Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	KEVEPSS 84%	CVE-2024-51567CyberPanel · n/a Critical10.0KEVEPSS 84%2024-10-29CVE Database V5CVE-2024-51567 upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected. KEVEPSS 84%Vulnerability CyberPersons	CVE Database V5	2024-10-29
Critical	10.0	KEVEPSS 94%	CVE-2024-51378CyberPanel · n/a Critical10.0KEVEPSS 94%2024-10-29CVE Database V5CVE-2024-51378 getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands via /dns/getresetstatus or /ftp/getresetstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected. KEVEPSS 94%Vulnerability CyberPersons	CVE Database V5	2024-10-29

Showing 1–2 of 2 results