{"metadata": {"vulnerability": "CVE-2024-7646", "count": 40, "kinds": {"milestone": 6, "sighting": 18, "kev": 0, "other": 16}}, "data": [{"timestamp": "2024-08-09T14:23:20.118Z", "date_only": false, "value": "2024-08-09T14:23:20.118Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-7646", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-16T17:36:53.783Z", "date_only": false, "value": "2024-08-16T17:36:53.783Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7646", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-16T18:15:10Z", "date_only": false, "value": "2024-08-16T18:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QX8J-XJ5Q-V7R3", "record": "GHSA-QX8J-XJ5Q-V7R3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-16T18:15:10.970Z", "date_only": false, "value": "2024-08-16T18:15:10.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7646", "record": "FKIE_CVE-2024-7646", "field": "published"}, {"timestamp": "2024-08-16T18:30:57Z", "date_only": false, "value": "2024-08-16T18:30:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QX8J-XJ5Q-V7R3", "record": "GHSA-QX8J-XJ5Q-V7R3", "field": "published"}, {"timestamp": "2024-08-16T18:30:57Z", "date_only": false, "value": "2024-08-16T18:30:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QX8J-XJ5Q-V7R3", "record": "GHSA-QX8J-XJ5Q-V7R3", "field": "modified"}, {"timestamp": "2024-08-16T20:02:54.833Z", "date_only": false, "value": "2024-08-16T20:02:54.833Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-7646", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T21:14:48Z", "date_only": false, "value": "2024-08-16T21:14:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/3354", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "64d1b501-f30a-4fe0-be33-354b6764735f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7646 - \"Ingress-Nginx Unsecured Command Injection and Credential Exposure\"\", \n  \"Content\": \"CVE ID : CVE-2024-7646 \nPublished : Aug. 16, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : A security issue was discovered in ingress-nginx where an actor with permission to create Ingress objects (in the `networking.k8s.io` or `extensions` API group) can bypass annotation validation to inject arbitrary commands and obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/3354"}, {"timestamp": "2024-08-17T14:16:54Z", "date_only": false, "value": "2024-08-17T14:16:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8282", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "0ae814b4-0e02-40f4-b571-52d2ac39defd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1apoc for CVE-2024-7646\nURL\uff1ahttps://github.com/UgOrange/CVE-2024-7646-poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8282"}, {"timestamp": "2024-08-17T14:46:06Z", "date_only": false, "value": "2024-08-17T14:46:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8283", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "67185c64-d586-4f3e-9143-df5cc2c3fb2d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1apoc for CVE-2024-7646\nURL\uff1ahttps://github.com/lfillaz/CVE-2024-7703\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8283"}, {"timestamp": "2024-08-18T18:38:09Z", "date_only": false, "value": "2024-08-18T18:38:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9038", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "15678dd2-33d6-46a6-a7ac-5a9ef67c41c5", "content": "CVE-2024-7646: Ingress-NGINX Annotation Validation Bypass\n\nhttps://www.armosec.io/blog/cve-2024-7646-ingress-nginx-annotation-validation-bypass/", "url": "https://t.me/thebugbountyhunter/9038"}, {"timestamp": "2024-08-18T22:00:00Z", "date_only": false, "value": "2024-08-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1876", "record": "WID-SEC-W-2024-1876", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-18T22:00:00Z", "date_only": false, "value": "2024-08-18T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1876", "record": "WID-SEC-W-2024-1876", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-18T22:00:00Z", "date_only": false, "value": "2024-08-18T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1876", "record": "WID-SEC-W-2024-1876", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-19T08:52:43Z", "date_only": false, "value": "2024-08-19T08:52:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/10475", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "e9ffa0fb-2852-42f9-9f72-d2fc199144b7", "content": "\u200aCVE-2024-7646: A Threat to Kubernetes Clusters Running ingress-nginx\n\nhttps://securityonline.info/cve-2024-7646-a-threat-to-kubernetes-clusters-running-ingress-nginx/", "url": "https://t.me/HackingInsights/10475"}, {"timestamp": "2024-08-19T09:17:15Z", "date_only": false, "value": "2024-08-19T09:17:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4060", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "8d451c64-a7fa-42c2-8a54-240acbfd5971", "content": "#exploit\n1. CVE-2024-7646:\nIngress-NGINX Annotation Validation Bypass\nhttps://www.armosec.io/blog/cve-2024-7646-ingress-nginx-annotation-validation-bypass\n\n2. CVE-2024-38856:\nApache OFBiz Pre-Authentication RCE (Scanner + Exploit)\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner", "url": "https://t.me/Rootsec_2/4060"}, {"timestamp": "2024-08-19T11:37:30.925Z", "date_only": false, "value": "2024-08-19T11:37:30.925578Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0349", "record": "NCSC-2024-0349", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-19T11:37:30.925Z", "date_only": false, "value": "2024-08-19T11:37:30.925578Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0349", "record": "NCSC-2024-0349", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-19T11:37:30.925Z", "date_only": false, "value": "2024-08-19T11:37:30.925578Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0349", "record": "NCSC-2024-0349", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-19T16:35:33.217Z", "date_only": false, "value": "2024-08-19T16:35:33.217Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / