{"metadata": {"vulnerability": "CVE-2024-38395", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-06-16T00:00:00Z", "date_only": false, "value": "2024-06-16T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-38395", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-16T00:00:00Z", "date_only": false, "value": "2024-06-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-38395", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-16T01:15:48Z", "date_only": false, "value": "2024-06-16T01:15:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M869-MPFX-H3G2", "record": "GHSA-M869-MPFX-H3G2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-16T01:15:48.537Z", "date_only": false, "value": "2024-06-16T01:15:48.537", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38395", "record": "FKIE_CVE-2024-38395", "field": "published"}, {"timestamp": "2024-06-16T03:30:34Z", "date_only": false, "value": "2024-06-16T03:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M869-MPFX-H3G2", "record": "GHSA-M869-MPFX-H3G2", "field": "published"}, {"timestamp": "2024-06-16T18:51:02Z", "date_only": false, "value": "2024-06-16T18:51:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7677", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "718671b4-4713-49e9-998a-842a0b74a34a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution\nURL\uff1ahttps://github.com/vin01/poc-cve-2024-38396\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7677"}, {"timestamp": "2024-06-17T15:06:00.006Z", "date_only": false, "value": "2024-06-17T15:06:00.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-38395", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-18T14:15:43.067Z", "date_only": false, "value": "2024-06-18T14:15:43.067220Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38395", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-06-18T14:15:43.067Z", "date_only": false, "value": "2024-06-18T14:15:43.067220Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38395", "record": "FKIE_CVE-2024-38395", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-18T14:18:11.693Z", "date_only": false, "value": "2024-06-18T14:18:11.693Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38395", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-26T16:06:39Z", "date_only": false, "value": "2024-06-26T16:06:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5b5d7be3-1582-40fe-9006-139de65f9b7d", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "90867fd8-784f-4262-9192-5aa451281fb4"}, {"timestamp": "2024-06-29T14:34:01Z", "date_only": false, "value": "2024-06-29T14:34:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GhostClanInt/25179", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "ee85fc1d-05e5-43d4-879d-ff532627be22", "content": "Tools - Hackers Factory \n\nOfficial Kali Linux tool to check all urls of a domain for SQL injections.\n\nhttps://github.com/malvads/sqlmc\n\nAn ADCS honeypot to catch attackers in your internal network.\n\nhttps://github.com/srlabs/Certiception\n\nActive Directory Cheat Sheet\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\nA decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported.\n\nhttps://github.com/mahaloz/DAILA\n\nA SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses.\n\nhttps://github.com/blacklanternsecurity/TREVORproxy\n\nCloud-Based Identity to Exfiltration Attack\n\nhttps://github.com/LearningKijo/SecurityResearcher-Note/blob/main/SecurityResearcher-Note-Folder%2FDay16-CloudId-Exfiltration-AttackReport-Part1.md\n\nPoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution\n\nhttps://github.com/vin01/poc-cve-2024-38396\n\nReflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege.\n https://github.com/sokaRepo/CoercedPotatoRDLL\n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/C3n7ral051nt4g3ncy/Eyes\n\nTunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available \n\ngithub.com/erebe/wstunnel\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GhostClanInt/25179"}, {"timestamp": "2024-06-29T18:04:14Z", "date_only": false, "value": "2024-06-29T18:04:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3363", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "5d1f98b1-bbff-4fa3-a834-75976a528f3b", "content": "Tools - Hackers Factory \n\nOfficial Kali Linux tool to check all urls of a domain for SQL injections.\n\nhttps://github.com/malvads/sqlmc\n\nAn ADCS honeypot to catch attackers in your internal network.\n\nhttps://github.com/srlabs/Certiception\n\nActive Directory Cheat Sheet\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\nA decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported.\n\nhttps://github.com/mahaloz/DAILA\n\nA SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses.\n\nhttps://github.com/blacklanternsecurity/TREVORproxy\n\nCloud-Based Identity to Exfiltration Attack\n\nhttps://github.com/LearningKijo/SecurityResearcher-Note/blob/main/SecurityResearcher-Note-Folder%2FDay16-CloudId-Exfiltration-AttackReport-Part1.md\n\nPoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution\n\nhttps://github.com/vin01/poc-cve-2024-38396\n\nReflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege.\n https://github.com/sokaRepo/CoercedPotatoRDLL\n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/C3n7ral051nt4g3ncy/Eyes\n\nTunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available \n\ngithub.com/erebe/wstunnel\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3363"}, {"timestamp": "2024-06-30T13:56:15Z", "date_only": false, "value": "2024-06-30T13:56:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/6836", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "9aaf436c-8578-4847-ac36-8b4c652e6073", "content": "Tools - Hackers Factory \n\nOfficial Kali Linux tool to check all urls of a domain for SQL injections.\n\nhttps://github.com/malvads/sqlmc\n\nAn ADCS honeypot to catch attackers in your internal network.\n\nhttps://github.com/srlabs/Certiception\n\nActive Directory Cheat Sheet\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\nA decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported.\n\nhttps://github.com/mahaloz/DAILA\n\nA SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses.\n\nhttps://github.com/blacklanternsecurity/TREVORproxy\n\nCloud-Based Identity to Exfiltration Attack\n\nhttps://github.com/LearningKijo/SecurityResearcher-Note/blob/main/SecurityResearcher-Note-Folder%2FDay16-CloudId-Exfiltration-AttackReport-Part1.md\n\nPoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution\n\nhttps://github.com/vin01/poc-cve-2024-38396\n\nReflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege.\n https://github.com/sokaRepo/CoercedPotatoRDLL\n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/C3n7ral051nt4g3ncy/Eyes\n\nTunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available \n\ngithub.com/erebe/wstunnel\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/6836"}, {"timestamp": "2024-06-30T13:56:15Z", "date_only": false, "value": "2024-06-30T13:56:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8087", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "b916671c-861f-44db-9bf1-1e6094a04f47", "content": "Tools - Hackers Factory \n\nOfficial Kali Linux tool to check all urls of a domain for SQL injections.\n\nhttps://github.com/malvads/sqlmc\n\nAn ADCS honeypot to catch attackers in your internal network.\n\nhttps://github.com/srlabs/Certiception\n\nActive Directory Cheat Sheet\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\nA decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported.\n\nhttps://github.com/mahaloz/DAILA\n\nA SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses.\n\nhttps://github.com/blacklanternsecurity/TREVORproxy\n\nCloud-Based Identity to Exfiltration Attack\n\nhttps://github.com/LearningKijo/SecurityResearcher-Note/blob/main/SecurityResearcher-Note-Folder%2FDay16-CloudId-Exfiltration-AttackReport-Part1.md\n\nPoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution\n\nhttps://github.com/vin01/poc-cve-2024-38396\n\nReflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege.\n https://github.com/sokaRepo/CoercedPotatoRDLL\n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/C3n7ral051nt4g3ncy/Eyes\n\nTunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available \n\ngithub.com/erebe/wstunnel\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8087"}, {"timestamp": "2024-07-03T18:45:28Z", "date_only": false, "value": "2024-07-03T18:45:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M869-MPFX-H3G2", "record": "GHSA-M869-MPFX-H3G2", "field": "modified"}, {"timestamp": "2024-08-02T04:12:24.681Z", "date_only": false, "value": "2024-08-02T04:12:24.681Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-38395", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T04:12:24.681Z", "date_only": false, "value": "2024-08-02T04:12:24.681Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-38395", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:40:03.530Z", "date_only": false, "value": "2026-06-17T07:40:03.530", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38395", "record": "FKIE_CVE-2024-38395", "field": "lastModified"}, {"timestamp": "2026-07-12T22:00:10.945Z", "date_only": false, "value": "2026-07-12T22:00:10.945722Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/915", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "f217def0-8750-47cb-83de-41955a6b77de", "url": "https://t.me/securixy_kz/915"}, {"timestamp": "2026-07-13T00:00:35.182Z", "date_only": false, "value": "2026-07-13T00:00:35.182472Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/915", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "9300579c-2278-4eef-9973-f2f8730fb4ee", "url": "https://t.me/securixy_kz/915"}, {"timestamp": "2026-07-14T00:00:58.399Z", "date_only": false, "value": "2026-07-14T00:00:58.399712Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/915", "record": "CVE-2024-38395", "field": "creation_timestamp", "uuid": "d2ba5172-9aa3-4246-b1cb-4c143642f49e", "url": "https://t.me/securixy_kz/915"}]}