Most recent comments.

SonicWall Firewall Vulnerability Exploited After PoC Publication

Mon, 17 Feb 2025 08:57:05 +0000

Threat actors started exploiting a recent SonicWall firewall vulnerability this week, shortly after proof-of-concept (PoC) code targeting it was published. According to Bishop Fox, approximately 4,500 internet-facing SonicWall SSL VPN servers had not been patched against CVE-2024-53704 by February 7.

PoC and details for CyberPanel

Tue, 17 Dec 2024 05:27:57 +0000

- [ CyberPanel authenticated RCE < 2.3.8 ](https://github.com/ThottySploity/CVE-2024-53376)

Bugzilla record for this vulnerability

Mon, 16 Dec 2024 14:25:04 +0000

- [Bug 2331686 (CVE-2024-53677) - CVE-2024-53677 struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks ](https://bugzilla.redhat.com/show_bug.cgi?id=2331686) An interesting note: **Note: application not using FileUploadInterceptor are safe.**