cPanel-WHM-CVE-2026-41940-auth-bypass-exploit

CVE-2026-41940 - cPanel & WHM Authentication Bypass Exploit Critical Authentication Bypass via CRLF Injection in cPanel/WHM cpsrvd Daemon 📋 Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM that allows unauthenticated remote attackers to gain root-level...

graph-go

graph-go See your infrastructure. Zero Config. Point graph-go at your stack and get a live, interactive map of every database, table, service, and storage bucket — with real-time health monitoring. ▶ Watch in full quality MP4 graph-go is a CLI-first infrastructure mapper. It auto-discovers your...

armadito-av

Armadito core Armadito is an open-source antivirus. This repository contains Armadito core library, daemon and service. Copyright C Teclib', 2015, 2016 Project home : http://www.teclib-edition.com/teclib-products/armadito-antivirus See Online documentation at :...

duckhunt

DuckHunter Prevent RubberDucky or other keystroke injection attacks Try Out the new setup GUI it helps you to setup the software and we have just released a new feature that allows you to run the script every time your computer starts automatically Read this program's postmortem at myblog Intro...

cloudflared

Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...

CVE-2018-7449

CVE-2018-7449 1. Introduction My tool is written in Python and exploits the CVE-2018-7449 vulnerability to execute a series of commands that will crash the ftp daemon. DISCLAIMER!!! Please note that the use of hacking tools without authorization is illegal and could result in legal problems...

CVE-2026-41651

Pack2TheRoot — CVE-2026-41651 TOCTOU race in PackageKit's transaction handler. Any local unprivileged user can install arbitrary packages as root with no authentication. Overview Field| Value ---|--- CVE| CVE-2026-41651 Component| PackageKit daemon packagekitd Affected versions| 1.0.2 – 1.3.4 Fix...

ndaal_public_auditd

Linux Audit Daemon Auditd Best Practices and Deployment This repository provides comprehensive best practices for Linux Audit Daemon Auditd configuration and deployment, including an extensive set of security-focused audit rules, an Ansible role for automated deployment and the tools that test th...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

Reproducing-ConnMan-1.34

Connection Manager Copyright C 2007-2012 Intel Corporation. All rights reserved. Functionality and features The following features are built-in into Connection Manager: - Generic plugin infrastructure - Device and network abstraction with basic storage support - IPv4, IPv4-LL link-local and DHCP...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] About Honeyd: Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain version...

openvpn

OpenVPN -- A Secure tunneling daemon Copyright C 2002-2026 OpenVPN Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. To get the latest release of OpenVPN, go to:...

CVE-2022-3168-adb-unexpected-reverse-forwards

The reverse tunnel feature in Android Debug Bridge adb was vulnerable as it allowed malicious adb daemons to open connections to arbitrary host/ports and unix domain sockets on the host. Attacker window where the rogue daemon is running: $ ./adbroguedaemon.py Victim window a GCE VM in this exampl...

poc-cpanel-cve-2026-41940

POC cPanel CVE-2026-41940 A high-performance, multi-threaded security auditing tool designed to detect CVE-2026-41940 , a critical Authentication Bypass vulnerability in cPanel & WHM discovered in April 2026. This tool leverages a CRLF Injection technique in HTTP headers to identify if a cPanel...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 OS Command Injection A proof-of-concept exploit OS Command Injection for vulnerability in motionEye, a web frontend for the motion daemon. The vulnerability abuses the imagefilename configuration parameter, which is passed directly to the shell...

POC-CVE-2024-44258-Py

Conceptual PoC CVE-2024-44258: Symlink Vulnerability in iOS Requirement: Python 3.7+ • License: MIT ⚠️ Warning: This repository contains a proof-of-concept PoC developed for exclusively educational and research purposes. It is not a fully functional exploit. Its use on devices without proper...

cve-2024-20017

cve-2024-20017 exploits NOTE: the x8664 exploits are unlikely to work out-of-the-box against a vanilla build of the wapp daemon as they were written against slightly modified versions of the code. Either way, you're probably unlikely to find this daemon running on x8664...

cve-2010-2075-analysis

CVE-2010-2075 – UnrealIRCd Backdoor Remote Code Execution Overview This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1. The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the...

CVE-2026-24061-POC

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication Bypass CVSS Score: 9.8 Critical Overview A vulnerability in GNU inetutils-telnetd allows remote attackers to bypass authentication via the NEWENVIRON telnet option. By sending a crafted USER environment variable containing the value "-f...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...