{"metadata": {"vulnerability": "cve-2024-4985", "count": 46, "kinds": {"milestone": 6, "sighting": 25, "kev": 0, "other": 15}}, "data": [{"timestamp": "2024-05-16T03:36:45.225Z", "date_only": false, "value": "2024-05-16T03:36:45.225Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-4985", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-20T21:17:27.315Z", "date_only": false, "value": "2024-05-20T21:17:27.315Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-4985", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-20T21:17:27.315Z", "date_only": false, "value": "2024-05-20T21:17:27.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_P", "record": "cve-2024-4985", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-20T22:15:08Z", "date_only": false, "value": "2024-05-20T22:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5PW9-F9R4-MV2R", "record": "GHSA-5PW9-F9R4-MV2R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-20T22:15:08.727Z", "date_only": false, "value": "2024-05-20T22:15:08.727", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4985", "record": "FKIE_CVE-2024-4985", "field": "published"}, {"timestamp": "2024-05-21T00:30:51Z", "date_only": false, "value": "2024-05-21T00:30:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5PW9-F9R4-MV2R", "record": "GHSA-5PW9-F9R4-MV2R", "field": "published"}, {"timestamp": "2024-05-21T15:30:05Z", "date_only": false, "value": "2024-05-21T15:30:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/731", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "9eb90b05-846f-437b-82e8-7ef9fba57f93", "content": "\u200aCVE-2024-4985 (CVSS 10): Critical Authentication Bypass Flaw Found in GitHub Enterprise Server\n\nhttps://securityonline.info/cve-2024-4985-cvss-10-critical-authentication-bypass-flaw-found-in-github-enterprise-server/", "url": "https://t.me/HackingInsights/731"}, {"timestamp": "2024-05-21T18:24:28Z", "date_only": false, "value": "2024-05-21T18:24:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/4990", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "07872ade-8833-419a-b0ee-978d33667893", "content": "\u26a1 Alert for GitHub Enterprise Server users. \n \nA critical flaw (CVE-2024-4985) has been found, allowing attackers to gain admin privileges by forging SAML responses. \n \nMore details in the article > https://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html \n \nCheck if your instance is affected & update immediately.", "url": "https://t.me/thehackernews/4990"}, {"timestamp": "2024-05-21T19:29:47Z", "date_only": false, "value": "2024-05-21T19:29:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/1979", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "88ad32a7-8928-4e25-8b0c-db77983b34a9", "content": "Critical GitHub Enterprise Server Flaw Allows Authentication Bypass\nhttps://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html\n\nGitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentication protections.\nTracked as\u00a0CVE-2024-4985\u00a0(CVSS score: 10.0), the issue could permit unauthorized access to an instance without requiring prior authentication.\n\"On instances that use SAML single sign-on (SSO) authentication with the", "url": "https://t.me/KomunitiSiber/1979"}, {"timestamp": "2024-05-21T19:50:50Z", "date_only": false, "value": "2024-05-21T19:50:50.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5PkwwqWpUDuWtHraZyPfheCmfEMAsIHD6X3wci2LMP5Q0ak", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "3edd1009-fcdc-48d6-be2b-02be206be0a0"}, {"timestamp": "2024-05-21T19:52:54Z", "date_only": false, "value": "2024-05-21T19:52:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/1544", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "67d33cc4-c836-4516-8e2a-6a58459d943e", "content": "The Hacker News\nCritical GitHub Enterprise Server Flaw Allows Authentication Bypass\n\nGitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentication protections.\nTracked as CVE-2024-4985 (CVSS score: 10.0), the issue could permit unauthorized access to an instance without requiring prior authentication.\n\"On instances that use SAML single sign-on (SSO) authentication with the", "url": "https://t.me/tengkorakcybercrewz/1544"}, {"timestamp": "2024-05-21T19:52:54Z", "date_only": false, "value": "2024-05-21T19:52:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/8260", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "6ac49af4-4e1e-4103-abea-9c593bbc564d", "content": "The Hacker News\nCritical GitHub Enterprise Server Flaw Allows Authentication Bypass\n\nGitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentication protections.\nTracked as CVE-2024-4985 (CVSS score: 10.0), the issue could permit unauthorized access to an instance without requiring prior authentication.