[POC] CVE-2026-3494 — CVE-2026-3494May 3, 2026
pocexploitCVE-2026-3494
Reproduction and Analysis of CVE-2026-3494
Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, and RAG/distilled models across 25 government TLD patterns.
CVE-2026-41940 Direct Shell Acess
CVE-2026-41940 Exploit PoC – cPanel & WHM Authentication Bypass via CRLF Injection
ProFTPD SQL injection PoC
cPanel & Whm Authentication Bypasser
Python exploit for CVE-2026-42167 (ProFTPD mod_sql). Features automated file scanning and timing-based blind data exfiltration.
This is the office check script provided by cPanel for all the users who are using cPanel
One security-remediation.sh for CVE-2026-41940 (cPanel), CVE-2026-31431 (kernel "Copy Fail"), CSF, optional domain/proxy cleanup, and optional operator hardening.
IP CIDRs (presumably as input, maybe command line or file) and checks ports 2083 and 2087 for openness
cPanel malware, CVE-2026-41940, virus removal
https://devtint.github.io/CVE-2026-41940
improved poc of cve-2026-41940
Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution.
Cpanel Scanner For CVE-2026-41940
cPanel/WHM Authentication Bypass PoC
Pre-Auth RCE in ProFTPD via mod_sql is_escaped_text() bypass (CVE-2026-42167)