{"metadata": {"vulnerability": "CVE-2024-7928", "count": 70, "kinds": {"milestone": 4, "sighting": 41, "kev": 11, "other": 14}}, "data": [{"timestamp": "2022-05-30T00:00:00Z", "date_only": false, "value": "2022-05-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7928", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-08-19T00:00:00Z", "date_only": false, "value": "2024-08-19T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7928", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-08-19T02:00:00Z", "date_only": false, "value": "2024-08-19T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7928", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2024-08-19T13:52:10.011Z", "date_only": false, "value": "2024-08-19T13:52:10.011Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-7928", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-19T15:57:30Z", "date_only": false, "value": "2024-08-19T15:57:30.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7928", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2024-08-19T21:31:06.029Z", "date_only": false, "value": "2024-08-19T21:31:06.029Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7928", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-19T21:31:06.029Z", "date_only": false, "value": "2024-08-19T21:31:06.029Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7928", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-19T22:15:06Z", "date_only": false, "value": "2024-08-19T22:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GP9J-WJXG-4R78", "record": "GHSA-GP9J-WJXG-4R78", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-19T22:15:06.203Z", "date_only": false, "value": "2024-08-19T22:15:06.203", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7928", "record": "FKIE_CVE-2024-7928", "field": "published"}, {"timestamp": "2024-08-20T00:32:57Z", "date_only": false, "value": "2024-08-20T00:32:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GP9J-WJXG-4R78", "record": "GHSA-GP9J-WJXG-4R78", "field": "published"}, {"timestamp": "2024-08-20T00:32:57Z", "date_only": false, "value": "2024-08-20T00:32:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GP9J-WJXG-4R78", "record": "GHSA-GP9J-WJXG-4R78", "field": "modified"}, {"timestamp": "2024-08-20T01:14:07Z", "date_only": false, "value": "2024-08-20T01:14:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/3571", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "e283086e-14ae-4509-8a35-74e37d8298ec", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7928 - FastAdmin Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7928 \nPublished : Aug. 19, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.3.4.20220530 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/3571"}, {"timestamp": "2024-08-20T07:15:06Z", "date_only": false, "value": "2024-08-20T07:15:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2240", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "dbc02419-870a-4d31-a379-3af300e6c5c4", "content": "CVE-2024-7928 FastAdmin\n*\n\u041e\u0431\u0445\u043e\u0434 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0432\u044b\u0442\u0430\u0449\u0438\u0442\u044c \u043a\u0440\u0435\u0434\u044b \u0411\u0414\n\u0414\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.3.3.20220121\n*\nPOC", "url": "https://t.me/proxy_bar/2240"}, {"timestamp": "2024-08-20T12:19:34Z", "date_only": false, "value": "2024-08-20T12:19:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8313", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "304929cd-5d2b-4445-b3ce-fdbf260c6ff3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-7928 fastadmin vulnerability POC & Scanning\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-7928\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8313"}, {"timestamp": "2024-08-20T13:16:10Z", "date_only": false, "value": "2024-08-20T13:16:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xatori_sec/83", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "e056beb4-c691-4f2c-936b-ea55380b0ee3", "content": "CVE-2024-7928 FastAdmin\n*\n\u041e\u0431\u0445\u043e\u0434 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0432\u044b\u0442\u0430\u0449\u0438\u0442\u044c \u043a\u0440\u0435\u0434\u044b \u0411\u0414\n\u0414\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.3.3.20220121\n*\nPOC", "url": "https://t.me/xatori_sec/83"}, {"timestamp": "2024-08-20T14:56:15Z", "date_only": false, "value": "2024-08-20T14:56:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3029", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "8c9ec2f9-2e24-43e1-bb6e-0126c3e126ef", "content": "https://github.com/bigb0x/CVE-2024-7928\n\nThis is a bulk scanning and exploitation tool for CVE-2024-7928\n#github #exploit", "url": "https://t.me/CNArsenal/3029"}, {"timestamp": "2024-08-20T15:38:32.028Z", "date_only": false, "value": "2024-08-20T15:38:32.028844Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7928", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-20T15:38:32.028Z", "date_only": false, "value": "2024-08-20T15:38:32.028844Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7928", "record": "FKIE_CVE-2024-7928", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-20T17:00:09Z", "date_only": false, "value": "2024-08-20T17:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bYo5cNwgm8pvS_ANST-IRrN-F6gtoGOeecliC8wUq-4v5VCw", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "5ae2bd4e-eb0c-464c-b59b-a423ceaa709c"}, {"timestamp": "2024-08-20T20:32:03Z", "date_only": false, "value": "2024-08-20T20:32:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/2537", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "9157474f-2f52-487f-9702-71613b1d0a23", "content": "\ud83d\udca1Bulk Scanning and Exploitation Tool for CVE-2024-7928 FastAdmin Instances\n\nhttps://darkwebinformer.com/bulk-scanning-and-exploitation-tool-for-cve-2024-7928-fastadmin-instances/", "url": "https://t.me/TheDarkWebInformer/2537"}, {"timestamp": "2024-08-21T00:00:00Z", "date_only": true, "value": "2024-08-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-36339", "record": "CNVD-2024-36339", "field": "submitTime"}, {"timestamp": "2024-08-21T04:57:55Z", "date_only": false, "value": "2024-08-21T04:57:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/716", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "ac2716b8-e5a1-454e-aaf1-d8dab46e590d", "content": "Tools  - Hackers Factory \n\nSharpToken is a tool for exploiting Token leaks. It can find leaked Tokens from all processes in the system and use them. If you are a low-privileged service user, you can even use it to upgrade to \"NT AUTHORITY\\SYSTEM\" privileges, and you can switch to the target user's desktop to do more without the target user's password.\n\nhttps://github.com/BeichenDream/SharpToken\n\nCVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.\n\nhttps://github.com/bigb0x/CVE-2024-7928\n\nTunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nFor Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility.\n\nCVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit\n\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner\n\ntoxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).\n\nhttps://github.com/t3l3machus/toxssin\n\nWapiti - Web Vulnerability Scanner\n\nhttps://github.com/wapiti-scanner/wapiti\n\nWhatWaf\n\nDetect and bypass web application firewalls and protection systems \n\nhttps://github.com/Ekultek/WhatWaf\n\nThe Web Application Firewall Fingerprinting Tool\n\nhttps://github.com/EnableSecurity/wafw00f\n\n#CyberDilara #CyberBulletin #HackersFactory\n\nhttps://t.me/dilagrafie\nhttps://t.me/CyberDilara\nhttps://t.me/CyberBulletin", "url": "https://t.me/CyberDilara/716"}, {"timestamp": "2024-08-21T04:58:01Z", "date_only": false, "value": "2024-08-21T04:58:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3680", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "4c65004a-0fa9-4571-8f74-c39af6d9f830", "content": "Tools\u00a0 - Hackers Factory \n\nSharpToken is a tool for exploiting Token leaks. It can find leaked Tokens from all processes in the system and use them. If you are a low-privileged service user, you can even use it to upgrade to \"NT AUTHORITY\\SYSTEM\" privileges, and you can switch to the target user's desktop to do more without the target user's password.\n\nhttps://github.com/BeichenDream/SharpToken\n\nCVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.\n\nhttps://github.com/bigb0x/CVE-2024-7928\n\nTunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nFor Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility.\n\nCVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit\n\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner\n\ntoxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).\n\nhttps://github.com/t3l3machus/toxssin\n\nWapiti - Web Vulnerability Scanner\n\nhttps://github.com/wapiti-scanner/wapiti\n\nWhatWaf\n\nDetect and bypass web application firewalls and protection systems \n\nhttps://github.com/Ekultek/WhatWaf\n\nThe Web Application Firewall Fingerprinting Tool\n\nhttps://github.com/EnableSecurity/wafw00f\n\n#CyberDilara #CyberBulletin #HackersFactory\n\nhttps://t.me/dilagrafie\nhttps://t.me/CyberDilara\nhttps://t.me/CyberBulletin", "url": "https://t.me/dilagrafie/3680"}, {"timestamp": "2024-08-21T04:58:22Z", "date_only": false, "value": "2024-08-21T04:58:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7313", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "c9d930e0-62fa-494b-8af9-6ca939ae0b55", "content": "Tools\u00a0 - Hackers Factory \n\nSharpToken is a tool for exploiting Token leaks. It can find leaked Tokens from all processes in the system and use them. If you are a low-privileged service user, you can even use it to upgrade to \"NT AUTHORITY\\SYSTEM\" privileges, and you can switch to the target user's desktop to do more without the target user's password.\n\nhttps://github.com/BeichenDream/SharpToken\n\nCVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.