Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2024-51567

upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.

CVSS 10.0 · CriticalBuzz score 52.4KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 52.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 17.9 · diversity 9.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
17.9
5 evidence mentions in the snapshot
Diversity score
9.5
4 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
5 source links · newest first
  • Chinese Hacking Group ‘Earth Lamia’ Targets Multiple IndustriesSecurityWeek

    Active since at least 2023, the hacking group has been targeting the financial, government, IT, logistics, retail, and education sectors.

    newswww.securityweek.comMay 29, 2025, 4:09 PM
  • U.S. CISA adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs

    U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2024-43093 – this week, Google warned that the vulnerability CVE-2024-43093 in the Android OS is […]

    newssecurityaffairs.comNov 7, 2024, 10:49 PM
  • CyberPanel Vulnerabilities Exploited in Ransomware Attacks Shortly After DisclosureSecurityWeek

    CyberPanel vulnerabilities have been exploited to compromise thousands of instances as part of ransomware attacks.

    newswww.securityweek.comOct 31, 2024, 10:06 AM
  • Ransomware hits web hosting servers via vulnerable CyberPanel instancesHelp Net Security

    A threat actor – or possibly several – has hit approximately 22,000 vulnerable instances of CyberPanel and encrypted files on the servers running it with the PSAUX and other ransomware. The PSAUX ransom note (Source: LeakIX) The CyberPanel vulnerabilities CyberPanel is a widely used open-source control panel that’s used for managing servers used for hosting websites. Two critical command injection vulnerabilities (CVE-2024-51378 and CVE-2024-51567) affecting CyberPanel versions 2.3.6 and (unpatched) 2.3.7 have been publicly documented … More →

    newswww.helpnetsecurity.comOct 30, 2024, 2:19 PM
  • PSAUX ransomware takes down 22,000 CyberPanel servers in massive zero-day attackCSO Online

    A critical authentication bypass vulnerability in the widely used web hosting control panel, CyberPanel, has allowed a massive PSAUX ransomware attack that took down 22,000 CyberPanel servers within hours. With a CVE tracker (CVE-2024-51567) issued only on Wednesday, the attack constitutes a zero-day exploitation of the critical (10/10 base CVSS rating) vulnerability which, along with […]

    newswww.csoonline.comOct 30, 2024, 11:32 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-41473

    CyberPanel versions prior to 2.4.4 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers to write arbi…

    CVSS 8.8 · High
    3 mentions
  • CVE-2026-66139

    OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known.

    CVSS 4.8 · Medium
    2 mentions
  • CVE-2026-63765

    Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blo…

    CVSS 8.8 · High
    5 mentions
  • CVE-2026-47769

    APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the…

    CVSS 5.3 · Medium
    3 mentions
  • CVE-2026-64812

    In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

    CVSS 10.0 · Critical
    1 mention
  • CVE-2026-61246

    Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2…

    CVSS 8.8 · High
    1 mention