BinGoo

,--="=--, / ." .-. "./ / ,/ : : /\ \ | /o\ :: /o\ | / -'| :=" "=: | \ / .-"-. \ | / .-"-. .--- --| /,.-'-.,\ |-- ---. /-===- / | / | | | | | | ' | | / \ / | | | | | | | | | | | | | || |/| || | || / / '-----v1--------------By-Hood3dRob1n----' root@kitploit: Bienvenue dans le fichier README de...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 완화 툴킷 CVE-2026-54420 에 대한 방어적 수정, 감사 및 검증 툴킷으로, CloudLinux / CageFS 를 사용하는 공유 호스팅 환경에서 LiteSpeed cPanel 플러그인 에 영향을 미칩니다. ⚠️ 보안 공지 이 저장소는 시스템 관리자, 호스팅 제공자, 방어적 보안 연구 만을 대상으로 합니다. 익스플로잇 코드, 공격 도구 또는 무기화된 개념 증명은 포함되어 있지 않습니다. CVE-2026-54420 정보 CVE-2026-54420는 LiteSpeed cPanel 플러그인 / WH...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

phpMussel

What is phpMussel? An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system...

litespeed-cpanel-cve-2026-54420-fix

CVE-2026-54420 缓解工具包 面向 CVE-2026-54420 的防御性修复、审计和验证工具包，该漏洞影响使用 CloudLinux / CageFS 的共享主机环境中的 LiteSpeed cPanel 插件 。 ⚠️ 安全声明 本仓库仅面向系统管理员、托管服务提供商以及防御性安全研究人员 。 不包含任何利用代码、攻击性工具或武器化概念验证。 关于 CVE-2026-54420 CVE-2026-54420 影响某些版本的 LiteSpeed cPanel 插件 / WHM 插件 ，在共享主机环境中可能导致符号链接处理被滥用。 在易受攻击的配置下，低权限用户（例如通过受感染...

CVE-2017-9798

CVE-2017-9798 Этот небольшой скрипт проверяет среду общего хостинга на наличие уязвимости CVE-2017-9798 и завершается с возвратным кодом 1, если найден уязвимый файл .htaccess...

Shadow-Vault

Shadow Vault 🔐 Shadow Vault — это легковесный PHP-инструмент, предназначенный для системных администраторов , позволяющий безопасно добавлять новые учётные данные пользователей в файлы shadow на серверах общего хостинга. Он автоматически определяет существующий формат срока действия shadow-записе...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

reverseip_py

reverseippy Parser di domini per Reverse IP Lookup di IPAddress.com. Scritto in Python 3. Cos'è il Reverse IP? Il Reverse IP si riferisce al processo di ricerca di tutti i nomi di dominio ospitati su un particolare indirizzo IP. Questo può essere utile per vari motivi, come identificare tutti i...

CVE-2017-9798

Controllo per CVE-2017-9798 Questo piccolo script controlla un ambiente di hosting condiviso per la vulnerabilità CVE-2017-9798 e termina con un codice di ritorno 1 se viene trovato un file .htaccess vulnerabile. Esempio di utilizzo root@kitploit: python check.py --path /var/customers/webs/...

PYSEC-2026-2532 Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath function within jupyterserver/services/contents/fileio.py. The check uses startswithroot without appending a trailing path separator, allowing sibling...

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 18, 2026. The vulnerability in questi...

CVE-2026-54420

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

CVE-2026-54420

CVE-2026-54420 is a symlink-following vulnerability in LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM Plugin before 5.3.2.0). A user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can abuse improperly validated symbolic links to access or ...

CVE-2026-54420

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

EUVD-2026-36657

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

CVE-2026-54420

LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...

PT-2026-49104

Name of the Vulnerable Software and Affected Versions LiteSpeed cPanel plugin versions prior to 2.4.8 LiteSpeed WHM PlugIn versions prior to 5.3.2.0 Description A privilege escalation issue exists where the software mishandles symbolic links symlinks provided by a user with FTP or web shell acces...

CVE-2026-5422

A flaw was found in jupyter-server. This path traversal vulnerability exists due to insufficient validation of file paths, specifically an incorrect root directory boundary check and improper handling of directory traversal sequences. This allows a remote attacker with low privileges to bypass...

EUVD-2026-33905

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath function within jupyterserver/services/contents/fileio.py. The check uses startswithroot without appending a trailing path separator, allowing sibling...