{"metadata": {"vulnerability": "cve-2024-46538", "count": 64, "kinds": {"milestone": 5, "sighting": 47, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-46538", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-22T00:00:00Z", "date_only": false, "value": "2024-10-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-46538", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-22T16:53:26.683Z", "date_only": false, "value": "2024-10-22T16:53:26.683Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-46538", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-22T17:15:03Z", "date_only": false, "value": "2024-10-22T17:15:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VV26-CPP3-559H", "record": "GHSA-VV26-CPP3-559H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-22T17:15:03.950Z", "date_only": false, "value": "2024-10-22T17:15:03.950", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-46538", "record": "FKIE_CVE-2024-46538", "field": "published"}, {"timestamp": "2024-10-22T18:32:11Z", "date_only": false, "value": "2024-10-22T18:32:11Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VV26-CPP3-559H", "record": "GHSA-VV26-CPP3-559H", "field": "published"}, {"timestamp": "2024-10-22T18:47:46.881Z", "date_only": false, "value": "2024-10-22T18:47:46.881774Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-46538", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-10-22T18:47:46.881Z", "date_only": false, "value": "2024-10-22T18:47:46.881774Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-46538", "record": "FKIE_CVE-2024-46538", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-22T18:51:47.447Z", "date_only": false, "value": "2024-10-22T18:51:47.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-46538", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-22T18:51:47.447Z", "date_only": false, "value": "2024-10-22T18:51:47.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-46538", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-22T20:28:40Z", "date_only": false, "value": "2024-10-22T20:28:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8638", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "4ffba1b5-3c70-445a-b86f-9d8f17c5a366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46538 - Pfsense XSS Permit\", \n  \"Content\": \"CVE ID : CVE-2024-46538 \nPublished : Oct. 22, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfaces_groups_edit.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8638"}, {"timestamp": "2024-10-22T21:30:37Z", "date_only": false, "value": "2024-10-22T21:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VV26-CPP3-559H", "record": "GHSA-VV26-CPP3-559H", "field": "modified"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3258", "record": "WID-SEC-W-2024-3258", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3258", "record": "WID-SEC-W-2024-3258", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3258", "record": "WID-SEC-W-2024-3258", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-22T22:00:00Z", "date_only": false, "value": "2024-10-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3258", "record": "WID-SEC-W-2024-3258", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-23T11:06:14.392Z", "date_only": false, "value": "2024-10-23T11:06:14.392+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3258", "record": "WID-SEC-W-2024-3258", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-23T16:22:43Z", "date_only": false, "value": "2024-10-23T16:22:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8817", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "6e925d2a-4c5a-490e-a074-0bc478a31676", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for CVE-2024-46538\nURL\uff1ahttps://github.com/EQSTLab/CVE-2024-46538\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8817"}, {"timestamp": "2024-10-23T17:44:48Z", "date_only": false, "value": "2024-10-23T17:44:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2323", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "756998a0-5372-46e5-aab4-722f453753ba", "content": "CVE-2024-46538\n*\nPfSense Stored XSS lead to RCE\n*\nPOC exploit", "url": "https://t.me/proxy_bar/2323"}, {"timestamp": "2024-10-23T17:46:21Z", "date_only": false, "value": "2024-10-23T17:46:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3354", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "e672f12c-8742-4922-a1f8-98207d552427", "content": "https://github.com/EQSTLab/CVE-2024-46538\n\nPoC for CVE-2024-46538\n#github #exploit", "url": "https://t.me/CNArsenal/3354"}, {"timestamp": "2024-10-23T19:29:44Z", "date_only": false, "value": "2024-10-23T19:29:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/610", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "704c2f56-edd5-442b-b36e-f5ea1f570591", "content": "https://github.com/EQSTLab/CVE-2024-46538\n\nPoC