{"metadata": {"vulnerability": "cve-2024-40431", "count": 28, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 13}}, "data": [{"timestamp": "2024-07-05T00:00:00Z", "date_only": false, "value": "2024-07-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-40431", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-17T06:30:40Z", "date_only": false, "value": "2024-09-17T06:30:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8544", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "8a6dccbd-1017-4be4-8bb1-793cc57f9663", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK) ROUGHT SKELLETON ATM. WILL EVENTUALLY TURN IT INTO FULL EOP\nURL\uff1ahttps://github.com/SpiralBL0CK/CVE-2024-40431-CVE-2022-25479-EOP-CHAIN\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8544"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-40431", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-23T21:31:07.895Z", "date_only": false, "value": "2024-10-23T21:31:07.895Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-40431", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-23T22:15:02Z", "date_only": false, "value": "2024-10-23T22:15:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4WGW-M6JR-9H45", "record": "GHSA-4WGW-M6JR-9H45", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-23T22:15:02.340Z", "date_only": false, "value": "2024-10-23T22:15:02.340", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40431", "record": "FKIE_CVE-2024-40431", "field": "published"}, {"timestamp": "2024-10-24T00:33:36Z", "date_only": false, "value": "2024-10-24T00:33:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4WGW-M6JR-9H45", "record": "GHSA-4WGW-M6JR-9H45", "field": "published"}, {"timestamp": "2024-10-24T00:55:55Z", "date_only": false, "value": "2024-10-24T00:55:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8770", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "2040c182-af32-4fe9-bbb3-769e6afba0e0", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40431 - Realtek SD Card Reader Driver Kernel Memory Corruption (Write Arbitrary)\", \n  \"Content\": \"CVE ID : CVE-2024-40431 \nPublished : Oct. 23, 2024, 10:15 p.m. | 31\u00a0minutes ago \nDescription : A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SCSI_PASS_THROUGH control of the SD card reader driver allows an attacker to write to predictable kernel memory locations, even as a low-privileged user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8770"}, {"timestamp": "2024-10-24T17:42:30.688Z", "date_only": false, "value": "2024-10-24T17:42:30.688000Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40431", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-10-24T17:42:30.688Z", "date_only": false, "value": "2024-10-24T17:42:30.688000Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40431", "record": "FKIE_CVE-2024-40431", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-24T17:43:32.664Z", "date_only": false, "value": "2024-10-24T17:43:32.664Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-40431", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-24T17:43:32.664Z", "date_only": false, "value": "2024-10-24T17:43:32.664Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40431", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T21:31:03Z", "date_only": false, "value": "2024-10-24T21:31:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4WGW-M6JR-9H45", "record": "GHSA-4WGW-M6JR-9H45", "field": "modified"}, {"timestamp": "2024-10-27T16:49:25Z", "date_only": false, "value": "2024-10-27T16:49:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4876", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "34efc0ed-c4be-4525-946d-a566a4a42cef", "content": "#exploit\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512", "url": "https://t.me/Rootsec_2/4876"}, {"timestamp": "2024-10-28T13:32:54Z", "date_only": false, "value": "2024-10-28T13:32:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11344", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "457332c2-fe84-491c-a1ef-30d5a6103f68", "content": "#exploit\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512", "url": "https://t.me/CyberSecurityTechnologies/11344"}, {"timestamp": "2024-11-21T04:19:04Z", "date_only": false, "value": "2024-11-21T04:19:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3909", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "cc6b2330-5b16-4006-bb2a-70759eb755c9", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "url": "https://t.me/dilagrafie/3909"}, {"timestamp": "2024-11-21T07:58:58Z", "date_only": false, "value": "2024-11-21T07:58:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7649", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "07683387-bc2c-444a-948b-d7e823773764", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/7649"}, {"timestamp": "2024-11-21T07:58:58Z", "date_only": false, "value": "2024-11-21T07:58:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/9041", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "9adc5a5f-2019-47c8-a5cc-9477659c3a08", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/9041"}, {"timestamp": "2024-11-21T07:59:09Z", "date_only": false, "value": "2024-11-21T07:59:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24794", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "2f59a8fc-732b-4702-83b9-a115599457d0", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "url": "https://t.me/InfoSecInsider/24794"}, {"timestamp": "2024-11-21T07:59:09Z", "date_only": false, "value": "2024-11-21T07:59:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/739", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "67204104-decc-4299-aad5-2d3eb7aa6c49", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "url": "https://t.me/InfoSecInsider/739"}, {"timestamp": "2024-11-21T08:10:56Z", "date_only": false, "value": "2024-11-21T08:10:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1225", "record": "CVE-2024-40431", "field": "creation_timestamp", "uuid": "0d9d032d-4e85-4ec0-97ae-8c7b683e1c60", "content": "Tools - Hackers Factory \n\nDetect It Easy, or abbreviated \"DIE\" is a program for determining types of files.\n\nhttps://github.com/horsicq/Detect-It-Easy\n\n#Exploit\n\n1. CVE-2024-39205:\nPyload RCE with js2py sandbox escape\nhttps://github.com/Marven11/CVE-2024-39205-Pyload-RCE\n\n2. CVE-2024-40431,\nCVE-2022-25477 - 25480:\nVulnerabilities in RtsPer.sys (Realtek SD Card Reader Driver)\nhttps://github.com/zwclose/realteksd\n\n3. CVE-2024-1512:\nSQLI in MasterStudy LMS WP Plugin\nhttps://github.com/rat-c/CVE-2024-1512\n\nSemi-automatic OSINT framework and package manager\n\nhttps://github.com/kpcyrd/sn0int\n\nAn Instagram tracker that logs any changes to an Instagram account (followers, following, posts, and bio)\n\nhttps://github.com/ibnaleem/instatracker\n\n#HackersFactory", "url": "https://t.me/CyberDilara/1225"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3667", "record": "WID-SEC-W-2024-3667", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3667", "record": "WID-SEC-W-2024-3667", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3667", "record": "WID-SEC-W-2024-3667", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-06-23T22:00:00Z", "date_only": false, "value": "2025-06-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3667", "record": "WID-SEC-W-2024-3667", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-06-23T22:00:00Z", "date_only": false, "value": "2025-06-23T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3667", "record": "WID-SEC-W-2024-3667", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-24T07:49:14.187Z", "date_only": false, "value": "2025-06-24T07:49:14.187+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3667", "record": "WID-SEC-W-2024-3667", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T07:45:52.370Z", "date_only": false, "value": "2026-06-17T07:45:52.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40431", "record": "FKIE_CVE-2024-40431", "field": "lastModified"}]}