{"metadata": {"vulnerability": "cve-2024-8069", "count": 82, "kinds": {"milestone": 7, "sighting": 37, "kev": 17, "other": 21}}, "data": [{"timestamp": "2024-08-21T23:22:40.773Z", "date_only": false, "value": "2024-08-21T23:22:40.773Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-8069", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-11-12T00:00:00Z", "date_only": true, "value": "2024-11-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0964", "record": "CERTFR-2024-AVI-0964", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-11-12T00:00:00Z", "date_only": false, "value": "2024-11-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0964", "record": "CERTFR-2024-AVI-0964", "field": "revisions.0.revision_date"}, {"timestamp": "2024-11-12T16:21:28.051Z", "date_only": false, "value": "2024-11-12T16:21:28.051556Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113470897346004162", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "caf53310-d871-4ea6-a617-58c434794596", "url": "https://infosec.exchange/users/screaminggoat/statuses/113470897346004162"}, {"timestamp": "2024-11-12T18:01:15.375Z", "date_only": false, "value": "2024-11-12T18:01:15.375Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-8069", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-11-12T18:01:15.375Z", "date_only": false, "value": "2024-11-12T18:01:15.375Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Citrix", "record": "cve-2024-8069", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-12T18:15:47Z", "date_only": false, "value": "2024-11-12T18:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WW66-45GM-65FM", "record": "GHSA-WW66-45GM-65FM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-11-12T18:15:47.603Z", "date_only": false, "value": "2024-11-12T18:15:47.603", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8069", "record": "FKIE_CVE-2024-8069", "field": "published"}, {"timestamp": "2024-11-12T18:31:00Z", "date_only": false, "value": "2024-11-12T18:31:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WW66-45GM-65FM", "record": "GHSA-WW66-45GM-65FM", "field": "published"}, {"timestamp": "2024-11-12T19:44:08Z", "date_only": false, "value": "2024-11-12T19:44:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/10676", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "ea15cfa4-6f86-46a0-9e60-b817598ba052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8069 - Citrix Session Recording Privilege Escalation Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-8069 \nPublished : Nov. 12, 2024, 6:15 p.m. | 21\u00a0minutes ago \nDescription : Limited remote code execution with privilege of a NetworkService Account access\u00a0in\u00a0Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/10676"}, {"timestamp": "2024-11-12T21:23:09.366Z", "date_only": false, "value": "2024-11-12T21:23:09.366930Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113472082802025796", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "4122b6e0-dc72-4f44-a053-6642b187c3a1", "url": "https://cyberplace.social/users/GossiTheDog/statuses/113472082802025796"}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-12T23:00:00Z", "date_only": false, "value": "2024-11-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-13)", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "d03e33ac-6f01-4780-8981-2b6f82a0ac59"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0964", "record": "CERTFR-2024-AVI-0964", "field": "last_revision_date"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0964", "record": "CERTFR-2024-AVI-0964", "field": "revisions.1.revision_date"}, {"timestamp": "2024-11-13T04:53:43Z", "date_only": false, "value": "2024-11-13T04:53:43+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-8069", "field": "timestamps.asserted_at", "uuid": "559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-13T04:53:43Z", "date_only": false, "value": "2024-11-13T04:53:43+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-8069", "field": "timestamps.first_seen_at", "uuid": "559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-13T08:51:17Z", "date_only": false, "value": "2024-11-13T08:51:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0440", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "a7b88954-a81c-4e16-9fbb-0fe639349837", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2024-0440"}, {"timestamp": "2024-11-13T08:51:17.257Z", "date_only": false, "value": "2024-11-13T08:51:17.257998Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0440", "record": "NCSC-2024-0440", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-13T08:51:17.257Z", "date_only": false, "value": "2024-11-13T08:51:17.257998Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0440", "record": "NCSC-2024-0440", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-13T08:51:17.257Z", "date_only": false, "value": "2024-11-13T08:51:17.257998Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0440", "record": "NCSC-2024-0440", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-13T14:17:04.989Z", "date_only": false, "value": "2024-11-13T14:17:04.989918Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113476070561952671", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "7ed022f8-cff6-4239-ba4a-4311b9e340c5", "url": "https://infosec.exchange/users/screaminggoat/statuses/113476070561952671"}, {"timestamp": "2024-11-13T17:00:06Z", "date_only": false, "value": "2024-11-13T17:00:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6426", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "2db7d3ce-ba38-4517-8c05-69f842df39d5", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0435 \u043d\u0430 Citrix Virtual Apps and Desktop, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c Citrix \u0437\u0430\u043f\u0438\u0441\u044c \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u043e\u043b\u043e\u0432 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0439 \u0430\u0443\u0434\u0438\u0442\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u00a0MSMQ\u00a0\u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 BinaryFormatter, \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u043f\u043e HTTP \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e RCE.