{"vulnerability": "2024-46", "sightings": [{"uuid": "5ccf1079-cb53-4725-94c2-07372571ef34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4696", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1310/", "content": "", "creation_timestamp": "2024-09-27T05:00:00.000000Z"}, {"uuid": "07d19620-36e0-435a-91fc-040d54bf98a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46887", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-10", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "c446d6fb-3d19-4ff7-9782-97f02f20ad21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "", "content": "", "creation_timestamp": "2024-11-05T12:24:03.827273Z"}, {"uuid": "e5702155-6c46-4e00-ae91-31528854b3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46886", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-01", "content": "", "creation_timestamp": "2024-10-10T12:00:00.000000Z"}, {"uuid": "05ca9963-1271-43f3-a42b-69d45de42a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46889", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470191442066903", "content": "", "creation_timestamp": "2024-11-12T13:21:56.859488Z"}, {"uuid": "b4611eb2-bd1f-4608-920d-498d56aefad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46960", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113443898643437044", "content": "", "creation_timestamp": "2024-11-07T21:55:20.347035Z"}, {"uuid": "64a65632-3e94-42cb-9567-74022d59747d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46961", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113443898659158257", "content": "", "creation_timestamp": "2024-11-07T21:55:20.688313Z"}, {"uuid": "fcd8dfd2-bca2-407d-9f71-cb16a03d7d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46888", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470191407753691", "content": "", "creation_timestamp": "2024-11-12T13:21:56.476968Z"}, {"uuid": "acb0a64f-4398-45fc-bbde-a57a4189d4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448127639962307", "content": "", "creation_timestamp": "2024-11-08T15:50:49.672034Z"}, {"uuid": "5b61bdfa-3c02-4253-8ea5-1ac4ecc89db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46948", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448127656485474", "content": "", "creation_timestamp": "2024-11-08T15:50:49.919040Z"}, {"uuid": "8f556c12-aa31-4516-9691-b6d9a111370a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448127670506246", "content": "", "creation_timestamp": "2024-11-08T15:50:50.255761Z"}, {"uuid": "7cff134d-d4dd-41e1-951c-57f4c49dfb6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448139539865036", "content": "", "creation_timestamp": "2024-11-08T15:53:51.216918Z"}, {"uuid": "19daaaa1-e3e1-4ee1-9693-98fac2755c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46948", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448139555020818", "content": "", "creation_timestamp": "2024-11-08T15:53:51.519074Z"}, {"uuid": "97ec75a0-e818-4015-83e0-2995b69d455e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113448139568921293", "content": "", "creation_timestamp": "2024-11-08T15:53:53.894744Z"}, {"uuid": "59109f01-696c-41d7-b70c-f98fe96f5102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46890", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470191456641348", "content": "", "creation_timestamp": "2024-11-12T13:21:56.944562Z"}, {"uuid": "1f8d30bb-c6ce-49e0-b3ec-4cb96832c46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46891", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470250459336382", "content": "", "creation_timestamp": "2024-11-12T13:36:57.237382Z"}, {"uuid": "19953110-7334-416a-990e-ef836d554615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46892", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470250493627734", "content": "", "creation_timestamp": "2024-11-12T13:36:57.673451Z"}, {"uuid": "42179784-2635-4fa6-af37-4820d2547fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46894", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113470250508542440", "content": "", "creation_timestamp": "2024-11-12T13:36:58.066822Z"}, {"uuid": "75df3e2d-1932-424c-9a3c-2194ba780090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46613", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113460672800721357", "content": "", "creation_timestamp": "2024-11-10T21:01:13.775432Z"}, {"uuid": "975d172d-cb6b-49f7-a300-d247dfcf34ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46951", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113460711323018662", "content": "", "creation_timestamp": "2024-11-10T21:11:01.557459Z"}, {"uuid": "846f90a2-6a84-4ef9-96dd-bdc15229b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46952", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113460754246123416", "content": "", "creation_timestamp": "2024-11-10T21:21:56.356398Z"}, {"uuid": "ae096bf0-013e-47ea-aa7b-79f11ef31ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46953", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113460754260746941", "content": "", "creation_timestamp": "2024-11-10T21:21:56.683506Z"}, {"uuid": "142842fc-66bb-4318-b7fe-17d20c1eb60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46955", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113460754288858514", "content": "", "creation_timestamp": "2024-11-10T21:21:57.016193Z"}, {"uuid": "906ce807-07db-45a4-a1a4-904c1320edc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46954", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113460754274675685", "content": "", "creation_timestamp": "2024-11-10T21:21:57.475793Z"}, {"uuid": "cc568022-5de6-4adb-bd4b-ea370cac48f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46962", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466180174338516", "content": "", "creation_timestamp": "2024-11-11T20:21:49.570011Z"}, {"uuid": "b1d72900-2f10-4d2a-972f-e0c8012c9385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46965", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466132808682650", "content": "", "creation_timestamp": "2024-11-11T20:09:46.720813Z"}, {"uuid": "04c4a18f-6e98-43da-bce2-176a563fa57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46963", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466180188503395", "content": "", "creation_timestamp": "2024-11-11T20:21:49.664298Z"}, {"uuid": "eac9bc42-b029-472e-b6b0-82c829e64087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46966", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466180216237308", "content": "", "creation_timestamp": "2024-11-11T20:21:50.029677Z"}, {"uuid": "a9f0306a-b037-4174-bc42-71669fd9fb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46964", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113466180202363057", "content": "", "creation_timestamp": "2024-11-11T20:21:50.197361Z"}, {"uuid": "e776c705-98c1-4875-ae9b-872cccc4a17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "MISP/682055c7-fb73-4d29-be0f-ef00f55f3970", "content": "", "creation_timestamp": "2024-09-09T15:30:14.000000Z"}, {"uuid": "032e2d01-b58d-4044-a729-208104515833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "MISP/7a9d9173-4384-4175-9c02-52868c04fd34", "content": "", "creation_timestamp": "2024-09-02T11:19:54.000000Z"}, {"uuid": "edd290ff-fd3e-41c7-88a7-284ad0c57ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-05-13T18:10:02.000000Z"}, {"uuid": "bb513bbd-2c37-45d4-a42d-e09312b28f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-06-12T18:10:03.000000Z"}, {"uuid": "70c79a3e-73db-4b60-8aa6-869fc602aeac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46888", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "8dc1895a-e8df-4a7b-b5e1-889c1482506b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46889", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "e20aeebe-c9e1-4876-bc30-bd78fca3bd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46890", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "bc364844-febe-4ae1-8ed9-9a24085b8850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4603", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-06", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "425f15a5-3244-4d69-b68d-b104bb84a32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46891", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "58395587-016b-4e72-aec4-6c26e61d3006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46892", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "5bc9678e-e634-4f72-bc6c-fba7c295d9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46894", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "9b696a22-2418-4907-ac32-dd1419d4c7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46383", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488105404789758", "content": "", "creation_timestamp": "2024-11-15T17:17:42.009064Z"}, {"uuid": "1a977509-e8ea-41c7-87ec-c65becb20d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46462", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488202396442567", "content": "", "creation_timestamp": "2024-11-15T17:42:22.068470Z"}, {"uuid": "ebd2e82a-93e0-4ae2-bace-212b365b4e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46466", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488202411595291", "content": "", "creation_timestamp": "2024-11-15T17:42:22.260100Z"}, {"uuid": "ef18e50c-5cf2-452f-b202-01d0e877bf86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46462", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488187871937871", "content": "", "creation_timestamp": "2024-11-15T17:38:40.373692Z"}, {"uuid": "03027d60-a311-4721-ad2f-68316a562396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46466", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113488187886587509", "content": "", "creation_timestamp": "2024-11-15T17:38:40.466490Z"}, {"uuid": "3104b01f-1842-4915-95ad-647d2de71fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46055", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113555422023711821", "content": "", "creation_timestamp": "2024-11-27T14:37:11.977097Z"}, {"uuid": "200077c4-d8d6-4afb-a9f0-81315bb79807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46054", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113555422010376487", "content": "", "creation_timestamp": "2024-11-27T14:37:12.097819Z"}, {"uuid": "4f025e30-2f50-45bc-b6bb-b518b08164b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46874", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01", "content": "", "creation_timestamp": "2024-12-03T11:00:00.000000Z"}, {"