cve-2024-51567-poc

cve-2024-51567-poc Краткое описание Обзор уязвимости Идентификатор : CVE-2024-51567 Тип : Инъекция команд / обход CSRF Затронутые версии : CyberPanel 2.3.6 и 2.3.7 не исправлено Описание : В интерфейсе upgrademysqlstatus в CyberPanel, обходя защиту secMiddleware для POST-запросов, злоумышленник...

MCP Asset Generation Server 路径遍历漏洞

MCP Asset Generation Server is a multi-type asset generation server for game development by the individual developer Suyog Sonwalkar. A path traversal vulnerability exists in MCP Asset Generation Server version 0.1.0, which stems from improper manipulation of the parameter statusFile in the...

Exploit for OS Command Injection in Cyberpanel

PoC: CVE-2024-51378 Command Injection, эмуляция 📌 Описан...

CyberPanel upgrademysqlstatus authentication bypass and command injection

Added: 11/07/2024 Background CyberPanel is a web hosting control panel. Problem A pair of vulnerabilities in the upgrademysqlstatus web resource could allow a remote attacker to bypass authentication using a PUT request and execute arbitrary commands with a specially crafted statusfile parameter...