One security-remediation.sh for CVE-2026-41940 (cPanel), CVE-2026-31431 (kernel "Copy Fail"), CSF, optional domain/proxy cleanup, and optional operator hardening.
IP CIDRs (presumably as input, maybe command line or file) and checks ports 2083 and 2087 for openness
cPanel malware, CVE-2026-41940, virus removal
https://devtint.github.io/CVE-2026-41940
improved poc of cve-2026-41940
Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution.
Cpanel Scanner For CVE-2026-41940
cPanel/WHM Authentication Bypass PoC
CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection
A comprehensive Python utility to **detect**, **scan in bulk**, and **exploit** the critical authentication bypass vulnerability (CVE-2026-41940) in cPanel & WHM and WP Squared.
cPanel/WHM CVE-2026-41940 - Mass Scanner & Exploiter
Detection tool for cPanel/WHM CVE-2026-41940 (CRLF injection auth bypass). Verify vulnerability on servers you own or have permission to test. For authorized security assessments only.
cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script
Advanced cPanel & WHM Security Scanner for CVE-2026-41940. with mass Shodan discovery
A security research tool for detecting and analyzing cPanel/WHM services and their authentication behavior. Designed for authorized testing and educational purposes only.
CVE-2026-41940 cPanel/WHM auth bypass IOC scanner — fixes false positives in upstream detection script, adds log cross-correlation
Windows Shell Spoofing Vulnerability
Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.