Lucene search
+L

577 matches found

GithubExploit
GithubExploit
added 2026/05/07 4:17 p.m.110 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 | cPanel/WHM Authentication Bypass Detection...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/05 10:06 p.m.115 views

Exploit for Missing Authentication for Critical Function in Cpanel

cpanel-pwn cPanel/WHM security testing toolkit. Implements th...

9.8CVSS6AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/05 8:02 p.m.142 views

cPanelSniper-

cPanelSniper CVE-2026-41940 — c...

9.8CVSS6.2AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/04 11:19 a.m.113 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 cPanel & WHM Verification Tool This repository...

9.8CVSS6.1AI score0.98527EPSS
SaveExploits74
Nuclei
Nuclei
added 2026/05/04 4:18 a.m.101 views

cPanel & WHM - Authentication Bypass via Session-File CRLF Injection

cPanel and WHM versions prior to 11.110.0.97, 11.118.0.63, 11.126.0.54, 11.132.0.29, 11.134.0.20, and 11.136.0.5 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. id: CVE-2026-41940 info:...

9.8CVSS6AI score0.98527EPSS
SaveExploits74References5
GithubExploit
GithubExploit
added 2026/05/02 1:51 a.m.124 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 – cPanel/WHM Auth Bypass + Root Password Changer...

9.8CVSS6AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 3:43 p.m.112 views

Exploit for Missing Authentication for Critical Function in Cpanel

markdown CVE-2026-41940 - WHM/cPanel Authentication Bypass...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 2:57 p.m.188 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940: cPanel/WHM Authentication Bypass Disclaim...

9.8CVSS6AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 12:09 p.m.237 views

Exploit for Missing Authentication for Critical Function in Cpanel

cPanelSniper CVE-2026-41940 — c...

9.8CVSS5.9AI score0.98527EPSS
SaveExploits74
Malwarebytes
Malwarebytes
added 2026/05/01 10:48 a.m.20 views

Actively exploited cPanel bug exposes millions of websites to takeover

Security researchers are warning about a newly discovered vulnerability in the widely used web server management software cPanel and WebHost Manager WHM. This is a critical, actively exploited authentication-bypass bug in cPanel/WHM that lets attackers gain administrative access to the interface...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/05/01 9:40 a.m.116 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 Detection & Verification !License: MIThttp...

9.8CVSS5.8AI score0.98527EPSS
SaveExploits74
Imperva Blog
Imperva Blog
added 2026/04/30 5:38 p.m.41 views

Imperva Customers Protected Against CVE-2026-41940 in cPanel & WHM

What is CVE-2026-41940? CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM, including DNSOnly, in versions after 11.40. The flaw, discovered by WatchTowr Labs, exists in the login flow and allows unauthenticated remote attackers to gain unauthorized access to...

9.8CVSS6.2AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/04/30 2:32 p.m.191 views

Exploit for CVE-2026-41940

SessionScribe - CVE-2026-41940 Detection, mitigation, and rev...

9.8CVSS7.1AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/04/30 5:17 a.m.178 views

Exploit for CVE-2026-41940

cPanel/WHM Auth Bypass Scanner & Exploit Tool A Go command-li...

9.8CVSS6.3AI score0.98527EPSS
SaveExploits74
Rapid7 Blog
Rapid7 Blog
added 2026/04/29 8:00 p.m.21 views

CVE-2026-41940: cPanel & WHM Authentication Bypass

Overview On April 28, 2026, cPanel issued a security update to fix a critical vulnerability affecting the cPanel & WHM and WP Squared products. In the cPanel release notes, the bug was described as "an issue with session loading and saving." CVE-2026-41940, the identifier subsequently assigned on...

9.8CVSS6.4AI score0.98527EPSS
SaveExploits74
GithubExploit
GithubExploit
added 2026/04/29 5:44 p.m.243 views

Exploit for CVE-2026-41940

Usage python 0day.py -f test.txt --external-only --show...

9.8CVSS5.3AI score0.98527EPSS
SaveExploits74
Positive Technologies
Positive Technologies
added 2026/04/04 12:00 a.m.20 views

PT-2026-40436

Name of the Vulnerable Software and Affected Versions cPanel affected versions not specified Description Incorrect privileges management and insufficient path filtering in the cpdavd service allow a remote, unauthenticated attacker to read arbitrary files on the server as root. This is achieved...

9CVSS8.1AI score0.08151EPSS
SaveExploits0References25
RedhatCVE
RedhatCVE
added 2026/01/09 11:11 a.m.14 views

CVE-2016-10853

cPanel before 11.54.0.4 allows stored XSS in the WHM Feature Manager interface SEC-86...

5.4CVSS5.8AI score0.00808EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:34 a.m.13 views

CVE-2017-18464

cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor SEC-226...

5.5CVSS7.1AI score0.00822EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:33 a.m.17 views

CVE-2017-18419

cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...

5.4CVSS5.9AI score0.00645EPSS
SaveExploits0References1
Rows per page
Query Builder