kubernetes", "record": "CVE-2024-7646", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-19T17:23:56.022Z", "date_only": false, "value": "2024-08-19T17:23:56.022443Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7646", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-19T17:23:56.022Z", "date_only": false, "value": "2024-08-19T17:23:56.022443Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7646", "record": "FKIE_CVE-2024-7646", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-19T18:28:09.677Z", "date_only": false, "value": "2024-08-19T18:28:09.677Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-7646", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-19T18:28:09.677Z", "date_only": false, "value": "2024-08-19T18:28:09.677Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7646", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-19T21:16:17Z", "date_only": false, "value": "2024-08-19T21:16:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11004", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "707bd67b-644c-44aa-bbec-361ef240f749", "content": "#exploit\n1. CVE-2024-7646:\nIngress-NGINX Annotation Validation Bypass\nhttps://www.armosec.io/blog/cve-2024-7646-ingress-nginx-annotation-validation-bypass\n\n2. CVE-2024-38856:\nApache OFBiz Pre-Authentication RCE (Scanner + Exploit)\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner", "url": "https://t.me/CyberSecurityTechnologies/11004"}, {"timestamp": "2024-08-20T04:46:41Z", "date_only": false, "value": "2024-08-20T04:46:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/190", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "f5473b15-6e23-474a-8e92-b890f3d2c084", "content": "#exploit\n1. CVE-2024-7646:\nIngress-NGINX Annotation Validation Bypass\nhttps://www.armosec.io/blog/cve-2024-7646-ingress-nginx-annotation-validation-bypass\n\n2. CVE-2024-38856:\nApache OFBiz Pre-Authentication RCE (Scanner + Exploit)\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner", "url": "https://t.me/HackerArsenal/190"}, {"timestamp": "2024-08-21T12:19:15Z", "date_only": false, "value": "2024-08-21T12:19:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Y-jSNZ_IQUkYAubV1S4YWAa8lwr1arZ_5gr5ni5Hizo2WEY", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "2abdf44a-c2e0-44f8-8181-c756c2119166"}, {"timestamp": "2024-08-29T18:49:32Z", "date_only": false, "value": "2024-08-29T18:49:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8410", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "413011e0-edf7-4274-972f-1d0b06be498d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC CVE-2024-7646\nURL\uff1ahttps://github.com/r0binak/CVE-2024-7646\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8410"}, {"timestamp": "2024-09-25T11:17:36Z", "date_only": false, "value": "2024-09-25T11:17:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8596", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "6d31163b-0f25-455a-bb19-aa63f3a689ac", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC CVE-2024-7646\nURL\uff1ahttps://github.com/dovics/cve-2024-7646\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8596"}, {"timestamp": "2024-10-22T14:06:49Z", "date_only": false, "value": "2024-10-22T14:06:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e972b85a-6874-4119-a161-54982628a7ff", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "b3d725f0-e29c-402b-9c3d-ff1794f66024"}, {"timestamp": "2024-10-29T23:00:00Z", "date_only": false, "value": "2024-10-29T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1876", "record": "WID-SEC-W-2024-1876", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-29T23:00:00Z", "date_only": false, "value": "2024-10-29T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1876", "record": "WID-SEC-W-2024-1876", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-30T10:06:54.961Z", "date_only": false, "value": "2024-10-30T10:06:54.961+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1876", "record": "WID-SEC-W-2024-1876", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-26T09:38:34.282Z", "date_only": false, "value": "2025-03-26T09:38:34.282351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3llbigus4d22z", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "78a7d507-d1da-4dd6-90dc-b889021fbf95", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3llbigus4d22z"}, {"timestamp": "2025-03-28T12:01:22.733Z", "date_only": false, "value": "2025-03-28T12:01:22.733338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fidelissauro.bsky.social/post/3llgre5bluc2q", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "6045609d-ed17-4d78-bf8e-ed19b827f000", "url": "https://bsky.app/profile/fidelissauro.bsky.social/post/3llgre5bluc2q"}, {"timestamp": "2026-06-17T08:20:36.660Z", "date_only": false, "value": "2026-06-17T08:20:36.660", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7646", "record": "FKIE_CVE-2024-7646", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:12.714Z", "date_only": false, "value": "2026-07-29T12:02:12.714253Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4654", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "ccaeff66-e771-488a-833b-862912b2872f", "url": "https://t.me/reverseame/4654"}, {"timestamp": "2026-07-30T00:02:19.548Z", "date_only": false, "value": "2026-07-30T00:02:19.548341Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4654", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "a9991c1c-13ed-494e-a302-f03f135caebd", "url": "https://t.me/reverseame/4654"}, {"timestamp": "2026-08-02T06:04:24.191Z", "date_only": false, "value": "2026-08-02T06:04:24.191127Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4654", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "77d03c8a-b30a-4fd9-a740-ac8bd1a27377", "url": "https://t.me/reverseame/4654"}, {"timestamp": "2026-08-03T02:13:51.716Z", "date_only": false, "value": "2026-08-03T02:13:51.716135Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4654", "record": "CVE-2024-7646", "field": "creation_timestamp", "uuid": "4221014a-b217-4e46-acdd-c3089b569a1b", "url": "https://t.me/reverseame/4654"}]}