{"metadata": {"vulnerability": "cve-2024-6670", "count": 98, "kinds": {"milestone": 5, "sighting": 63, "kev": 17, "other": 13}}, "data": [{"timestamp": "2024-07-10T19:45:27.069Z", "date_only": false, "value": "2024-07-10T19:45:27.069Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-6670", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-24T09:50:28Z", "date_only": false, "value": "2024-08-24T09:50:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/11136", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "53d2d663-8fb1-46af-b247-667877e69075", "content": "\u200aCritical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671)\n\nhttps://securityonline.info/critical-vulnerabilities-uncovered-in-progress-whatsup-gold-cve-2024-6670-cve-2024-6671/", "url": "https://t.me/HackingInsights/11136"}, {"timestamp": "2024-08-29T22:04:41.139Z", "date_only": false, "value": "2024-08-29T22:04:41.139Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-6670", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-29T22:04:41.139Z", "date_only": false, "value": "2024-08-29T22:04:41.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "cve-2024-6670", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-29T22:15:05Z", "date_only": false, "value": "2024-08-29T22:15:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X5HW-48MF-CQ3M", "record": "GHSA-X5HW-48MF-CQ3M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-29T22:15:05.573Z", "date_only": false, "value": "2024-08-29T22:15:05.573", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6670", "record": "FKIE_CVE-2024-6670", "field": "published"}, {"timestamp": "2024-08-30T00:31:23Z", "date_only": false, "value": "2024-08-30T00:31:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X5HW-48MF-CQ3M", "record": "GHSA-X5HW-48MF-CQ3M", "field": "published"}, {"timestamp": "2024-08-30T01:25:57Z", "date_only": false, "value": "2024-08-30T01:25:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/4481", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "4db86256-82d2-4761-abff-29db8135e71c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6670 - SolarWinds WhatsUp Gold SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-6670 \nPublished : Aug. 29, 2024, 10:15 p.m. | 42\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.0,\u00a0a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/4481"}, {"timestamp": "2024-08-30T13:44:34.239Z", "date_only": false, "value": "2024-08-30T13:44:34.239519Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0355", "record": "NCSC-2024-0355", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-30T13:44:34.239Z", "date_only": false, "value": "2024-08-30T13:44:34.239519Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0355", "record": "NCSC-2024-0355", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-30T20:28:51Z", "date_only": false, "value": "2024-08-30T20:28:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2254", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "250766a1-a6db-4464-9a4e-59a57066f8f6", "content": "CVE-2024-6670 WhatsUp Gold\n*\n\u0421\u0442\u0430\u0442\u044c\u044f Exploiting Pre-Auth SQL Injection in WhatsUp Gold\n*\nPOC exploit", "url": "https://t.me/proxy_bar/2254"}, {"timestamp": "2024-08-30T22:36:55Z", "date_only": false, "value": "2024-08-30T22:36:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/238", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "67e046e6-124d-4e69-a4c4-c792d645467c", "content": "CVE-2024-6670 WhatsUp Gold\n*\n\u0421\u0442\u0430\u0442\u044c\u044f Exploiting Pre-Auth SQL Injection in WhatsUp Gold\n*\nPOC exploit", "url": "https://t.me/HackerArsenal/238"}, {"timestamp": "2024-09-01T00:52:21Z", "date_only": false, "value": "2024-09-01T00:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1883", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "eb704e00-c36f-4c07-bbcb-2393f9e5c84a", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "url": "https://t.me/realLulzSec/1883"}, {"timestamp": "2024-09-01T00:57:54Z", "date_only": false, "value": "2024-09-01T00:57:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/fattahh_ir/2726", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "478439d8-2c9b-4b45-b844-233dcd7db3c4", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "url": "https://t.me/fattahh_ir/2726"}, {"timestamp": "2024-09-01T04:26:06Z", "date_only": false, "value": "2024-09-01T04:26:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4320", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "04649c76-33da-41b5-8d60-da46e23d0dc2", "content": "#exploit\n1. Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670\n\n2. CVE-2024-22263:\nSpring Cloud Dataflow Arbitrary File Writing Scanner\nhttps://github.com/securelayer7/CVE-2024-22263_Scanner", "url": "https://t.me/Rootsec_2/4320"}, {"timestamp": "2024-09-01T06:09:11Z", "date_only": false, "value": "2024-09-01T06:09:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3093", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "0718f448-3788-4ea9-a080-ea63f393d0ff", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "url": "https://t.me/CNArsenal/3093"}, {"timestamp": "2024-09-01T16:43:19Z", "date_only": false, "value": "2024-09-01T16:43:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18315", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "064c8286-f87b-4095-a775-3abdcbd0cf80", "content": "https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/\n\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n#\u5206\u6790", "url": "https://t.me/realLulzSec/18315"}, {"timestamp": "2024-09-02T09:40:40Z", "date_only": false, "value": "2024-09-02T09:40:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/791", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "9978158f-3056-4e44-ad4e-1120f3fb3652", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/791"}, {"timestamp": "2024-09-02T09:40:50Z", "date_only": false, "value": "2024-09-02T09:40:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3700", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "0dc035e5-9a79-4536-9d24-e2485a87ea53", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3700"}, {"timestamp": "2024-09-02T09:41:03Z", "date_only": false, "value": "2024-09-02T09:41:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/132", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "391c5c46-fcd2-408c-89dc-6596ec437fa8", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/132"}, {"timestamp": "2024-09-02T09:41:03Z", "date_only": false, "value": "2024-09-02T09:41:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/23609", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "fdd9d2f1-46d9-42c7-acfd-70bcb87d388c", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/23609"}, {"timestamp": "2024-09-02T09:49:11Z", "date_only": false, "value": "2024-09-02T09:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7359", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "c0735e13-c66e-463e-9d76-17317916e358", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7359"}, {"timestamp": "2024-09-02T09:49:11Z", "date_only": false, "value": "2024-09-02T09:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8687", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "6f01bb84-8f9b-4641-9218-86a9340f7251", "content": "Tools  - Hackers Factory \n\nCallander is a simple system sandboxing tool for Linux.\n\nhttps://github.com/rpetrich/callander\n\nToolkit for Retrieval and Analysis of Cyber Evidence (TRACE)\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/Gadzhovski/TRACE-Forensic-Toolkit\n\nhttps://github.com/xElessaway/My-OSINT-CTF\n\nInformation about web3 security and programming tutorials/tools \n\nhttps://github.com/immunefi-team/Web3-Security-Library?tab=readme-ov-file#starting-guides\n\nThis repository is meant to catalog network and host artifacts associated with various EDR products \"shell\" and response functionalities. \n\nhttps://github.com/cbecks2/edr-artifacts\n\nPoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability (CVE-2024-6670)\n\nhttps://github.com/sinsinology/CVE-2024-6670\n\nAmnezia VPN Client (Desktop+Mobile) \n\nhttps://github.com/amnezia-vpn/amnezia-client\n\n#CyberDilara \nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8687"}, {"timestamp": "2024-09-02T11:51:17.688Z", "date_only": false, "value": "2024-09-02T11:51:17.688561Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0355", "record": "NCSC-2024-0355", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-09-02T11:51:17.688Z", "date_only": false, "value": "2024-09-02T11:51:17.688561Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0355", "record": "NCSC-2024-0355", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-02T18:56:57Z", "date_only": false, "value": "2024-09-02T18:56:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/13581", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "49a07014-aaa5-4165-8433-1788e0863ece", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nCVE-2024-6670.\n\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/", "url": "https://t.me/cKure/13581"}, {"timestamp": "2024-09-08T17:47:08Z", "date_only": false, "value": "2024-09-08T17:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12383", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "550eba09-6c8e-4040-b2b4-debb48a49211", "content": "\u200aProof-of-Concept Exploit Released for WhatsUp Gold Authentication Bypass (CVE-2024-6670)\n\nhttps://securityonline.info/proof-of-concept-exploit-released-for-whatsup-gold-authentication-bypass-cve-2024-6670/", "url": "https://t.me/HackingInsights/12383"}, {"timestamp": "2024-09-13T13:06:50Z", "date_only": false, "value": "2024-09-13T13:06:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5577", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "aa1d2dea-3d55-4ffd-9248-a9f8604d7274", "content": "\u26a0\ufe0f Cybercriminals are exploiting PoC exploits for two critical vulnerabilities (CVE-2024-6670, CVE-2024-6671) in WhatsUp Gold, with attacks starting just 5 hours after the PoC release. \n \nDetails here: https://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html \n \nPatch your systems NOW to avoid becoming a target!", "url": "https://t.me/thehackernews/5577"}, {"timestamp": "2024-09-13T15:22:17Z", "date_only": false, "value": "2024-09-13T15:22:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/RoJOASUAT7x49nZpxrcgbc0z3AsXJ43ePodyUpzTL9sQ6w", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "69900338-4cf3-40ec-83b2-b068e7684abd"}, {"timestamp": "2024-09-13T15:22:18Z", "date_only": false, "value": "2024-09-13T15:22:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/20294", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a87135ee-0468-4c88-8d37-e11ddb6de3a2", "content": "The Hacker News\nProgress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw\n\nMalicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.