{"metadata": {"vulnerability": "cve-2024-8504", "count": 52, "kinds": {"milestone": 4, "sighting": 38, "kev": 0, "other": 10}}, "data": [{"timestamp": "2024-09-05T21:29:06.095Z", "date_only": false, "value": "2024-09-05T21:29:06.095Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-8504", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-10T19:23:00Z", "date_only": false, "value": "2024-09-10T19:23:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / KoreLogic", "record": "cve-2024-8504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-10T19:23:39.327Z", "date_only": false, "value": "2024-09-10T19:23:39.327Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-8504", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-10T19:23:39.327Z", "date_only": false, "value": "2024-09-10T19:23:39.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / KoreLogic", "record": "cve-2024-8504", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-10T20:15:05Z", "date_only": false, "value": "2024-09-10T20:15:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R47M-G4VH-PXF6", "record": "GHSA-R47M-G4VH-PXF6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-09-10T20:15:05.363Z", "date_only": false, "value": "2024-09-10T20:15:05.363", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8504", "record": "FKIE_CVE-2024-8504", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-09-10T21:31:39Z", "date_only": false, "value": "2024-09-10T21:31:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R47M-G4VH-PXF6", "record": "GHSA-R47M-G4VH-PXF6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-09-10T22:37:05Z", "date_only": false, "value": "2024-09-10T22:37:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/5298", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "eb8c392b-8ed7-415a-8f84-378d622a7a0f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8504 - VICIdial Root Shell Command Execution\", \n  \"Content\": \"CVE ID : CVE-2024-8504 \nPublished : Sept. 10, 2024, 8:15 p.m. | 15\u00a0minutes ago \nDescription : An attacker with authenticated access to VICIdial as an \"agent\" can execute arbitrary shell commands as the \"root\" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/5298"}, {"timestamp": "2024-09-12T13:51:21.498Z", "date_only": false, "value": "2024-09-12T13:51:21.498740Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-8504", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-09-12T13:51:21.498Z", "date_only": false, "value": "2024-09-12T13:51:21.498740Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8504", "record": "FKIE_CVE-2024-8504", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-09-12T13:52:49.969Z", "date_only": false, "value": "2024-09-12T13:52:49.969Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-8504", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-14T06:31:55Z", "date_only": false, "value": "2024-09-14T06:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8527", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "63d6fe4b-35f9-4bff-8a60-508e4e5a234a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVICIdial Unauthenticated SQLi to RCE Exploit (CVE-2024-8503 and CVE-2024-8504)\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-8504\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T08:46:36Z", "date_only": false, "value": "2024-09-15T08:46:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2264", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "e50f0247-07da-473a-b994-8a92d998e99d", "content": "CVE-2024-8504 \u0438 CVE-2024-8503\n*\nSQLi and RCE  - VICIdial\n*\nExploit", "url": "https://t.me/proxy_bar/2264"}, {"timestamp": "2024-09-15T09:25:24Z", "date_only": false, "value": "2024-09-15T09:25:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xatori_sec/160", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "bc4ff189-bf49-4b66-8760-cea90aec1d90", "content": "https://github.com/Chocapikk/CVE-2024-8504", "url": "https://t.me/xatori_sec/160", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T10:16:32Z", "date_only": false, "value": "2024-09-15T10:16:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExploitQuest/27", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "7121355a-0e29-4a56-a80f-c4a502dd824e", "content": "\u26a1\ufe0f Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE \u26a1\ufe0f\n\n\n\nhttps://github.com/Chocapikk/CVE-2024-8504/blob/main/", "url": "https://t.me/ExploitQuest/27", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T10:34:19Z", "date_only": false, "value": "2024-09-15T10:34:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3178", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "39fec0a6-288a-40dd-b6d7-6121793751c0", "content": "https://github.com/Chocapikk/CVE-2024-8504\n\nExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE\n#github #exploit", "url": "https://t.me/CNArsenal/3178", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T11:00:14Z", "date_only": false, "value": "2024-09-15T11:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18698", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "d6e3b9be-3fac-4bd8-ad93-dce131bc2810", "content": "https://github.com/Chocapikk/CVE-2024-8504\n\nExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE\n#github #exploit", "url": "https://t.me/realLulzSec/18698", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T11:00:14Z", "date_only": false, "value": "2024-09-15T11:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1990", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "12277277-0f27-40a0-9265-0617b7dc67bc", "content": "https://github.com/Chocapikk/CVE-2024-8504\n\nExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE\n#github #exploit", "url": "https://t.me/realLulzSec/1990", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T11:00:18Z", "date_only": false, "value": "2024-09-15T11:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TohYDeIuVZAPrMW-eMaPaRDc6ooYv7pvZtWGGCpbn-z3FQ", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "46f8c5f3-5b2f-4f39-ac6f-18eb5ce0a702", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T15:18:29Z", "date_only": false, "value": "2024-09-15T15:18:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/654", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "d1baa4b5-5ae2-47d8-9959-8f5b8eaaa720", "content": "\u26a1\ufe0fExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/654"}, {"timestamp": "2024-09-15T15:18:34Z", "date_only": false, "value": "2024-09-15T15:18:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDilara/886", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "8940cdf5-7ff0-4575-b20a-0b9797cfad70", "content": "\u26a1\ufe0fExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE.\n\n#CyberBulletin", "url": "https://t.me/CyberDilara/886"}, {"timestamp": "2024-09-15T15:58:03Z", "date_only": false, "value": "2024-09-15T15:58:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/686", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "23f5a526-ddd2-4615-aa99-5991aee774a8", "content": "\u26a1\ufe0fExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/686"}, {"timestamp": "2024-09-15T17:46:38Z", "date_only": false, "value": "2024-09-15T17:46:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerArsenal/369", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "efaa391c-7cf6-4dad-8e85-11a0e516fcd4", "content": "CVE-2024-8504 \u0438 CVE-2024-8503\n*\nSQLi and RCE  - VICIdial\n*\nExploit", "url": "https://t.me/HackerArsenal/369"}, {"timestamp": "2024-09-15T21:38:10Z", "date_only": false, "value": "2024-09-15T21:38:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/13608", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "c4d211c7-7f83-460f-8709-d54e2157af97", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 \u2623\ufe0f Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE.\n\nhttps://darkwebinformer.com/exploit-for-cve-2024-8504-cve-2024-8503-sqli-and-rce/", "url": "https://t.me/cKure/13608", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-15T23:24:35Z", "date_only": false, "value": "2024-09-15T23:24:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/3625", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "957c17b1-d397-4854-8a4a-bfec5b93015e", "content": "\ud83d\udea8Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE\n\nhttps://darkwebinformer.com/exploit-for-cve-2024-8504-cve-2024-8503-sqli-and-rce/", "url": "https://t.me/TheDarkWebInformer/3625", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-16T05:41:06Z", "date_only": false, "value": "2024-09-16T05:41:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ton618cyber/3681", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "3cdfdc65-1376-4253-a321-888c8af6c3e1", "content": "#exploit\n1. CVE-2024-8503,\nCVE-2024-8504:\nVICIdial unauth SQLi to RCE\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n2. Exploiting Exchange PowerShell After ProxyNotShell\nPart 1: https://www.zerodayinitiative.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty\nPart 2: https://www.zerodayinitiative.com/blog/2024/9/11/exploiting-exchange-powershell-after-proxynotshell-part-2-approvedapplicationcollection", "url": "https://t.me/ton618cyber/3681"}, {"timestamp": "2024-09-16T05:41:06Z", "date_only": false, "value": "2024-09-16T05:41:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ton618cyber/796", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "75c7b486-919d-496f-b010-b80dd62eac61", "content": "#exploit\n1. CVE-2024-8503,\nCVE-2024-8504:\nVICIdial unauth SQLi to RCE\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n2. Exploiting Exchange PowerShell After ProxyNotShell\nPart 1: https://www.zerodayinitiative.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty\nPart 2: https://www.zerodayinitiative.com/blog/2024/9/11/exploiting-exchange-powershell-after-proxynotshell-part-2-approvedapplicationcollection", "url": "https://t.me/ton618cyber/796"}, {"timestamp": "2024-09-16T08:44:23Z", "date_only": false, "value": "2024-09-16T08:44:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/890", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "072871f7-ae81-417a-8023-f2a1f066ff60", "content": "Exploit for #SQLi and #RCE in #VICIdial.\n\nThe exploit can be found here: \n\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n#CyberDilara", "url": "https://t.me/CyberDilara/890", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-16T08:46:44Z", "date_only": false, "value": "2024-09-16T08:46:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/23796", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "a7a4160b-ffee-4f33-9624-2c3590fd1778", "content": "Exploit for #SQLi and #RCE in #VICIdial.\n\nThe exploit can be found here: \n\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/23796", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-16T08:46:45Z", "date_only": false, "value": "2024-09-16T08:46:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/304", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "b4c79660-f33b-4fa0-9a28-9093dd8eb9c6", "content": "Exploit for #SQLi and #RCE in #VICIdial.