CVE-2025-49132-PoC

CVE-2025-49132-PoC CVE-2025-49132 の概念実証。Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t 技術的詳細 LocaleController.php における v1.11.10 から v1.11.11 への git diff を分析すると リンク、コントローラが locale と namespace パラメータを検証やサニタイズなしで受け付けていることがわかります。 これがなぜ危険なのかを理解するために、panel/routes/base.ph...

CVE-2025-52562

Convoy is a KVM server management panel for hosting businesses. In versions 3.9.0-rc3 to before 4.4.1, there is a directory traversal vulnerability in the LocaleController component of Performave Convoy. An unauthenticated remote attacker can exploit this vulnerability by sending a specially...

CVE-2025-52562 Convey Panel Directory Traversal in LocaleController leading to Remote Code Execution

Convoy is a KVM server management panel for hosting businesses. In versions 3.9.0-rc3 to before 4.4.1, there is a directory traversal vulnerability in the LocaleController component of Performave Convoy. An unauthenticated remote attacker can exploit this vulnerability by sending a specially...

CVE-2025-52562: Improper Limitation of a Pathname to a Restricted Directory

Convoy is a KVM server management panel for hosting businesses. In versions 3.9.0-rc3 to before 4.4.1, there is a directory traversal vulnerability in the LocaleController component of Performave Convoy. An unauthenticated remote attacker can exploit this vulnerability by sending a specially...