{"metadata": {"vulnerability": "cve-2024-25376", "count": 21, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-02-07T00:00:00Z", "date_only": false, "value": "2024-02-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-25376", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-08T06:02:25.055Z", "date_only": false, "value": "2024-02-08T06:02:25.055746Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-25376", "record": "GSD-2024-25376", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-25T05:49:36Z", "date_only": false, "value": "2024-02-25T05:49:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2027", "record": "CVE-2024-25376", "field": "creation_timestamp", "uuid": "a8629aa0-a29a-49c4-addc-9a1696257a60", "content": "https://github.com/ewilded/CVE-2024-25376-POC\n\nCVE-2024-25376 - Local Privilege Escalation in TUSBAudio (driver installers after v5.40.0 and before v5.68.0 are affected).\n#github #\u63d0\u6743 #tools", "url": "https://t.me/CNArsenal/2027"}, {"timestamp": "2024-02-25T12:47:01Z", "date_only": false, "value": "2024-02-25T12:47:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10038", "record": "CVE-2024-25376", "field": "creation_timestamp", "uuid": "e2538748-ee5a-45bf-b1fb-fe55c3536d21", "content": "#exploit\n1. Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild\nhttps://buer.haus/2024/02/23/go-go-xss-gadgets-chaining-a-dom-clobbering-exploit-in-the-wild\n\n2. CVE-2024-25376:\nLPEscalation in TUSBAudio\nhttps://github.com/ewilded/CVE-2024-25376-POC\n\n3. RCE PoC for Empire C2 framework\nhttps://github.com/ACE-Responder/Empire-C2-RCE-PoC", "url": "https://t.me/CyberSecurityTechnologies/10038"}, {"timestamp": "2024-04-11T00:00:00Z", "date_only": false, "value": "2024-04-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-25376", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-11T20:46:42.323Z", "date_only": false, "value": "2024-04-11T20:46:42.323Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-25376", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-11T21:15:07Z", "date_only": false, "value": "2024-04-11T21:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-42G9-27RX-76CJ", "record": "GHSA-42G9-27RX-76CJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-11T21:15:07.937Z", "date_only": false, "value": "2024-04-11T21:15:07.937", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-25376", "record": "FKIE_CVE-2024-25376", "field": "published"}, {"timestamp": "2024-04-11T21:15:07.937Z", "date_only": false, "value": "2024-04-11T21:15:07.937", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-25376", "record": "GSD-2024-25376", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-11T21:30:52Z", "date_only": false, "value": "2024-04-11T21:30:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-42G9-27RX-76CJ", "record": "GHSA-42G9-27RX-76CJ", "field": "published"}, {"timestamp": "2024-04-12T12:43:57.400Z", "date_only": false, "value": "2024-04-12T12:43:57.400", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-25376", "record": "GSD-2024-25376", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-13T01:17:10Z", "date_only": false, "value": "2024-04-13T01:17:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4620", "record": "CVE-2024-25376", "field": "creation_timestamp", "uuid": "9cebf16b-3d7e-40fc-bb27-cc6ccfe910c2", "content": "#ExploitObserverAlert\n\nCVE-2024-25376\n\nDESCRIPTION: Exploit Observer has 5 entries in 3 file formats related to CVE-2024-25376. An issue discovered in Thesycon Software Solutions Gmbh & Co. KG TUSBAudio MSI-based installers before 5.68.0 allows a local attacker to execute arbitrary code via the msiexec.exe repair mode.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.6369742", "url": "https://t.me/arpsyndicate/4620"}, {"timestamp": "2024-04-17T15:55:23.872Z", "date_only": false, "value": "2024-04-17T15:55:23.872307Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-25376", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-04-17T15:55:23.872Z", "date_only": false, "value": "2024-04-17T15:55:23.872307Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-25376", "record": "FKIE_CVE-2024-25376", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-08T15:31:54Z", "date_only": false, "value": "2024-07-08T15:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-42G9-27RX-76CJ", "record": "GHSA-42G9-27RX-76CJ", "field": "modified"}, {"timestamp": "2024-08-01T23:44:08.657Z", "date_only": false, "value": "2024-08-01T23:44:08.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-25376", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-21T17:18:22Z", "date_only": false, "value": "2025-02-21T17:18:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4926", "record": "CVE-2024-25376", "field": "creation_timestamp", "uuid": "f6cde735-5211-4e38-8600-881da9174fad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-25376\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue discovered in Thesycon Software Solutions Gmbh & Co. KG TUSBAudio MSI-based installers before 5.68.0 allows a local attacker to execute arbitrary code via the msiexec.exe repair mode.\n\ud83d\udccf Published: 2024-04-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T17:00:49.289Z\n\ud83d\udd17 References:\n1. https://www.thesycon.de/eng/usb_audiodriver.shtml#SecurityAdvisory", "url": "https://t.me/DarkWebInformer_CVEAlerts/4926"}, {"timestamp": "2025-02-21T22:10:26Z", "date_only": false, "value": "2025-02-21T22:10:26.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/VT4JPGUR_bScxEtXCsfyvGMd_M5HTrbEkxvqrbjlcnyBo_il", "record": "CVE-2024-25376", "field": "creation_timestamp", "uuid": "fb0ed75b-8311-490b-b7be-57491ddd2e3d"}, {"timestamp": "2025-03-13T20:17:31.292Z", "date_only": false, "value": "2025-03-13T20:17:31.292Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-25376", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-13T20:17:31.292Z", "date_only": false, "value": "2025-03-13T20:17:31.292Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-25376", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:15:55.720Z", "date_only": false, "value": "2026-06-17T07:15:55.720", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-25376", "record": "FKIE_CVE-2024-25376", "field": "lastModified"}]}