for CVE-2024-46538\n#github #exploit", "url": "https://t.me/HackerArsenal/610"}, {"timestamp": "2024-10-24T23:42:45Z", "date_only": false, "value": "2024-10-24T23:42:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11333", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "64ae2f77-220f-4720-a9a6-abbb9fb69257", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\nhttps://github.com/tandasat/CVE-2024-21305", "url": "https://t.me/CyberSecurityTechnologies/11333"}, {"timestamp": "2024-10-25T04:45:13Z", "date_only": false, "value": "2024-10-25T04:45:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/630", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "1b7eda2f-dd2e-47e1-b070-a0e9d8c01085", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\nhttps://github.com/tandasat/CVE-2024-21305", "url": "https://t.me/HackerArsenal/630"}, {"timestamp": "2024-10-28T04:16:04Z", "date_only": false, "value": "2024-10-28T04:16:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1119", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "f0b2d0ef-6e52-4518-b11f-f8ac1da33445", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/CyberDilara/1119"}, {"timestamp": "2024-10-28T04:16:24Z", "date_only": false, "value": "2024-10-28T04:16:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7554", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "d518c8f9-8b78-4cde-81f3-06b1fa46662e", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/GrayHatsHack/7554"}, {"timestamp": "2024-10-28T04:16:24Z", "date_only": false, "value": "2024-10-28T04:16:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8928", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "c4b4a6fe-7837-4519-9c6c-c8594b5e4cca", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/GrayHatsHack/8928"}, {"timestamp": "2024-10-29T04:16:04Z", "date_only": false, "value": "2024-10-29T04:16:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3827", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "5ef1e288-4cc6-44a5-85ac-cec8e37cb24d", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/dilagrafie/3827"}, {"timestamp": "2024-10-29T12:21:04Z", "date_only": false, "value": "2024-10-29T12:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24219", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "fda935c2-9e55-437d-a65a-3834b7fa43f7", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/24219"}, {"timestamp": "2024-10-29T12:21:04Z", "date_only": false, "value": "2024-10-29T12:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/587", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "0a0faedf-da4b-4bc6-be07-7ea65e062aac", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/587"}, {"timestamp": "2024-10-30T17:28:32Z", "date_only": false, "value": "2024-10-30T17:28:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/6134", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "b91ad4dd-3067-48c0-a7d4-116188746783", "content": "\ud83d\udea8PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538", "url": "https://t.me/TheDarkWebInformer/6134"}, {"timestamp": "2024-10-31T10:46:57Z", "date_only": false, "value": "2024-10-31T10:46:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1130", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "e8013d95-3c08-4cd9-b22d-9c461cd38447", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "url": "https://t.me/CyberDilara/1130"}, {"timestamp": "2024-10-31T12:33:29Z", "date_only": false, "value": "2024-10-31T12:33:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3837", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "4c88e9ce-04e1-4cf2-b3d7-86225ccafb2e", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "url": "https://t.me/dilagrafie/3837"}, {"timestamp": "2024-10-31T12:33:38Z", "date_only": false, "value": "2024-10-31T12:33:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7565", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "a0f71abc-a503-4ece-95b5-caa8fb0f40ba", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "url": "https://t.me/GrayHatsHack/7565"}, {"timestamp": "2024-10-31T12:33:38Z", "date_only": false, "value": "2024-10-31T12:33:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8939", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "f1da19a8-d333-496d-9f87-6261a4f0d741", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "url": "https://t.me/GrayHatsHack/8939"}, {"timestamp": "2024-10-31T12:33:48Z", "date_only": false, "value": "2024-10-31T12:33:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24238", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "c29fff91-e3c1-4a52-8fed-a3f5124e1f55", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/24238"}, {"timestamp": "2024-10-31T12:33:50Z", "date_only": false, "value": "2024-10-31T12:33:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/597", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "ab50f28f-0729-4e84-8a1d-b680ccac6da6", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/597"}, {"timestamp": "2024-11-01T04:23:04Z", "date_only": false, "value": "2024-11-01T04:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1134", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "b1c63213-92f8-4601-a216-217521b883fa", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1134"}, {"timestamp": "2024-11-01T04:43:04Z", "date_only": false, "value": "2024-11-01T04:43:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7569", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "553e79fa-9d95-4239-a3c1-9dcd777b0dbd", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7569"}, {"timestamp": "2024-11-01T04:43:04Z", "date_only": false, "value": "2024-11-01T04:43:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8943", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "8f8ecc60-5602-4892-9db9-8ecbbaaa16fb", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8943"}, {"timestamp": "2024-11-01T04:43:11Z", "date_only": false, "value": "2024-11-01T04:43:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24248", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "dd841fb9-e926-44a7-8943-050d33194154", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24248"}, {"timestamp": "2024-11-01T04:43:11Z", "date_only": false, "value": "2024-11-01T04:43:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/601", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "2a8043bd-3f0a-415a-90df-6d2108fbf170", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/601"}, {"timestamp": "2024-11-01T05:23:04Z", "date_only": false, "value": "2024-11-01T05:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3840", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "97104d46-f202-459a-8662-a1ac60f5923b", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3840"}, {"timestamp": "2024-11-04T19:03:25Z", "date_only": false, "value": "2024-11-04T19:03:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tU5p0bmXLikUG-iGebO8QMPEYdKoIsGSWKogBTjvVQ1ilA", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "4a7251b4-f1f5-47e3-a30c-f9aec28d4ba8"}, {"timestamp": "2024-11-05T12:24:03.827Z", "date_only": false, "value": "2024-11-05T12:24:03.827273Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "c446d6fb-3d19-4ff7-9782-97f02f20ad21"}, {"timestamp": "2024-11-09T03:34:05Z", "date_only": false, "value": "2024-11-09T03:34:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1195", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "eb81cf1a-a1b4-4d33-a2ae-7ed60dc4c771", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1195"}, {"timestamp": "2024-11-09T03:35:05Z", "date_only": false, "value": "2024-11-09T03:35:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3888", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "48209d64-1bf2-49ff-abef-97efce84f0d7", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3888"}, {"timestamp": "2024-11-09T04:45:10Z", "date_only": false, "value": "2024-11-09T04:45:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7617", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "5a5c572d-b626-4634-8076-841bf8558d83", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7617"}, {"timestamp": "2024-11-09T04:45:10Z", "date_only": false, "value": "2024-11-09T04:45:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8992", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "7fcc95ff-e5a6-427c-af9a-0c3eb26fc3e1", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8992"}, {"timestamp": "2024-11-09T04:45:16Z", "date_only": false, "value": "2024-11-09T04:45:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24315", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "1f0d1b6d-5da3-4444-98db-a8ff32b88874", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24315"}, {"timestamp": "2024-11-09T04:45:17Z", "date_only": false, "value": "2024-11-09T04:45:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/651", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "87cf2f88-b9c9-42d8-a04b-b80e8395ab85", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/651"}, {"timestamp": "2024-12-06T10:12:49Z", "date_only": false, "value": "2024-12-06T10:12:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/5389", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "28ca37a7-a898-4833-8b12-f76bed78c811", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS\nhttps://github.com/LauLeysen/CVE-2024-46538\n\n2. CVE-2024-35286/41713:\nMitel