cpanel-xss-177

xss - cpanelCVE-2023-29489 cPanel versions 11.102.0.x 11.102.0.31 / 11.106.0.x 11.106.0.x / 11.108.0.x 11.108.0.13 / 11.109.9999.x 11.109.9999.116 are vulnerable to Reflected Cross-Site Scripting via a specially crafted request to the web call ID when displayed on the error page for cpsrvd. How t...

poc-cpanel-cve-2026-41940

POC cPanel CVE-2026-41940 A high-performance, multi-threaded security auditing tool designed to detect CVE-2026-41940 , a critical Authentication Bypass vulnerability in cPanel & WHM discovered in April 2026. This tool leverages a CRLF Injection technique in HTTP headers to identify if a cPanel...

tool-29489

Tool-29489 Overview 🔍: This tool is used to identify URLs with CVE-2023-29489 vulnerability. The tool uses payloads to identify the bug. Help menu of tool-29489: python main.py help URL inputfile outputfile -h or --help : To display help options. -u or --url : To input URL to check. -i or --input...

CPANEL-CVE-2026-41940

CVE-2026-41940 — cPanel/WHM Authentication Bypass Author: SilySec Original research: Sina Kheirkhah @SinSinology / watchTowr Labs Severity: Critical CVSS 9.8 Type: CRLF Injection → Authentication Bypass → Root shell Description CVE-2026-41940 is a critical vulnerability in cPanel/WHM that allows ...

cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Critical Authentication Bypass via CRLF Injection in cPanel/WHM cpsrvd Daemon 📋 Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated remote attackers to gain root-level...

CVE-2026-41940

CVE-2026-41940 — Omisión de Autenticación en cPanel/WHM Autor: Dr.Anach | Contacto: @dranach | Licencia: MIT Resumen Inyección CRLF en el manejador de autenticación Basic de cpsrvd → acceso no autenticado a la API de WHM → Ejecución Remota de Código como root. Todos los cPanel desde v11.40...

CVE-2026-41940-analysis

CVE-2026-41940 — cPanel & WHM Pre-Authentication Root Bypass via Session-File CRLF Injection A Defender-Focused Technical Deep Dive 1. Executive Summary Field| Value ---|--- CVE ID| CVE-2026-41940 CVSS v3.1| 9.8 Critical — Network / Low Complexity / No Privileges / No User Interaction...

CVE-2026-41940_exploit

============================================================================= CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Vulnerability: Session-file manipulation through CRLF injection in cpsrvd's HTTP Basic authentication handler CVE: CVE-2026-41940 CVSS: 9.8 Critical CWE: CWE-9...

CVE-2023-29489

Introducción Se ha descubierto una vulnerabilidad de Cross-Site Scripting XSS reflejado explotable en ciertas versiones de cPanel, a la que se le asignó el CVE-2023-29489. Esta vulnerabilidad permite a los atacantes ejecutar código JavaScript arbitrario sin requerir autenticación. La vulnerabilid...

cPanel - CRLF Injection

ExploitTitle: cPanel 11.40 - CRLF Injection Author: nu11secur1tyAI Date: 2026-04-30 Vendor: cPanel, L.L.C. Software: cPanel & WHM cpsrvd Reference: CVE-2026-41940 / watchTowr-2026-01 Description: A critical authentication bypass vulnerability exists in the cPanel/WHM cpsrvd daemon due to improper...

📄 CPanel/WHM CRLF Injection / Authentication Bypass / Remote Code Execution

This Metasploit module exploits CVE-2026-41940, a CRLF injection in cPanel/WHMs cpsrvd daemon that allows unauthenticated remote code execution as root. The Basic-auth handler writes the password to the raw session file without stripping newlines. Omitting the ob-part of the session cookie bypass...

Exploit for Missing Authentication for Critical Function in Cpanel

================================================================...

cPanel/WHM CRLF Injection Authentication Bypass RCE

Exploits CVE-2026-41940, a CRLF injection in cPanel/WHM's cpsrvd daemon that allows unauthenticated remote code execution as root. The Basic-auth handler writes the password to the raw session file without stripping newlines. Omitting the ob-part of the session cookie bypasses the encoder, so...

CVE-2016-10789

cPanel before 60.0.25 allows code execution via the cpsrvd 403 error response handler SEC-191...

EUVD-2016-1783

Malware in sbrugna...

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489: Improper Neutralization of Input During Web Page Generation

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

CVE-2023-29489

CVE-2023-29489 affects cPanel before 11.109.9999.116, with XSS on the cpsrvd error page triggered by an invalid webcall ID (SEC-669). Impact is browser-execution of malicious scripts, as described, with the vulnerability graded as MEDIUM (CVSS v3.1). Affected fixed versions are 11.109.9999.116, 1...

PT-2023-2904

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 11.109.9999.116 cPanel versions prior to 11.108.0.13 cPanel versions prior to 11.106.0.18 cPanel versions prior to 11.102.0.31 Description: A reflected Cross-Site Scripting XSS vulnerability was discovered in cPanel...

cPanel Remote Code Execution Vulnerability (CNVD-2020-18555)

cPanel is a set of Web-based host control management system of the U.S. cPanel. A remote code execution vulnerability exists in cPanel versions prior to 84.0.20. The vulnerability can be exploited to achieve remote code execution via the cpsrvd rsync shell using a demo account...