Lucene search
+L

3421 matches found

GithubExploit
GithubExploit
added 2026/05/02 3:31 p.m.116 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS5.8AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/02 10:00 a.m.119 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 - cPanel & WHM Authentication Bypass Proof of C...

9.8CVSS5.9AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 7:06 p.m.142 views

Exploit for Missing Authentication for Critical Function in Cpanel

cve-2026-41940-exploit Cpanel Au...

9.8CVSS5.8AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 4:27 p.m.171 views

Exploit for Missing Authentication for Critical Function in Cpanel

poc...

9.8CVSS5.8AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 3:43 p.m.111 views

Exploit for Missing Authentication for Critical Function in Cpanel

markdown CVE-2026-41940 - WHM/cPanel Authentication Bypass...

9.8CVSS5.8AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 11:27 a.m.101 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS6AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 7:27 a.m.158 views

Exploit for Missing Authentication for Critical Function in Cpanel

🔒 cPanel CVE-2026-41940 / nuclear.x86 Security Audit & Cleanup...

9.8CVSS6AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 1:34 a.m.117 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 A security research tool for detecting and anal...

9.8CVSS5.8AI score0.9811EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 12:17 a.m.178 views

Exploit for Missing Authentication for Critical Function in Cpanel

================================================================...

9.8CVSS5.9AI score0.9811EPSS
SaveExploits74
Github Security Blog
Github Security Blog
added 2026/04/30 6:30 a.m.16 views

django-mdeditor is Missing Authentication for Critical Function

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

9.8CVSS6.3AI score0.00308EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/04/30 6:30 a.m.7 views

GHSA-QP2C-XQV6-PHH6 django-mdeditor is Missing Authentication for Critical Function

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

7.1CVSS6.3AI score0.00308EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/04/30 5:00 a.m.11 views

EUVD-2025-209593

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

7.1CVSS6.3AI score0.00308EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/30 5:00 a.m.22 views

CVE-2025-13030

CVE-2025-13030 affects the django-mdeditor package. All versions are vulnerable to Missing Authentication for Critical Function in the image upload endpoint, allowing an attacker to upload malicious files and achieve arbitrary code execution due to lack of authentication and improper sanitisation...

9.8CVSS6.3AI score0.00308EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:00 a.m.31 views

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

7.1CVSS6.3AI score0.00308EPSS
SaveExploits0References6
OSV
OSV
added 2026/04/30 5:00 a.m.12 views

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

5.1CVSS6.6AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/30 12:00 a.m.13 views

PT-2026-36039

Name of the Vulnerable Software and Affected Versions django-mdeditor affected versions not specified Description The image upload endpoint lacks authentication protection and proper sanitization of file names. This allows an attacker to upload malicious files and achieve arbitrary code execution...

9.8CVSS6AI score0.00308EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
added 2026/04/29 12:00 a.m.14 views

Juniper Junos OS Vulnerability (JSA79188)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79188 advisory. - A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows...

6.3CVSS5.7AI score0.00438EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/28 10:46 p.m.7 views

Missing Authentication for Critical Function

Overview github.com/coredns/coredns/core/dnsserver is a package that implements all the interfaces from Caddy, so that CoreDNS can be a servertype plugin. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the tsig plugin on non-plain-DNS...

8.7CVSS5.8AI score0.00374EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/28 5:34 p.m.35 views

CVE-2026-3893 Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials...

9.4CVSS0.00373EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/28 5:34 p.m.30 views

CVE-2026-3893

The CVE-2026-3893 affects the Carlson VASCO-B GNSS Receiver. The connected PT-Security entry indicates attackers can exploit the absence of authentication to gain unauthenticated remote access, escalate privileges, and move laterally within manufacturing networks, enabling modification of configu...

9.4CVSS5.2AI score0.00373EPSS
SaveExploits0References3
Rows per page
Query Builder