uuid": "43b3a7b8-6341-4e35-8f14-c8e37e8a6628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46908", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590485768782792", "content": "", "creation_timestamp": "2024-12-03T19:14:22.760469Z"}, {"uuid": "b0b8e548-0ade-495f-9c1f-a9ead035d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46906", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590485768782792", "content": "", "creation_timestamp": "2024-12-03T19:14:22.851732Z"}, {"uuid": "5db3f757-b5cf-48e7-8419-362f6db8e442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46909", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590485768782792", "content": "", "creation_timestamp": "2024-12-03T19:14:22.929339Z"}, {"uuid": "e41317e8-0a43-44e5-9924-f5f282fcfc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622206123914330", "content": "", "creation_timestamp": "2024-12-09T09:41:16.600401Z"}, {"uuid": "75bde78d-0a3e-497d-94bc-2e25dc97857f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46874", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113607286230169597", "content": "", "creation_timestamp": "2024-12-06T18:26:57.136202Z"}, {"uuid": "5b5aee4e-cacf-4df2-bb52-a14fed70e912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46909", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1645/", "content": "", "creation_timestamp": "2024-12-06T05:00:00.000000Z"}, {"uuid": "3880569f-a15b-4f97-afea-93406f39f5a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46938", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113526260681347063", "content": "", "creation_timestamp": "2024-11-22T11:01:06.031919Z"}, {"uuid": "1a699e00-31d7-4bf8-a586-ea4c81b524bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46907", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590485768782792", "content": "", "creation_timestamp": "2024-12-03T19:14:22.808326Z"}, {"uuid": "9e734f95-2efe-4957-8454-7290dd21343f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590485768782792", "content": "", "creation_timestamp": "2024-12-03T19:14:22.889758Z"}, {"uuid": "b320cfd9-8c64-4b96-8559-25a36be8c3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46938", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46938.yaml", "content": "", "creation_timestamp": "2024-11-22T12:17:30.000000Z"}, {"uuid": "7e225f4a-79e6-4b17-a0c1-48d3b89e14d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46625", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113591173004315447", "content": "", "creation_timestamp": "2024-12-03T22:09:08.715362Z"}, {"uuid": "1ff919b0-efea-46bb-a3c4-d6701ace5868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46939", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113558506207465195", "content": "", "creation_timestamp": "2024-11-28T03:41:33.593150Z"}, {"uuid": "a668fd1a-bf2a-4c78-9a39-cfb3325a7400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46624", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113591220208835801", "content": "", "creation_timestamp": "2024-12-03T22:21:09.053545Z"}, {"uuid": "75bf646b-8612-4ab5-8675-51ed745c5ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46455", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624766751790332", "content": "", "creation_timestamp": "2024-12-09T20:32:28.462341Z"}, {"uuid": "33754727-9ad7-4211-abeb-b471a09b2c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46657", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629501664888548", "content": "", "creation_timestamp": "2024-12-10T16:36:37.624859Z"}, {"uuid": "19c0d664-7b91-455a-b26f-ea2dbb03de18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46657", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629514476372079", "content": "", "creation_timestamp": "2024-12-10T16:39:53.201809Z"}, {"uuid": "823f267d-dbb1-4861-bb48-47dbae57edb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46908", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1687/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "abdf2fad-a9c7-4878-897f-bc885b146377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46907", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1686/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "6cf3a09d-6ce0-44d3-9b9b-641b2b28cde7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1685/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "5019f4d1-62c4-4c66-9a7f-e5647c7bbfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46906", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1684/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "08cb8fd0-3e8f-4aa1-b562-d8484cc16214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46873", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699339293135358", "content": "", "creation_timestamp": "2024-12-23T00:37:15.395566Z"}, {"uuid": "44f8d074-9e46-41ff-a978-df20c5997c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46873", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699351908622129", "content": "", "creation_timestamp": "2024-12-23T00:40:27.863912Z"}, {"uuid": "9adc8d30-7fb8-480a-9c83-707fae494b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46873", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwqxvpoyb25", "content": "", "creation_timestamp": "2024-12-23T01:15:35.144700Z"}, {"uuid": "72f8a7a7-2d49-4a62-8c30-b8499e6a65ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46873", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113702428189011075", "content": "", "creation_timestamp": "2024-12-23T13:43:03.600015Z"}, {"uuid": "5d518baa-584a-4766-8481-2c22205c9261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46873", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3ldy2qnrrb372", "content": "", "creation_timestamp": "2024-12-23T13:43:14.604620Z"}, {"uuid": "5b504094-585a-49fb-94a8-93730194c3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46073", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782569211083494", "content": "", "creation_timestamp": "2025-01-06T17:23:43.131304Z"}, {"uuid": "9c010a84-ec1a-41fd-aadc-6922b7ad8a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46921", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822434693792288", "content": "", "creation_timestamp": "2025-01-13T18:22:02.057305Z"}, {"uuid": "c0e6095b-b392-4336-9c62-2cb8806b2bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46481", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpowcwtfv2e", "content": "", "creation_timestamp": "2025-01-14T16:40:39.499091Z"}, {"uuid": "3f955ef3-9cc9-4809-ba07-4bb451b9bb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46479", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113822538846167508", "content": "", "creation_timestamp": "2025-01-13T18:48:37.544880Z"}, {"uuid": "cb336267-277c-4984-8747-d43b80911d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46920", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113822619545306060", "content": "", "creation_timestamp": "2025-01-13T19:09:02.595327Z"}, {"uuid": "c95f845e-5b65-4f7e-bc11-b71be33d9ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822641052419398", "content": "", "creation_timestamp": "2025-01-13T19:14:31.437719Z"}, {"uuid": "c27f214a-ff65-44b2-8b27-c9e0619d0473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4631", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822641052419398", "content": "", "creation_timestamp": "2025-01-13T19:14:31.474446Z"}, {"uuid": "494247c3-0ee2-4782-b37e-0fe4f7127260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfcc44jiv52l", "content": "", "creation_timestamp": "2025-01-09T08:46:38.960707Z"}, {"uuid": "652bd8a2-7449-48cd-aa3b-82eda546ebcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46480", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822772280500032", "content": "", "creation_timestamp": "2025-01-13T19:47:53.211857Z"}, {"uuid": "d9224e29-b6f8-4067-9889-5e3acb04bf83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46480", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpq5bj4sm2a", "content": "", "creation_timestamp": "2025-01-14T17:02:26.630701Z"}, {"uuid": "a798a3d8-4448-4eff-83d8-ea2d3dd3b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfboj3bsdt2z", "content": "", "creation_timestamp": "2025-01-09T02:55:59.135592Z"}, {"uuid": "6f3a21f3-fe31-4148-9718-fc817e81fdaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lf4ro72pqy2t", "content": "", "creation_timestamp": "2025-01-07T04:09:13.326242Z"}, {"uuid": "1769cae0-e69e-49b7-b173-42a889cd6229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46481", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822794330501003", "content": "", "creation_timestamp": "2025-01-13T19:53:29.628801Z"}, {"uuid": "a88a0acb-4b46-4d2a-8e6f-f403694361cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782729477665790", "content": "", "creation_timestamp": "2025-01-06T18:04:28.505686Z"}, {"uuid": "9c908542-63fa-44e6-b391-ea564c6ed947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfa5fgnocs2a", "content": "", "creation_timestamp": "2025-01-08T12:17:08.446002Z"}, {"uuid": "455c99c8-6a06-4aeb-bc20-01419e34ec77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46073", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qiycnqj2i", "content": "", "creation_timestamp": "2025-01-06T18:15:44.755867Z"}, {"uuid": "0a971b10-89d3-4436-af02-e944774d39e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lfdmhuxyyc26", "content": "", "creation_timestamp": "2025-01-09T21:24:50.910306Z"}, {"uuid": "328b8f6c-d2b9-4e60-97d6-0a58b7f2313d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qj2sqg622", "content": "", "creation_timestamp": "2025-01-06T18:15:47.173719Z"}, {"uuid": "91323de4-8fdc-47e7-96bb-b8b3651f2aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46480", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113823011263185366", "content": "", "creation_timestamp": "2025-01-13T20:48:40.917828Z"}, {"uuid": "1b9e2a90-1ef4-40db-90ad-9951c646f50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46209", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113782815498541746", "content": "", "creation_timestamp": "2025-01-06T18:26:21.552873Z"}, {"uuid": "d20ba6d1-57d2-4107-8a9f-f2f7d864a8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46464", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113800627825028525", "content": "", "creation_timestamp": "2025-01-09T21:56:15.524375Z"}, {"uuid": "ff52e98a-70ec-4709-8e80-cee717ddeca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2n7vk32k", "content