Lucene search
K

1867 matches found

Nuclei
Nuclei
added yesterday62 views

cPanel < 11.109.9999.116 - Cross-Site Scripting

An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. id: CVE-2023-29489 info: name: cPanel 11.109.9999.116 - Cross-Site Scripting author: DhiyaneshDk,0xKayala severity: medium description: | An issue was...

6.1CVSS6.5AI score0.92926EPSS
Exploits7References5
GithubExploit
GithubExploit
added 2026/05/24 11:10 a.m.80 views

Exploit for Missing Authentication for Critical Function in Cpanel

CPANEL CVE EXPLOIT English | فارسی PersianREADME...

9.8CVSS6.2AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/11 3:0 p.m.72 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS6AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/11 7:1 a.m.63 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS6AI score0.90949EPSS
Exploits61
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.5 views

cPanel 安全漏洞

cPanel is a web-based automated hosting platform developed by the cPanel company in the United States. This platform is primarily used for automating the management of websites and servers. cPanel has security vulnerabilities; these vulnerabilities stem from the fact that the chmod calls in...

8.8CVSS6.1AI score0.00053EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/05/04 2:35 p.m.78 views

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-WHM-CVE-2026-41940-AuthBypass CVE-2026-41940: cPanel...

9.8CVSS6.1AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/04 11:25 a.m.70 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS6AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/04 10:6 a.m.91 views

Exploit for Missing Authentication for Critical Function in Cpanel

Sorry Ransomware Analysis CVE-2026-41940 cPanel Campaign Pu...

9.8CVSS6.1AI score0.90949EPSS
Exploits61
Nuclei
Nuclei
added 2026/05/04 4:18 a.m.55 views

cPanel & WHM - Authentication Bypass via Session-File CRLF Injection

cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. id: CVE-2026-41940 info:...

9.8CVSS6AI score0.90949EPSS
Exploits61References5
Packet Storm
Packet Storm
added 2026/05/04 12:0 a.m.53 views

📄 cPanel Authentication Manipulation / Session Injection

This Python script attempts to an authentication bypass against a cPanel login endpoint by crafting a modified login request and manipulating session-related data. Versions after 11.40 are affected...

9.8CVSS6AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/03 8:15 p.m.84 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940-POC cPanel/WHM Authentication Bypass Proof of...

9.8CVSS6AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/03 1:18 p.m.72 views

Exploit for Missing Authentication for Critical Function in Cpanel

POCCVE-2026-41940 Quick start bash python3 pocCVE-202...

9.8CVSS6AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/02 3:31 p.m.73 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS5.8AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/01 4:27 p.m.108 views

Exploit for Missing Authentication for Critical Function in Cpanel

poc...

9.8CVSS5.8AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/01 9:40 a.m.56 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 Detection & Verification !License: MIThttp...

9.8CVSS5.8AI score0.90949EPSS
Exploits61
GithubExploit
GithubExploit
added 2026/05/01 1:34 a.m.57 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 A security research tool for detecting and anal...

9.8CVSS5.8AI score0.90949EPSS
Exploits61
Positive Technologies
Positive Technologies
added 2026/01/30 12:0 a.m.6 views

PT-2026-5405

Name of the Vulnerable Software and Affected Versions AWStats version 8.0 Description AWStats version 8.0 contains a command injection issue due to an unsafe use of the open function in Perl when processing HTTP GET parameters. Specifically, the presence of a pipe symbol '|' within a parameter ca...

7.8CVSS6.4AI score0.0007EPSS
Exploits1References12
RedhatCVE
RedhatCVE
added 2026/01/09 11:14 a.m.8 views

CVE-2016-10799

cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...

5.5CVSS7AI score0.00056EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:35 a.m.5 views

CVE-2017-18475

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...

8.8CVSS6.8AI score0.00574EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:34 a.m.3 views

CVE-2017-18411

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account SEC-285...

6.8CVSS6.8AI score0.00318EPSS
Exploits0References1
Rows per page
Query Builder