{"metadata": {"vulnerability": "CVE-2024-20404", "count": 73, "kinds": {"milestone": 6, "sighting": 35, "kev": 11, "other": 21}}, "data": [{"timestamp": "2023-11-08T15:08:07.661Z", "date_only": false, "value": "2023-11-08T15:08:07.661Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-20404", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:42.821Z", "date_only": false, "value": "2023-12-13T01:21:42.821753Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-20404", "record": "GSD-2024-20404", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-05T15:50:48Z", "date_only": false, "value": "2024-06-05T15:50:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "record": "CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-05T16:00:00Z", "date_only": false, "value": "2024-06-05T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "record": "CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-05T16:14:23.637Z", "date_only": false, "value": "2024-06-05T16:14:23.637Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-20404", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-05T16:14:23.637Z", "date_only": false, "value": "2024-06-05T16:14:23.637Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2024-20404", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-05T17:15:11Z", "date_only": false, "value": "2024-06-05T17:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VHV4-J9CM-5CJX", "record": "GHSA-VHV4-J9CM-5CJX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-05T17:15:11.790Z", "date_only": false, "value": "2024-06-05T17:15:11.790", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20404", "record": "FKIE_CVE-2024-20404", "field": "published"}, {"timestamp": "2024-06-05T18:11:49.476Z", "date_only": false, "value": "2024-06-05T18:11:49.476249Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20404", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-05T18:11:49.476Z", "date_only": false, "value": "2024-06-05T18:11:49.476249Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20404", "record": "FKIE_CVE-2024-20404", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-05T18:12:02.959Z", "date_only": false, "value": "2024-06-05T18:12:02.959Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20404", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-05T18:30:34Z", "date_only": false, "value": "2024-06-05T18:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VHV4-J9CM-5CJX", "record": "GHSA-VHV4-J9CM-5CJX", "field": "published"}, {"timestamp": "2024-06-05T18:30:34Z", "date_only": false, "value": "2024-06-05T18:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VHV4-J9CM-5CJX", "record": "GHSA-VHV4-J9CM-5CJX", "field": "modified"}, {"timestamp": "2024-06-05T22:00:00Z", "date_only": false, "value": "2024-06-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1303", "record": "WID-SEC-W-2024-1303", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-05T22:00:00Z", "date_only": false, "value": "2024-06-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1303", "record": "WID-SEC-W-2024-1303", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-05T22:00:00Z", "date_only": false, "value": "2024-06-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1303", "record": "WID-SEC-W-2024-1303", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-06-05T22:00:00Z", "date_only": false, "value": "2024-06-05T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1303", "record": "WID-SEC-W-2024-1303", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-06T17:54:20Z", "date_only": false, "value": "2024-06-06T17:54:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "record": "CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-06-07T13:52:10Z", "date_only": false, "value": "2024-06-07T13:52:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/1894", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "5ed68121-944c-4bfc-9df9-eb5801299369", "content": "\u200aCVE-2024-20404/20405: Cisco Finesse Vulnerabilities Open Door to Attacks\n\nhttps://securityonline.info/cve-2024-20404-20405-cisco-finesse-vulnerabilities-open-door-to-attacks/", "url": "https://t.me/HackingInsights/1894"}, {"timestamp": "2024-06-11T00:00:00Z", "date_only": true, "value": "2024-06-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-37705", "record": "CNVD-2024-37705", "field": "submitTime"}, {"timestamp": "2024-06-14T21:44:14Z", "date_only": false, "value": "2024-06-14T21:44:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "record": "CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-06-14T21:44:14Z", "date_only": false, "value": "2024-06-14T21:44:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "record": "CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-14T21:44:20Z", "date_only": false, "value": "2024-06-14T21:44:20+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "record": "CISCO-SA-FINESSE-SSRF-RFI-UM7WT8EW", "field": "document.tracking.generator.date"}, {"timestamp": "2024-07-03T15:44:53Z", "date_only": false, "value": "2024-07-03T15:44:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/4685", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "7553cdc1-8b2f-4e6c-9ae0-2a2324771c12", "content": "Cisco