{"metadata": {"vulnerability": "ghsa-3733-6v6m-39mh", "count": 16, "kinds": {"milestone": 3, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-04-30T00:00:00Z", "date_only": false, "value": "2024-04-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-4984 / Wordfence", "record": "CVE-2024-4984", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-05-14T00:00:00Z", "date_only": false, "value": "2024-05-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-4984 / Wordfence", "record": "CVE-2024-4984", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-05-16T02:02:33.785Z", "date_only": false, "value": "2024-05-16T02:02:33.785Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-4984", "record": "CVE-2024-4984", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-16T02:02:35.901Z", "date_only": false, "value": "2024-05-16T02:02:35.901Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-4984", "record": "CVE-2024-4984", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-16T02:15:09Z", "date_only": false, "value": "2024-05-16T02:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-3733-6v6m-39mh", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-16T03:30:45Z", "date_only": false, "value": "2024-05-16T03:30:45Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-3733-6v6m-39mh", "field": "published"}, {"timestamp": "2024-05-16T15:09:19.687Z", "date_only": false, "value": "2024-05-16T15:09:19.687143Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-4984 / CISA-ADP", "record": "CVE-2024-4984", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-30T10:08:39Z", "date_only": false, "value": "2024-05-30T10:08:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3256", "record": "GHSA-3733-6V6M-39MH", "field": "creation_timestamp", "uuid": "ca73c2c3-11e6-43f1-995f-437bc55d3369", "content": "Tools - Hackers Factory\n\nIt creates a livedump of the machine through NtDebugSystemControl to extract the COM secret and context, to then inject inside this process.\n\nhttps://github.com/Slowerzs/PPLSystem\n\nAgentic LLM Vulnerability Scanner \n\nhttps://github.com/msoedov/agentic_security\n\nA Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements. \n\nhttps://github.com/msoedov/agentic_security\n\nPowerful+Fast Kubernetes service discovery tools via kubernetes DNS service. Currently supported service ip-port BruteForcing / AXFR Domain Transfer Dump / Coredns WildCard Dump \n\nhttps://github.com/Esonhugh/k8spider\n\nHTTP 403 bypass tool \n\nhttps://github.com/trap-bytes/403jump\n\n\nMOBEXLER - A Mobile Application Penetration Testing Platform\n\nhttps://github.com/enciphers-team/Mobexler/blob/master/docs/index.md\n\nA library for detecting known secrets across many web frameworks \n\nhttps://github.com/blacklanternsecurity/badsecrets\n\nThe Yoast SEO plugin for WordPress is vulnerable to... \n\nhttps://github.com/advisories/GHSA-3733-6v6m-39mh\n\nServer-Side Request Forgery in Server Actions \n\nhttps://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6g\n\nFuzz 401/403/404 pages for bypasses \n\nhttps://github.com/intrudir/BypassFuzzer\n\nAn interactive shell to spoof some LOLBins command line \n\nhttps://github.com/itaymigdal/LOLSpoof\n\nFully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike. \n\nhttps://github.com/Syslifters/sysreptor\n\n#HackersFactory", "url": "https://t.me/dilagrafie/3256"}, {"timestamp": "2024-05-30T10:09:06Z", "date_only": false, "value": "2024-05-30T10:09:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GhostClanOfficial/929", "record": "GHSA-3733-6V6M-39MH", "field": "creation_timestamp", "uuid": "680380d9-57fe-4aa2-a200-b398f79700a0", "content": "Tools - Hackers Factory\n\nIt creates a livedump of the machine through NtDebugSystemControl to extract the COM secret and context, to then inject inside this process.\n\nhttps://github.com/Slowerzs/PPLSystem\n\nAgentic LLM Vulnerability Scanner \n\nhttps://github.com/msoedov/agentic_security\n\nA Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements. \n\nhttps://github.com/msoedov/agentic_security\n\nPowerful+Fast Kubernetes service discovery tools via kubernetes DNS service. Currently supported service ip-port BruteForcing / AXFR Domain Transfer Dump / Coredns WildCard Dump \n\nhttps://github.com/Esonhugh/k8spider\n\nHTTP 403 bypass tool \n\nhttps://github.com/trap-bytes/403jump\n\n\nMOBEXLER - A Mobile Application Penetration Testing Platform\n\nhttps://github.com/enciphers-team/Mobexler/blob/master/docs/index.md\n\nA library for detecting known secrets across many web frameworks \n\nhttps://github.com/blacklanternsecurity/badsecrets\n\nThe Yoast SEO plugin for WordPress is vulnerable to... \n\nhttps://github.com/advisories/GHSA-3733-6v6m-39mh\n\nServer-Side Request Forgery in Server Actions \n\nhttps://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6g\n\nFuzz 401/403/404 pages for bypasses \n\nhttps://github.com/intrudir/BypassFuzzer\n\nAn interactive shell to spoof some LOLBins command line \n\nhttps://github.com/itaymigdal/LOLSpoof\n\nFully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike. \n\nhttps://github.com/Syslifters/sysreptor\n\n#HackersFactory", "url": "https://t.me/GhostClanOfficial/929"}, {"timestamp": "2024-05-30T10:10:01Z", "date_only": false, "value": "2024-05-30T10:10:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GhostsForum/21710", "record": "GHSA-3733-6V6M-39MH", "field": "creation_timestamp", "uuid": "ac5c4df7-4e1c-4e56-b6a8-e6bdc4b5b895", "content": "Tools - Hackers Factory\n\nIt creates a livedump of the machine through NtDebugSystemControl to extract the COM secret and context, to then inject inside this process.