Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Nov 26, 2024

1 new incident, 0 with updates.

Started

  • ClosedCriticalPatched

    ProjectSend Improper Authentication

    ProjectSend contains an improper authentication vulnerability that allows a remote, unauthenticated attacker to enable unauthorized modification of the application's configuration via crafted HTTP requests to options.php. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript. Added to the CISA KEV catalog on 2024-12-03.

    ProjectSendClosed Dec 3, 2024

Sponsored

Buy sponsor slot · $149/mo