta complementaria para el exploit de omisión de autenticación CVE-2026-41940 de watchTowr. Después de ejecutar el exploit principal contra un objetivo cPanel/WHM, este script valida si la sesión inyectada realmente otorga acceso...

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

CVE-2026-41940 - Exploit de bypass de autenticación en cPanel y WHM Bypass crítico de autenticación mediante inyección CRLF en el daemon cpsrvd de cPanel/WHM 📋 Overview CVE-2026-41940 es una vulnerabilidad crítica de bypass de autenticación en cPanel y WHM que permite a atacantes remotos no...

Siemens Teamcenter

SUMMARY A reflected cross site scripting vulnerability in the authentication redirect flow /auth/ of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation may enable the attacker to read...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

CVE-2026-47363

The Datadog Android application versions prior to v541-5.9.2 are vulnerable to an account-confusion issue. The exported launcher activity, AppActivity , accepts an attacker-supplied session (including OAuth tokens ) via Intent extras without a permission guard. Because the app fails to validate t...

CVE-2026-47363

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

PT-2026-69091

Name of the Vulnerable Software and Affected Versions Datadog Android application versions prior to 5.9.2 Description The launcher activity AppActivity is declared as exported with launchMode="singleTask" and lacks a permission guard. The application invokes Intent.getUserSession during onCreate...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager: established connections are resolved by a two-byte local connection handle without verifying the datagram source against the registered remote address. An on-path attacker observi...

PYSEC-2026-3600 Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query injection)

Summary The terminal proxy in backend/openwebui/routers/terminals.py forwards the Open WebUI user's identity to the upstream terminal server / backend coordinator as an authorization claim, with no cryptographic binding to the session that produced it. The forwarded identity is...

CVE-2026-54364

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...

CVE-2026-54364 CentreStack < 17.4 Session Injection via SelectProvider.aspx

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...

CVE-2026-54364

CentreStack

CVE-2026-54364 CentreStack < 17.4 Session Injection via SelectProvider.aspx

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...

EUVD-2026-51100

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...

PT-2026-66465

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...