\n\n\u041e\u0431\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-8068\u00a0(CVSS: 5.1, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 NetworkService);\n- CVE-2024-8069\u00a0(CVSS: 5,1, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 NetworkService).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 HTTP \u043d\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 Citrix, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0435\u0430\u043d\u0441\u0430.\n\nCitrix, \u043f\u043e\u0445\u043e\u0436\u0435, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0432 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0441\u0432\u043e\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 Citrix \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u0442\u043e\u043c \u0436\u0435 \u0434\u043e\u043c\u0435\u043d\u0435 Windows Active Directory, \u0447\u0442\u043e \u0438 \u0434\u043e\u043c\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0435\u0430\u043d\u0441\u0430, \u0438 \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0438\u043d\u0442\u0440\u0430\u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0435\u0430\u043d\u0441\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 watchTowr \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043d\u0430\u0441\u0442\u0430\u0438\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439, \u0430 Citrix \u043f\u0440\u0435\u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0434\u0430\u0432\u0430\u044f \u0435\u0439 \u0441\u0440\u0435\u0434\u043d\u0438\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u044d\u0442\u043e point-click-full-takeover.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043d\u0430 GitHub PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e Shadowserver Foundation \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u0437\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043d\u0435\u0441\u0443\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435  \u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0435\u0440\u0434\u0438\u043a\u0442 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e CVSS.\n\n\u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "url": "https://t.me/true_secator/6426"}, {"timestamp": "2024-11-13T23:00:00Z", "date_only": false, "value": "2024-11-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": false, "value": "2024-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-14)", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "f75f22e0-4e82-4857-81b1-8c62cb615b13"}, {"timestamp": "2024-11-20T17:30:05Z", "date_only": false, "value": "2024-11-20T17:30:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6453", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "44a1ba0d-6492-48ba-b40e-56335b7742e9", "content": "\u041a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f SANS ISC \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Citrix Virtual Apps and Desktops \u0438\u043c\u0435\u044e\u0442 \u043a\u0443\u0434\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438, \u043d\u0435\u0436\u0435\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0449\u0435 \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-8068 \u0438 CVE-2024-8069) \u0431\u044b\u043b\u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 watchTowr Labs \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0436\u0435 \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c PoC \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043d\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0410 \u0432 Citrix \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c 5.1, \u043f\u043e\u043b\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0439.", "url": "https://t.me/true_secator/6453"}, {"timestamp": "2024-11-21T13:58:57.417Z", "date_only": false, "value": "2024-11-21T13:58:57.417825Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/113521297765325676", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "65c5ddb8-35ad-49fb-a9e2-4ec66bd55f35", "url": "https://infosec.exchange/users/edwardk/statuses/113521297765325676"}, {"timestamp": "2024-11-29T03:04:45Z", "date_only": false, "value": "2024-11-29T03:04:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9227", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "a20f1be5-a47d-46ce-9c24-dc7544583465", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCitrix Virtual Apps and Desktops (XEN) Unauthenticated RCE\nURL\uff1ahttps://github.com/XiaomingX/cve-2024-8069-exp-Citrix-Virtual-Apps-XEN\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/9227"}, {"timestamp": "2024-11-29T13:06:54Z", "date_only": false, "value": "2024-11-29T13:06:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Leak_DBMS/1524", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "e1d53f85-dcff-4d7f-a0b1-156d215145e9", "content": "WatchTowr