{"metadata": {"vulnerability": "CVE-2024-43425", "count": 57, "kinds": {"milestone": 8, "sighting": 29, "kev": 0, "other": 20}}, "data": [{"timestamp": "2024-08-12T00:00:00Z", "date_only": false, "value": "2024-08-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / fedora", "record": "CVE-2024-43425", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-08-13T07:15:00.597Z", "date_only": false, "value": "2024-08-13T07:15:00.597Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-43425", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-18T22:00:00Z", "date_only": false, "value": "2024-08-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1877", "record": "WID-SEC-W-2024-1877", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-18T22:00:00Z", "date_only": false, "value": "2024-08-18T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1877", "record": "WID-SEC-W-2024-1877", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-18T22:00:00Z", "date_only": false, "value": "2024-08-18T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1877", "record": "WID-SEC-W-2024-1877", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-19T00:00:00Z", "date_only": false, "value": "2024-08-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0696", "record": "CERTFR-2024-AVI-0696", "field": "last_revision_date"}, {"timestamp": "2024-08-19T00:00:00Z", "date_only": true, "value": "2024-08-19", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0696", "record": "CERTFR-2024-AVI-0696", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-08-19T00:00:00Z", "date_only": false, "value": "2024-08-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0696", "record": "CERTFR-2024-AVI-0696", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-19T04:00:00Z", "date_only": false, "value": "2024-08-19T04:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / fedora", "record": "CVE-2024-43425", "field": "containers.cna.datePublic"}, {"timestamp": "2024-08-19T04:00:00Z", "date_only": false, "value": "2024-08-19T04:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / fedora", "record": "CVE-2024-43425", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-08-28T09:02:28Z", "date_only": false, "value": "2024-08-28T09:02:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sV1gHuMmsF6Obkl4pHuEINogRh1QzHPw2lXaflMTbK27AeDb", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "73a24b5b-2a32-4cc8-93a8-cd3312add7d2"}, {"timestamp": "2024-08-28T22:00:00Z", "date_only": false, "value": "2024-08-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1877", "record": "WID-SEC-W-2024-1877", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-28T22:00:00Z", "date_only": false, "value": "2024-08-28T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1877", "record": "WID-SEC-W-2024-1877", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-29T09:08:14Z", "date_only": false, "value": "2024-08-29T09:08:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/11532", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "6e3cd985-9ad6-489d-9e8b-f64a90e3aac7", "content": "\u200aCVE-2024-43425: Moodle Remote Code Execution Vulnerability, PoC Published\n\nhttps://securityonline.info/cve-2024-43425-moodle-remote-code-execution-vulnerability-poc-published/", "url": "https://t.me/HackingInsights/11532"}, {"timestamp": "2024-08-29T12:38:16.603Z", "date_only": false, "value": "2024-08-29T12:38:16.603+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1877", "record": "WID-SEC-W-2024-1877", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-29T14:20:05Z", "date_only": false, "value": "2024-08-29T14:20:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6146", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "7f9025ae-7b11-48da-a0a3-8167023803d0", "content": "\u0412\u043a\u0440\u0430\u0442\u0446\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-6386 (CVSS: 9,9) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WPML \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0430\u0439\u0442\u044b WordPress \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 4.6.13, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 20 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430.\n\nWPML - \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u043d\u043e\u0433\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress c \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Stealthcopter \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0445 \u043a\u043e\u0434\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043f\u043e\u0441\u0442\u043e\u0432: \u0430\u0443\u0434\u0438\u043e, \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0432\u0438\u0434\u0435\u043e.