{"metadata": {"vulnerability": "cve-2025-24364", "count": 36, "kinds": {"milestone": 4, "sighting": 20, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-01-20T15:18:26.990Z", "date_only": false, "value": "2025-01-20T15:18:26.990Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-24364", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-27T17:46:15.260Z", "date_only": false, "value": "2025-01-27T17:46:15.260Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24364", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-27T17:46:15.260Z", "date_only": false, "value": "2025-01-27T17:46:15.260Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-24364", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-27T17:48:22.671Z", "date_only": false, "value": "2025-01-27T17:48:22.671894Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113901574697474273", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "cdd15ec2-3d49-412f-9e2d-b480320042d3", "url": "https://infosec.exchange/users/cve/statuses/113901574697474273"}, {"timestamp": "2025-01-27T18:12:30.669Z", "date_only": false, "value": "2025-01-27T18:12:30.669064Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24364", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-27T18:12:30.669Z", "date_only": false, "value": "2025-01-27T18:12:30.669064Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24364", "record": "FKIE_CVE-2025-24364", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-27T18:15:41.690Z", "date_only": false, "value": "2025-01-27T18:15:41.690", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24364", "record": "FKIE_CVE-2025-24364", "field": "published"}, {"timestamp": "2025-01-27T18:16:21.617Z", "date_only": false, "value": "2025-01-27T18:16:21.617866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdgggem2w", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "08e0089c-696b-45d7-ab22-1e50bf7c9926", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdgggem2w"}, {"timestamp": "2025-01-27T20:11:24Z", "date_only": false, "value": "2025-01-27T20:11:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16491", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "a6408848-f2d8-4748-847a-961692726e9b", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24364 - DNSimple Vaultwarden Admin Panel Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2025-24364 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code in the system. The attacker could then change some settings to use sendmail as mail agent but adjust the settings in such a way that it would use a shell command. It then also needed to craft a special favicon image which would have the commands embedded to run during for example sending a test email. This vulnerability is fixed in 1.33.0. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16491"}, {"timestamp": "2025-01-27T23:00:00Z", "date_only": false, "value": "2025-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-01-30T23:00:00Z", "date_only": false, "value": "2025-01-30T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-31T09:08:57.029Z", "date_only": false, "value": "2025-01-31T09:08:57.029+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0191", "record": "WID-SEC-W-2025-0191", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-12T20:41:36.200Z", "date_only": false, "value": "2025-02-12T20:41:36.200Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-24364", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:41:36.200Z", "date_only": false, "value": "2025-02-12T20:41:36.200Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24364", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-22T15:37:47Z", "date_only": false, "value": "2025-04-22T15:37:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bizone_channel/1863", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "e21c81b8-00dc-42f5-8fed-44e6b31495c1", "content": "\ud83c\udf1b CVE-2025-24364 \u0438 CVE-2025-24365: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Vaultwarden\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c BI.ZONE TDR, \u0432 2025 \u0433\u043e\u0434\u0443 Vaultwarden \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u0430\u0436\u0434\u0430\u044f \u0434\u0435\u0441\u044f\u0442\u0430\u044f \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 Vaultwarden, \u043f\u0440\u0438 \u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0443\u0437\u043d\u0430\u0435\u0442 \u0438 \u0438\u0445. \u0410 \u0435\u0441\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e API, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043f\u0430\u0434\u0435\u0442 \u043d\u0430 \u0445\u043e\u0441\u0442 \u0441 \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c\u044e.\n\n\u041d\u0430\u0448\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 Vaultwarden. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2025-24364 \u0438 CVE-2025-24365.