CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit POC 1. Esegui lo script di exploit e specifica il target root@kitploit: python3 exploit.py --target https://example.com:2087/ 2. Cattura la sessione e riproducila in Burp Suite Copia il valore whostmgrsession generato dallo script Apri l'URL del target nel browser di Burp...

tool-29489

Tool-29489 Panoramica 🔍: Questo strumento viene utilizzato per identificare URL con la vulnerabilità CVE-2023-29489. Lo strumento utilizza payload per identificare il bug. Menu di aiuto di tool-29489: python main.py help URL inputfile outputfile -h o --help : Per visualizzare le opzioni di aiuto...

CPANEL-CVE-2026-41940

CVE-2026-41940 — cPanel/WHM Bypass dell'Autenticazione Autore: SilySec Ricerca originale: Sina Kheirkhah @SinSinology / watchTowr Labs Gravità: Critica CVSS 9.8 Tipo: Iniezione CRLF → Bypass dell'autenticazione → Shell root Descrizione CVE-2026-41940 è una vulnerabilità critica in cPanel/WHM che...

cgiemail-exploit

Cgiemail - استغلال كشف الكود المصدري/تضمين الملفات المحلي cgiecho هو سكربت مضمّن مع cgiemail، سيعيد أي ملف ضمن جذر مستندات موقع الويب إذا كان الملف يحتوي على أقواس مربعة وكان النص داخل الأقواس قابلاً للتخمين. cgiemail يُشحن حاليًا مع cPanel وهو مفعّل افتراضيًا. مثال للصفحة: root@kitploit: Success...

PT-2026-82649

Name of the Vulnerable Software and Affected Versions cPanel & WHM versions prior to 11.110.0.141 cPanel & WHM versions prior to 11.134.0.53 cPanel & WHM versions prior to 11.136.0.37 cPanel & WHM versions prior to 11.138.0.2 WP Squared versions prior to 11.138.1.7 Description An eval injection a...

ROOT-OS-DEBIAN-11-CVE-2022-48623 CVE-2022-48623 in libcpanel-json-xs-perl - Patched by Root

Root has patched CVE-2022-48623 in the libcpanel-json-xs-perl package for Root:Debian:11. Multiple fixed versions available...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

CVE-2026-58047

HTTP Smuggling in cPanel allows potential leak of credentials...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58047

HTTP Smuggling in cPanel allows potential leak of credentials...

CVE-2026-58047

Technical details (affected product/version, root cause, exploitability) are not publicly provided in the supplied documents. Monitor for updates from CVE sources to obtain concrete impact, remediation, and affected configurations.

EUVD-2026-51572

HTTP Smuggling in cPanel allows potential leak of credentials...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58048

CVE-2026-58048 affects cPanel: during database rename operations the SQL mode is not properly preserved, allowing execution of SQL in the root context. The underlying issue is described as improper preservation of SQL mode when renaming databases, which can enable privilege escalation on privileg...

CVE-2026-58048

Improper preservation of SQL mode when renaming databases in cPanel allows execution of SQL in root context...

CVE-2026-58047

HTTP Smuggling in cPanel allows potential leak of credentials...

CVE-2026-58047

HTTP Smuggling in cPanel allows potential leak of credentials...

PT-2026-66785

Name of the Vulnerable Software and Affected Versions cPanel affected versions not specified Description Improper preservation of SQL mode when renaming databases allows the execution of SQL commands in root context. Recommendations At the moment, there is no information about a newer version tha...