\n\"On instances that use SAML single sign-on (SSO) authentication with the", "url": "https://t.me/tengkorakcybercrewz/8260"}, {"timestamp": "2024-05-21T20:23:51Z", "date_only": false, "value": "2024-05-21T20:23:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6zjp7CWcS56_MpPVE12auXNgfGE8Jwo4Labv7ZjewT4p-w", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "d47230d2-1039-45bb-8486-4a27b2c7d18c"}, {"timestamp": "2024-05-21T22:00:00Z", "date_only": false, "value": "2024-05-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1211", "record": "WID-SEC-W-2024-1211", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-05-21T22:00:00Z", "date_only": false, "value": "2024-05-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1211", "record": "WID-SEC-W-2024-1211", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-05-21T22:00:00Z", "date_only": false, "value": "2024-05-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1211", "record": "WID-SEC-W-2024-1211", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-05-21T22:00:00Z", "date_only": false, "value": "2024-05-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1211", "record": "WID-SEC-W-2024-1211", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-05-22T11:10:47Z", "date_only": false, "value": "2024-05-22T11:10:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/anti_malware/17518", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "e56c7fe6-3b09-42d8-b8b7-01752ecc5730", "content": "\u0412 GitHub Enterprise Server (GHES) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-4985), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.", "url": "https://t.me/anti_malware/17518"}, {"timestamp": "2024-05-22T12:35:57Z", "date_only": false, "value": "2024-05-22T12:35:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MrVGunz/1134", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "dd2a5a5b-b447-4533-8823-224d1b5c1ac0", "content": "\u0647\u0634\u062f\u0627\u0631 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 GitHub Enterprise Server.\n\n\u06cc\u06a9 \u0646\u0642\u0635 \u0628\u062d\u0631\u0627\u0646\u06cc (CVE-2024-4985) \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062c\u0639\u0644 \u067e\u0627\u0633\u062e\u200c\u0647\u0627\u06cc SAML \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631 \u062f\u0633\u062a \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n\n\u062c\u0632\u0626\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0645\u0642\u0627\u0644\u0647: https://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html\n\n\u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u0646\u0645\u0648\u0646\u0647 \u0634\u0645\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u0648 \u0641\u0648\u0631\u0627\u064b \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f.\n\nAlert for GitHub Enterprise Server users. \n \nA critical flaw (CVE-2024-4985) has been found, allowing attackers to gain admin privileges by forging SAML responses. \n \nMore details in the article: https://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html \n \nCheck if your instance is affected & update immediately.", "url": "https://t.me/MrVGunz/1134"}, {"timestamp": "2024-05-22T20:10:48Z", "date_only": false, "value": "2024-05-22T20:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/15856", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "9e4c8c3e-2a8b-41ae-a3c5-be4550f2c3ce", "content": "\u0412 GitHub Enterprise Server \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitHub \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitHub Enterprise Server (GHES). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-4985 (\u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f SAML SSO (Single Sign-On).\n\nhttps://xakep.ru/2024/05/22/ghes-saml-bug/", "url": "https://t.me/xakep_ru/15856"}, {"timestamp": "2024-05-23T10:57:36.609Z", "date_only": false, "value": "2024-05-23T10:57:36.609416Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0234", "record": "NCSC-2024-0234", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-05-23T10:57:36.609Z", "date_only": false, "value": "2024-05-23T10:57:36.609416Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0234", "record": "NCSC-2024-0234", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-05-23T10:57:36.609Z", "date_only": false, "value": "2024-05-23T10:57:36.609416Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0234", "record": "NCSC-2024-0234", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-05-23T12:50:32Z", "date_only": false, "value": "2024-05-23T12:50:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5769", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "3272f125-c283-48ea-aac5-da8491abebc0", "content": "GitHub \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Enterprise Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\nCVE-2024-4985 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438\u0437 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 CVSS 10/10 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Enterprise Server \u0434\u043e 3.13.0 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 SAML (SSO) \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0430 SAML.