{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities · updates",
  "home_page_url": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378",
  "feed_url": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378/feed.json",
  "description": "CVE-2024-51567: CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root. CVE-2024-51378: CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property. Added to the CISA KEV catalog on 2024-11-07, 2024-12-04. CISA lists known use in ransomware campaigns.",
  "language": "en",
  "_pwn": {
    "slug": "cyberpersons-cyberpanel-cve-2024-51567-51378",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378/feed.xml",
    "llms": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378/llms.txt",
    "json": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-12-04-757b59d9",
      "url": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-12-04-757b59d9",
      "title": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CISA added CVE-2024-51378 to the KEV catalog (federal deadline 2024-12-25)",
      "content_text": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CISA added CVE-2024-51378 to the KEV catalog (federal deadline 2024-12-25)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-12-04T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-11-07-fec2ecb1",
      "url": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-11-07-fec2ecb1",
      "title": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CISA added CVE-2024-51567 to the KEV catalog (federal deadline 2024-11-28)",
      "content_text": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CISA added CVE-2024-51567 to the KEV catalog (federal deadline 2024-11-28)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-11-07T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-10-29-af62aa2f",
      "url": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-10-29-af62aa2f",
      "title": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CVE-2024-51567 published",
      "content_text": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CVE-2024-51567 published\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2024-51567",
      "date_published": "2024-10-29T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51567",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-10-29-ab9540f5",
      "url": "https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-10-29-ab9540f5",
      "title": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CVE-2024-51378 published",
      "content_text": "CyberPersons CyberPanel: 2 actively exploited vulnerabilities: CVE-2024-51378 published\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2024-51378",
      "date_published": "2024-10-29T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51378",
      "tags": [
        "critical"
      ]
    }
  ]
}