cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2025-43919

CVE-2025-43919: Directory Traversal in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43919 Severity: 5.8 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Attack Type: Remote Affected Software: GNU Mailman...

cPanel < 11.109.9999.116 - Cross-Site Scripting

An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. id: CVE-2023-29489 info: name: cPanel 11.109.9999.116 - Cross-Site Scripting author: DhiyaneshDk,0xKayala severity: medium description: | An issue was...

CVE-2023-29489

CVE-2023-29489 Mass Scaning vulnerability in Cpanel XSS KALI LINUX sudo pip install BeautifulSoup sudo pip install shodan sudo pip install pystyle git clone https://github.com/0-d3y/CVE-2023-29489.git cd CVE-2023-29489 python cve202329489.py TERMUX pkg install BeautifulSoup pkg instaal shodan pkg...

xCrack Python Tools For Hackers

TG Download Link: https://t.me/+0z9FapS4mBgyZjhl xCrack Python Hacking Tool for Hackers And Spammers Requirements: Python 3.x Tested On: Python 3.10.4 ► cPanel Section ◄ Mass cPanel Active Checker Mass cPanel To Shell Uploader Mass cPanel To SMTP Cracker Mass cPanel To Webmail Cracker Mass cPanel...

carina

About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...

CVE-2025-43921

CVE-2025-43921: Unauthenticated Mailing List Creation in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43921 Severity: 5.3 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Attack Type: Remote Affected Softwar...

CVE-2025-43920

CVE-2025-43920: Command Injection via Email Subject in GNU Mailman 2.1.39 cPanel/WHM Bundle Discovered by: Firudin Davudzada & Musazada Aydan Disclosure Date: April 2025 CVE ID: CVE-2025-43920 Severity: 5.4 Medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Attack Type: Remote Affected Software:...

CVE-2026-105476

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges...

CVE-2026-105475

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data...

CVE-2026-105475

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data...

EUVD-2026-115630

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data...

CVE-2026-105475

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data...

CVE-2026-105475

The cPanel software is vulnerable to an improper neutralization of a NUL byte (CWE-158). This flaw allows remote attackers to perform unauthorized access to read calendar and contact data from any mail account. The vulnerability is rated as HIGH severity with a CVSS 4.0 base score of 8.7. No spec...

CVE-2026-105476

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges...

CVE-2026-105476

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges...

EUVD-2026-115631

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges...

CVE-2026-105476

A vulnerability in cPanel caused by improper link resolution before file access allows remote authenticated users to write arbitrary root-owned files. This flaw can lead to privilege escalation . No specific software versions or remediation details are provided in the documents; users should moni...

PT-2026-135821

Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges...

CVE-2026-105475: WebPros cPanel: Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…

Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data...