Finesse Server Side Request Forgery (CVE-2024\u201320404): https://0x3zzat.medium.com/cisco-finesse-server-side-request-forgery-cve-2024-20404-5d74b449a4a2?source=rss------bug_bounty-5", "url": "https://t.me/HackingInsights/4685"}, {"timestamp": "2024-08-01T21:59:42.723Z", "date_only": false, "value": "2024-08-01T21:59:42.723Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-20404", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:59:42.723Z", "date_only": false, "value": "2024-08-01T21:59:42.723Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-20404", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:09:52.595Z", "date_only": false, "value": "2024-08-15T18:09:52.595+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1303", "record": "WID-SEC-W-2024-1303", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-05T00:00:00Z", "date_only": true, "value": "2024-09-05", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-37705", "record": "CNVD-2024-37705", "field": "openTime"}, {"timestamp": "2024-10-07T18:09:24Z", "date_only": false, "value": "2024-10-07T18:09:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11248", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "0fefa883-a150-4f57-a030-cf35b3346887", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/CyberSecurityTechnologies/11248"}, {"timestamp": "2024-10-08T06:03:25Z", "date_only": false, "value": "2024-10-08T06:03:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3291", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "903353ee-c67d-4d09-8451-434de9c3c2d4", "content": "https://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\ncve-2024-20404\n#github #exploit", "url": "https://t.me/CNArsenal/3291"}, {"timestamp": "2024-10-08T16:16:10Z", "date_only": false, "value": "2024-10-08T16:16:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/5270", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "d9435b32-69a2-4b7f-be70-fce8a2ec03ed", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/ton618cyber/5270"}, {"timestamp": "2024-10-08T16:16:11Z", "date_only": false, "value": "2024-10-08T16:16:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/1808", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "c799ae53-f26d-4cdf-9247-64284dfc5c34", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/ton618cyber/1808"}, {"timestamp": "2024-10-08T16:24:05Z", "date_only": false, "value": "2024-10-08T16:24:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/19421", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "10945e68-d291-484f-9388-991c7cb769e9", "content": "https://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\ncve-2024-20404\n#github #exploit", "url": "https://t.me/realLulzSec/19421"}, {"timestamp": "2024-10-08T16:24:05Z", "date_only": false, "value": "2024-10-08T16:24:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/2217", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "d8181dad-b11f-4d90-9cfc-8c43f680dcdd", "content": "https://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\ncve-2024-20404\n#github #exploit", "url": "https://t.me/realLulzSec/2217"}, {"timestamp": "2024-10-10T18:01:24Z", "date_only": false, "value": "2024-10-10T18:01:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0ojFoxVGwFFKBRpdch3yrZ16P2myEFbIRSeSkQlYR8l62w", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "609a8e0f-cbcb-41c5-b233-961c21d1de8a"}, {"timestamp": "2024-10-12T07:18:26Z", "date_only": false, "value": "2024-10-12T07:18:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1060", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "4fe05d6a-046e-4521-9e45-0f4baf170d17", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1060"}, {"timestamp": "2024-10-12T07:18:32Z", "date_only": false, "value": "2024-10-12T07:18:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3790", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "43e12361-b34b-4923-9090-4bd1f0a2804d", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3790"}, {"timestamp": "2024-10-12T07:18:52Z", "date_only": false, "value": "2024-10-12T07:18:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24064", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "43061fb0-6c80-4b1b-b96a-b574759a3dbb", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24064"}, {"timestamp": "2024-10-12T07:18:53Z", "date_only": false, "value": "2024-10-12T07:18:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/495", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "ff367e2c-cd6b-4918-a4df-047423f51fe4", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/495"}, {"timestamp": "2024-10-12T07:18:59Z", "date_only": false