https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:04:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11067 bdu:2024-11067 https://cve.radiocsirt.org/vuln/bdu:2024-11067 https://cve.radiocsirt.org/vuln/euvd-2026-343981 EUVD-2026-343981 https://cve.radiocsirt.org/vuln/euvd-2026-343981 https://cve.radiocsirt.org/vuln/fkie_cve-2024-51567 <p>upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.</p> <p>upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-51567 https://cve.radiocsirt.org/vuln/ghsa-w6g2-qqv5-83qj <p>upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.</p> <p>upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-w6g2-qqv5-83qj https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3294 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CyberPanel ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in CyberPanel ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3294