\nThe activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who", "url": "https://t.me/tengkorakcybercrewz/20294"}, {"timestamp": "2024-09-13T15:22:18Z", "date_only": false, "value": "2024-09-13T15:22:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/4109", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "4464d044-b258-45bc-8d7a-3ae8d9a16f7f", "content": "The Hacker News\nProgress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw\n\nMalicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.\nThe activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who", "url": "https://t.me/tengkorakcybercrewz/4109"}, {"timestamp": "2024-09-13T15:24:42Z", "date_only": false, "value": "2024-09-13T15:24:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2566", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "9c279a8a-e2c8-44ac-a645-8dfe5e28209d", "content": "Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw\nhttps://thehackernews.com/2024/09/progress-whatsup-gold-exploited-just.html\n\nMalicious actors are likely leveraging publicly available proof-of-concept (PoC) exploits for recently disclosed security flaws in Progress Software WhatsUp Gold to conduct opportunistic attacks.\nThe activity is said to have commenced on August 30, 2024, a mere five hours after a PoC was released for CVE-2024-6670 (CVSS score: 9.8) by security researcher Sina Kheirkhah of the Summoning Team, who", "url": "https://t.me/KomunitiSiber/2566"}, {"timestamp": "2024-09-13T19:29:12Z", "date_only": false, "value": "2024-09-13T19:29:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/cKm0A_LiobX1aJHDz1pOXFXm6goRz5V_ldF-99M_FH8HdA", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "c4e106e0-2f48-4c08-8766-b2cff2bfee20"}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-6670", "field": "timestamps.asserted_at", "uuid": "d95e6f29-c479-4d67-9fbc-b32056b769e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-6670", "field": "timestamps.asserted_at", "uuid": "1119e530-bdd0-4a7f-b1c8-cf1987d81bb9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": true, "value": "2024-09-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6670", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-6670", "field": "evidence.0.details.added_date", "uuid": "1119e530-bdd0-4a7f-b1c8-cf1987d81bb9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": true, "value": "2024-09-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-6670", "field": "evidence.0.details.date_added", "uuid": "d95e6f29-c479-4d67-9fbc-b32056b769e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-6670", "field": "timestamps.first_seen_at", "uuid": "d95e6f29-c479-4d67-9fbc-b32056b769e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-6670", "field": "timestamps.first_seen_at", "uuid": "1119e530-bdd0-4a7f-b1c8-cf1987d81bb9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-6670", "field": "status.status_updated_at", "uuid": "d95e6f29-c479-4d67-9fbc-b32056b769e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-6670", "field": "status.status_updated_at", "uuid": "1119e530-bdd0-4a7f-b1c8-cf1987d81bb9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": false, "value": "2024-09-16T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6670", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-09-17T13:29:26Z", "date_only": false, "value": "2024-09-17T13:29:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlackHat0Hackers/3396", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a442da01-0388-4f17-a7f3-da5df3c29a55", "content": "Exploiting Pre-Auth SQL Injection In WhatsUp Gold\nCVE-2024-6670\n\nI discovered an unauthenticated SQL injection against the latest version of progress whatsup gold and turned it into a authentication bypass, after that the product by design allows you to achieve RCE (that part is up to you), lets talk about how this was possible\n\nPOC: https://github.com/sinsinology/CVE-2024-6670", "url": "https://t.me/BlackHat0Hackers/3396"}, {"timestamp": "2024-09-20T14:39:24Z", "date_only": false, "value": "2024-09-20T14:39:24+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-6670", "field": "timestamps.asserted_at", "uuid": "43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-20T14:39:24Z", "date_only": false, "value": "2024-09-20T14:39:24+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-6670", "field": "timestamps.first_seen_at", "uuid": "43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-20T18:10:03Z", "date_only": false, "value": "2024-09-20T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "d7aa7ab4-69f4-415e-bb63-726e04a9355d"}, {"timestamp": "2024-09-26T21:27:04Z", "date_only": false, "value": "2024-09-26T21:27:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/whatsup_gold_sqli.rb", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "e41f606d-a9c8-408e-bd5c-7aa8732d9f60", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/whatsup_gold_sqli.rb"}, {"timestamp": "2024-09-27T18:49:57Z", "date_only": false, "value": "2024-09-27T18:49:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/J51TBLI_qDDfUdde13aP_PP1XSlzsxDAR6FmMmDmB27KGvM", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "6574fe6f-14da-4e19-a638-003686ea3e00"}, {"timestamp": "2024-10-02T10:55:23Z", "date_only": false, "value": "2024-10-02T10:55:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11061", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "d67e17ee-d0a3-486c-b6bc-bafc8f8e4112", "content": "#exploit\n1. CVE-2024-6670:\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670\n\n2. CVE-2024-22263:\nSpring