{"metadata": {"vulnerability": "cve-2024-5009", "count": 35, "kinds": {"milestone": 5, "sighting": 18, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-05-16T15:59:50.763Z", "date_only": false, "value": "2024-05-16T15:59:50.763Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-5009", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-25T19:58:48.237Z", "date_only": false, "value": "2024-06-25T19:58:48.237Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-5009", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-25T19:58:48.237Z", "date_only": false, "value": "2024-06-25T19:58:48.237Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "cve-2024-5009", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-25T20:15:13Z", "date_only": false, "value": "2024-06-25T20:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J3RP-HCWW-24PQ", "record": "GHSA-J3RP-HCWW-24PQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-25T20:15:13.427Z", "date_only": false, "value": "2024-06-25T20:15:13.427", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5009", "record": "FKIE_CVE-2024-5009", "field": "published"}, {"timestamp": "2024-06-25T21:31:16Z", "date_only": false, "value": "2024-06-25T21:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J3RP-HCWW-24PQ", "record": "GHSA-J3RP-HCWW-24PQ", "field": "published"}, {"timestamp": "2024-06-25T21:31:16Z", "date_only": false, "value": "2024-06-25T21:31:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J3RP-HCWW-24PQ", "record": "GHSA-J3RP-HCWW-24PQ", "field": "modified"}, {"timestamp": "2024-06-26T07:43:11.795Z", "date_only": false, "value": "2024-06-26T07:43:11.795773Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-26T07:43:11.795Z", "date_only": false, "value": "2024-06-26T07:43:11.795773Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-08T12:21:10Z", "date_only": false, "value": "2024-07-08T12:21:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7913", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "b6295eb3-dd2b-4f1e-a65f-46404faa1f27", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for CVE-2024-5009\nURL\uff1ahttps://github.com/sinsinology/CVE-2024-5009\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7913"}, {"timestamp": "2024-07-09T03:55:42.940Z", "date_only": false, "value": "2024-07-09T03:55:42.940668Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-5009", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-09T03:55:42.940Z", "date_only": false, "value": "2024-07-09T03:55:42.940668Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5009", "record": "FKIE_CVE-2024-5009", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-09T10:16:06Z", "date_only": false, "value": "2024-07-09T10:16:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2155", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "a930fa74-8e8d-46ef-831d-3ad2701c5e37", "content": "CVE-2024-5009 \n*\nProgress WhatsUp Gold SetAdminPassword Privilege Escalation\n*\nPOC", "url": "https://t.me/proxy_bar/2155"}, {"timestamp": "2024-07-09T12:52:21.662Z", "date_only": false, "value": "2024-07-09T12:52:21.662Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-5009", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-09T17:17:35Z", "date_only": false, "value": "2024-07-09T17:17:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7923", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "cf9f2e97-c76d-4980-90d5-8d743cb70b3e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation\nURL\uff1ahttps://github.com/th3gokul/CVE-2024-5009\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7923"}, {"timestamp": "2024-07-09T19:07:26Z", "date_only": false, "value": "2024-07-09T19:07:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/1661", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "3b43edef-61cc-45f0-8c40-1ce60bfe79f4", "content": "\ud83d\udea8PoC RELEASED\ud83d\udea8PoC for Progress WhatsUp Gold SetAdminPassword Privilege Escalation (CVE-2024-5009)\n\nhttps://x.com/DarkWebInformer/status/1810722112476434651\n\nhttps://github.com/sinsinology/CVE-2024-5009", "url": "https://t.me/TheDarkWebInformer/1661"}, {"timestamp": "2024-07-11T04:35:45Z", "date_only": false, "value": "2024-07-11T04:35:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FUryBaeTd16I_Z_BI23kcNzYjlRgHXorESHpEaaZvMk8bEI", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "1918936f-c5cf-4c96-ac86-4b1400ae6d08"}, {"timestamp": "2024-07-11T07:55:58Z", "date_only": false, "value": "2024-07-11T07:55:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E0K4SacbBo7vvN_grN7HUJjKIuPNHN1egbc3qXVTBTE2Hg", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "8ed17447-36b4-4d13-8bc6-ef5314c87334"}, {"timestamp": "2024-08-01T03:33:14Z", "date_only": false, "value": "2024-08-01T03:33:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/562", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "07a98c36-a858-4892-b40e-6db29162d422", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/562"}, {"timestamp": "2024-08-01T03:33:21Z", "date_only": false, "value": "2024-08-01T03:33:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3581", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "04deee48-390a-4692-8625-16ac60ed48ac", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3581"}, {"timestamp": "2024-08-01T03:55:12Z", "date_only": false, "value": "2024-08-01T03:55:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7132", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "2406f0d9-d81b-4470-8fd5-aec0786cd3ac", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7132"}, {"timestamp": "2024-08-01T03:55:12Z", "date_only": false, "value": "2024-08-01T03:55:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8444", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "c9335661-dfe1-4dce-98a0-33aebfeb4844", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8444"}, {"timestamp": "2024-08-01T20:55:10.390Z", "date_only": false, "value": "2024-08-01T20:55:10.390Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-5009", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:55:10.390Z", "date_only": false, "value": "2024-08-01T20:55:10.390Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-5009", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:58:08Z", "date_only": false, "value": "2024-08-01T20:58:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/41AOwW-HVfveJGnWTCUGJmCb5QTVwo4WGVTDiWBY6ulqpQ", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "21bf0118-2970-4b40-9935-a518dd385199"}, {"timestamp": "2024-08-08T07:50:41.453Z", "date_only": false, "value": "2024-08-08T07:50:41.453544Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-08T07:50:41.453Z", "date_only": false, "value": "2024-08-08T07:50:41.453544Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-09T09:36:15Z", "date_only": false, "value": "2024-08-09T09:36:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yyHU4AmcuvzMH7Mr_Iyg6WOXfkLoQk9lbnAqVqjqphJYHjY", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "cc8be205-d436-4ce4-9eda-7ddad5e83eaf"}, {"timestamp": "2026-06-17T08:14:53.910Z", "date_only": false, "value": "2026-06-17T08:14:53.910", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5009", "record": "FKIE_CVE-2024-5009", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:20.136Z", "date_only": false, "value": "2026-07-26T02:00:20.136426Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/469", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "32ca712d-8d21-4450-948b-59c384878d10", "url": "https://t.me/cyberwarehouse/469"}, {"timestamp": "2026-07-27T00:00:21.997Z", "date_only": false, "value": "2026-07-27T00:00:21.997112Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/469", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "fd006c26-d724-4030-89b2-7ca1b35c0d98", "url": "https://t.me/cyberwarehouse/469"}, {"timestamp": "2026-07-29T12:02:14.168Z", "date_only": false, "value": "2026-07-29T12:02:14.168857Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4549", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "d109655f-ba4f-4c43-8e7b-c37bbf0baa17", "url": "https://t.me/reverseame/4549"}, {"timestamp": "2026-07-30T00:02:20.373Z", "date_only": false, "value": "2026-07-30T00:02:20.373600Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4549", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "69788fdf-8ee1-4ea0-a798-2bc6ef1d0f81", "url": "https://t.me/reverseame/4549"}, {"timestamp": "2026-08-02T07:06:35.017Z", "date_only": false, "value": "2026-08-02T07:06:35.017262Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4549", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "b6448dba-c54c-4b1b-bc6c-2764621d8b73", "url": "https://t.me/reverseame/4549"}, {"timestamp": "2026-08-03T02:11:40.565Z", "date_only": false, "value": "2026-08-03T02:11:40.565653Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4549", "record": "CVE-2024-5009", "field": "creation_timestamp", "uuid": "4939c68f-bc37-4c73-9de6-1ef696a291b0", "url": "https://t.me/reverseame/4549"}]}