": "", "creation_timestamp": "2025-01-06T18:43:31.099023Z"}, {"uuid": "473bb9ab-f57f-4f23-a76f-197aa55c9c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46920", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpwzati342j", "content": "", "creation_timestamp": "2025-01-14T19:05:27.720388Z"}, {"uuid": "d258346d-8c7d-444a-9b07-603d014b9106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46209", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df", "content": "", "creation_timestamp": "2025-01-09T22:01:24.000000Z"}, {"uuid": "39b73ad8-16b4-465e-9c5c-c06eab5916f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df", "content": "", "creation_timestamp": "2025-01-09T22:01:24.000000Z"}, {"uuid": "0b9647b3-f3f8-4c74-b1d5-80740009e973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46073", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3s2nhase2q", "content": "", "creation_timestamp": "2025-01-06T18:43:32.310994Z"}, {"uuid": "f99ea125-d484-4e21-a5ad-c7e0c732dcf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lf4spabgz22y", "content": "", "creation_timestamp": "2025-01-07T04:27:43.981997Z"}, {"uuid": "33c569b1-be4c-4a1e-a0a1-156672e321de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46464", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdpcujv2x2e", "content": "", "creation_timestamp": "2025-01-09T22:15:43.743029Z"}, {"uuid": "caf940a0-3d07-4786-8ae5-6b1ede834e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46464", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfdqvd3nxf2e", "content": "", "creation_timestamp": "2025-01-09T22:43:58.000247Z"}, {"uuid": "2dfcc6b5-4e65-4bd9-b0c5-ec63e36b924d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46209", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3tu6u4c22f", "content": "", "creation_timestamp": "2025-01-06T19:15:41.750512Z"}, {"uuid": "1bc3b3fe-598d-400f-8071-9eabb8ed0553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lf5kdzznb72a", "content": "", "creation_timestamp": "2025-01-07T11:30:56.431600Z"}, {"uuid": "c9dce1f1-f2ce-4bd0-afae-6bd75296ea58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3vn7b53o2g", "content": "", "creation_timestamp": "2025-01-06T19:47:35.239081Z"}, {"uuid": "2a3381d4-5981-43e2-afff-3859883b7ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113827347482732049", "content": "", "creation_timestamp": "2025-01-14T15:11:37.876851Z"}, {"uuid": "d7ebf7ed-f11b-478b-b021-8d1539e55617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46601", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113787873583041789", "content": "", "creation_timestamp": "2025-01-07T15:52:41.467762Z"}, {"uuid": "5b03a98f-462c-4305-ba1d-f16b4bd5cb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lfpjxhgkq5q2", "content": "", "creation_timestamp": "2025-01-14T15:11:57.869155Z"}, {"uuid": "8b99fb67-8969-49d6-8e08-f5c3b33777f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46602", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113787873598057958", "content": "", "creation_timestamp": "2025-01-07T15:52:41.808159Z"}, {"uuid": "e08c9e0e-24ea-49fa-8866-5704ef2cd556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpsbeaa2z2k", "content": "", "creation_timestamp": "2025-01-14T17:40:30.900194Z"}, {"uuid": "8ab71be4-7b34-4a2a-9421-f64acdbe4374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46603", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113787873611697876", "content": "", "creation_timestamp": "2025-01-07T15:52:42.083587Z"}, {"uuid": "79cae99f-cbe2-497f-9535-a8fdeca06324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46662", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:33.928713Z"}, {"uuid": "e4c4146e-cb1d-45fa-8767-4d684612841a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46667", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:33.962640Z"}, {"uuid": "c94e464c-4cd1-4bcb-9a2f-87c0b315c100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46665", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827355879730690", "content": "", "creation_timestamp": "2025-01-14T15:13:34.029436Z"}, {"uuid": "9bc94a2c-3aa9-49cd-8b0f-bcfa290ae63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lf5zeycli62x", "content": "", "creation_timestamp": "2025-01-07T15:59:53.576860Z"}, {"uuid": "6bc47eb6-5a69-4793-a195-be343bcb87c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46603", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62cbcrig2f", "content": "", "creation_timestamp": "2025-01-07T16:16:16.191641Z"}, {"uuid": "5c589285-fca7-47e0-9d42-0583b80d7bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46601", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62c3kkzq2m", "content": "", "creation_timestamp": "2025-01-07T16:16:09.942468Z"}, {"uuid": "1ea4b129-c79c-472e-88bd-fd413d46b1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-010/", "content": "", "creation_timestamp": "2025-01-09T05:00:00.000000Z"}, {"uuid": "fdf0b237-586c-4228-b72f-9a109c235f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46242", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62byhrht2k", "content": "", "creation_timestamp": "2025-01-07T16:16:06.808137Z"}, {"uuid": "7591bfb0-7610-4013-b921-7e40d9d6cacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46602", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62c6k2lo22", "content": "", "creation_timestamp": "2025-01-07T16:16:13.082492Z"}, {"uuid": "5eed0000-4037-4019-a1b4-ea83c2b49ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46919", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpzautmnl2h", "content": "", "creation_timestamp": "2025-01-14T19:45:31.191831Z"}, {"uuid": "6f7dd879-7d73-47af-9d81-16654bbb7c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113783511523717971", "content": "", "creation_timestamp": "2025-01-06T21:23:21.632229Z"}, {"uuid": "7ec4506e-874e-4de6-881a-b65ff66ad483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/2e00bbc770c0fc995dd013cff3c28f36", "content": "", "creation_timestamp": "2025-01-07T09:56:08.000000Z"}, {"uuid": "d103d8a8-e10a-4e22-a60d-440ea336a94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46209", "type": "confirmed", "source": "https://gist.github.com/h4ckr4v3n/2e00bbc770c0fc995dd013cff3c28f36", "content": "", "creation_timestamp": "2025-01-07T09:56:08.000000Z"}, {"uuid": "7dc0a3ab-ace8-46a0-95de-8cc317c1d09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46972", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113728677913660600", "content": "", "creation_timestamp": "2024-12-28T04:58:27.185169Z"}, {"uuid": "4577941d-3d78-4beb-957c-3f202227a223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46973", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113728677929219189", "content": "", "creation_timestamp": "2024-12-28T04:58:27.573878Z"}, {"uuid": "5d7f7da1-655a-4c65-af98-6c9b2da62149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46972", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ledqpgblcy2i", "content": "", "creation_timestamp": "2024-12-28T05:15:27.033797Z"}, {"uuid": "f521a476-7874-473d-a250-a7763fcd9bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46973", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ledqpigxxp22", "content": "", "creation_timestamp": "2024-12-28T05:15:29.052116Z"}, {"uuid": "fe000c9c-ba0f-48cf-a0a0-a3079b4706cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113804879164832080", "content": "", "creation_timestamp": "2025-01-10T15:57:25.856341Z"}, {"uuid": "06e88f00-dee7-43a6-9419-efde9b88d3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfflolmrtw2a", "content": "", "creation_timestamp": "2025-01-10T16:16:01.381710Z"}, {"uuid": "2a8c864f-2c4a-4463-8722-a22cc4cf9de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46542", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742951005979114", "content": "", "creation_timestamp": "2024-12-30T17:28:17.314757Z"}, {"uuid": "ac3df80c-fc38-4806-8e2d-ff140484e3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf5nk5t7xb27", "content": "", "creation_timestamp": "2025-01-07T12:28:02.514877Z"}, {"uuid": "19cf9e8a-0912-4207-a9d1-edfd45430252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lf5nk5t7xb27", "content": "", "creation_timestamp": "2025-01-07T12:28:02.520823Z"}, {"uuid": "47c9d866-c140-4ae5-bf67-c9b4c15db6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46479", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfpuitub252e", "content": "", "creation_timestamp": "2025-01-14T18:20:29.799210Z"}, {"uuid": "62b54ccb-3a05-4766-9e9d-3dbc75e8b7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46542", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lepnaiivin2j", "content": "", "creation_timestamp": "2025-01-01T22:45:22.945123Z"}, {"uuid": "194d7d0f-219e-40e6-a748-4e4af7ed5fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46981", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lf4yaiur4226", "content": "", "creation_timestamp": "2025-01-07T06:06:50.232859Z"}, {"uuid": "e354421a-f8cc-4755-8aef-2b00c2a48786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf45vpwpoy2m", "content": "", "creation_timestamp": "2025-01-06T22:15:30.554485Z"}, {"uuid": "d57b241d-accc-4778-8dc9-3b8016954e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46622", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfc3jrqhz22j", "content": "", "creation_timestamp": "2025-01-09T06:49:01.206989Z"}, {"uuid": "3bfd0017-30e0-45ad-8790-d23968f5d2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827473227611627", "content": "", "creation_timestamp": "2025-01-14T15:43:24.028370Z"}, {"uuid": "3842c996-34c4-4a8d-8c07-368859d9a2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46666", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827473258068791", "content": "", "creation_timestamp": "2025-01-14T15:43:24.442049Z"}, {"uuid": "b9fa80db-36bb-4a0c-8421-c9c8aa2a6e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46665", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827473242592097", "content": "", "creation_timestamp": "2025-01-14T15:43:24.197420Z"}, {"uuid": "29c1bc0d-09f6-4397-8ec6-d048937b4254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46667", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827473286850831", "content": "", "creation_timestamp": "2025-01-14T15:43:24.787429Z"}, {"uuid": "16fc14fe-6f7e-4116-8b3f-df01afd0dbe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46896", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3cxrvb2l", "content": "", "creation