{"metadata": {"vulnerability": "CVE-2024-6769", "count": 43, "kinds": {"milestone": 5, "sighting": 25, "kev": 0, "other": 13}}, "data": [{"timestamp": "2024-07-15T21:02:43.641Z", "date_only": false, "value": "2024-07-15T21:02:43.641Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-6769", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-26T20:18:38.460Z", "date_only": false, "value": "2024-09-26T20:18:38.460Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-6769", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-26T21:15:07Z", "date_only": false, "value": "2024-09-26T21:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QMR2-J5M9-CQ3M", "record": "GHSA-QMR2-J5M9-CQ3M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-26T21:15:07.787Z", "date_only": false, "value": "2024-09-26T21:15:07.787", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6769", "record": "FKIE_CVE-2024-6769", "field": "published"}, {"timestamp": "2024-09-26T21:31:11Z", "date_only": false, "value": "2024-09-26T21:31:11Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QMR2-J5M9-CQ3M", "record": "GHSA-QMR2-J5M9-CQ3M", "field": "published"}, {"timestamp": "2024-09-26T22:00:00Z", "date_only": false, "value": "2024-09-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2228", "record": "WID-SEC-W-2024-2228", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-26T22:00:00Z", "date_only": false, "value": "2024-09-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2228", "record": "WID-SEC-W-2024-2228", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-26T22:00:00Z", "date_only": false, "value": "2024-09-26T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2228", "record": "WID-SEC-W-2024-2228", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-09-26T23:51:55Z", "date_only": false, "value": "2024-09-26T23:51:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/6462", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "4aaa1ba2-0cc0-45f7-8ff7-abeacd176f52", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6769 - Microsoft Windows DLL Hijacking Elevation of Privilege\", \n  \"Content\": \"CVE ID : CVE-2024-6769 \nPublished : Sept. 26, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/6462"}, {"timestamp": "2024-09-27T16:18:40Z", "date_only": false, "value": "2024-09-27T16:18:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8618", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "e5841bff-3a20-4d74-adf2-1059b8e385ed", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)\nURL\uff1ahttps://github.com/fortra/CVE-2024-6769\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8618"}, {"timestamp": "2024-09-28T13:40:30Z", "date_only": false, "value": "2024-09-28T13:40:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3237", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "dc57fe7d-9058-4b96-b7a9-f233aa22436a", "content": "https://github.com/fortra/CVE-2024-6769\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)\n#github #poc", "url": "https://t.me/CNArsenal/3237"}, {"timestamp": "2024-09-29T12:48:05Z", "date_only": false, "value": "2024-09-29T12:48:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/1610", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "73dd409b-4170-44ad-b69a-b05e3aee2d0b", "content": "Elevating Privileges in Windows via Activation Cache Poisoning\n\nA deep dive into CVE-2024-6769, which leverages two chained bugs to escalate privileges from medium to high integrity. The first stage involves remapping the root drive, followed by a DLL hijacking exploit. The second stage poisons the Activation Cache through the CSRSS process to gain full administrator access.\n\nhttps://www.coresecurity.com/core-labs/articles/cve-2024-6769-poisoning-activation-cache-elevate-medium-high-integrity\n\nhttps://github.com/fortra/CVE-2024-6769", "url": "https://t.me/ZeroEthical_Course/1610"}, {"timestamp": "2024-09-29T22:00:00Z", "date_only": false, "value": "2024-09-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2228", "record": "WID-SEC-W-2024-2228", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-09-29T22:00:00Z", "date_only": false, "value": "2024-09-29T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2228", "record": "WID-SEC-W-2024-2228", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-30T10:09:35.844Z", "date_only": false, "value": "2024-09-30T10:09:35.844+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2228", "record": "WID-SEC-W-2024-2228", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-02T05:45:02Z", "date_only": false, "value": "2024-10-02T05:45:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1011", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "ba0cfd47-5f43-43e2-b7ad-8236014535d1", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1011"}, {"timestamp": "2024-10-02T05:45:08Z", "date_only": false, "value": "2024-10-02T05:45:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/23970", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "62ed0a26-3f04-4d79