\n\nThe exploit can be found here: \n\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n#CyberDilara", "url": "https://t.me/InfoSecInsider/304", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-16T09:11:51Z", "date_only": false, "value": "2024-09-16T09:11:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Root_Exploit/728", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "dd9ac1e2-e6ae-4ba9-9c3f-1aa1bd670ca2", "content": "Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE \u26a1\ufe0f\n\nGithub\n\nReadhere\n\n#cve #exploit #sqli #rce\n\nJoin RootExploit \ud83d\udc8e", "url": "https://t.me/Root_Exploit/728", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-16T10:55:46Z", "date_only": false, "value": "2024-09-16T10:55:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/11140", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "cf005046-f801-4608-b911-94b4f61fc1db", "content": "#exploit\n1. CVE-2024-8503,\nCVE-2024-8504:\nVICIdial unauth SQLi to RCE\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n2. Exploiting Exchange PowerShell After ProxyNotShell\nPart 1: https://www.zerodayinitiative.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty\nPart 2: https://www.zerodayinitiative.com/blog/2024/9/11/exploiting-exchange-powershell-after-proxynotshell-part-2-approvedapplicationcollection", "url": "https://t.me/CyberSecurityTechnologies/11140"}, {"timestamp": "2024-09-18T03:29:21Z", "date_only": false, "value": "2024-09-18T03:29:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Cyberwise_tools/100", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "bc5117f5-e5d4-47fd-8e85-29ee968c7a8d", "content": "VICIdial Unauthenticated SQLi to RCE Exploit (CVE-2024-8503 and CVE-2024-8504) \ud83d\udea8\nExploit :  \u2b07\ufe0f\u2b07\ufe0f\u2b07\ufe0f\nhttps://github.com/Chocapikk/CVE-2024-8504/", "url": "https://t.me/Cyberwise_tools/100", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-18T04:12:48Z", "date_only": false, "value": "2024-09-18T04:12:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Rootsec_2/4447", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "8cf00c73-ea08-41ab-a690-050e646f22a5", "content": "#exploit\n1. CVE-2024-8503,\nCVE-2024-8504:\nVICIdial unauth SQLi to RCE\nhttps://github.com/Chocapikk/CVE-2024-8504\n\n2. Exploiting Exchange PowerShell After ProxyNotShell\nPart 1: https://www.zerodayinitiative.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty\nPart 2: https://www.zerodayinitiative.com/blog/2024/9/11/exploiting-exchange-powershell-after-proxynotshell-part-2-approvedapplicationcollection", "url": "https://t.me/Rootsec_2/4447"}, {"timestamp": "2024-09-18T09:07:10Z", "date_only": false, "value": "2024-09-18T09:07:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/13361", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "f74d4543-0f63-4381-ba57-bbd62ebbdf35", "content": "\u200aCritical Flaws Found in VICIdial Contact Center Suite: CVE-2024-8503 and CVE-2024-8504, PoC Published\n\nhttps://securityonline.info/critical-flaws-found-in-vicidial-contact-center-suite-cve-2024-8503-and-cve-2024-8504-poc-published/", "url": "https://t.me/HackingInsights/13361", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-21T03:00:30Z", "date_only": false, "value": "2024-09-21T03:00:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/25524", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "6059df34-5c9f-48a0-ac8d-58638268741e", "content": "\u26a1\ufe0fExploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/25524"}, {"timestamp": "2024-09-21T12:50:59Z", "date_only": false, "value": "2024-09-21T12:50:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/z3xploit/348", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "b3d4fef3-c9db-4b7c-b529-4869d70447fa", "content": "Exploit for CVE-2024-8504 & CVE-2024-8503: SQLi and RCE \u26a1\ufe0f\n\nGithub\n\nReadhere\n\n#cve #exploit #sqli #rce\n\nJoin Z3XPLOIT \ud83d\udc8e", "url": "https://t.me/z3xploit/348"}, {"timestamp": "2024-09-22T20:19:27Z", "date_only": false, "value": "2024-09-22T20:19:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8572", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "4683c1ca-69ad-4d58-9a5a-d9a3a08add8d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-8504\nURL\uff1ahttps://github.com/havokzero/ViciDial\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8572", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-30T21:37:15Z", "date_only": false, "value": "2024-09-30T21:37:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/vicidial_agent_authenticated_rce.rb", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "f690acad-576a-4801-be4e-adabad94faeb", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/vicidial_agent_authenticated_rce.rb"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "33dfa5bd-94a8-4a16-b133-64e9b2b93c71"}, {"timestamp": "2025-02-23T04:11:06Z", "date_only": false, "value": "2025-02-23T04:11:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "714be22f-8d17-41c9-906a-432ba99a99e7"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "624f04eb-d74b-4a57-8d68-d3197dab1eff"}, {"timestamp": "2025-11-04T16:16:06.940Z", "date_only": false, "value": "2025-11-04T16:16:06.940Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-8504", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