POCs:\nCVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n@APTIRAN", "url": "https://t.me/Leak_DBMS/1524"}, {"timestamp": "2024-12-02T17:54:58.827Z", "date_only": false, "value": "2024-12-02T17:54:58.827831Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113584511246645504", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "641a2479-d345-484d-bc89-64d8a6065b03", "url": "https://infosec.exchange/users/screaminggoat/statuses/113584511246645504"}, {"timestamp": "2024-12-03T00:18:01Z", "date_only": false, "value": "2024-12-03T00:18:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/2110", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "96e7dece-bd6d-4ea0-aaf0-6b8d32320df8", "content": "WatchTowr POCs:\nCVE-2024-8068 & CVE-2024-8069 : Citrix Virtual Apps and Desktops (XEN) $versions - Unauthenticated Remote Code execution (Chain) \nPOC/AN : https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit\nCVE-2024-47575 : Fortinet FortiManager 'Fgfmsd' $versions Unauthenticated Remote Code Execution (AKA FortiJump)\nPOC/AN : https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575\nCVE-2024-0012 & CVE-2024-9474 : PAN-OS $versions - Authentication Bypass LPE Root Command Injection (AKA Sslvpn _ Chain)\nPOC/AN : https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012/\n\n\ud83d\udd34 Share & Support Us \ud83d\udd34\n\u26a1\ufe0f Channel : @ZeroEthical_Course", "url": "https://t.me/ZeroEthical_Course/2110"}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-8069", "field": "timestamps.last_seen_at", "uuid": "559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": true, "value": "2024-12-26", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-8069", "field": "evidence.0.details.observation_date", "uuid": "559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-8069", "field": "status.status_updated_at", "uuid": "559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-01-22T04:33:01Z", "date_only": false, "value": "2025-01-22T04:33:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/4097", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "18b703a9-8bab-454f-94f2-23a2d3f71798", "content": "#GitHub #Tools \n\nDevil is a tool that is basically made for facebook to Hack target accounts , BruteForce Attack , grab friendlist accounts , yahoo chacker , Facbook Friend information gathering tool , auto likes reactions & much more i hope you enjoy this tool i'm not responsible if you use this tool for any illegal purpose.\n\nhttps://github.com/evildevill/Devil\n\nOSINT tool to find informations about a github user (email2username, username2email, creation date ...)\n\nhttps://github.com/hippiiee/osgint\n\nCitrix Virtual Apps and Desktops (XEN) Unauthenticated RCE\n\nhttps://github.com/XiaomingX/cve-2024-8069-exp-Citrix-Virtual-Apps-XEN\n\n#Offensive_Security\n\n1. PowerShell PoC to bypass Entra/Intune Compliance Conditional Access Policy\n\nhttps://github.com/zh54321/PoCEntraDeviceComplianceBypass\n\n2. Svartalfheim - Stage0 Shellcode to Download a Remote Payload and Execute it in Memory\n\nhttps://github.com/NtDallas/Svartalfheim\n\n#HackersFactory", "url": "https://t.me/dilagrafie/4097"}, {"timestamp": "2025-02-08T23:20:42Z", "date_only": false, "value": "2025-02-08T23:20:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3895", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "c7aa80d0-328b-454d-8641-7195ace084c7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-8069\n\ud83c\udfe2 Vendor: Citrix\n\ud83d\udda5\ufe0f Product: Citrix Session Recording\n\ud83d\udd39 Description: Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server\n\ud83d\udccf Published: 2024-11-12T00:00:00Z\n\ud83d\udd17 References:\n1. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-13&host_type=src&vulnerability=cve-2024-8069\n2. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-14&host_type=src&vulnerability=cve-2024-8069\n3. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-15&host_type=src&vulnerability=cve-2024-8069\n4. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-16&host_type=src&vulnerability=cve-2024-8069\n5. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-17&host_type=src&vulnerability=cve-2024-8069\n6. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-18&host_type=src&vulnerability=cve-2024-8069\n7. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-19&host_type=src&vulnerability=cve-2024-8069\n8. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-11-20&host_type=src&vulnerability=cve-2024-8069\n9. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-12-20&host_type=src&vulnerability=cve-2024-8069\n10. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-12-21&host_type=src&vulnerability=cve-2024-8069\n11. https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-12-26&host_type=src&vulnerability=cve-2024-8069\n12. https://infosec.exchange/@shadowserver/113471909797234133\n13. https://isc.sans.edu/diary/31446", "url": "https://t.me/DarkWebInformer_CVEAlerts/3895"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "5bc151a8-deb5-4995-b744-e16cbe054116"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-8069", "field": "timestamps.asserted_at", "uuid": "7a645d02-3551-4b9a-8219-893367120a06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": true, "value": "2025-08-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-8069", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": true, "value": "2025-08-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-8069", "field": "evidence.0.details.date_added", "uuid": "7a645d02-3551-4b9a-8219-893367120a06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-8069", "field": "timestamps.first_seen_at", "uuid": "7a645d02-3551-4b9a-8219-893367120a06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-8069", "field": "status.status_updated_at", "uuid": "7a645d02-3551-4b9a-8219-893367120a06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-8069", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-08-25T17:17:41.396Z", "date_only": false, "value": "2025-08-25T17:17:41.396577Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/115090539180631962", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "2587ea3c-e727-491e-80aa-e51c06190fde", "url": "https://infosec.exchange/users/cR0w/statuses/115090539180631962"}, {"timestamp": "2025-08-25T18:55:29.323Z", "date_only": false, "value": "2025-08-25T18:55:29.323100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxaogpeudr2b", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "d824cdfa-e86f-4449-966f-cb68b8a0f2ed", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lxaogpeudr2b"}, {"timestamp": "2025-08-25T20:03:44.092Z", "date_only": false, "value": "2025-08-25T20:03:44.092514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lxasaqtnw327", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "246d4bce-c457-48f7-b29e-401aa8152ce3", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lxasaqtnw327"}, {"timestamp": "2025-08-25T21:01:06.444Z", "date_only": false, "value": "2025-08-25T21:01:06.444618Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4612623", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "86983981-5cc9-48a9-aa6a-2a2c8813bda8", "url": "https://feedsin.space/feed/CISAKevBot/items/4612623"}, {"timestamp": "2025-08-25T21:46:34.886Z", "date_only": false, "value": "2025-08-25T21:46:34.886680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lxaxynuxgs2i", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "9ba44d64-e6a2-4df2-968a-5b2a762feb89", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lxaxynuxgs2i"}, {"timestamp": "2025-08-25T22:00:00Z", "date_only": false, "value": "2025-08-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-08-25T22:00:00Z", "date_only": false, "value": "2025-08-25T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-26T03:55:21.218Z", "date_only": false, "value": "2025-08-26T03:55:21.218023Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-8069", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-08-26T03:55:21.218Z", "date_only": false, "value": "2025-08-26T03:55:21.218023Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8069", "record": "FKIE_CVE-2024-8069", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-08-26T06:55:20.757Z", "date_only": false, "value": "2025-08-26T06:55:20.757+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3443", "record": "WID-SEC-W-2024-3443", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-26T09:12:04Z", "date_only": false, "value": "2025-08-26T09:12:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hackyourmom/12469", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "ab615895-362f-4a7a-a262-c16755e8b891", "content": "CISA \u0434\u043e\u0434\u0430\u043b\u0430 3\ufe0f\u20e3 \u043d\u0435\u0431\u0435\u0437\u043f\u0435\u0447\u043d\u0456 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0434\u043e KEV. \u0414\u0432\u0456 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f Citrix Session Recording (CVE-2024-8068, CVE-2024-8069) \u0456 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442\u044c \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0442\u0430 \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f \u043a\u043e\u0434\u0443. \u0422\u0440\u0435\u0442\u044f \u2014 CVE-2025-48384 \u0443 Git \u0456\u0437 CVSS 8.1, \u043c\u043e\u0436\u0435 \u043f\u0440\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u043e\u0433\u043e \u043a\u043e\u0434\u0443 \u043f\u0456\u0434 \u0447\u0430\u0441 \u043a\u043b\u043e\u043d\u0443\u0432\u0430\u043d\u043d\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0456\u0457\u0432 \ud83d\udc7e\ud83d\udcbb \u0411\u0456\u043b\u044c\u0448\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u0438\u0446\u044c \ud83d\udc48 #cybernews", "url": "https://t.me/hackyourmom/12469"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": true, "value": "2025-09-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-8069", "field": "evidence.0.details.due_date", "uuid": "7a645d02-3551-4b9a-8219-893367120a06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "339ccab4-0d2c-4e74-ac92-54746501bd0f"}, {"timestamp": "2025-09-29T03:12:15Z", "date_only": false, "value": "2025-09-29T03:12:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "88fe297d-2ba5-4526-b4da-f842dc3abb43"}, {"timestamp": "2025-10-21T22:55:36.857Z", "date_only": false, "value": "2025-10-21T22:55:36.857Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-8069", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:36.857Z", "date_only": false, "value": "2025-10-21T22:55:36.857Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-8069", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:11Z", "date_only": false, "value": "2025-10-22T00:33:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WW66-45GM-65FM", "record": "GHSA-WW66-45GM-65FM", "field": "modified"}, {"timestamp": "2026-02-02T12:25:54.489Z", "date_only": false, "value": "2026-02-02T12:25:54.489262Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba62f760-84a8-4741-9958-2fdd85ef1152", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "1e22ca3a-946e-4e6f-b594-bdcc2d3cc6db", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba62f760-84a8-4741-9958-2fdd85ef1152"}, {"timestamp": "2026-02-02T12:25:54.489Z", "date_only": false, "value": "2026-02-02T12:25:54.489262Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba62f760-84a8-4741-9958-2fdd85ef1152", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "7f88a5a9-71fc-47df-9b2b-f5bc743b83db", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ba62f760-84a8-4741-9958-2fdd85ef1152"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-8069", "field": "timestamps.recorded_at", "uuid": "7a645d02-3551-4b9a-8219-893367120a06", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:39:30Z", "date_only": false, "value": "2026-06-01T10:39:30+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8069", "field": "timestamps.asserted_at", "uuid": "bba7586f-330c-42e7-8fc7-e8e4cdec0d52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:39:30Z", "date_only": false, "value": "2026-06-01T10:39:30+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-8069", "field": "timestamps.first_seen_at", "uuid": "bba7586f-330c-42e7-8fc7-e8e4cdec0d52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:39:30Z", "date_only": false, "value": "2026-06-01T10:39:30+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-8069", "field": "status.status_updated_at", "uuid": "bba7586f-330c-42e7-8fc7-e8e4cdec0d52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:39:30.357Z", "date_only": false, "value": "2026-06-01T10:39:30.357Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-8069", "field": "evidence.0.details.added_date", "uuid": "bba7586f-330c-42e7-8fc7-e8e4cdec0d52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:21:48.323Z", "date_only": false, "value": "2026-06-17T08:21:48.323", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8069", "record": "FKIE_CVE-2024-8069", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-8069", "field": "timestamps.recorded_at", "uuid": "bba7586f-330c-42e7-8fc7-e8e4cdec0d52", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:15.944Z", "date_only": false, "value": "2026-06-19T12:42:15.944354Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bba7586f-330c-42e7-8fc7-e8e4cdec0d52", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "5daeedfe-85f9-453d-828c-e8b046aaa58d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bba7586f-330c-42e7-8fc7-e8e4cdec0d52"}, {"timestamp": "2026-06-19T12:45:26.823Z", "date_only": false, "value": "2026-06-19T12:45:26.823829Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/297a8fc0-fb80-44e2-84eb-375020d23091", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "ea10c1df-23c7-4b76-ada7-43b32e33373b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/297a8fc0-fb80-44e2-84eb-375020d23091"}, {"timestamp": "2026-06-23T14:03:52.071Z", "date_only": false, "value": "2026-06-23T14:03:52.071695Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa8e188-7e2d-4cf6-b8eb-cc254ecdc859", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "5a1201e2-ca1d-4ae5-b877-b87c95cf0178", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cfa8e188-7e2d-4cf6-b8eb-cc254ecdc859"}, {"timestamp": "2026-06-30T09:42:16.471Z", "date_only": false, "value": "2026-06-30T09:42:16.471153Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f7cb44ce-4105-4536-923a-f9b9a48a1539", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "07a2ab6e-f3cc-4f45-bc15-5a826fae2349", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f7cb44ce-4105-4536-923a-f9b9a48a1539"}, {"timestamp": "2026-07-01T07:17:39.054Z", "date_only": false, "value": "2026-07-01T07:17:39.054483Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "6618e7bc-1110-4efd-9c96-cc0f8b79c26a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/559472e9-4bad-4de2-ab65-f6eb6b7a3b43"}, {"timestamp": "2026-07-01T12:47:07Z", "date_only": false, "value": "2026-07-01T12:47:07+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-8069", "field": "timestamps.recorded_at", "uuid": "559472e9-4bad-4de2-ab65-f6eb6b7a3b43", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-25T15:00:19.217Z", "date_only": false, "value": "2026-07-25T15:00:19.217688Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/383", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "a75c12b4-d138-41ae-bee4-416ba5665df4", "url": "https://t.me/ZerodayAlert/383"}, {"timestamp": "2026-07-26T00:00:43.525Z", "date_only": false, "value": "2026-07-26T00:00:43.525947Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/383", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "476294ec-c281-4822-a654-887ecef65cb4", "url": "https://t.me/ZerodayAlert/383"}, {"timestamp": "2026-08-06T06:00:05.517Z", "date_only": false, "value": "2026-08-06T06:00:05.517956Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/383", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "1e0de3b2-d6e7-42f1-a8de-a523b8e51f67", "url": "https://t.me/ZerodayAlert/383"}, {"timestamp": "2026-08-07T00:25:57.380Z", "date_only": false, "value": "2026-08-07T00:25:57.380881Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/383", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "01886a8b-6142-468c-82a5-f51bfa401718", "url": "https://t.me/ZerodayAlert/383"}, {"timestamp": "2026-08-20T03:00:03.425Z", "date_only": false, "value": "2026-08-20T03:00:03.425581Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "record": "CVE-2024-8069", "field": "creation_timestamp", "uuid": "7340c653-1cc4-400d-80e8-a498d113aa59"}]}