-b6ae-b5b886cb86a1", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/23970"}, {"timestamp": "2024-10-02T05:45:09Z", "date_only": false, "value": "2024-10-02T05:45:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/419", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "c9745166-0a2e-4129-9b44-03fdcf1f179f", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/419"}, {"timestamp": "2024-10-02T05:45:15Z", "date_only": false, "value": "2024-10-02T05:45:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7487", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "41ca2f50-d3e1-4feb-8aef-464a2b9dd9cd", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7487"}, {"timestamp": "2024-10-02T05:45:15Z", "date_only": false, "value": "2024-10-02T05:45:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8844", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "3aa4be3f-e8f1-4f82-b033-f92b23250ddb", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n\nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8844"}, {"timestamp": "2024-10-02T05:45:22Z", "date_only": false, "value": "2024-10-02T05:45:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3773", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "a1dafbb0-eda3-4f2b-9b22-38b826626192", "content": "Tools - Hackers Factory \n\nSmall security related tools created in Python and Bash for CTF players, bug bounty hunters, pentesters and developers.\n\nhttps://github.com/bl4de/security-tools\n\nCrawl4AI: Open-source LLM Friendly Web Crawler & Scrapper\n\nhttps://github.com/unclecode/crawl4ai\n\nTerminate AV/EDR Processes using kernel driver\n\nhttps://github.com/mertdas/SharpTerminator\n\nSmart contract audit skills roadmap for beginners, auditors, engineers, etc.\n\nhttps://github.com/slowmist/SlowMist-Learning-Roadmap-for-Becoming-a-Smart-Contract-Auditor\n\nReflective DLL Injection Made Bella\n\nhttps://github.com/oldboy21/RflDllOb\n\nScriptSentry finds misconfigured and dangerous logon scripts.  \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nExploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)\n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\n\nEDR & Antivirus Bypass to Gain Shell Access.\n \nhttps://github.com/murat-exp/EDR-Antivirus-Bypass-to-Gain-Shell-Access\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3773"}, {"timestamp": "2024-10-02T16:38:47Z", "date_only": false, "value": "2024-10-02T16:38:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/4904", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "a55d88ae-60b8-4be1-8a55-f80fd06a0fcd", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "url": "https://t.me/ton618cyber/4904"}, {"timestamp": "2024-10-02T16:38:48Z", "date_only": false, "value": "2024-10-02T16:38:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/1582", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "c0bf518f-dc66-4552-9c46-db6296a500cb", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "url": "https://t.me/ton618cyber/1582"}, {"timestamp": "2024-10-02T17:08:19.342Z", "date_only": false, "value": "2024-10-02T17:08:19.342974Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-6769", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-02T17:08:19.342Z", "date_only": false, "value": "2024-10-02T17:08:19.342974Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6769", "record": "FKIE_CVE-2024-6769", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-02T17:12:48.256Z", "date_only": false, "value": "2024-10-02T17:12:48.256Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-6769", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-10T13:45:23Z", "date_only": false, "value": "2024-10-10T13:45:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8624", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "42332308-8391-4e2b-8207-59d7442cc8e1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)\nURL\uff1ahttps://github.com/paragbagul111/CVE-2024-33209\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8624"}, {"timestamp": "2024-10-13T05:35:42Z", "date_only": false, "value": "2024-10-13T05:35:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3792", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "f1ae1611-d142-4a49-aa2f-70ef1615195c", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling  \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/  \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark  \n\nScriptSentry finds misconfigured and dangerous logon scripts.  \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3792"}, {"timestamp": "2024-10-13T05:35:50Z", "date_only": false, "value": "2024-10-13T05:35:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1063", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "6e22a815-bad8-48b7-a890-ac5069a6d972", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1063"}, {"timestamp": "2024-10-13T05:35:55Z", "date_only": false, "value": "2024-10-13T05:35:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7514", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "a00b4107-ae90-4ee8-bb5f-f3292054959c", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7514"}, {"timestamp": "2024-10-13T05:35:55Z", "date_only": false, "value": "2024-10-13T05:35:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8879", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "f97d6272-e390-4434-8af0-8a486eed980b", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8879"}, {"timestamp": "2024-10-13T05:36:01Z", "date_only": false, "value": "2024-10-13T05:36:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24069", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "c77267e5-7709-4224-a912-34f16d4314a2", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24069"}, {"timestamp": "2024-10-13T05:36:02Z", "date_only": false, "value": "2024-10-13T05:36:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/496", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "6a6661ca-5fc2-4998-8967-eb8795c8ef53", "content": "Tools Hackers Factory \n\nRecords an executable's network activity into a Full Packet Capture file (.pcap) and much more. \n\nhttps://github.com/H4NM/WhoYouCalling\u00a0 \n\nLinux kernel Netfilter Use-After-Free leads to LPE \n\nhttps://github.com/google/security-research/blob/master/pocs/linux/kernelctf/CVE-2024-26808_cos/docs/exploit.md\n\nFrom object transition to RCE in the Chrome renderer \n\nhttps://github.blog/security/vulnerability-research/from-object-transition-to-rce-in-the-chrome-renderer/\u00a0 \n\nDeep Linux runtime visibility meets Wireshark \n\nhttps://github.com/aquasecurity/traceeshark\u00a0 \n\nScriptSentry finds misconfigured and dangerous logon scripts.\u00a0 \n\nhttps://github.com/techspence/scriptsentry\n\nActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769) \n\nhttps://github.com/fortra/CVE-2024-6769\n\nCVE-2024-38816: Path traversal vulnerability in Spring Frameworks\n\nhttps://github.com/masa42/CVE-2024-38816-PoC\n\nexploit_dev/browsers/v8/CVE-2024-5830 at main \u00b7 uf0o/exploit_dev'\n\nhttps://github.com/uf0o/exploit_dev/tree/main/browsers/v8/CVE-2024-5830\n\nNameless C2 - A C2 with all its components written in Rust\n\nhttps://github.com/trickster0/NamelessC2\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/496"}, {"timestamp": "2024-11-01T03:20:06Z", "date_only": false, "value": "2024-11-01T03:20:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11202", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "0003f7bb-7a1f-4139-afc3-1ab077a3ca38", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769\n\n4. CVE-2024-45519: \nZimbra SMTP RCE\nhttps://blog.projectdiscovery.io/zimbra-remote-code-execution\n]-> https://github.com/p33d/CVE-2024-45519", "url": "https://t.me/CyberSecurityTechnologies/11202"}, {"timestamp": "2024-11-22T11:07:14Z", "date_only": false, "value": "2024-11-22T11:07:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ac18d72e-dbe1-4403-8fae-f60c8c9ccb51", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "de0df599-42d5-4777-b749-3cc5f69a5770"}, {"timestamp": "2025-08-29T20:22:43.078Z", "date_only": false, "value": "2025-08-29T20:22:43.078Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-6769", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-08-29T20:22:43.078Z", "date_only": false, "value": "2025-08-29T20:22:43.078Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Fortra", "record": "CVE-2024-6769", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-29T21:32:01Z", "date_only": false, "value": "2025-08-29T21:32:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QMR2-J5M9-CQ3M", "record": "GHSA-QMR2-J5M9-CQ3M", "field": "modified"}, {"timestamp": "2026-06-17T08:18:40.467Z", "date_only": false, "value": "2026-06-17T08:18:40.467", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6769", "record": "FKIE_CVE-2024-6769", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:10.558Z", "date_only": false, "value": "2026-07-29T12:02:10.558349Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4757", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "6534d161-c4e5-49cc-a2df-34c3197b97cb", "url": "https://t.me/reverseame/4757"}, {"timestamp": "2026-07-30T00:02:17.889Z", "date_only": false, "value": "2026-07-30T00:02:17.889493Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4757", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "4d92f36f-6ecc-4baf-9379-15cafd7e4f1e", "url": "https://t.me/reverseame/4757"}, {"timestamp": "2026-08-02T05:17:26.832Z", "date_only": false, "value": "2026-08-02T05:17:26.832594Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4757", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "985b6a46-c7b1-459c-8c37-186d332a0d3a", "url": "https://t.me/reverseame/4757"}, {"timestamp": "2026-08-03T02:13:58.695Z", "date_only": false, "value": "2026-08-03T02:13:58.695208Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4757", "record": "CVE-2024-6769", "field": "creation_timestamp", "uuid": "8f682250-9d9c-4de1-a63e-27e2dd9eddc4", "url": "https://t.me/reverseame/4757"}]}