_timestamp": "2025-01-11T13:15:50.145789Z"}, {"uuid": "e3df7899-14e6-4272-9ddd-11efdda78cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46973", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113821648880947589", "content": "", "creation_timestamp": "2025-01-13T15:02:11.875226Z"}, {"uuid": "d353240b-a59a-4277-84df-c8e0a15357a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "seen", "source": "https://u1f383.github.io/linux/2024/11/15/a-quick-note-for-perf-cve-2024-46713.html", "content": "", "creation_timestamp": "2024-11-14T23:00:00.000000Z"}, {"uuid": "8b9cdd0a-87cb-4b5d-a1d6-a0339f101c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46669", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwg4lvl2e", "content": "", "creation_timestamp": "2025-01-14T14:17:32.621206Z"}, {"uuid": "7747f424-3c0d-47de-9012-fd70a87f208b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46450", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113840477739106705", "content": "", "creation_timestamp": "2025-01-16T22:50:37.174127Z"}, {"uuid": "d4aef8b6-cce1-4c76-a40d-b3ada1b8ae7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46667", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwbfghh2n", "content": "", "creation_timestamp": "2025-01-14T14:17:27.679229Z"}, {"uuid": "a3b419f1-0d3b-4c8f-9f01-edd18ca8b210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46668", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827532288010490", "content": "", "creation_timestamp": "2025-01-14T15:58:25.413720Z"}, {"uuid": "6b3a6e16-2796-40ef-889b-d4335c74ffb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46669", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827532303083908", "content": "", "creation_timestamp": "2025-01-14T15:58:25.470079Z"}, {"uuid": "cf3130d4-9912-45bf-b061-fa55771c094e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827532336420853", "content": "", "creation_timestamp": "2025-01-14T15:58:25.892780Z"}, {"uuid": "04e47cb2-01e8-440f-91d3-3f47742e98ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfveqjwlys2e", "content": "", "creation_timestamp": "2025-01-16T22:54:26.972184Z"}, {"uuid": "842e8cf7-b6a2-4bfe-a819-2840e635aff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46919", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822087634757079", "content": "", "creation_timestamp": "2025-01-13T16:53:46.300823Z"}, {"uuid": "a1b5b4a0-d17f-403e-b4b0-3973ca8db256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46664", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvztig22t", "content": "", "creation_timestamp": "2025-01-14T14:17:19.639927Z"}, {"uuid": "e8b9666e-cd5c-475d-bdb6-b1c7f7464cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46450", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvcllnx4a2t", "content": "", "creation_timestamp": "2025-01-16T22:15:52.745811Z"}, {"uuid": "612c9471-0f67-478f-9623-b5f2ff2ef0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46505", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdioyizxt22", "content": "", "creation_timestamp": "2025-01-09T20:17:13.947801Z"}, {"uuid": "5ce83712-6884-400b-979b-63bbf68d16bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46920", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822179948679481", "content": "", "creation_timestamp": "2025-01-13T17:17:14.933448Z"}, {"uuid": "0914390a-7619-4cba-88f9-83f7689ba6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46665", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgw42mtw2t", "content": "", "creation_timestamp": "2025-01-14T14:17:22.050887Z"}, {"uuid": "0121b133-1842-43de-8e5e-98f8b9a677d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46666", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgw6cpob2n", "content": "", "creation_timestamp": "2025-01-14T14:17:24.458129Z"}, {"uuid": "cdac4c34-5d8e-4770-8c78-92daa0f7820a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46919", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113822249973117109", "content": "", "creation_timestamp": "2025-01-13T17:35:03.404393Z"}, {"uuid": "1e6e0e59-3b14-46f1-93c2-3d1769525214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46668", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwdoz4f2f", "content": "", "creation_timestamp": "2025-01-14T14:17:30.152118Z"}, {"uuid": "9ab15817-31f5-408b-93fe-9a5880f9bfe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46479", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822351287174035", "content": "", "creation_timestamp": "2025-01-13T18:00:49.417839Z"}, {"uuid": "4ec1ae36-cab8-4e89-a3c6-ed95f2612cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwige4o2d", "content": "", "creation_timestamp": "2025-01-14T14:17:34.960404Z"}, {"uuid": "fcca3ebd-cd8c-45b6-91c9-61497243d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhhhs2vpvd2z", "content": "", "creation_timestamp": "2025-02-05T21:02:06.785041Z"}, {"uuid": "98ab190f-62a8-412f-9a85-f9dc1f1b6711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46507.yaml", "content": "", "creation_timestamp": "2025-02-03T17:22:43.000000Z"}, {"uuid": "c35a8c07-c2b8-4beb-8ce4-c780ffb7a03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lgzvzvcgzc22", "content": "", "creation_timestamp": "2025-01-31T11:39:44.366512Z"}, {"uuid": "24570875-5cf0-477e-a675-0ff40d46ef13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-46507", "type": "seen", "source": "https://infosec.exchange/users/agnivesh/statuses/113912782072554403", "content": "", "creation_timestamp": "2025-01-29T17:20:44.963713Z"}, {"uuid": "60736438-b354-4f40-83fb-859bbb33bc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46881", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113893250306639303", "content": "", "creation_timestamp": "2025-01-26T06:31:22.594488Z"}, {"uuid": "f6d49aff-4e21-4d97-b060-f0e67d715943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgvjhbitnk2w", "content": "", "creation_timestamp": "2025-01-29T17:44:02.919131Z"}, {"uuid": "31ecf346-d66e-4c91-87d3-7aba15727202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46881", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgmuwz5fse2f", "content": "", "creation_timestamp": "2025-01-26T07:15:37.352962Z"}, {"uuid": "2d88b28c-aac0-4a15-bbea-6242c6eefd11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgmzfl6m5z2w", "content": "", "creation_timestamp": "2025-01-26T08:35:24.244651Z"}, {"uuid": "0cb4a476-d97f-4946-86b5-51518d27d203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lgxgwaf4e42q", "content": "", "creation_timestamp": "2025-01-30T12:03:56.320860Z"}, {"uuid": "ae1f93d1-8cdd-49d8-8ad5-ecf5c95aab6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lgvsgieowd2d", "content": "", "creation_timestamp": "2025-01-29T20:24:33.267353Z"}, {"uuid": "b528cb2e-8f73-46d8-9eef-3387ada15266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46974", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920767868508785", "content": "", "creation_timestamp": "2025-01-31T03:09:27.231680Z"}, {"uuid": "533dbc36-d791-472b-aa93-7c53b37fb853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46974", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyzuglke22h", "content": "", "creation_timestamp": "2025-01-31T03:15:36.252696Z"}, {"uuid": "6a552883-2736-417f-9cd3-182d36462b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgxohta3ix24", "content": "", "creation_timestamp": "2025-01-30T14:19:03.173352Z"}, {"uuid": "4b8b4bed-6c7a-49a1-a318-54025e1a8a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981105527920026", "content": "", "creation_timestamp": "2025-02-10T18:54:14.445237Z"}, {"uuid": "5501d0ee-dcc0-4c34-b31e-7a626a9a10bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981122747611903", "content": "", "creation_timestamp": "2025-02-10T18:58:29.734004Z"}, {"uuid": "0a28fd9a-66cf-4b94-8053-6eafa244aadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7asd3p2x", "content": "", "creation_timestamp": "2025-02-10T19:16:10.835216Z"}, {"uuid": "3be5889c-ebea-4981-a62a-d8ea9371d4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46430", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7df6p22h", "content": "", "creation_timestamp": "2025-02-10T19:16:13.756688Z"}, {"uuid": "67eb8e4d-6b7a-4363-865f-f71342ceebe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46431", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7fqbqu2n", "content": "", "creation_timestamp": "2025-02-10T19:16:16.574483Z"}, {"uuid": "34a703c1-3af2-4704-bea7-1f9e8e5bd6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46432", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7hy44y2q", "content": "", "creation_timestamp": "2025-02-10T19:16:18.864096Z"}, {"uuid": "9a3b6ccd-cc46-41ff-b092-bd93da1286b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46433", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7k5dt72x", "content": "", "creation_timestamp": "2025-02-10T19:16:20.744038Z"}, {"uuid": "6d08ec1e-4cf4-4560-be59-ff869256e8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46434", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7myckm2n", "content": "", "creation_timestamp": "2025-02-10T19:16:24.228533Z"}, {"uuid": "42507b70-3672-4764-8696-12e635a6f573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46435", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7p6nkp2x", "content": "", "creation_timestamp": "2025-02-10T19:16:26.842455Z"}, {"uuid": "40e7b6af-2403-492e-af97-1096de27a229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46436", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7rpitx2x", "content": "", "creation_timestamp": "2025-02-10T19:16:29.728413Z"}, {"uuid": "dccfca30-cf55-4fc2-ae3a-a708745dac9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7uecdy2z", "content": "", "creation_timestamp": "2025-02-10T19:16:32.379097Z"}, {"uuid": "f4961a0c-5d7f-4072-9608-fff986682522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhu5whn7ej2e", "content": "", "creation_timestamp": "2025-02-10T22:10:14.223778Z"}, {"uuid": "99bf5f74-47e7-4d1f-899b-57894fde5207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhu5whuyuk2c", "content": "", "creation_timestamp": "2025-02-10T22:10:15.498839Z"}, {"uuid": "7e60eff2-4d08-4b6d-9198-8dc84399d08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhu5why6uw2q", "content": "", "creation_timestamp": "2025-02-10T22:10:16.114199Z"}, {"uuid": "9f6264d1-2657-4b91-91cc-a933b6fed9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46429", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