https://vulnerability.circl.lu/comments/feed 2026-09-17T10:52:23.437425+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent comments. https://vulnerability.circl.lu/comment/b2a6b85e-5b0d-4ac4-b7a4-9227e3ff28e0 2026-09-17T10:52:23.441926+00:00 Cédric Bonhomme https://cvepremium.circl.lu/user/cedric Threat actors started exploiting a recent SonicWall firewall vulnerability this week, shortly after proof-of-concept (PoC) code targeting it was published. According to Bishop Fox, approximately 4,500 internet-facing SonicWall SSL VPN servers had not been patched against CVE-2024-53704 by February 7. 2025-02-17T08:57:05.680592+00:00 https://vulnerability.circl.lu/comment/5d1aa981-8c34-43d5-bc8f-afcd585d782a 2026-09-17T10:52:23.444038+00:00 Alexandre Dulaunoy https://cvepremium.circl.lu/user/adulau - [ CyberPanel authenticated RCE < 2.3.8 ](https://github.com/ThottySploity/CVE-2024-53376) 2024-12-17T05:27:57.023081+00:00 https://vulnerability.circl.lu/comment/ec831761-cc7a-463a-bf13-08ab7d376af1 2026-09-17T10:52:23.445681+00:00 Alexandre Dulaunoy https://cvepremium.circl.lu/user/adulau - [Bug 2331686 (CVE-2024-53677) - CVE-2024-53677 struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks ](https://bugzilla.redhat.com/show_bug.cgi?id=2331686) An interesting note: **Note: application not using FileUploadInterceptor are safe.** 2024-12-16T14:25:04.252985+00:00