{"metadata": {"vulnerability": "CVE-2023-24749", "count": 9, "kinds": {"milestone": 0, "sighting": 8, "kev": 0, "other": 1}}, "data": [{"timestamp": "2023-03-09T07:09:49Z", "date_only": false, "value": "2023-03-09T07:09:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G-sgDlrvwnM7fA9vwo9eo805AkbFx9rSqZF3EIxn4TnSp90", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "0a7aa174-06be-4f51-bf31-e843e6313bd8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-10T23:42:52Z", "date_only": false, "value": "2023-03-10T23:42:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7903", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "4c6d8677-2491-4218-b0e5-fcd84614eed5", "content": "#Red_Team_Tactics\n1. OAuth: Account Takeover on Booking*com\nhttps://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com\n2. Unauthorized access to Codespace secrets in GitHub\nhttps://ophionsecurity.com/blog/access-organization-secrets-in-github\n3. WAN-side RCE in Netgear RAX Routers (CVE-2023-24749)\nhttps://mahaloz.re/2023/02/25/pwnagent-netgear.html", "url": "https://t.me/CyberSecurityTechnologies/7903", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-11T01:04:37Z", "date_only": false, "value": "2023-03-11T01:04:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3918", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "f1650bfa-ac64-43ba-82ee-fd5fac32f67e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aAn exploit PoC for CVE-2023-24749, aka PwnAgent\nURL\uff1ahttps://github.com/mahaloz/netgear-pwnagent\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3918", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-12T10:21:32Z", "date_only": false, "value": "2023-03-12T10:21:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_XNHMvdG50cv82kL9cs0-JclxVRohsOoow3JM5plYK1X21M", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "37e5c4e9-3fa4-41b2-b4dd-2d8d535b3006", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:58.448Z", "date_only": false, "value": "2023-12-13T01:20:58.448452Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-24749", "record": "GSD-2023-24749", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2026-07-29T12:02:33.538Z", "date_only": false, "value": "2026-07-29T12:02:33.538992Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3199", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "526ff9b2-1049-48c1-905d-c631bdb7ebd7", "url": "https://t.me/reverseame/3199"}, {"timestamp": "2026-07-30T00:02:31.536Z", "date_only": false, "value": "2026-07-30T00:02:31.536086Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3199", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "025747a3-4241-47b5-9241-6e91baf13429", "url": "https://t.me/reverseame/3199"}, {"timestamp": "2026-08-02T20:29:34.530Z", "date_only": false, "value": "2026-08-02T20:29:34.530958Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3199", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "73d32938-8bba-4f49-a6e0-ff1762d16331", "url": "https://t.me/reverseame/3199", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T01:38:24.303Z", "date_only": false, "value": "2026-08-03T01:38:24.303529Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3199", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "1bb0ab64-092a-4b8f-a862-ebefcaf00321", "url": "https://t.me/reverseame/3199", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-12T08:52:05.790Z", "anchors": {"origin": null, "discovery": null, "report": null, "acknowledgement": null, "disclosure": null, "exploit_publication": {"timestamp": "2023-03-09T07:09:49Z", "date_only": false, "value": "2023-03-09T07:09:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G-sgDlrvwnM7fA9vwo9eo805AkbFx9rSqZF3EIxn4TnSp90", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "0a7aa174-06be-4f51-bf31-e843e6313bd8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["start"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["start", "end"]}, "time_unpatched": {"available": false, "missing": ["start"]}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 116127736.790731, "hours": 32257.704664091943, "days": 1344.0710276704976, "min_seconds": 116127736.790731, "max_seconds": 116127736.790731, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-09T07:09:49Z", "date_only": false, "value": "2023-03-09T07:09:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G-sgDlrvwnM7fA9vwo9eo805AkbFx9rSqZF3EIxn4TnSp90", "record": "CVE-2023-24749", "field": "creation_timestamp", "uuid": "0a7aa174-06be-4f51-bf31-e843e6313bd8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T08:52:05.790Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}
