CVE-2025-43919-POC

🚨 CVE-2025-43919: Directory Traversal in GNU Mailman 2.1.39 cPanel/WHM A new vulnerability has been discovered in GNU Mailman 2.1.39, bundled with cPanel/WHM, allowing unauthenticated remote attackers to read arbitrary files on the server via a directory traversal flaw. 📌 Vulnerability Summary:...

xCrack Python Tools For Hackers

TG Download Link: https://t.me/+0z9FapS4mBgyZjhl xCrack Python Hacking Tool for Hackers And Spammers Requirements: Python 3.x Tested On: Python 3.10.4 ► cPanel Section ◄ Mass cPanel Active Checker Mass cPanel To Shell Uploader Mass cPanel To SMTP Cracker Mass cPanel To Webmail Cracker Mass cPanel...

eximrce-CVE-2019-10149

eximrce Simple python socket connection to test if exim is vulnerable to CVE-2019-10149. The payload simply touch a file in /root/lweximtest. Output will be slow depending on server's reply and not knowing how to properly use python's socket module. Would love a lesson on how to speed it up. Only...

CVE-2026-41940

CVE-2026-41940：cPanel/WHM 身份验证绕过（单目标与多目标） 免责声明： 本文档及关联脚本（exploit.py）仅用于教育目的、安全研究和授权渗透测试。请勿将该软件用于您不拥有或未经明确许可测试的系统。 概述 exploit.py 是一个演示 cPanel 与 WHM 中身份验证绕过漏洞（CVE-2026-41940）的脚本。该漏洞允许未认证的攻击者通过 CRLF 注入缺陷，将 root 会话注入守护进程缓存，最终在无需有效凭据的情况下获得 root 级 WHM 访问权限。 漏洞分析与利用流程 该漏洞利用 Basic Authentication 处理机制中的...

watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py

cve-2026-41940 cPanel/WHM 认证绕过 - 检测工件生成器 cPanel/WHM 认证绕过检测工件生成器工具 描述 此检测工件生成器用于验证 cPanel/WHM 是否存在近期披露的认证绕过漏洞。 检测演示 针对存在漏洞的实例进行测试： root@kitploit: python authbypass-RCE.py --target https://target:2087/ / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | ...

CVE-2026-41940-PoC-Exploit

🚀 CVE-2026-41940 - cPanel/WHM Authentication Bypass Exploit cPanel & WHM Edition - CRLF Injection to Authentication Bypass & Full Session Hijacking 📌 Overview This exploit leverages CVE-2026-41940 , a critical authentication bypass vulnerability in cPanel/WHM. By injecting a crafted CRLF payload...

carina

About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...

cpanel_xss_2023

About the Tool ⚒️ cpanelxss2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability and exploitability in cpanel. Features ⚙️ CVE-2023-29489 Scanning: Identifies and scans for the CVE-2023-29489 vulnerability and exploitation. URL Input: Supports scanning a single URL or...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

cpanel-sessionscribe

SessionScribe - CVE-2026-41940 Critical unauthenticated RCE in cPanel & WHM. Four HTTP requests forge a root session via CRLF injection into the password field of a preauth session. No auth, no preconditions, every supported tier affected. Disclosed 2026-04-28 by Sina Kheirkhah / watchTowr Labs...

cpanel2shell-scanner

cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...

CVE-2025-43920

CVE-2025-43920: Command Injection via Email Subject in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43920 Severity: 5.4 Medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Attack Type: Remote Affected Software:...

CVE-2026-41940

🔥 CVE-2026-41940 – Bypass de Autenticación en cPanel y WHM ⚡ Root sin Autenticación – Inyección CRLF en Archivo de Sesión ⚡ “Un solo exploit para dominarlos a todos.” 🧠 El Exploit en Resumen root@kitploit: ┌─────────────────────────────────────────────────────────────┐ │ Etapa 1 ── Generar una...

CVE-2025-48703

🛡️ CVE-2025-48703 - Remote Code Execution RCE in cPanel File Manager 📌 Description CVE-2025-48703 is a Remote Code Execution RCE vulnerability in the filemanager module of a web hosting control panel e.g., cPanel. It occurs due to unsanitized input handling in the acc=changePerm function, which...

CVE-2026-41940

CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...

CVE-2026-41940_exploit

============================================================================= CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Vulnerability: Session-file manipulation through CRLF injection in cpsrvd's HTTP Basic authentication handler CVE: CVE-2026-41940 CVSS: 9.8 Critical CWE: CWE-9...

cpanel-cve-2026-41940

🔒 cPanel CVE-2026-41940 — Complete Security Toolkit Complete Security Toolkit for cPanel servers infected with CVE-2026-41940 / nuclear.x86. Two scripts — one full audit and one auto cleanup with Imunify360. Works on both original license and bypass/shared license servers. 👨‍💻 Author | ---|---...

CVE-2026-54420

CVE-2026-54420 LiteSpeed cPanel ⚡ 简单用法 请仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 获得授权的渗透测试环境 示例配置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Gi...

cpanel-forensics

cPanel/WHM Forensics after CVE-2026-41940 Bash script for checking a server after the CVE-2026-41940 vulnerability CVSS 9.8. For 64 days attackers had root access without a password — the patch does not remove what has already been planted inside. Usage root@kitploit: sudo bash cpanelforensics.sh...

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

CVE-2026-41940 - cPanel & WHM 身份验证绕过漏洞利用工具 cPanel/WHM cpsrvd 守护进程中的 CRLF 注入导致严重身份验证绕过漏洞 📋 概述 CVE-2026-41940 是 cPanel & WHM 中的一个严重身份验证绕过漏洞 ，允许未经身份验证的远程攻击者获得服务器的 root 级管理访问权限 。该漏洞存在于 cpsrvd 守护进程的会话处理逻辑中，具体位于 Cpanel/Session.pm，其中 whostmgrsession cookie 和 Authorization 标头中的行分隔符（CRLF）未被正确中和，从而允许注入会话参数...