\n\nhttps://github.com/bigb0x/CVE-2024-7928\n\nTunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nFor Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility.\n\nCVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit\n\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner\n\ntoxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).\n\nhttps://github.com/t3l3machus/toxssin\n\nWapiti - Web Vulnerability Scanner\n\nhttps://github.com/wapiti-scanner/wapiti\n\nWhatWaf\n\nDetect and bypass web application firewalls and protection systems \n\nhttps://github.com/Ekultek/WhatWaf\n\nThe Web Application Firewall Fingerprinting Tool\n\nhttps://github.com/EnableSecurity/wafw00f\n\n#CyberDilara #CyberBulletin #HackersFactory\n\nhttps://t.me/dilagrafie\nhttps://t.me/CyberDilara\nhttps://t.me/CyberBulletin", "url": "https://t.me/GrayHatsHack/7313"}, {"timestamp": "2024-08-21T04:58:22Z", "date_only": false, "value": "2024-08-21T04:58:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8637", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "83811333-b2f0-4b4b-b540-05d597ac879a", "content": "Tools\u00a0 - Hackers Factory \n\nSharpToken is a tool for exploiting Token leaks. It can find leaked Tokens from all processes in the system and use them. If you are a low-privileged service user, you can even use it to upgrade to \"NT AUTHORITY\\SYSTEM\" privileges, and you can switch to the target user's desktop to do more without the target user's password.\n\nhttps://github.com/BeichenDream/SharpToken\n\nCVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.\n\nhttps://github.com/bigb0x/CVE-2024-7928\n\nTunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nFor Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility.\n\nCVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit\n\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner\n\ntoxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).\n\nhttps://github.com/t3l3machus/toxssin\n\nWapiti - Web Vulnerability Scanner\n\nhttps://github.com/wapiti-scanner/wapiti\n\nWhatWaf\n\nDetect and bypass web application firewalls and protection systems \n\nhttps://github.com/Ekultek/WhatWaf\n\nThe Web Application Firewall Fingerprinting Tool\n\nhttps://github.com/EnableSecurity/wafw00f\n\n#CyberDilara #CyberBulletin #HackersFactory\n\nhttps://t.me/dilagrafie\nhttps://t.me/CyberDilara\nhttps://t.me/CyberBulletin", "url": "https://t.me/GrayHatsHack/8637"}, {"timestamp": "2024-08-22T11:08:03Z", "date_only": false, "value": "2024-08-22T11:08:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/lostsec/1189", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "fa67943a-7613-4377-b0d1-27b3c4e795ea", "content": "CVE-2024-7928: FastAdmin < V1.3.4.20220530 Arbitrary File Reading Vulnerability\nFOFA Query: app=\"FASTADMIN-\u6846\u67b6\"\ntool: https://github.com/bigb0x/CVE-2024-7928", "url": "https://t.me/lostsec/1189"}, {"timestamp": "2024-08-22T11:13:29Z", "date_only": false, "value": "2024-08-22T11:13:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingtoolx/2105", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "4fa64172-2728-435f-a13b-a8f5e8f1f092", "content": "CVE-2024-7928: FastAdmin < V1.3.4.20220530 Arbitrary File Reading Vulnerability\nFOFA Query: app=\"FASTADMIN-\u6846\u67b6\"\ntool: https://github.com/bigb0x/CVE-2024-7928", "url": "https://t.me/hackingtoolx/2105"}, {"timestamp": "2024-08-22T12:10:27Z", "date_only": false, "value": "2024-08-22T12:10:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/23482", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "d3e345b0-7f99-4f98-8e7e-039882f2fa17", "content": "Tools  - Hackers Factory \n\nSharpToken is a tool for exploiting Token leaks. It can find leaked Tokens from all processes in the system and use them. If you are a low-privileged service user, you can even use it to upgrade to \"NT AUTHORITY\\SYSTEM\" privileges, and you can switch to the target user's desktop to do more without the target user's password.\n\nhttps://github.com/BeichenDream/SharpToken\n\nCVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.\n\nhttps://github.com/bigb0x/CVE-2024-7928\n\nTunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nFor Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility.\n\nCVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit\n\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner\n\ntoxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).\n\nhttps://github.com/t3l3machus/toxssin\n\nWapiti - Web Vulnerability Scanner\n\nhttps://github.com/wapiti-scanner/wapiti\n\nWhatWaf\n\nDetect and bypass web application firewalls and protection systems \n\nhttps://github.com/Ekultek/WhatWaf\n\nThe Web Application Firewall Fingerprinting Tool\n\nhttps://github.com/EnableSecurity/wafw00f\n\n#CyberDilara #CyberBulletin #HackersFactory\n\nhttps://t.me/dilagrafie\nhttps://t.me/CyberDilara\nhttps://t.me/CyberBulletin", "url": "https://t.me/InfoSecInsider/23482"}, {"timestamp": "2024-08-22T12:10:29Z", "date_only": false, "value": "2024-08-22T12:10:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/18", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "f942afbe-84b5-4911-bcb7-bffc2f9a0637", "content": "Tools  - Hackers Factory \n\nSharpToken is a tool for exploiting Token leaks. It can find leaked Tokens from all processes in the system and use them. If you are a low-privileged service user, you can even use it to upgrade to \"NT AUTHORITY\\SYSTEM\" privileges, and you can switch to the target user's desktop to do more without the target user's password.\n\nhttps://github.com/BeichenDream/SharpToken\n\nCVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances.\n\nhttps://github.com/bigb0x/CVE-2024-7928\n\nTunnel TCP connections through a file.\n\nhttps://github.com/fiddyschmitt/File-Tunnel\n\nFor Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility.\n\nCVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit\n\nhttps://github.com/securelayer7/CVE-2024-38856_Scanner\n\ntoxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting (XSS) vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool (toxin.js).\n\nhttps://github.com/t3l3machus/toxssin\n\nWapiti - Web Vulnerability Scanner\n\nhttps://github.com/wapiti-scanner/wapiti\n\nWhatWaf\n\nDetect and bypass web application firewalls and protection systems \n\nhttps://github.com/Ekultek/WhatWaf\n\nThe Web Application Firewall Fingerprinting Tool\n\nhttps://github.com/EnableSecurity/wafw00f\n\n#CyberDilara #CyberBulletin #HackersFactory\n\nhttps://t.me/dilagrafie\nhttps://t.me/CyberDilara\nhttps://t.me/CyberBulletin", "url": "https://t.me/InfoSecInsider/18"}, {"timestamp": "2024-08-22T12:22:53Z", "date_only": false, "value": "2024-08-22T12:22:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8329", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "57f9dd89-4c57-45f5-8e2f-eafe28d28d2e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\uff08CVE-2024-7928\uff09FastAdmin < V1.3.4.20220530\nURL\uff1ahttps://github.com/wh6amiGit/CVE-2024-7928\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8329"}, {"timestamp": "2024-08-23T00:00:00Z", "date_only": true, "value": "2024-08-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-36339", "record": "CNVD-2024-36339", "field": "openTime"}, {"timestamp": "2024-08-23T17:04:21Z", "date_only": false, "value": "2024-08-23T17:04:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8343", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "f42f4efb-76e7-4aab-93c0-d6bc9e445691", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-7928: FastAdmin < V1.3.4.20220530 Arbitrary File Reading Vulnerability\nURL\uff1ahttps://github.com/th3gokul/CVE-2024-7928\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8343"}, {"timestamp": "2024-08-29T16:49:59Z", "date_only": false, "value": "2024-08-29T16:49:59+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-7928", "field": "timestamps.asserted_at", "uuid": "45d15af4-202a-4704-a2fe-fa84bd150a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-29T16:49:59Z", "date_only": false, "value": "2024-08-29T16:49:59+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-7928", "field": "timestamps.first_seen_at", "uuid": "45d15af4-202a-4704-a2fe-fa84bd150a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-03T17:18:08.006Z", "date_only": false, "value": "2024-09-03T17:18:08.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-7928", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-03T17:18:08.006Z", "date_only": false, "value": "2024-09-03T17:18:08.006Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7928", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "1854634f-8763-4165-a4fd-937bcdfbbb41"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "11686a93-00b3-478a-b3eb-51cc5ee11eaf"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "448a6b18-9cc6-494c-8015-a98fb45a0d3b"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-21)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "ff1d4119-c653-43c7-8b6d-cf7580ff1f63"}, {"timestamp": "2025-03-22T00:00:00Z", "date_only": false, "value": "2025-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "efc0d194-c16a-4f15-b48e-2558620c4b0c"}, {"timestamp": "2025-04-07T00:00:00Z", "date_only": false, "value": "2025-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "5c3b793f-7eed-44e0-ac6a-9e3c8112aa1d"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "a860e285-0b11-4199-8911-cbffa93077ba"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "bbfb3325-2a1b-43a0-9496-58c90138e538"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "a01ffe9d-6456-4f44-a2f5-e8f7232cabde"}, {"timestamp": "2026-01-10T00:00:00Z", "date_only": false, "value": "2026-01-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "0ff63cb3-7e44-41cc-be91-4cdf32daeecb"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "ad5e75e3-a7b1-47e6-a01d-ef54962bfd9a"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "7187c945-e8c3-4b92-99a5-2be417c64f80"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-7928", "field": "timestamps.asserted_at", "uuid": "eb99352c-9c3e-424b-8377-f633e3f5ce55", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-7928", "field": "evidence.0.details.added_date", "uuid": "eb99352c-9c3e-424b-8377-f633e3f5ce55", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "428e9155-21a2-4e69-a6ad-670aab805f7b"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-7928", "field": "timestamps.first_seen_at", "uuid": "eb99352c-9c3e-424b-8377-f633e3f5ce55", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-7928", "field": "status.status_updated_at", "uuid": "eb99352c-9c3e-424b-8377-f633e3f5ce55", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-11T00:00:00Z", "date_only": false, "value": "2026-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "d0481471-fe0a-4b91-bc8a-156958393ef8"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "cc93c56d-f0e7-4200-a817-3a1959a69236"}, {"timestamp": "2026-06-17T08:21:12.740Z", "date_only": false, "value": "2026-06-17T08:21:12.740", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7928", "record": "FKIE_CVE-2024-7928", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-7928", "field": "timestamps.recorded_at", "uuid": "eb99352c-9c3e-424b-8377-f633e3f5ce55", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:37.449Z", "date_only": false, "value": "2026-06-19T12:42:37.449828Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/eb99352c-9c3e-424b-8377-f633e3f5ce55", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "f93a6f15-c52e-4e85-a810-15a501042575", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/eb99352c-9c3e-424b-8377-f633e3f5ce55"}, {"timestamp": "2026-06-19T12:45:42.704Z", "date_only": false, "value": "2026-06-19T12:45:42.704897Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6f392e8-b82e-4a26-84f4-c96bb6cc666f", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "52720cf8-f51e-4948-be52-82315c494cb5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6f392e8-b82e-4a26-84f4-c96bb6cc666f"}, {"timestamp": "2026-06-23T14:03:11.155Z", "date_only": false, "value": "2026-06-23T14:03:11.155401Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12b6937b-26d1-4a17-b828-215043c22f1e", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "490f2dab-bda6-4773-a49a-cd0dfe67c6f3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12b6937b-26d1-4a17-b828-215043c22f1e"}, {"timestamp": "2026-06-27T10:15:10.927Z", "date_only": false, "value": "2026-06-27T10:15:10.927196Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "240dd45c-f7a5-4151-a144-32810b12f117"}, {"timestamp": "2026-06-30T09:23:44.160Z", "date_only": false, "value": "2026-06-30T09:23:44.160289Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd9ddd39-5dca-41b7-8252-27a3366e06f6", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "6976fd59-6881-40ab-8b04-ef1f0f48baf0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd9ddd39-5dca-41b7-8252-27a3366e06f6"}, {"timestamp": "2026-06-30T10:00:08.661Z", "date_only": false, "value": "2026-06-30T10:00:08.661680Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "31f529ab-9cf7-4900-a43a-8c192d241295"}, {"timestamp": "2026-07-01T05:54:04.305Z", "date_only": false, "value": "2026-07-01T05:54:04.305759Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/45d15af4-202a-4704-a2fe-fa84bd150a87", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "b6462102-4378-4f61-a932-c756818065f7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/45d15af4-202a-4704-a2fe-fa84bd150a87"}, {"timestamp": "2026-09-01T20:00:07.823Z", "date_only": false, "value": "2026-09-01T20:00:07.823845Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/187001", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "97194433-a7a9-42a6-b280-4347bb79ad3a", "url": "https://t.me/hacking_Attack/187001"}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": false, "value": "2026-09-06T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-7928", "field": "timestamps.last_seen_at", "uuid": "45d15af4-202a-4704-a2fe-fa84bd150a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": true, "value": "2026-09-06", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-7928", "field": "evidence.0.details.observation_date", "uuid": "45d15af4-202a-4704-a2fe-fa84bd150a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": false, "value": "2026-09-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-7928", "field": "status.status_updated_at", "uuid": "45d15af4-202a-4704-a2fe-fa84bd150a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-08T01:00:01Z", "date_only": false, "value": "2026-09-08T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-7928", "field": "timestamps.recorded_at", "uuid": "45d15af4-202a-4704-a2fe-fa84bd150a87", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T10:15:12.739Z", "date_only": false, "value": "2026-09-16T10:15:12.739416Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "record": "CVE-2024-7928", "field": "creation_timestamp", "uuid": "99e1e925-ff73-4946-a9a7-5565ef666c47"}]}