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e GitHub, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e SAML SSO \u0431\u0435\u0437 \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0443, \u043a\u0430\u043a Enterprise Server \u0431\u0435\u0437 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 SAML.\n\nGitHub \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Enterprise Server 3.9.15, 3.10.12, 3.11.10 \u0438 3.12.4.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043d\u043e \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVE-2024-4985, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c GitHub Enterprise Server \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVE-2024-4985 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.", "url": "https://t.me/true_secator/5769"}, {"timestamp": "2024-05-23T19:33:09Z", "date_only": false, "value": "2024-05-23T19:33:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingInsights/826", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "17a0649d-d370-4291-a58e-14f71b6fe332", "content": "\u200aCritical GitHub Enterprise Server Authentication Bypass bug. Fix it now!\n\nhttps://securityaffairs.com/163515/hacking/github-enterprise-server-cve-2024-4985.html", "url": "https://t.me/HackingInsights/826"}, {"timestamp": "2024-05-30T04:00:27.233Z", "date_only": false, "value": "2024-05-30T04:00:27.233770Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4985", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-30T04:00:27.233Z", "date_only": false, "value": "2024-05-30T04:00:27.233770Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4985", "record": "FKIE_CVE-2024-4985", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-01T06:24:37Z", "date_only": false, "value": "2024-06-01T06:24:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2570", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "1a89a611-11fa-4bcf-ac95-5c4b876c5b86", "content": "https://github.com/absholi7ly/Bypass-authentication-GitHub-Enterprise-Server\n\nCVE-2024-4985\n#github #poc", "url": "https://t.me/CNArsenal/2570"}, {"timestamp": "2024-06-01T11:57:06Z", "date_only": false, "value": "2024-06-01T11:57:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/darkcommunityofficial/892", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "82a91901-8d42-4b3d-b704-c2a7d1a4a938", "content": "https://github.com/absholi7ly/Bypass-authentication-GitHub-Enterprise-Server\n\nCVE-2024-4985\n#github #poc", "url": "https://t.me/darkcommunityofficial/892"}, {"timestamp": "2024-06-04T17:54:09.964Z", "date_only": false, "value": "2024-06-04T17:54:09.964Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4985", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-06T11:52:57Z", "date_only": false, "value": "2024-06-06T11:52:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10628", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "19db45fc-442d-41b8-b8df-f78f44a52e63", "content": "#exploit\n1. CVE-2024-4985:\nGitHub enterprise server auth bypass\nhttps://github.com/absholi7ly/Bypass-authentication-GitHub-Enterprise-Server\n\n2. CVE-2024-5326:\nPost Grid Gutenberg Blocks and WordPress Blog Plugin - PostX <=4.1.2 - Missing Authorization to Arbitrary Options Update\nhttps://github.com/truonghuuphuc/CVE-2024-5326-Poc", "url": "https://t.me/CyberSecurityTechnologies/10628"}, {"timestamp": "2024-08-01T20:55:10.505Z", "date_only": false, "value": "2024-08-01T20:55:10.505Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-4985", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:55:10.505Z", "date_only": false, "value": "2024-08-01T20:55:10.505Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-4985", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:09:26.452Z", "date_only": false, "value": "2024-08-15T18:09:26.452+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1211", "record": "WID-SEC-W-2024-1211", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-22T10:54:43Z", "date_only": false, "value": "2024-08-22T10:54:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Xf-OZTZ1qSXbTWHr-O3gplBCRCw1cGfJ6CVi9zCL3nwA1hI", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "d10ce6bf-aa19-4bc0-86a4-82221b77c0e5"}, {"timestamp": "2024-10-16T11:50:30Z", "date_only": false, "value": "2024-10-16T11:50:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6325", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "bff628fc-dd66-4c0a-a243-0db514b126dd", "content": "GitHub \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Enterprise Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-9487\u00a0(CVSS 9,5) \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-4985 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u044b SAML \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Enterprise Server.