Cloud Dataflow Arbitrary File Writing Scanner\nhttps://github.com/securelayer7/CVE-2024-22263_Scanner", "url": "https://t.me/CyberSecurityTechnologies/11061"}, {"timestamp": "2024-10-07T00:00:00Z", "date_only": true, "value": "2024-10-07", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-6670", "field": "evidence.0.details.due_date", "uuid": "d95e6f29-c479-4d67-9fbc-b32056b769e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-27T22:06:14.229Z", "date_only": false, "value": "2025-01-27T22:06:14.229470Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6670", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-27T22:06:14.229Z", "date_only": false, "value": "2025-01-27T22:06:14.229470Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6670", "record": "FKIE_CVE-2024-6670", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a810eb14-5209-413b-b746-f3717f6813cb"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "4daff622-bb48-4b55-86a2-f5870cfbc1f6"}, {"timestamp": "2025-02-23T02:10:59Z", "date_only": false, "value": "2025-02-23T02:10:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "10f873b4-6e91-4128-9942-e89aad3e9ed4"}, {"timestamp": "2025-02-23T04:11:05Z", "date_only": false, "value": "2025-02-23T04:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "b320adac-6f90-441a-8051-4ac6958b74f2"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "1172ef5a-11b5-4972-9037-68d437229fec"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "36a56841-4514-4816-b47c-6806c1d74df0"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "2f6b4868-267f-4221-868d-b1a64c4b1363"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "c3a12768-6182-4559-85c8-1a1234e027aa"}, {"timestamp": "2025-10-21T22:55:46.285Z", "date_only": false, "value": "2025-10-21T22:55:46.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-6670", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:46.285Z", "date_only": false, "value": "2025-10-21T22:55:46.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6670", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:05Z", "date_only": false, "value": "2025-10-22T00:33:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X5HW-48MF-CQ3M", "record": "GHSA-X5HW-48MF-CQ3M", "field": "modified"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "81562bac-c0e8-464a-ae48-a2295cfbdc02"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "0129c907-28a1-4222-b379-3bf602cb4553"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a4ea8861-8c10-4608-ae9b-ed41128d570c"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "0bc4189f-7451-4e52-b6a5-5e00bccee3e9"}, {"timestamp": "2026-01-19T00:00:00Z", "date_only": false, "value": "2026-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "7abd77b9-a524-4469-9ced-260241f00938"}, {"timestamp": "2026-02-02T12:26:28.990Z", "date_only": false, "value": "2026-02-02T12:26:28.990634Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46dcdbb6-3332-45a4-9e0f-0d166483c857", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "7216584c-f699-4068-b853-dfeab36d5823", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46dcdbb6-3332-45a4-9e0f-0d166483c857"}, {"timestamp": "2026-02-02T12:26:28.990Z", "date_only": false, "value": "2026-02-02T12:26:28.990634Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46dcdbb6-3332-45a4-9e0f-0d166483c857", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "f362b1d7-093b-4232-a80d-2fca714ecbd6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46dcdbb6-3332-45a4-9e0f-0d166483c857"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-6670", "field": "timestamps.recorded_at", "uuid": "d95e6f29-c479-4d67-9fbc-b32056b769e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "8504f636-7803-4a0d-a014-2150f08dc770"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "438836ea-f493-47bd-8f5f-e64dfdc2a38c"}, {"timestamp": "2026-04-24T18:00:03.903Z", "date_only": false, "value": "2026-04-24T18:00:03.903178Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mkb46fzeip2s", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "adc0b019-f5d5-4523-b5ba-5623f79f7db3", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mkb46fzeip2s"}, {"timestamp": "2026-04-24T18:00:05.166Z", "date_only": false, "value": "2026-04-24T18:00:05.166313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mkb46hgykw2s", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "42856f73-237a-4301-bfc3-0d1fdb05ad92", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mkb46hgykw2s"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a16229ad-903a-4195-b871-65f7ec11beb6"}, {"timestamp": "2026-05-08T18:00:05.256Z", "date_only": false, "value": "2026-05-08T18:00:05.256634Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mlecpccnwr2h", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "52df540e-1bb7-4252-bc9b-82db79814148", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mlecpccnwr2h"}, {"timestamp": "2026-05-08T18:00:06.915Z", "date_only": false, "value": "2026-05-08T18:00:06.915672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mlecpetffj2s", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "0c7ba85b-747f-4e90-a2ce-7ab8d86b50e1", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mlecpetffj2s"}, {"timestamp": "2026-05-22T18:00:05.164Z", "date_only": false, "value": "2026-05-22T18:00:05.164408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmhja7bcku24", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "dd0e259f-c6df-4381-9810-c969f835b187", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mmhja7bcku24"}, {"timestamp": "2026-05-22T18:00:06.207Z", "date_only": false, "value": "2026-05-22T18:00:06.207462Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmhjabh3sy2x", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "3959c959-3cb7-4864-b03b-2d8017a19ce5", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mmhjabh3sy2x"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "c70f402c-ef79-43c6-8698-93889058b1b7"}, {"timestamp": "2026-05-29T18:00:07.813Z", "date_only": false, "value": "2026-05-29T18:00:07.813536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmz4in4jnr23", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "b2650965-f300-4a85-b4d5-258a6acf2b2c", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mmz4in4jnr23"}, {"timestamp": "2026-05-29T18:00:09.099Z", "date_only": false, "value": "2026-05-29T18:00:09.099053Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatchain.bsky.social/post/3mmz4ipum6d2e", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "c5f5eb33-d3c5-43bd-9d69-71c6df7b6ce5", "url": "https://bsky.app/profile/threatchain.bsky.social/post/3mmz4ipum6d2e"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "fa03cfc1-bad3-41ec-8c8b-779b57307e24"}, {"timestamp": "2026-06-13T00:00:00Z", "date_only": false, "value": "2026-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "056dcff9-820d-4730-a2e7-145da05dfbaf"}, {"timestamp": "2026-06-17T08:18:27.307Z", "date_only": false, "value": "2026-06-17T08:18:27.307", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6670", "record": "FKIE_CVE-2024-6670", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:35.163Z", "date_only": false, "value": "2026-06-19T12:46:35.163146Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3fae8ff-7fa9-44c0-94b1-29305bbb5991", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "133fb36a-2532-43df-bd1a-95deb460b69b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3fae8ff-7fa9-44c0-94b1-29305bbb5991"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-6670", "field": "timestamps.recorded_at", "uuid": "1119e530-bdd0-4a7f-b1c8-cf1987d81bb9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:24.985Z", "date_only": false, "value": "2026-06-23T11:14:24.985270Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1119e530-bdd0-4a7f-b1c8-cf1987d81bb9", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a70bc488-bc1b-4989-90be-f07d505c96e1", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1119e530-bdd0-4a7f-b1c8-cf1987d81bb9"}, {"timestamp": "2026-06-23T14:05:58.070Z", "date_only": false, "value": "2026-06-23T14:05:58.070946Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/686fc721-8f5a-4546-95bc-c7ae97fbb540", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "cae6f21b-112c-4207-94da-43ff3da7e9e6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/686fc721-8f5a-4546-95bc-c7ae97fbb540"}, {"timestamp": "2026-06-30T09:23:21.177Z", "date_only": false, "value": "2026-06-30T09:23:21.177670Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a02279e6-a340-44fa-83fd-41d68ff15bfe", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "29af0e79-bb33-46b2-a462-765475699b4c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a02279e6-a340-44fa-83fd-41d68ff15bfe"}, {"timestamp": "2026-07-01T05:54:10.460Z", "date_only": false, "value": "2026-07-01T05:54:10.460559Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "63f89262-01f0-491f-8bb3-853fe54f2cab", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee"}, {"timestamp": "2026-07-15T10:00:16.708Z", "date_only": false, "value": "2026-07-15T10:00:16.708110Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "record": "CVE-2024-6670", "field": "creation_timestamp", "uuid": "a6d0bb4e-3bb6-4256-8d74-a541e2769bed"}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-6670", "field": "timestamps.last_seen_at", "uuid": "43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": true, "value": "2026-10-29", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-6670", "field": "evidence.0.details.observation_date", "uuid": "43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T00:00:00Z", "date_only": false, "value": "2026-10-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-6670", "field": "status.status_updated_at", "uuid": "43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T01:00:02Z", "date_only": false, "value": "2026-10-31T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-6670", "field": "timestamps.recorded_at", "uuid": "43ff9821-dc2e-4b6d-bbae-c0f9c471d4ee", "status": {"status_reason": "confirmed", "exploited": true}}]}