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u044f Contributor \u0438 \u0432\u044b\u0448\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438\u00a0\u043d\u0430\u0448\u043b\u0438\u00a0\u0441\u043f\u043e\u0441\u043e\u0431 \u0434\u0430\u043c\u043f\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u0438\u043b\u0438 Fuse Key0) \u0434\u043b\u044f Intel SGX.\n\n\u041c\u0435\u0442\u043e\u0434 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0435\u0440\u0438\u044f\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432,\u00a0\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0430. \n\n\u042d\u0442\u043e\u0442 \u043a\u043b\u044e\u0447 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 SGX \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 Intel - \u0438\u043b\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043d\u0443\u0442\u0440\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0435 Intel. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0431\u0443\u0444\u0435\u0440, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0441\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f FK0.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041c\u0430\u0440\u043a\u0443\u0441 \u0425\u0430\u0442\u0447\u0438\u043d\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0442\u0430\u0442\u044c\u044e\u00a0\u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 CVE-2024-38063 (CVSS 9,8), \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0448\u0435\u043b \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 PoC (\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442) \u043d\u0435\u0442, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0433\u043e, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 DoS.\n\nMobile Security Framework (MobSF) \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u0434\u043b\u044f \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0438\u043d\u0433\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u0442\u0430\u043a ZIP Slip \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 MobSF.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8 \u0438 \u043f\u0440\u043e\u0441\u0442\u0430 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nRedTeam Pentensting \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e CVE-2024-43425 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c Moodle.\n\n\u0421\u0442\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC \u0434\u043b\u044f CVE-2024-38856, RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Apache OFBiz, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439\u00a0\u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0431\u0430\u0437\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a CISA KEV.\n\nMicrosoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0441\u0438\u043c\u0432\u043e\u043b\u044b ASCII \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 Copilot AI.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Trend Micro \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-37079 \u0432 VMware vCenter Server, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043f\u0440\u0438\u0447\u0438\u043d\u0443 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044f, \u043a\u0430\u043a \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0438 \u043e\u0434\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430.", "url": "https://t.me/true_secator/6146"}, {"timestamp": "2024-08-30T16:58:53Z", "date_only": false, "value": "2024-08-30T16:58:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlackHat0Hackers/3133", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "85c2fdac-38c6-46e7-938b-98f0d30d07e8", "content": "CVE-2024-43425: Moodle Remote Code Execution Vulnerability\n\nIn this post, we will show you how we bypassed the sanitization attempts of the popular learning platform Moodle to achieve remote code execution.\n\nSearch Query:\nHUNTER:/product.name=\"Moodle\"\nSHODAN:http.component:\"Moodle\"\nFOFA:app=\"Moodle\"", "url": "https://t.me/BlackHat0Hackers/3133"}, {"timestamp": "2024-08-30T19:30:05Z", "date_only": false, "value": "2024-08-30T19:30:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CypherStar/227", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "c4e52f73-172d-4c64-aa76-52d41f20e04b", "content": "\ud83d\ude0eCVE-2024-43425: Moodle Remote Code Execution Vulnerability\ud83d\ude0e\n\nIn this post, we will show you how we bypassed the sanitization attempts of the popular learning platform Moodle to achieve remote code execution.