"I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel (CVE-2024-30851), allowing an attacker to deanonymize panel operators and dump decryption keys"
https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc