{"metadata": {"vulnerability": "GHSA-JQCX-CCGC-XWHV", "count": 8, "kinds": {"milestone": 0, "sighting": 8, "kev": 0, "other": 0}}, "data": [{"timestamp": "2023-09-02T23:00:03Z", "date_only": false, "value": "2023-09-02T23:00:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/891", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "6437a6fa-e9ba-4a3d-9c38-25d1c9af1868", "content": "CVE-2023-3824 : PHP < 8.0.30 Buffer overflow and overread in phar_dir_read()\nSummary : \nBuffer mismanagement in phar_dir_read() causes a buffer overflow and a buffer overread later.\nDetails  : \nhttps://github.com/php/php-src/blob/be71cadc2f899bc39fe27098042139392e2187db/ext/phar/dirstream.c#L89C1-L116\nPOC : https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv", "url": "https://t.me/MrVGunz/891", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-03-03T21:29:38Z", "date_only": false, "value": "2024-03-03T21:29:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xqaS9oQHj19EK8HlDk1UF-Sk0jvrfWjgjfI0LppzJ-gDvVs", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "0236cb61-fe03-4ad7-90fd-546ced2513c4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-05T21:43:54Z", "date_only": false, "value": "2024-04-05T21:43:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/16877", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "715c1b5b-7f0a-498e-83af-2df9c68d41eb", "content": "CVE-2023-3824 vulnerability .\n\nMore details: https://nvd.nist.gov/vuln/detail/CVE-2023-3824\n\nExploit: https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv", "url": "https://t.me/LockBitRaasRansomware/16877", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-05T21:43:54Z", "date_only": false, "value": "2024-04-05T21:43:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VWo2h8AbxPmyxGxPyU52gds0kEQ-BSb2QOV1f7kqaK5d0A4", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "c812080a-4ee0-45be-bbdd-b48246ad02a7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-05T23:16:32Z", "date_only": false, "value": "2024-04-05T23:16:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gry8yapGlnw-_PuwRwUbmhmR8DlL77eCnsgxUGNwaSEGQQU", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "7cc34dfe-9334-4ea2-92ed-5ae96335b750", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-05T23:16:33Z", "date_only": false, "value": "2024-04-05T23:16:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/T8RrVhYocnMnDFdZe3eZtaiEF5y3WBd0rlqr1qdZzfHfTA", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "8021c982-28c9-4f9a-aef0-afa05fc1fd11", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-07T21:44:38Z", "date_only": false, "value": "2024-04-07T21:44:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fzHn0ebqNr3Xz7uVET6h6k_c0r5fv7H30uJ7EYStbABLkxY", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "a3320da3-a28b-4086-bd4d-af59699ee15a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-07T21:44:40Z", "date_only": false, "value": "2024-04-07T21:44:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1tvljGnqs_gH8ptwRWquPXQ1OnfnrYfZMfH5i0z8ghp7WA", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "0a9ab6ab-5de3-4aee-913b-a1102e2124f8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-14T16:42:08.908Z", "anchors": {"origin": null, "discovery": null, "report": null, "acknowledgement": null, "disclosure": null, "exploit_publication": {"timestamp": "2023-09-02T23:00:03Z", "date_only": false, "value": "2023-09-02T23:00:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/891", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "6437a6fa-e9ba-4a3d-9c38-25d1c9af1868", "content": "CVE-2023-3824 : PHP < 8.0.30 Buffer overflow and overread in phar_dir_read()\nSummary : \nBuffer mismanagement in phar_dir_read() causes a buffer overflow and a buffer overread later.\nDetails  : \nhttps://github.com/php/php-src/blob/be71cadc2f899bc39fe27098042139392e2187db/ext/phar/dirstream.c#L89C1-L116\nPOC : https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv", "url": "https://t.me/MrVGunz/891", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit": {"available": false, "missing": ["start", "end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["start"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["start", "end"]}, "time_unpatched": {"available": false, "missing": ["start"]}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 100978925.90853, "hours": 28049.701641258333, "days": 1168.7375683857638, "min_seconds": 100978925.90853, "max_seconds": 100978925.90853, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-02T23:00:03Z", "date_only": false, "value": "2023-09-02T23:00:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/891", "record": "GHSA-JQCX-CCGC-XWHV", "field": "creation_timestamp", "uuid": "6437a6fa-e9ba-4a3d-9c38-25d1c9af1868", "content": "CVE-2023-3824 : PHP < 8.0.30 Buffer overflow and overread in phar_dir_read()\nSummary : \nBuffer mismanagement in phar_dir_read() causes a buffer overflow and a buffer overread later.\nDetails  : \nhttps://github.com/php/php-src/blob/be71cadc2f899bc39fe27098042139392e2187db/ext/phar/dirstream.c#L89C1-L116\nPOC : https://github.com/php/php-src/security/advisories/GHSA-jqcx-ccgc-xwhv", "url": "https://t.me/MrVGunz/891", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T16:42:08.908Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}