MiCollab SQLI / Path Traversal\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day\n\n3. CVE-2023-6200:\nLinux Kernel ICMPv6 Race Condtion\nhttps://u1f383.github.io/linux/2024/12/04/linux-kernel-icmpv6-and-cve-2023-6200.html", "url": "https://t.me/Rootsec_2/5389"}, {"timestamp": "2024-12-06T11:00:37Z", "date_only": false, "value": "2024-12-06T11:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11522", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "082ff62f-7043-41a2-bb37-c0dbaec4505e", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS\nhttps://github.com/LauLeysen/CVE-2024-46538\n\n2. CVE-2024-35286/41713:\nMitel MiCollab SQLI / Path Traversal\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day\n\n3. CVE-2023-6200:\nLinux Kernel ICMPv6 Race Condtion\nhttps://u1f383.github.io/linux/2024/12/04/linux-kernel-icmpv6-and-cve-2023-6200.html", "url": "https://t.me/CyberSecurityTechnologies/11522"}, {"timestamp": "2024-12-21T15:55:06Z", "date_only": false, "value": "2024-12-21T15:55:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckeArsenal/132", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "dee09495-f694-4104-93f1-03d12b4835b6", "content": "https://github.com/LauLeysen/CVE-2024-46538\n\nCVE-2024-46538 : PfSense Stored XSS Vulnerability\n#github #exploit #xss", "url": "https://t.me/ckeArsenal/132"}, {"timestamp": "2026-06-17T07:55:29.040Z", "date_only": false, "value": "2026-06-17T07:55:29.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-46538", "record": "FKIE_CVE-2024-46538", "field": "lastModified"}, {"timestamp": "2026-07-12T22:00:09.675Z", "date_only": false, "value": "2026-07-12T22:00:09.675416Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1032", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "461b7fa7-b3df-4ece-bd13-c68617ffb846", "url": "https://t.me/securixy_kz/1032"}, {"timestamp": "2026-07-13T01:00:07.290Z", "date_only": false, "value": "2026-07-13T01:00:07.290780Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1032", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "3c1d96c8-c8b7-4307-b780-fca97eea6b85", "url": "https://t.me/securixy_kz/1032"}, {"timestamp": "2026-07-14T00:01:00.873Z", "date_only": false, "value": "2026-07-14T00:01:00.873929Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/1032", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "c46ce177-c36a-456a-bc70-c9fb2335a26c", "url": "https://t.me/securixy_kz/1032"}, {"timestamp": "2026-07-29T12:01:57.555Z", "date_only": false, "value": "2026-07-29T12:01:57.555504Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sdnv_funkhole/1395", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "141af571-b640-4a44-b629-77c64baaa724", "url": "https://t.me/sdnv_funkhole/1395"}, {"timestamp": "2026-07-29T12:03:16.805Z", "date_only": false, "value": "2026-07-29T12:03:16.805418Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2274", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "c12f813a-6225-4d5a-8fe8-1ee250129ecc", "url": "https://t.me/sysadm_in_up/2274"}, {"timestamp": "2026-07-30T00:02:09.422Z", "date_only": false, "value": "2026-07-30T00:02:09.422182Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sdnv_funkhole/1395", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "4f7845cd-e727-48cd-baf2-7c3a8da8f331", "url": "https://t.me/sdnv_funkhole/1395"}, {"timestamp": "2026-07-30T00:03:02.376Z", "date_only": false, "value": "2026-07-30T00:03:02.376697Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2274", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "52ffdb06-4a31-4aed-9dec-c5b338c1c89b", "url": "https://t.me/sysadm_in_up/2274"}, {"timestamp": "2026-08-01T20:00:06.151Z", "date_only": false, "value": "2026-08-01T20:00:06.151078Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sdnv_funkhole/1395", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "708f01cd-97de-4c0a-92a9-2213d02cf3bd", "url": "https://t.me/sdnv_funkhole/1395"}, {"timestamp": "2026-08-02T00:00:22.299Z", "date_only": false, "value": "2026-08-02T00:00:22.299882Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sdnv_funkhole/1395", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "fb2c9536-1df7-4875-b84c-f5cc239fcbf2", "url": "https://t.me/sdnv_funkhole/1395"}, {"timestamp": "2026-08-04T00:00:05.799Z", "date_only": false, "value": "2026-08-04T00:00:05.799296Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2274", "record": "CVE-2024-46538", "field": "creation_timestamp", "uuid": "67c96f39-3fb9-4270-ad2a-e9dce82ee867", "url": "https://t.me/sysadm_in_up/2274"}]}