{"metadata": {"vulnerability": "CVE-2024-28741", "count": 24, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-03-08T00:00:00Z", "date_only": false, "value": "2024-03-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-28741", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-03-09T06:02:28.834Z", "date_only": false, "value": "2024-03-09T06:02:28.834035Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-28741", "record": "GSD-2024-28741", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-15T20:28:11Z", "date_only": false, "value": "2024-03-15T20:28:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10152", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "76432b1f-6af9-4f9a-ad77-abacb2ca880b", "content": "#Threat_Research\n1. Arcserve Unified Data Protection 9.2 Multiple Vulnerabilities\nhttps://www.tenable.com/security/research/tra-2024-07\n2. Discovering CVE-2024-28741: RCE on NorthStar C2 agents via pre auth stored XSS\nhttps://blog.chebuya.com/posts/discovering-cve-2024-28741-remote-code-execution-on-northstar-c2-agents-via-pre-auth-stored-xss", "url": "https://t.me/CyberSecurityTechnologies/10152"}, {"timestamp": "2024-04-06T00:00:00Z", "date_only": false, "value": "2024-04-06T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-28741", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-06T18:17:30.370Z", "date_only": false, "value": "2024-04-06T18:17:30.370Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-28741", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-06T19:15:07Z", "date_only": false, "value": "2024-04-06T19:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-64QX-RV33-FW3R", "record": "GHSA-64QX-RV33-FW3R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-06T19:15:07.247Z", "date_only": false, "value": "2024-04-06T19:15:07.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-28741", "record": "FKIE_CVE-2024-28741", "field": "published"}, {"timestamp": "2024-04-06T19:15:07.247Z", "date_only": false, "value": "2024-04-06T19:15:07.247", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-28741", "record": "GSD-2024-28741", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-06T21:30:35Z", "date_only": false, "value": "2024-04-06T21:30:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-64QX-RV33-FW3R", "record": "GHSA-64QX-RV33-FW3R", "field": "published"}, {"timestamp": "2024-04-08T07:45:52Z", "date_only": false, "value": "2024-04-08T07:45:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4389", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "44b67eb0-7170-4953-b7bf-3746febf3382", "content": "#ExploitObserverAlert\n\nCVE-2024-28741\n\nDESCRIPTION: Exploit Observer has 6 entries in 3 file formats related to CVE-2024-28741. Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component.\n\nFIRST-EPSS: 0.000450000", "url": "https://t.me/arpsyndicate/4389"}, {"timestamp": "2024-04-08T18:48:40.217Z", "date_only": false, "value": "2024-04-08T18:48:40.217", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-28741", "record": "GSD-2024-28741", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-08T21:00:49.556Z", "date_only": false, "value": "2024-04-08T21:00:49.556456Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-28741", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-04-08T21:00:49.556Z", "date_only": false, "value": "2024-04-08T21:00:49.556456Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-28741", "record": "FKIE_CVE-2024-28741", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-04-09T19:47:17Z", "date_only": false, "value": "2024-04-09T19:47:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4407", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "d3cb7a9c-c63a-4157-9014-dc35ace19f16", "content": "#ExploitObserverAlert\n\nCVE-2024-28741\n\nDESCRIPTION: Exploit Observer has 23 entries in 5 file formats related to CVE-2024-28741. Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component.\n\nFIRST-EPSS: 0.000450000", "url": "https://t.me/arpsyndicate/4407"}, {"timestamp": "2024-05-21T19:15:48Z", "date_only": false, "value": "2024-05-21T19:15:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/northstar_c2_xss_to_agent_rce.rb", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "cd008199-f7ea-4c75-afe7-65e79bdf41db", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/northstar_c2_xss_to_agent_rce.rb"}, {"timestamp": "2024-05-23T01:29:32Z", "date_only": false, "value": "2024-05-23T01:29:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4960", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "036bf38d-c8d8-459b-a511-83abab3d19e4", "content": "#ExploitObserverAlert\n\nCVE-2024-28741\n\nDESCRIPTION: Exploit Observer has 16 entries in 6 file formats related to CVE-2024-28741. Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component.\n\nFIRST-EPSS: 0.001630000\nARPS-PRIORITY: 0.8511741", "url": "https://t.me/arpsyndicate/4960"}, {"timestamp": "2024-08-02T00:56:58.051Z", "date_only": false, "value": "2024-08-02T00:56:58.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-28741", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T14:47:19.762Z", "date_only": false, "value": "2024-08-15T14:47:19.762Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-28741", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-15T14:47:19.762Z", "date_only": false, "value": "2024-08-15T14:47:19.762Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-28741", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:31:43Z", "date_only": false, "value": "2024-08-15T18:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-64QX-RV33-FW3R", "record": "GHSA-64QX-RV33-FW3R", "field": "modified"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "e7b5a3a0-0a47-417c-8b2e-0e8622d4be90"}, {"timestamp": "2025-02-23T04:11:01Z", "date_only": false, "value": "2025-02-23T04:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "bbd58474-63ee-4a2d-9121-8436aeccd282"}, {"timestamp": "2025-10-23T21:13:02Z", "date_only": false, "value": "2025-10-23T21:13:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-28741", "field": "creation_timestamp", "uuid": "d860ba5f-5b45-4860-81ce-39681961dbb7"}, {"timestamp": "2026-06-17T07:21:43.133Z", "date_only": false, "value": "2026-06-17T07:21:43.133", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-28741", "record": "FKIE_CVE-2024-28741", "field": "lastModified"}]}