Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-51378 — Exploit cyberpanel version 2.3.6 - 2.3.7 | Kitploit
Tools/GitHubGitHub/rimbadirgantara/cve-2024-51378
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access Tool
GitHubrimbadirgantara/cve-2024-51378

CVE-2024-51378

Exploit cyberpanel version 2.3.6 - 2.3.7

View Repository
59 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-51378 — Summary, Mitigation, and Documentation (Safe Repository)

⚠️ Ethical & legal warning
All materials in this repository are for educational purposes, legitimate security research, and testing on environments you own or have explicit permission. Do not run these tools or scripts against third-party systems without permission. Exploiting without permission is illegal.

📌 Summary of CVE-2024-51378

  • CVE: CVE-2024-51378
  • Product: CyberPanel
  • Impact: Remote Code Execution / Privilege escalation (depending on vendor/researcher reports) — allows malicious actions if successfully exploited.
  • Affected versions: Reports indicate CyberPanel versions up to 2.3.6 / 2.3.7 (depending on patch status). The vendor typically releases fixes in version 2.3.8 or later.
  • Sources & references: add official CVE/NVD links and vendor advisories (e.g., NVD, Tenable, CyberPanel advisory).

🔍 Signs (indicators of compromise)

If you manage a server that may be vulnerable, monitor the following indicators:

  • Unknown SSH keys appearing in /root/.ssh/authorized_keys or other important accounts.
  • Unrecognized process or crontab activity.
  • SSH logins or sessions from suspicious IP addresses.
  • Changes to critical system files (Integrity Monitoring alerts).
Download Tool
  • Wazuh/OSSEC/Suricata/IDS logs showing key theft or remote command execution activity.

    • 🛡️ Mitigation & Recommendations

    1. Immediately update CyberPanel to the official fixed version (e.g., >= 2.3.8) as per vendor advisory.
    2. If you cannot patch immediately, restrict access to the panel:
      • Restrict panel access (port/tcp) via firewall or network ACL (trusted IPs only).
      • Apply WAF/IPS rules to block suspicious requests.
    3. Audit SSH keys:
      • Check and remove unauthorized SSH keys in /root/.ssh/authorized_keys and other important accounts.
      • Rotate all access keys & change passwords / API tokens if there are signs of compromise.
    4. Check system integrity:
      • Run FIM (File Integrity Monitoring) checks to detect file changes.
      • Check cron jobs, systemd unit files, and startup scripts.
    5. Isolation & recovery:
      • If compromised, isolate the system from the public network.
      • Restore from a trusted backup if necessary, after ensuring the root cause has been addressed.
    6. Report to the vendor if you find active exploitation.

    📚 Script documentation

    • Use the -l or --list flag to specify a target list

    • Use the -c or --command flag to execute commands; such as id, pwd, whoami Use the -c or --command flag to execute RCE

    • Without using the -c or --command flag, the program will automatically deploy an SSH key If no -c or --command flag, the program will automatically deploy an SSH key