, "value": "2024-10-12T07:18:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7512", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "7c5428fb-649a-4620-96dc-6bbe24e81739", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7512"}, {"timestamp": "2024-10-12T07:18:59Z", "date_only": false, "value": "2024-10-12T07:18:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8876", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "b96b3558-9483-46b4-a4ec-a8d54374a66e", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8876"}, {"timestamp": "2024-10-19T08:21:04Z", "date_only": false, "value": "2024-10-19T08:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RwY6Qx7q79BGFkuYNtskNo4YfaA4RR8J0sppT16Si3kAhAp8", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "2a363e16-b3b7-40f1-a401-8d98aee0e775"}, {"timestamp": "2024-10-19T08:29:59Z", "date_only": false, "value": "2024-10-19T08:29:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/1773", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "7395f785-f76c-4add-9177-fd48d399746f", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/ZeroEthical_Course/1773"}, {"timestamp": "2025-03-09T18:34:02Z", "date_only": false, "value": "2025-03-09T18:34:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasraone_com/742", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "ea51feb3-fda3-43e9-b5b2-85e68bb8753d", "content": "\ud83d\udea8 CVE-2024-20404\n\u26a0\ufe0f Cisco Finesse Web-Based Management Interface XSS/SSRF Vulnerability\n\n\ud83d\udcdd \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u0628 Cisco Finesse \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc\u0646 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062d\u0645\u0644\u0627\u062a XSS \u0648 SSRF \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0645\u0646\u06cc\u062a \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0631\u0627 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0646\u062f\u0627\u0632\u062f\n\n\ud83d\udd17 \u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u0648 \u062c\u0632\u0626\u06cc\u0627\u062a \n\n\u0644\u06cc\u0646\u06a9 \u0632\u06cc\u0631 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f :                                      \n\n\n\u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\n\n\n\n\n\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\u00a0 \u2661 \u2800\u2800 \u3007\u2800\u00a0 \u2800 \u2399\u2800\u200c\u00a0 \u200c \u2332\u2063 \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u02e1\u2071\u1d4f\u1d49\u00a0 \u1d9c\u1d52\u1d50\u1d50\u1d49\u207f\u1d57\u00a0\u00a0 \u02e2\u1d43\u1d5b\u1d49\u00a0 \u02e2\u02b0\u1d43\u02b3\u1d49\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 K1\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 kasraone", "url": "https://t.me/kasraone_com/742"}, {"timestamp": "2025-11-24T05:17:43Z", "date_only": false, "value": "2025-11-24T05:17:43.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-20404.yaml", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "7067c62b-7a2a-4d01-aa63-a4fa4754c920", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-20404.yaml"}, {"timestamp": "2025-11-25T21:02:38.752Z", "date_only": false, "value": "2025-11-25T21:02:38.752219Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagpsbe72a", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "0d281287-deb1-4d4f-894d-210c2965cea2", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6iagpsbe72a"}, {"timestamp": "2026-02-04T04:17:11Z", "date_only": false, "value": "2026-02-04T04:17:11+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-20404", "field": "timestamps.asserted_at", "uuid": "46d0b2f1-93f7-424d-8537-27d98ba010ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T04:17:11Z", "date_only": false, "value": "2026-02-04T04:17:11+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-20404", "field": "timestamps.first_seen_at", "uuid": "46d0b2f1-93f7-424d-8537-27d98ba010ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T21:02:51.436Z", "date_only": false, "value": "2026-02-05T21:02:51.436757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me5bzfcys42i", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "25478a59-eabb-493c-882f-fed167280285", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me5bzfcys42i"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-20404", "field": "timestamps.asserted_at", "uuid": "66ef83d6-ee4b-46f3-9f82-fca61e84b101", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-20404", "field": "evidence.0.details.added_date", "uuid": "66ef83d6-ee4b-46f3-9f82-fca61e84b101", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-01)", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "164e489d-390e-4f22-b24d-40d54f70eea2"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-20404", "field": "timestamps.first_seen_at", "uuid": "66ef83d6-ee4b-46f3-9f82-fca61e84b101", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