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438 \u0434\u0430\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/bizone_channel/1863"}, {"timestamp": "2025-05-01T20:26:00.595Z", "date_only": false, "value": "2025-05-01T20:26:00.595260Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114434451714753157", "record": "cve-2025-24364", "field": "creation_timestamp", "uuid": "22bac14a-8231-4957-8133-23c6a5adaee0", "url": "https://infosec.exchange/users/threatcodex/statuses/114434451714753157"}, {"timestamp": "2025-09-01T13:53:38Z", "date_only": false, "value": "2025-09-01T13:53:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "1620de7b-4a3c-4d2e-9d7c-7b87841267fa"}, {"timestamp": "2026-06-17T08:58:54.463Z", "date_only": false, "value": "2026-06-17T08:58:54.463", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24364", "record": "FKIE_CVE-2025-24364", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:30.952Z", "date_only": false, "value": "2026-07-26T02:00:30.952395Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3829", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "94bab076-1a0d-4732-8f13-2a2c4b410891", "url": "https://t.me/EchelonEyes/3829"}, {"timestamp": "2026-07-26T07:01:45.695Z", "date_only": false, "value": "2026-07-26T07:01:45.695465Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/mephictf/902", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "81e5c990-187a-44dc-9a82-ffcbd2375f0e", "url": "https://t.me/mephictf/902"}, {"timestamp": "2026-07-27T00:00:35.893Z", "date_only": false, "value": "2026-07-27T00:00:35.893539Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3829", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "a3049d4b-bf34-47eb-a7b5-3472366b4aad", "url": "https://t.me/EchelonEyes/3829"}, {"timestamp": "2026-07-27T00:01:30.415Z", "date_only": false, "value": "2026-07-27T00:01:30.415563Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/mephictf/902", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "fcbdc45d-5671-4ba0-92ae-124261ef4c21", "url": "https://t.me/mephictf/902"}, {"timestamp": "2026-07-28T00:00:53.285Z", "date_only": false, "value": "2026-07-28T00:00:53.285947Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/3829", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "f703c318-86fa-4ad3-801f-becb952fb83d", "url": "https://t.me/EchelonEyes/3829"}, {"timestamp": "2026-07-28T21:00:05.560Z", "date_only": false, "value": "2026-07-28T21:00:05.560918Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mephictf/902", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "1251e828-4da9-4f0b-85df-34614f50c5a3", "url": "https://t.me/mephictf/902"}, {"timestamp": "2026-07-29T00:00:12.934Z", "date_only": false, "value": "2026-07-29T00:00:12.934483Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mephictf/902", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "e119367d-d341-4e06-bc90-97c223d12d81", "url": "https://t.me/mephictf/902"}, {"timestamp": "2026-07-29T09:00:07.727Z", "date_only": false, "value": "2026-07-29T09:00:07.727118Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/divannyi_it/1863", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "b5505029-d919-42dd-ad12-48226a61509e", "url": "https://t.me/divannyi_it/1863"}, {"timestamp": "2026-07-29T12:03:16.236Z", "date_only": false, "value": "2026-07-29T12:03:16.236719Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2381", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "51c9aaa4-7b77-4993-8885-72e22768ca86", "url": "https://t.me/sysadm_in_up/2381"}, {"timestamp": "2026-07-30T00:02:06.668Z", "date_only": false, "value": "2026-07-30T00:02:06.668668Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/divannyi_it/1863", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "013a03a8-6e2e-4341-adc9-bf8b8b9dbb5c", "url": "https://t.me/divannyi_it/1863"}, {"timestamp": "2026-07-30T00:03:00.889Z", "date_only": false, "value": "2026-07-30T00:03:00.889619Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2381", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "fb2bd5fd-470c-44bc-a3d4-b47d860d1119", "url": "https://t.me/sysadm_in_up/2381"}, {"timestamp": "2026-08-04T00:00:08.907Z", "date_only": false, "value": "2026-08-04T00:00:08.907267Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2381", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "e99574cc-133a-4857-80f3-cd473159cea8", "url": "https://t.me/sysadm_in_up/2381"}, {"timestamp": "2026-08-04T13:00:14.024Z", "date_only": false, "value": "2026-08-04T13:00:14.024657Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/222", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "95362839-685a-4fc3-8c1d-5784a455356d", "url": "https://t.me/purp_sec/222"}, {"timestamp": "2026-08-05T00:00:10.762Z", "date_only": false, "value": "2026-08-05T00:00:10.762679Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/222", "record": "CVE-2025-24364", "field": "creation_timestamp", "uuid": "d3193802-ad40-4519-ad70-d3e2ee73d210", "url": "https://t.me/purp_sec/222"}]}