\n\nSearch Query:\nHUNTER:/product.name=\"Moodle\"\nSHODAN:http.component:\"Moodle\"\nFOFA:app=\"Moodle\"", "url": "https://t.me/CypherStar/227"}, {"timestamp": "2024-09-21T16:06:49Z", "date_only": false, "value": "2024-09-21T16:06:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18822", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "667aa3f1-e3be-4ca4-a25f-ad9e944dd50b", "url": "https://t.me/realLulzSec/18822"}, {"timestamp": "2024-09-21T16:06:49Z", "date_only": false, "value": "2024-09-21T16:06:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/2039", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "5403ce29-1a07-490b-a9fd-892313bf58a7", "url": "https://t.me/realLulzSec/2039"}, {"timestamp": "2024-09-21T16:07:02Z", "date_only": false, "value": "2024-09-21T16:07:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/F_0kXssBNAnzFCB7R9bFVUFk62G5CdZuqmDQbmRE-uzMdg", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "1c937eed-3a4e-45ae-84f8-cabec0d9cc5f"}, {"timestamp": "2024-09-21T20:25:51Z", "date_only": false, "value": "2024-09-21T20:25:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/414", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "7d5505c7-c445-4bf3-8453-a91d96b6d838", "url": "https://t.me/HackerArsenal/414"}, {"timestamp": "2024-09-27T18:49:57Z", "date_only": false, "value": "2024-09-27T18:49:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oxS2Lp-zXenWaOF5FWtEcVE3O5OKV2JFZ6LH2JtOfuHJy7c", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "eefc000c-906d-4f1d-9c25-4c63c3293b31"}, {"timestamp": "2024-11-03T04:41:27Z", "date_only": false, "value": "2024-11-03T04:41:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BackupLulz/244", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "48dcc022-4435-4cf1-b65a-615f141738e8", "url": "https://t.me/BackupLulz/244"}, {"timestamp": "2024-11-07T13:21:59.014Z", "date_only": false, "value": "2024-11-07T13:21:59.014Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-43425", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-11-07T13:21:59.014Z", "date_only": false, "value": "2024-11-07T13:21:59.014Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fedora", "record": "CVE-2024-43425", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-07T13:30:42.875Z", "date_only": false, "value": "2024-11-07T13:30:42.875118Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113441914362111021", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "d158609e-139c-4818-aec3-364f18b9c15f", "url": "https://infosec.exchange/users/cve/statuses/113441914362111021"}, {"timestamp": "2024-11-07T14:15:00Z", "date_only": false, "value": "2024-11-07T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-43425", "record": "UBUNTU-CVE-2024-43425", "field": "published"}, {"timestamp": "2024-11-07T14:15:15Z", "date_only": false, "value": "2024-11-07T14:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V6F4-V8H8-3C87", "record": "GHSA-V6F4-V8H8-3C87", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-11-07T14:15:15.280Z", "date_only": false, "value": "2024-11-07T14:15:15.280", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43425", "record": "FKIE_CVE-2024-43425", "field": "published"}, {"timestamp": "2024-11-07T14:41:20.305Z", "date_only": false, "value": "2024-11-07T14:41:20.305328Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43425", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-07T14:41:20.305Z", "date_only": false, "value": "2024-11-07T14:41:20.305328Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43425", "record": "FKIE_CVE-2024-43425", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-07T14:45:17.071Z", "date_only": false, "value": "2024-11-07T14:45:17.071Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-43425", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-07T14:45:17.071Z", "date_only": false, "value": "2024-11-07T14:45:17.071Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-43425", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-07T15:31:52Z", "date_only": false, "value": "2024-11-07T15:31:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V6F4-V8H8-3C87", "record": "GHSA-V6F4-V8H8-3C87", "field": "published"}, {"timestamp": "2024-11-07T16:05:57Z", "date_only": false, "value": "2024-11-07T16:05:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/10090", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "07abe010-3ce1-4f91-85f9-a7d8f490bb9e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43425 - Moodle Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43425 \nPublished : Nov. 7, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/10090"}, {"timestamp": "2024-11-07T19:27:17Z", "date_only": false, "value": "2024-11-07T19:27:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V6F4-V8H8-3C87", "record": "GHSA-V6F4-V8H8-3C87", "field": "modified"}, {"timestamp": "2024-12-06T11:21:41Z", "date_only": false, "value": "2024-12-06T11:21:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/moodle_rce.rb", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "2274b2c0-ea1f-42a7-9689-468229b5677b", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/moodle_rce.rb"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "12741f50-552d-4797-9024-800e541c08a3"}, {"timestamp": "2025-02-09T12:00:09Z", "date_only": false, "value": "2025-02-09T12:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GLNGAp7-4r9Fw5qDTXN2bUbXQdnuxUMfCfnz3tT-FZBf56E", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "01179fe2-dc6c-4f53-ae9f-34403b7cfb87"}, {"timestamp": "2025-02-23T04:11:03Z", "date_only": false, "value": "2025-02-23T04:11:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "30f17c71-bc21-4d1b-83d5-712fab24d044"}, {"timestamp": "2025-05-02T06:18:44.557Z", "date_only": false, "value": "2025-05-02T06:18:44.557Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MOODLE-2024-43425", "record": "BIT-MOODLE-2024-43425", "field": "published"}, {"timestamp": "2025-07-02T09:02:55.063Z", "date_only": false, "value": "2025-07-02T09:02:55.063600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lsxu5faqiz26", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "5763d19f-45b9-4625-8e7e-d654a6722a98", "url": "https://bsky.app/profile/nimblenerd.social/post/3lsxu5faqiz26"}, {"timestamp": "2025-07-03T21:02:22.059Z", "date_only": false, "value": "2025-07-03T21:02:22.059348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lt3mss33pr2v", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "5e42281d-1d64-4a33-b447-92db15798c67", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lt3mss33pr2v"}, {"timestamp": "2025-08-24T16:37:59Z", "date_only": false, "value": "2025-08-24T16:37:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/48918", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "8b042da8-4dc4-4437-9c3d-6dcafbb30f44", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\ude80 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) \u2014 run commands remotely \u26a1\nURL\uff1ahttps://github.com/aayush256-sys/Moodle-authenticated-RCE\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/48918"}, {"timestamp": "2025-10-23T21:13:03Z", "date_only": false, "value": "2025-10-23T21:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "f7d12035-a746-4019-aeae-70485305d852"}, {"timestamp": "2026-06-17T07:51:01.360Z", "date_only": false, "value": "2026-06-17T07:51:01.360", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-43425", "record": "FKIE_CVE-2024-43425", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:12.949Z", "date_only": false, "value": "2026-07-09T03:00:12.949630Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/848", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "8f82801b-6581-4486-b8d7-9aaf8016c719", "url": "https://t.me/brutsecurity/848"}, {"timestamp": "2026-07-10T01:00:11.478Z", "date_only": false, "value": "2026-07-10T01:00:11.478288Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/848", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "2420f533-c035-4965-bca5-a0e8c686cb60", "url": "https://t.me/brutsecurity/848"}, {"timestamp": "2026-07-11T18:00:05.031Z", "date_only": false, "value": "2026-07-11T18:00:05.031707Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/848", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "79a05105-d258-4534-a099-766538d9686e", "url": "https://t.me/brutsecurity/848"}, {"timestamp": "2026-07-12T00:00:42.326Z", "date_only": false, "value": "2026-07-12T00:00:42.326720Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/848", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "8940f36e-4f8f-4a54-8613-dd07452b4804", "url": "https://t.me/brutsecurity/848"}, {"timestamp": "2026-07-29T12:02:12.977Z", "date_only": false, "value": "2026-07-29T12:02:12.977397Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4627", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "b9e7e9cc-0cec-4277-9900-9dd003c986b1", "url": "https://t.me/reverseame/4627"}, {"timestamp": "2026-07-30T00:02:19.815Z", "date_only": false, "value": "2026-07-30T00:02:19.815714Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4627", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "7ae39704-b4ed-4030-b609-83f586301a64", "url": "https://t.me/reverseame/4627"}, {"timestamp": "2026-08-02T07:06:35.611Z", "date_only": false, "value": "2026-08-02T07:06:35.611987Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4627", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "19e61bb9-9812-4f4f-b606-b5e4b81f1282", "url": "https://t.me/reverseame/4627"}, {"timestamp": "2026-08-03T02:13:51.254Z", "date_only": false, "value": "2026-08-03T02:13:51.254518Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4627", "record": "CVE-2024-43425", "field": "creation_timestamp", "uuid": "b731b73b-8ffa-430f-a25d-c45004c700eb", "url": "https://t.me/reverseame/4627"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MOODLE-2024-43425", "record": "BIT-MOODLE-2024-43425", "field": "modified"}, {"timestamp": "2026-09-23T15:51:31Z", "date_only": false, "value": "2026-09-23T15:51:31Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-43425", "record": "UBUNTU-CVE-2024-43425", "field": "modified"}]}