{"metadata": {"vulnerability": "cve-2024-13915", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-03-04T13:18:34.018Z", "date_only": false, "value": "2025-03-04T13:18:34.018Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-13915", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-30T15:09:00Z", "date_only": false, "value": "2025-05-30T15:09:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "cve-2024-13915", "field": "containers.cna.datePublic"}, {"timestamp": "2025-05-30T15:09:58.520Z", "date_only": false, "value": "2025-05-30T15:09:58.520Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13915", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-30T16:00:23.806Z", "date_only": false, "value": "2025-05-30T16:00:23.806310Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-13915", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-30T16:00:23.806Z", "date_only": false, "value": "2025-05-30T16:00:23.806310Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13915", "record": "FKIE_CVE-2024-13915", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-30T16:02:14.501Z", "date_only": false, "value": "2025-05-30T16:02:14.501Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-13915", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-30T16:15:35Z", "date_only": false, "value": "2025-05-30T16:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9M9C-M3M8-59VC", "record": "GHSA-9M9C-M3M8-59VC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-30T16:15:35.953Z", "date_only": false, "value": "2025-05-30T16:15:35.953", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13915", "record": "FKIE_CVE-2024-13915", "field": "published"}, {"timestamp": "2025-05-30T16:29:10.452Z", "date_only": false, "value": "2025-05-30T16:29:10.452656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfnoti27oe2", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "abd7f681-48bd-4ff4-b7a8-f5d42d4325c4", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfnoti27oe2"}, {"timestamp": "2025-05-30T18:31:13Z", "date_only": false, "value": "2025-05-30T18:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9M9C-M3M8-59VC", "record": "GHSA-9M9C-M3M8-59VC", "field": "published"}, {"timestamp": "2025-05-30T20:06:01.101Z", "date_only": false, "value": "2025-05-30T20:06:01.101384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqfzsqmajr2q", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "e0eb2bbe-a5e0-48d6-9757-79db62dc9b7a", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqfzsqmajr2q"}, {"timestamp": "2025-06-02T13:12:00Z", "date_only": false, "value": "2025-06-02T13:12:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/06/preinstalled-apps-on-ulefone-kruger.html", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "565ac1d7-20db-463b-a2d6-6a42452eb8be", "url": "https://thehackernews.com/2025/06/preinstalled-apps-on-ulefone-kruger.html"}, {"timestamp": "2025-06-02T18:17:58Z", "date_only": false, "value": "2025-06-02T18:17:58.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/y4K9fjGlTAmL7-bu34_MvwCI8QvnT0oP9YmCmmX6pcRMTg", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "e9458a3d-7aa1-4d84-bde4-e5f63ae44ab2"}, {"timestamp": "2025-06-10T08:49:37.732Z", "date_only": false, "value": "2025-06-10T08:49:37.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-13915", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-10T08:49:37.732Z", "date_only": false, "value": "2025-06-10T08:49:37.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "cve-2024-13915", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-10T09:30:30Z", "date_only": false, "value": "2025-06-10T09:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9M9C-M3M8-59VC", "record": "GHSA-9M9C-M3M8-59VC", "field": "modified"}, {"timestamp": "2025-06-10T09:33:02Z", "date_only": false, "value": "2025-06-10T09:33:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17846", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "dff2889c-e581-4baa-841e-e67570c09564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13917\n\ud83d\udd25 CVSS Score: 8.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An\u00a0application \"com.pri.applock\", which is pre-loaded on\u00a0Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.\nExposed \u201dcom.pri.applock.LockUI\u201c activity allows any other malicious application, with no granted Android system permissions, to inject an arbitrary intent with system-level privileges to a protected application. One must know the protecting PIN number (it might be revealed by exploiting\u00a0CVE-2024-13916) or ask the user to provide it.\n\nOnly version (version name: 13, version code: 33) was tested and confirmed to have this vulnerability. \nApplication update was released in April 2025.\n\ud83d\udccf Published: 2025-05-30T15:17:47.318Z\n\ud83d\udccf Modified: 2025-06-10T09:12:56.279Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/05/CVE-2024-13915", "url": "https://t.me/DarkWebInformer_CVEAlerts/17846"}, {"timestamp": "2025-06-10T09:33:04Z", "date_only": false, "value": "2025-06-10T09:33:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17849", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "f806554c-8aef-449a-88de-3fe4474c1d21", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13915\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Android based smartphones from vendors such as Ulefone and\u00a0Kr\u00fcger&Matz contain \"com.pri.factorytest\" application preloaded onto devices during manufacturing process.\nThe application\u00a0\"com.pri.factorytest\"\u00a0(version name: 1.0, version code: 1)\u00a0exposes a \u201dcom.pri.factorytest.emmc.FactoryResetService\u201c service allowing any application to perform a factory reset of the device.\u00a0\nApplication update did not increment the APK version. Instead, it was bundled in OS builds released later than December 2024 (Ulefone) and April 2025 (Kr\u00fcger&Matz).\n\ud83d\udccf Published: 2025-05-30T15:09:58.520Z\n\ud83d\udccf Modified: 2025-06-10T08:49:37.732Z\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2025/05/CVE-2024-13915", "url": "https://t.me/DarkWebInformer_CVEAlerts/17849"}, {"timestamp": "2026-06-17T07:02:58.990Z", "date_only": false, "value": "2026-06-17T07:02:58.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13915", "record": "FKIE_CVE-2024-13915", "field": "lastModified"}, {"timestamp": "2026-07-22T05:00:05.863Z", "date_only": false, "value": "2026-07-22T05:00:05.863728Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/520", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "cb7aaa02-0852-4153-b2e0-2f108bca7338", "url": "https://t.me/pphm_HackerNews/520"}, {"timestamp": "2026-07-23T00:00:24.017Z", "date_only": false, "value": "2026-07-23T00:00:24.017606Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/520", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "f5725588-b557-4e14-855e-6d33dae539d3", "url": "https://t.me/pphm_HackerNews/520"}, {"timestamp": "2026-08-14T16:00:12.312Z", "date_only": false, "value": "2026-08-14T16:00:12.312504Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/727", "record": "CVE-2024-13915", "field": "creation_timestamp", "uuid": "813a4afb-4f33-4daa-a973-39ea1a168135", "url": "https://t.me/purp_sec/727"}]}