-01)", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "9fd80019-1aaf-4897-a04f-e63244ec03f8"}, {"timestamp": "2026-04-01T00:00:00Z", "date_only": false, "value": "2026-04-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-20404", "field": "status.status_updated_at", "uuid": "66ef83d6-ee4b-46f3-9f82-fca61e84b101", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "894ca914-4fc7-4c44-a160-74e2ddb6af11"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-06)", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "c0d9edf4-599d-4281-aeb9-fb45dad0b21d"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "db9e8307-3029-4194-a6c8-c43ba7255f8a"}, {"timestamp": "2026-06-17T07:06:57.363Z", "date_only": false, "value": "2026-06-17T07:06:57.363", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20404", "record": "FKIE_CVE-2024-20404", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-20404", "field": "timestamps.recorded_at", "uuid": "66ef83d6-ee4b-46f3-9f82-fca61e84b101", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:32.100Z", "date_only": false, "value": "2026-06-19T12:42:32.100585Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66ef83d6-ee4b-46f3-9f82-fca61e84b101", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "0c741bd6-d5f4-4817-adba-8c225bc6d097", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66ef83d6-ee4b-46f3-9f82-fca61e84b101"}, {"timestamp": "2026-06-19T12:45:36.340Z", "date_only": false, "value": "2026-06-19T12:45:36.340798Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6580a363-2a1a-4092-93b3-02a536f185fe", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "ec8cd4cf-92d9-445e-83ee-c79191bab26e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6580a363-2a1a-4092-93b3-02a536f185fe"}, {"timestamp": "2026-06-23T14:03:05.200Z", "date_only": false, "value": "2026-06-23T14:03:05.200814Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b1d14ec-1751-4c3d-812a-a2b94eac8654", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "353eae3d-8bdb-4997-970d-892360bc5048", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b1d14ec-1751-4c3d-812a-a2b94eac8654"}, {"timestamp": "2026-06-30T09:23:45.505Z", "date_only": false, "value": "2026-06-30T09:23:45.505355Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9d40386-a969-4d67-90b2-b69264f0a969", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "8848b4a4-0c54-49d8-a8f3-3aa5bc7d4737", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9d40386-a969-4d67-90b2-b69264f0a969"}, {"timestamp": "2026-07-01T05:54:16.926Z", "date_only": false, "value": "2026-07-01T05:54:16.926321Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/46d0b2f1-93f7-424d-8537-27d98ba010ad", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "a8b3fecf-05b7-4eec-921c-2e5518baa435", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/46d0b2f1-93f7-424d-8537-27d98ba010ad"}, {"timestamp": "2026-09-01T20:00:32.446Z", "date_only": false, "value": "2026-09-01T20:00:32.446975Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/138711", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "e3b5dba7-268b-469b-a444-7d93b3bf9c5f", "url": "https://t.me/hacking_Attack/138711"}, {"timestamp": "2026-09-01T20:00:32.491Z", "date_only": false, "value": "2026-09-01T20:00:32.491856Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/138713", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "b9234c48-ed55-42bb-b4ae-192110318fe5", "url": "https://t.me/hacking_Attack/138713"}, {"timestamp": "2026-09-03T18:00:06.622Z", "date_only": false, "value": "2026-09-03T18:00:06.622112Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/138713", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "ce69cdfc-cee4-4233-943c-291fd445553c", "url": "https://t.me/hacking_Attack/138713"}, {"timestamp": "2026-09-03T18:00:06.667Z", "date_only": false, "value": "2026-09-03T18:00:06.667546Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/138711", "record": "CVE-2024-20404", "field": "creation_timestamp", "uuid": "20043051-c2ba-452b-8513-e25c3c7f6e07", "url": "https://t.me/hacking_Attack/138711"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-20404", "field": "timestamps.last_seen_at", "uuid": "46d0b2f1-93f7-424d-8537-27d98ba010ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": true, "value": "2026-10-22", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-20404", "field": "evidence.0.details.observation_date", "uuid": "46d0b2f1-93f7-424d-8537-27d98ba010ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-20404", "field": "status.status_updated_at", "uuid": "46d0b2f1-93f7-424d-8537-27d98ba010ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T01:00:01Z", "date_only": false, "value": "2026-10-24T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-20404", "field": "timestamps.recorded_at", "uuid": "46d0b2f1-93f7-424d-8537-27d98ba010ad", "status": {"status_reason": "confirmed", "exploited": true}}]}