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GitHub, \u043d\u043e\u0432\u0430\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 SSO SAML \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439, \u0447\u0442\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0432 GitHub Enterprise Server.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b, \u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Enterprise Server, \u043d\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c SAML SSO \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0431\u0435\u0437 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0439, \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 SAML \u0438\u043b\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 GitHub Enterprise Server \u0432\u0435\u0440\u0441\u0438\u0439 3.11.16, 3.12.10, 3.13.5 \u0438 3.14.2 \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 CVE-2024-9539 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b SVG.\n\n\u0427\u0442\u043e\u0431\u044b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430\u0436\u0430\u0442\u044c \u043d\u0430 URL-\u0430\u0434\u0440\u0435\u0441 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u043a\u0442\u0438\u0432\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\nGitHub \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b BugBounty, \u0438 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0430\u044f-\u043b\u0438\u0431\u043e \u0438\u0437 \u043d\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 GitHub Enterprise Server \u0432\u0435\u0440\u0441\u0438\u0438 3.14.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 HTML-\u0444\u043e\u0440\u043c\u0430\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0443\u0442\u0435\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0438\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.", "url": "https://t.me/true_secator/6325"}, {"timestamp": "2024-11-12T04:59:20Z", "date_only": false, "value": "2024-11-12T04:59:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2372", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "64f8fc4e-f8c7-4429-962c-712bffb50850", "content": "CVE-2024-50340 - Adapted EOS Exploit\n*\nCVE-2024-4985 / CVE-2024-9487 - GitHub Enterprise SAML Authentication Bypass exploit", "url": "https://t.me/proxy_bar/2372"}, {"timestamp": "2024-11-12T10:49:06Z", "date_only": false, "value": "2024-11-12T10:49:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/13898", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "1b9f8978-9e7c-41d8-a64b-bf2109cf1e60", "content": "\ud83e\uddec GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487).\n\nhttps://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass", "url": "https://t.me/cKure/13898"}, {"timestamp": "2025-08-27T21:31:37Z", "date_only": false, "value": "2025-08-27T21:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5PW9-F9R4-MV2R", "record": "GHSA-5PW9-F9R4-MV2R", "field": "modified"}, {"timestamp": "2026-06-17T08:03:20.020Z", "date_only": false, "value": "2026-06-17T08:03:20.020", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4985", "record": "FKIE_CVE-2024-4985", "field": "lastModified"}, {"timestamp": "2026-07-21T13:00:06.881Z", "date_only": false, "value": "2026-07-21T13:00:06.881070Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/512", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "3bd202d9-3366-4171-9f8d-bb376bac3f2d", "url": "https://t.me/ckuRED/512"}, {"timestamp": "2026-07-22T00:00:23.415Z", "date_only": false, "value": "2026-07-22T00:00:23.415124Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckuRED/512", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "29734d57-6b05-4cdc-b3c0-98838370895f", "url": "https://t.me/ckuRED/512"}, {"timestamp": "2026-07-26T02:02:09.494Z", "date_only": false, "value": "2026-07-26T02:02:09.494521Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2791", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "48f8c9f7-840e-4fcc-87e4-4c1af46e5308", "url": "https://t.me/EchelonEyes/2791"}, {"timestamp": "2026-07-27T00:00:47.811Z", "date_only": false, "value": "2026-07-27T00:00:47.811940Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2791", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "eca20846-124a-4cea-b9a8-c59c612b373f", "url": "https://t.me/EchelonEyes/2791"}, {"timestamp": "2026-07-28T00:00:40.921Z", "date_only": false, "value": "2026-07-28T00:00:40.921339Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2791", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "88add1dc-891c-47c1-8bff-f61d946f7332", "url": "https://t.me/EchelonEyes/2791"}, {"timestamp": "2026-09-01T17:00:06.173Z", "date_only": false, "value": "2026-09-01T17:00:06.173489Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/962", "record": "CVE-2024-4985", "field": "creation_timestamp", "uuid": "c80b5039-469c-408e-8679-913854ada123", "url": "https://t.me/Hackme_news/962"}]}