https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378 CVE-2024-51567: CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root. CVE-2024-51378: CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property. Added to the CISA KEV catalog on 2024-11-07, 2024-12-04. CISA lists known use in ransomware campaigns. en Wed, 04 Dec 2024 00:00:00 GMT https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378 https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-12-04-757b59d9 Wed, 04 Dec 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378 https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-11-07-fec2ecb1 Thu, 07 Nov 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378 https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-10-29-af62aa2f Tue, 29 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-51567">Source</a></p> https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378 https://pwn.watch/i/cyberpersons-cyberpanel-cve-2024-51567-51378#2024-10-29-ab9540f5 Tue, 29 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-51378">Source</a></p>