T16:16:06.940Z", "date_only": false, "value": "2025-11-04T16:16:06.940Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-8504", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T18:31:19Z", "date_only": false, "value": "2025-11-04T18:31:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R47M-G4VH-PXF6", "record": "GHSA-R47M-G4VH-PXF6", "field": "modified", "linked_record": true}, {"timestamp": "2025-11-21T08:00:04.860Z", "date_only": false, "value": "2025-11-21T08:00:04.860508Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/leakix/statuses/115586629732624033", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "d8284458-49cc-4150-afec-ed99eefba651", "url": "https://mastodon.social/users/leakix/statuses/115586629732624033"}, {"timestamp": "2025-11-21T08:00:07.144Z", "date_only": false, "value": "2025-11-21T08:00:07.144457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m64stphv4w2u", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "be8a5c70-8f10-4124-ae06-8d11c28b9a29", "url": "https://bsky.app/profile/leakix.bsky.social/post/3m64stphv4w2u"}, {"timestamp": "2026-06-17T08:22:45.337Z", "date_only": false, "value": "2026-06-17T08:22:45.337", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8504", "record": "FKIE_CVE-2024-8504", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:02:10.861Z", "date_only": false, "value": "2026-07-29T12:02:10.861431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4737", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "c10bb92e-1b3a-4623-8a46-6cd24ded5724", "url": "https://t.me/reverseame/4737"}, {"timestamp": "2026-07-30T00:02:18.505Z", "date_only": false, "value": "2026-07-30T00:02:18.505902Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4737", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "d86f1c4e-f62b-4e88-8086-2a748d59bfa4", "url": "https://t.me/reverseame/4737"}, {"timestamp": "2026-08-02T05:10:56.263Z", "date_only": false, "value": "2026-08-02T05:10:56.263829Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4737", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "46918e23-3985-4940-9bca-db6f55da916a", "url": "https://t.me/reverseame/4737", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T02:13:58.329Z", "date_only": false, "value": "2026-08-03T02:13:58.329997Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4737", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "aaa51a04-37f2-45bb-a1d6-ead7a0b5efbc", "url": "https://t.me/reverseame/4737", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-14T09:13:32.229Z", "anchors": {"origin": {"timestamp": "2024-09-10T19:23:00Z", "date_only": false, "value": "2024-09-10T19:23:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / KoreLogic", "record": "cve-2024-8504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-09-10T19:23:00Z", "date_only": false, "value": "2024-09-10T19:23:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / KoreLogic", "record": "cve-2024-8504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-09-14T06:31:55Z", "date_only": false, "value": "2024-09-14T06:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8527", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "63d6fe4b-35f9-4bff-8a60-508e4e5a234a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVICIdial Unauthenticated SQLi to RCE Exploit (CVE-2024-8503 and CVE-2024-8504)\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-8504\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 299335.0, "hours": 83.14861111111111, "days": 3.464525462962963, "min_seconds": 299335.0, "max_seconds": 299335.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-10T19:23:00Z", "date_only": false, "value": "2024-09-10T19:23:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / KoreLogic", "record": "cve-2024-8504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-14T06:31:55Z", "date_only": false, "value": "2024-09-14T06:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8527", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "63d6fe4b-35f9-4bff-8a60-508e4e5a234a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVICIdial Unauthenticated SQLi to RCE Exploit (CVE-2024-8503 and CVE-2024-8504)\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-8504\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 68651432.229248, "hours": 19069.84228590222, "days": 794.5767619125926, "min_seconds": 68651432.229248, "max_seconds": 68651432.229248, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-10T19:23:00Z", "date_only": false, "value": "2024-09-10T19:23:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / KoreLogic", "record": "cve-2024-8504", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T09:13:32.229Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 68352097.229248, "hours": 18986.693674791113, "days": 791.1122364496297, "min_seconds": 68352097.229248, "max_seconds": 68352097.229248, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-14T06:31:55Z", "date_only": false, "value": "2024-09-14T06:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8527", "record": "CVE-2024-8504", "field": "creation_timestamp", "uuid": "63d6fe4b-35f9-4bff-8a60-508e4e5a234a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aVICIdial Unauthenticated SQLi to RCE Exploit (CVE-2024-8503 and CVE-2024-8504)\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-8504\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T09:13:32.229Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}