Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Jan 17, 2023

1 new incident, 0 with updates.

Started

  • ClosedCriticalPatched

    CWP Control Web Panel: OS Command Injection (CVE-2022-44877)

    CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter. Added to CISA KEV on 2023-01-17.

    CWP Control Web PanelClosed Jan 17, 2023