\n\nhttps://github.com/Slowerzs/PPLSystem\n\nAgentic LLM Vulnerability Scanner \n\nhttps://github.com/msoedov/agentic_security\n\nA Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements. \n\nhttps://github.com/msoedov/agentic_security\n\nPowerful+Fast Kubernetes service discovery tools via kubernetes DNS service. Currently supported service ip-port BruteForcing / AXFR Domain Transfer Dump / Coredns WildCard Dump \n\nhttps://github.com/Esonhugh/k8spider\n\nHTTP 403 bypass tool \n\nhttps://github.com/trap-bytes/403jump\n\n\nMOBEXLER - A Mobile Application Penetration Testing Platform\n\nhttps://github.com/enciphers-team/Mobexler/blob/master/docs/index.md\n\nA library for detecting known secrets across many web frameworks \n\nhttps://github.com/blacklanternsecurity/badsecrets\n\nThe Yoast SEO plugin for WordPress is vulnerable to... \n\nhttps://github.com/advisories/GHSA-3733-6v6m-39mh\n\nServer-Side Request Forgery in Server Actions \n\nhttps://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6g\n\nFuzz 401/403/404 pages for bypasses \n\nhttps://github.com/intrudir/BypassFuzzer\n\nAn interactive shell to spoof some LOLBins command line \n\nhttps://github.com/itaymigdal/LOLSpoof\n\nFully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike. \n\nhttps://github.com/Syslifters/sysreptor\n\n#HackersFactory", "url": "https://t.me/GhostsForum/21710"}, {"timestamp": "2024-06-04T17:54:33.970Z", "date_only": false, "value": "2024-06-04T17:54:33.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-4984 / CISA-ADP", "record": "CVE-2024-4984", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-17T14:07:45Z", "date_only": false, "value": "2024-06-17T14:07:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/158", "record": "GHSA-3733-6V6M-39MH", "field": "creation_timestamp", "uuid": "67b72bea-79bc-4091-9ba3-03a30d70cfb2", "content": "Tools - Hackers Factory\n\nIt creates a livedump of the machine through NtDebugSystemControl to extract the COM secret and context, to then inject inside this process.\n\nhttps://github.com/Slowerzs/PPLSystem\n\nAgentic LLM Vulnerability Scanner \n\nhttps://github.com/msoedov/agentic_security\n\nA Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements. \n\nhttps://github.com/msoedov/agentic_security\n\nPowerful+Fast Kubernetes service discovery tools via kubernetes DNS service. Currently supported service ip-port BruteForcing / AXFR Domain Transfer Dump / Coredns WildCard Dump \n\nhttps://github.com/Esonhugh/k8spider\n\nHTTP 403 bypass tool \n\nhttps://github.com/trap-bytes/403jump\n\n\nMOBEXLER - A Mobile Application Penetration Testing Platform\n\nhttps://github.com/enciphers-team/Mobexler/blob/master/docs/index.md\n\nA library for detecting known secrets across many web frameworks \n\nhttps://github.com/blacklanternsecurity/badsecrets\n\nThe Yoast SEO plugin for WordPress is vulnerable to... \n\nhttps://github.com/advisories/GHSA-3733-6v6m-39mh\n\nServer-Side Request Forgery in Server Actions \n\nhttps://github.com/vercel/next.js/security/advisories/GHSA-fr5h-rqp8-mj6g\n\nFuzz 401/403/404 pages for bypasses \n\nhttps://github.com/intrudir/BypassFuzzer\n\nAn interactive shell to spoof some LOLBins command line \n\nhttps://github.com/itaymigdal/LOLSpoof\n\nFully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike. \n\nhttps://github.com/Syslifters/sysreptor\n\n#HackersFactory", "url": "https://t.me/CyberDilara/158"}, {"timestamp": "2024-08-01T20:55:10.330Z", "date_only": false, "value": "2024-08-01T20:55:10.330Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-4984 / CVE", "record": "CVE-2024-4984", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:54:54.267Z", "date_only": false, "value": "2026-04-08T16:54:54.267Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-4984", "record": "CVE-2024-4984", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:54:54.267Z", "date_only": false, "value": "2026-04-08T16:54:54.267Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-4984 / Wordfence", "record": "CVE-2024-4984", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T18:33:12Z", "date_only": false, "value": "2026-04-08T18:33:12Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-3733-6v6m-39mh", "field": "modified"}]}