028651260452", "content": "", "creation_timestamp": "2025-02-10T22:48:53.423069Z"}, {"uuid": "c8dc5a54-e0fc-4780-ac49-a99f22da174a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46431", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028694725489", "content": "", "creation_timestamp": "2025-02-10T22:48:53.718362Z"}, {"uuid": "e250102e-5e1e-4971-a3a5-69ef8cec6b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46432", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028734700522", "content": "", "creation_timestamp": "2025-02-10T22:48:54.115324Z"}, {"uuid": "e4190417-b1c3-48fb-835b-123648f43bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46433", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028777580726", "content": "", "creation_timestamp": "2025-02-10T22:48:55.096176Z"}, {"uuid": "0a3ed532-9219-4245-b27e-3ff42db0dd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46434", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028833250750", "content": "", "creation_timestamp": "2025-02-10T22:48:55.751569Z"}, {"uuid": "9e905355-5c02-4a54-a36e-2fddbcb17e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46435", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028870829735", "content": "", "creation_timestamp": "2025-02-10T22:48:56.277989Z"}, {"uuid": "a567beb4-f181-4a4f-9b99-d3dfdc0c16a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46436", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113982028914041799", "content": "", "creation_timestamp": "2025-02-10T22:48:57.477670Z"}, {"uuid": "8ac1f839-b0c9-404e-80f1-b7e630a3d7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4625", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulteohja27", "content": "", "creation_timestamp": "2025-02-11T02:19:01.020574Z"}, {"uuid": "26ed680c-2776-469c-b0ab-5462f8d105a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46666", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113985677953599994", "content": "", "creation_timestamp": "2025-02-11T14:16:56.932326Z"}, {"uuid": "75222f9b-1be6-455c-b3c7-1038d8b37d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46668", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113985677953599994", "content": "", "creation_timestamp": "2025-02-11T14:16:57.004005Z"}, {"uuid": "2a00b667-7762-468c-a8a4-261c496c46f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46666", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lhwa5fj6pw2d", "content": "", "creation_timestamp": "2025-02-11T17:55:12.179277Z"}, {"uuid": "77d12090-8ba3-48fd-aba3-04cde5694a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46668", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lhwa5fj6pw2d", "content": "", "creation_timestamp": "2025-02-11T17:55:12.245369Z"}, {"uuid": "1c2e3926-6de9-43f9-8196-93d477fdf80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhwkli25iy23", "content": "", "creation_timestamp": "2025-02-11T21:02:02.087888Z"}, {"uuid": "ae07c16f-f339-4b10-8b68-83ff76a8cf68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-12T03:00:46.000000Z"}, {"uuid": "9a0e9bda-4965-459d-bfaa-3d1416ed031f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:06.000000Z"}, {"uuid": "f0bf04f0-691b-494a-97c9-2e54482baef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhywmytljf2f", "content": "", "creation_timestamp": "2025-02-12T19:42:57.575850Z"}, {"uuid": "69ec9744-8131-42cc-95cf-c3ec86eb2ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46922", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7doy4q42s", "content": "", "creation_timestamp": "2025-02-12T22:18:48.758519Z"}, {"uuid": "a1c0e07c-31c9-49d0-a845-b7a2bee578aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46923", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7drbudc2a", "content": "", "creation_timestamp": "2025-02-12T22:18:51.125811Z"}, {"uuid": "af7eebc2-0468-44cc-b391-5f416a9006b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn3yrixz2a", "content": "", "creation_timestamp": "2025-02-13T02:25:03.313657Z"}, {"uuid": "f747ae57-0bfe-4de3-b42f-a97928b70666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46923", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn3yvd4e2h", "content": "", "creation_timestamp": "2025-02-13T02:25:03.917196Z"}, {"uuid": "2747be5b-e61c-4c6b-9679-c97a811d43d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://bsky.app/profile/clayton256.bsky.social/post/3lksxmoixsn2c", "content": "", "creation_timestamp": "2025-03-20T15:00:17.036706Z"}, {"uuid": "588d1d1c-de0a-447b-bd1e-31d8a590dc8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995756330783663", "content": "", "creation_timestamp": "2025-02-13T09:00:00.317413Z"}, {"uuid": "80442ad2-35c8-40d9-ba15-79a9fbacc9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li2e2gcbdx2a", "content": "", "creation_timestamp": "2025-02-13T09:15:46.374467Z"}, {"uuid": "a0a2de81-4720-4f07-a2d6-9d56f070c7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7y6l6q2z", "content": "", "creation_timestamp": "2025-02-13T10:30:31.257473Z"}, {"uuid": "1fc58058-3d5e-49f3-9a4b-025f12171744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "20491bbe-865c-4892-9102-992ced1caad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46665", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "9b3cb08d-aa5b-4ab5-a4a2-544e814180e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46668", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "776919c9-0002-4829-8303-2f82bd4ea5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46669", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "a952d6fe-6eed-41a6-84bb-f48ea0b7ac5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4603", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "c4c28d21-2667-45f4-8f29-6e5151d6fb11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46666", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "a776b7a3-ce10-48dc-baa8-48ec6d30d0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3li5ch2jzj52x", "content": "", "creation_timestamp": "2025-02-14T13:25:02.466985Z"}, {"uuid": "e36a3884-2bce-4a73-a523-c9746c9521d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3liw3lekik22f", "content": "", "creation_timestamp": "2025-02-24T09:58:46.575748Z"}, {"uuid": "0d235e43-1ec9-4960-950f-f659ba0d1a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46975", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lirvein6jq2t", "content": "", "creation_timestamp": "2025-02-22T17:56:53.314825Z"}, {"uuid": "0fb3533e-2e60-4857-9bd7-341d45dede99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:54.000000Z"}, {"uuid": "be5d050e-9ee8-4f19-8525-77a5057e487f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46662", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161569079957523", "content": "", "creation_timestamp": "2025-03-14T15:48:24.318232Z"}, {"uuid": "8721e795-745e-4374-9a81-0c2c2a186775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:55.000000Z"}, {"uuid": "da58d5c9-7ee6-4152-8aef-f02b403dcb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lke2qhkenw2n", "content": "", "creation_timestamp": "2025-03-14T16:46:17.670215Z"}, {"uuid": "c9c51cd4-5d7d-4de0-9a41-0e875a9bd8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46662", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114162103566286961", "content": "", "creation_timestamp": "2025-03-14T18:04:18.154587Z"}, {"uuid": "e3445b6c-8bb7-4f25-aa43-fe2a7382b230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46528", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llhpl4qpkn2u", "content": "", "creation_timestamp": "2025-03-28T21:02:09.804668Z"}, {"uuid": "a6a8a83a-06bc-4e79-8b30-d6b48dae48ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46626", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctf7arz23", "content": "", "creation_timestamp": "2025-04-04T21:02:07.834721Z"}, {"uuid": "900af565-390b-45f1-8f52-8eb7b7f09a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46671", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmcygejqeu2v", "content": "", "creation_timestamp": "2025-04-08T17:22:27.561381Z"}, {"uuid": "e2663f6d-bafb-4414-be9a-f3777c746cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "seen", "source": "https://bsky.app/profile/ntauthority.me/post/3lmg4dosj222q", "content": "", "creation_timestamp": "2025-04-09T23:10:31.279067Z"}, {"uuid": "6d0f49c4-7132-4ec8-a2cd-d1548af3bab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "seen", "source": "https://bsky.app/profile/ntauthority.me/post/3lmg4doskyk2q", "content": "", "creation_timestamp": "2025-04-09T23:10:31.757623Z"}, {"uuid": "75738dfb-3e93-4b50-8255-2eea4cf83cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "seen", "source": "https://bsky.app/profile/ntauthority.me/post/3lmg4doslxs2q", "content": "", "creation_timestamp": "2025-04-09T23:10:32.213054Z"}, {"uuid": "48829300-ff41-45d1-85c6-b57ef6942d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46278", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvz4mja2a", "content": "", "creation_timestamp": "2025-04-17T21:02:35.991268Z"}, {"uuid": "2443d508-b25b-462f-a3ad-ba235f0c4149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4620", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-4620.yaml", "content": "", "creation_timestamp": "2025-05-29T09:42:55.000000Z"}, {"uuid": "a44d1c97-5041-4c1a-aba1-dda6402345a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqvzy77nut2m", "content": "", "creation_timestamp": "2025-06-06T04:51:40.012858Z"}, {"uuid": "1e08c78a-fd23-4d90-b5fe-24559ec4340e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46089", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uuv44tlj2", "content": "", "creation_timestamp": "2025-04-18T14:55:38.755330Z"}, {"uuid": "ee1ac4bf-05e6-4c07-8aa6-ce8fe8c52a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fq3n2c2l", "content": "", "creation_timestamp": "2025-04-18T16:34:29.820043Z"}, {"uuid": "e8cb1157-3edc-4d0e-a055-4c294cb08059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46483", "type": "seen", "source": "https://t.me/brutsecurity/1039", "content": "", "creation_timestamp": "2026-07-10T00:00:36.034028Z"}, {"uuid": "85109261-eacc-4e77-ba51-ce1c2b8cd8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrbs3romej2o", "content": "", "creation_timestamp": "2025-06-10T21:02:34.184468Z"}, {"uuid": "613aa09d-3b64-405a-b5fd-f2ee5a74132b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46546", "type": "seen", "source": "https://gist.github.com/laskdjlaskdj12/5b29b8b68f8a2279c9294708f080496b", "content": "", "creation_timestamp": "2025-04-21T15:58:24.000000Z"}, {"uuid": "a9ad2a6b-cf41-4f27-badb-0c0224a60d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gmbxib2t", "content": "", "creation_timestamp": "2025-04-22T07:04:42.220787Z"}, {"uuid": "894507e7-53fb-408c-ac18-2bd7f903b358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46546", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnfxbot6752v", "content": "", "creation_timestamp": "2025-04-22T15:05:10.269348Z"}, {"uuid": "783a24de-8937-4ba9-a801-b1eebfbec645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46993", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv3fkjsmp2r", "content": "", "creation_timestamp": "2025-07-01T06:34:45.366114Z"}, {"uuid": "2b60ac55-4f4b-4cd6-9d5c-f284aeeaefb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46992", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv6s6hn7c2a", "content": "", "creation_timestamp": "2025-07-01T07:35:30.070542Z"}, {"uuid": "65e9e7f3-c3bd-4eea-9ecb-0314e4c91a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnouaqgu2i2z", "content": "", "creation_timestamp": "2025-04-26T04:04:50.962159Z"}, {"uuid": "cccf96f3-9691-4dd3-9298-55b29b516860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4620", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingchywa2c", "content": "", "creation_timestamp": "2025-05-31T21:02:23.227321Z"}, {"uuid": "137fb9d1-02d0-47d2-8406-77a112f91a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "MISP/682055c7-fb73-4d29-be0f-ef00f55f3970", "content": "", "creation_timestamp": "2025-07-03T05:09:44.000000Z"}, {"uuid": "b11756a7-1f35-445e-b4d7-656ec0d880b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr74kcumeo2a", "content": "", "creation_timestamp": "2025-06-09T19:31:32.820281Z"}, {"uuid": "6e099af4-e313-4775-9288-0297987c5a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lp2wfc6nen2r", "content": "", "creation_timestamp": "2025-05-13T16:40:19.947497Z"}, {"uuid": "d3093fac-be23-4afe-9ccc-8d742e3b95f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsu3pa42w", "content": "", "creation_timestamp": "2025-05-13T16:48:02.237187Z"}, {"uuid": "16a2558d-726a-4ddf-8754-d7dcd808aca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46895", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3hogyqzry2", "content": "", "creation_timestamp": "2025-05-13T22:08:56.882695Z"}, {"uuid": "e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "905b5ccf-521a-4625-b277-351183fd4b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46938", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "d5bec307-0c49-41ca-9335-e9fc7d097b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luso5gun5k27", "content": "", "creation_timestamp": "2025-07-25T18:22:41.275712Z"}, {"uuid": "968ce3b1-059b-4945-b6d3-61839c99a288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46510", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernfdsq2f", "content": "", "creation_timestamp": "2025-10-31T21:02:48.844835Z"}, {"uuid": "9045fed4-7b87-4394-ae62-6a47b2d1c2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46993", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:20.000000Z"}, {"uuid": "de1485ef-5cdf-4be2-8d94-09f272c54f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46992", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:20.000000Z"}, {"uuid": "75ff8cb2-863f-406d-af5c-465d2bbf8ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "6d1f9064-2efb-4297-8c53-c0572a44ac72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/ZerodayAlert/253", "content": "", "creation_timestamp": "2026-07-12T00:00:19.354596Z"}, {"uuid": "fddb8e84-9894-419e-84be-e0eb7d02d6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46899", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "fa712cf1-bc9b-4928-bb02-cc2e7dc91b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m3d7nzzvgr2s", "content": "", "creation_timestamp": "2025-10-16T16:49:54.577664Z"}, {"uuid": "a600ead6-bd5f-4714-9eb9-e066b02409f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m3d7o4mucw26", "content": "", "creation_timestamp": "2025-10-16T16:49:57.023209Z"}, {"uuid": "e425d90d-2ee7-4629-9d4b-ee58b6b05808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46899", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:36.000000Z"}, {"uuid": "57f0d8ee-a4f0-4ea4-87e4-4a76d1abba19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://gist.github.com/Darkcrai86/be3200468c2ca536858f42b23e6a545a", "content": "", "creation_timestamp": "2025-10-16T17:17:15.000000Z"}, {"uuid": "2ced93a9-063b-43e9-b63e-021b5e162a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "72144bcd-9c19-4331-ab29-5e872c76e406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "03fb6c20-025e-4199-9f5a-d53669d8b8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "fd0d94e1-7a69-45d1-a140-81a88b108706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "d4c9997b-8f13-49a8-b67b-bc94e742e413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "f12dafe5-7d8e-43a8-8eb7-932d4f184cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46993", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:24.000000Z"}, {"uuid": "5c8bc218-e5ff-4ebf-be2e-478f04e0525f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46992", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:24.000000Z"}, {"uuid": "0eec6dce-e1fd-4581-bd40-8187aa7e9fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46781", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f9c9e259-b693-4fdd-b2ec-5eed1e233956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46689", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "db37ba4c-5c0c-46aa-a07a-0fd9a5cbcb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46702", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "33834db9-1124-4665-bbed-aee8069bdbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46707", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "dd87bc29-2bc3-4764-ad00-143709ca336e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f594616b-a13c-4afb-83d3-145c0bcd1b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46719", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "289870e5-8e44-4a2c-a7ba-76d0b49fec40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46723", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "4978323f-8cee-4b04-8cd6-b7f90f55733a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46724", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "bb603a32-41d2-432f-89e7-4990deb37800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46731", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e63be8be-ba4b-4c0f-951a-3f6e90e55c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46758", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "bbe1de2f-1839-4b6c-90d5-d930e8f67d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46759", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "44fcf42a-9efb-4020-8d5e-42cdf73ae79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46761", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "86829343-98de-42fe-9dfb-70eb19b2a4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46763", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2453a191-85a7-4e5a-8931-c085f7e8035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46798", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "56360ade-7751-4fb4-b09f-2f43c37c5ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46817", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "8f036cfc-f94e-423e-8f48-319bc734d150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46676", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e19257d7-34ad-4602-b345-2a2df9dc86f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46677", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "1bed7bfa-71fc-4d50-89c5-4e0e0e86eb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46755", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ac5b9b41-edf7-4c59-b436-c0fcef418e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46780", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ca953177-6b9a-417b-8860-0f0fb972c956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46829", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "b5297521-4714-49f3-aa9c-2f80256772c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f5ad2092-fdc0-41b0-8263-ca2f463931d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46745", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a7abd45b-4c29-460c-89b2-1603de9a4a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46777", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0401622a-e464-43d5-9337-6201aa4cc771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46791", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e12c9046-509f-4f53-8207-5ef6dfe4d642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46804", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "3dbcd242-b980-4693-af28-8edfc1f0bb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46814", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "74e6df73-4582-486d-8e7c-098cd5aeae94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46822", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "4fcdf2bf-74db-424f-8178-46c8d89f2257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46840", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "30a76d0d-76d0-4ebb-baef-f095bc8a830b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46674", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "22ceebd2-49bf-4361-a68d-9a36e261be08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46685", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "1c612cb6-7647-4766-a87c-6f975ad07249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46721", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "0ffe3f6f-932c-4ead-b450-b833bc17fddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46722", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "163c8865-6257-43ec-aa5d-2e855389d988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46744", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "1544a7f6-b1e1-4462-9317-24b76c9630fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46782", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "92ce1384-5158-4ccb-9f56-b284f16bd24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46815", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "45a1292e-6907-4da8-b60e-e76cce6d1a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46818", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "819072ae-41bb-4a62-9cf4-2bd375a2d542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46828", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "7dbb087b-bc44-420c-9079-d01c46bf9900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46844", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e43697db-bbc3-48d4-aaf9-0f6247cb885f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46750", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "8789b5c4-61c3-4c11-b973-177feafe1ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46673", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "c56d0507-69f8-4d49-acec-a79492d51a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46675", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "3aafdf60-e1fe-4d4e-b6af-48149d6438e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46679", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "7c7ba446-c855-4dae-b7f5-5430470b5701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46714", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a1b99e27-2e9e-4907-980e-59fe6fcf9635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46725", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "209d214f-3ba7-4d8c-98fe-eea70193fa20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46738", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ff2ec261-d673-4bcf-ace0-d9754c794ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46739", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "db22f782-5c74-474a-805a-b1e08712c7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46743", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "6005e00c-ac35-48e9-af25-8e55a66dc43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46771", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "f83ad8f1-0610-4add-b787-ce8d1686e7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46783", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "e99fddef-5ef6-464f-bccb-8398a1443ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46800", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "fbe741a2-653d-4f8c-bec8-369a773c503c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46819", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "578e4c25-978d-4444-a85c-c67b81325b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46832", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "91fae4f0-5775-4244-aed4-38758883fe9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46737", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "44bd80fa-d534-4b77-a914-2a8f6df5185e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46747", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "ab53f7d6-693d-4ddf-a142-a4f857095c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46756", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "a4b90d01-88ed-46e2-a51a-37d2bc8bcf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46757", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "c9b48c2f-3029-4f74-a469-ffebca2166b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "0f88a20b-1f06-4b93-9e71-d20368f5b181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "d358c748-6a90-4afd-b693-33abae903985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "2501fc80-3bfd-40d3-8fb9-609b4d229ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "789e9e80-6275-45d8-a0ae-5fd6f4937692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "d9f6875f-7184-44da-bd62-bab6a0843758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "1512d6f1-c4db-49f6-939c-7994888f1dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5u6t7kpxr2s", "content": "", "creation_timestamp": "2025-11-17T21:40:33.357498Z"}, {"uuid": "7c225be5-9443-450b-9ecb-39f6daa11392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lylnhhezmp27", "content": "", "creation_timestamp": "2025-09-11T21:02:29.320716Z"}, {"uuid": "f43516e9-92a5-433a-906a-6dd57e342d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "c0c7c3c4-79c9-4d61-838f-0d15484b94ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "9a8ebc3e-756c-4d8d-95c3-1fa968595a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/pleyades_it/11087", "content": "", "creation_timestamp": "2026-07-12T22:00:15.293119Z"}, {"uuid": "76c0b70e-211f-412e-ab57-c1130b8a6d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "190dc642-6dcf-448a-b5d6-ba7ef0319bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "ccd59f9a-d5ce-4ee8-a33f-e9b8e4723546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "b5e82c7c-c493-45b2-98eb-52d95aba6597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "e506d63b-089f-4292-bb7d-657430c9de24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46484", "type": "seen", "source": "https://gist.github.com/powalll/682c1b81696888fd692e595598f2ae3e", "content": "", "creation_timestamp": "2025-08-29T04:54:19.000000Z"}, {"uuid": "b78f098e-8ea4-4c45-83bd-d664fcfe20fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46484", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115114171833588989", "content": "", "creation_timestamp": "2025-08-29T21:27:46.989984Z"}, {"uuid": "c4b790cd-4bf9-4281-ab86-3bd5b2ce518a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46484", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxldanhsij27", "content": "", "creation_timestamp": "2025-08-30T00:34:31.421474Z"}, {"uuid": "ec236fa8-9abb-4067-99c3-9f299448ec76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:11.000000Z"}, {"uuid": "1c5806e3-3eaf-4a7a-9898-d035db841582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2024-4671", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m5vdomstkh2q", "content": "", "creation_timestamp": "2025-11-18T08:40:08.655261Z"}, {"uuid": "c26f67f3-682a-45fa-90c3-a40ac616776d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "8d6efc74-63ff-41b4-8c1d-8cbedf6431ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:26.000000Z"}, {"uuid": "f9c6ec2e-4106-47de-a06c-9e48be95ced6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "1431ca3b-be3d-4cea-a22c-c0056aad3968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46078", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxowag6lds2z", "content": "", "creation_timestamp": "2025-08-31T10:52:26.209776Z"}, {"uuid": "ae6b85be-2e43-4c38-9c34-1263c61cb079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://gist.github.com/burakcanbalta/7e4fa670e296f994509e9ffef99b6aed", "content": "", "creation_timestamp": "2025-11-06T20:21:17.000000Z"}, {"uuid": "bfb0ce20-0b85-45cf-9afb-1ece6813e02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb", "content": "", "creation_timestamp": "2025-02-11T08:32:04.000000Z"}, {"uuid": "3764e06d-3ad4-49bf-926a-abfe7593694c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "ca309ba5-281d-4f13-a3f0-78d7a23bae47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46464", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "07fcb80e-2fc0-4d61-b803-a497cbf2c1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-46506.yaml", "content": "", "creation_timestamp": "2025-09-08T22:56:05.000000Z"}, {"uuid": "a93ff16c-ad57-4bf2-8c2f-f7e67190adc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://gist.github.com/ozymahdias/8987464fab5e9908ef1e73fbb5187861", "content": "", "creation_timestamp": "2025-10-26T06:26:35.000000Z"}, {"uuid": "780dcca2-efea-489d-906b-18553b47f6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46060", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mafcr5k4ti2q", "content": "", "creation_timestamp": "2025-12-20T03:56:52.680345Z"}, {"uuid": "11b60811-3bc8-4e31-b294-367ae48d5fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46062", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mafcr5k4ti2q", "content": "", "creation_timestamp": "2025-12-20T03:56:52.760997Z"}, {"uuid": "461b7fa7-b3df-4ece-bd13-c68617ffb846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/securixy_kz/1032", "content": "", "creation_timestamp": "2026-07-12T22:00:09.675416Z"}, {"uuid": "6ba286da-65e3-446b-8b12-ac2f921bb700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46727", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f8fb6e3f-dc1c-4d86-aed4-9fae8cd31bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46681", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a3d51cf8-249f-47ae-a1ba-50932022969c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46715", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "022dbebe-0919-4d60-a72a-c36f946b0960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46705", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d6ef307e-00e8-46fb-ad60-744496f8b6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46726", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d9db5326-e030-4cfd-93bc-8913ca6902ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46717", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e3a07c07-91b8-4412-bb08-023c0923bd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46720", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "337cd3e0-91b5-4590-af19-37988a562679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4603", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d0d28a39-3668-422d-ad96-b1b0df2419b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46716", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "3c29971f-b902-4d18-9e83-ec42acf00121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46678", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7710942f-2b0a-411e-ac9f-3a96e559f536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46718", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "cf460702-5eb1-4abd-b464-ef52c17e4962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46728", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8345c349-0773-4cb8-9937-5336838daa09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46729", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8cf1d676-23d6-4636-8cf0-d94a095edade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46730", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "968f99c6-7678-4c25-9904-929847ac07a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46733", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "05571008-2948-41ae-9a33-915a5946d366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46748", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9a7260cc-df29-43ba-8896-433626b5fcad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46749", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "0039b441-01c3-4865-9ea9-cb972c16bae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46754", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f79b5eae-919e-4117-9b7e-30e714f34fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46762", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f62b6feb-6e07-4147-adfc-e7574b35438e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46765", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d91f5ba6-1022-49da-9767-22d33032260e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46770", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "60cdb043-ddcf-4872-b4e4-2555a65c2090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46775", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "de29b30a-c227-490e-b87f-1585ace066dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46803", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "13dca486-d3d6-4b9c-af10-b92a2ae92b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46806", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a6bdc878-3f62-41d3-93f9-1a5e83b59d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46808", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "76d68741-4a16-4811-8a75-514141ed9855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46811", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "84172fdc-5892-459b-b920-1d6b55cfe277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46813", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7eb5d9e4-1d93-47c0-a958-c4b6c840357f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46820", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e6402041-66cd-4a4c-9e95-be64f904a6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46823", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "da716afe-1727-42c3-8bc9-d47d4e20695d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46830", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f7a26fce-3441-4774-a171-5ffbb1417e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46833", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7ea9b2a8-104d-47d7-8d5c-9c1b2ccc0ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46834", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "fa391096-569d-40cf-be78-9837129fc46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46835", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7e50e463-ba17-4e3d-89f8-f0a96ab88428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46836", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "9a3d7745-7a7b-4135-a105-9d0b8e5ba9c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46842", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "af3e69d7-18aa-4f54-b55a-5a3b92d55102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46843", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "c2bd19b7-8ea3-44d2-b0ca-38a841bb4ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46848", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "52aea5ce-386e-4fe2-a4f5-b4469e2113dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46857", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "14b3e94b-8567-4fd1-a821-318874cb4118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46860", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "77c81093-8c44-4ad4-9623-363a5be06179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46861", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "cb19fe82-776b-4027-bdc9-0687d0873a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46870", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "040557d3-2262-4971-876c-7f25012946a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46802", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "40afc3b3-adf8-4578-8818-7c0c99aa44c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59804577-82ab-4a2d-ab2c-581cfad0f623", "content": "", "creation_timestamp": "2026-02-02T12:26:37.290721Z"}, {"uuid": "69cd84fa-91d3-43ab-b105-9981aa672511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b61fe924-9487-437e-960d-d4ce0605e994", "content": "", "creation_timestamp": "2026-02-02T12:26:35.244802Z"}, {"uuid": "bf292c7e-b7ee-4014-a174-645b348df79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46478", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3met4f2wbfk22", "content": "", "creation_timestamp": "2026-02-14T13:20:36.619490Z"}, {"uuid": "e6c3e992-b752-413d-a162-e58fe2dd9a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjsdlax7e62i", "content": "", "creation_timestamp": "2026-04-18T21:02:34.809706Z"}, {"uuid": "9eaedb93-af8d-469c-859c-cb647b9a23f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mhqeeeduqr2w", "content": "", "creation_timestamp": "2026-03-23T15:20:54.471138Z"}, {"uuid": "83c471b4-c325-46c0-bae4-4021992b874c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116279164131270309", "content": "", "creation_timestamp": "2026-03-23T15:20:38.663984Z"}, {"uuid": "8420b1f9-8c69-480f-bfe8-7620e90470da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1285", "content": "", "creation_timestamp": "2024-05-10T04:00:00.000000Z"}, {"uuid": "aba72e30-a1d6-4200-84d7-a677f504f1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1286", "content": "", "creation_timestamp": "2024-05-13T04:00:00.000000Z"}, {"uuid": "fdc2edfd-480d-4b1a-ab9d-9a8d9304211f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b61fe924-9487-437e-960d-d4ce0605e994", "content": "", "creation_timestamp": "2026-02-02T12:26:35.244802Z"}, {"uuid": "863268e5-c842-4ce6-9c50-63e1a4a6941b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46730", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "c67b889a-1c88-440e-8b1a-06f2fe85b085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46720", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9c4c148e-6ca0-4c84-a06b-e508e859fdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46806", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "71bd91a7-a906-42f1-9cce-eecf766cb1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46776", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a8a57fb2-f356-4a52-9ba1-d4e9fa6f4eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46809", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "fbbed709-21dd-4336-9d4d-2a3b64485a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46726", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "570fe0a1-2980-427c-83fc-e46504d102d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46826", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a7eabe1c-64b1-4120-8388-e8dfb9f465dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46729", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b32643be-f426-4a80-b393-6d3ac12c685b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46832", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "35d07b69-3eaa-45ed-b716-ee73ea582079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46753", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0ee0d1ff-6bcf-48b4-98fa-67fba6b5befc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46681", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "97b9e1f5-0d53-4aeb-aafa-43b18114d77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46810", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b6370b11-cf01-4de4-8943-fc9ac0494d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46825", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "fff4fc2f-7a34-4adf-91d1-7d75c3eb9f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46716", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e397767c-f445-4004-b83c-d357708ff152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46802", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6bf08616-e6c9-4098-a13b-a0fa9ed32611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46807", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e69195c6-d5a1-487c-95c4-c8545dd117ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46871", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "ec8874f7-7a2c-403b-b4ca-914d28a9c21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46821", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8be20894-4c25-4400-ae58-fb084c872221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46702", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1b0970c2-8264-4104-a064-4132cf4fcc7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46812", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "ef8a244f-9e71-4800-8747-1243cc8fbfa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46695", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "61028680-fe21-4539-b240-b746022e1a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46841", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d0f8e4ea-39c4-4603-a276-fe1ec9148afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46733", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "3c6c657b-0d34-4d09-b961-6cae3b5fc84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46717", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a8fcff63-f6e9-4a62-9edd-9eda5efbb5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46787", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a4f1140e-ee8f-436f-bc55-7fc3b3b97907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46823", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d01f2ffa-ad18-4c83-aea3-046ccd8ef730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46842", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8e215966-2754-4824-802a-f6d88deaf869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46870", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b51b5071-9de1-48d4-8bb2-cc4d9ad57e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46751", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "410f908c-32ea-4ae3-a090-d29696b2db22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46760", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d64f7298-cdf2-48b9-acc5-78f3b9551d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46770", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f97d1ca8-000b-4fc8-9a11-d2cae2e1cc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46811", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9f65ae11-ec79-4d94-9f11-7c37a8823c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46813", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8ed22937-508c-4358-8798-beb167a55e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46859", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a8ba7eed-bf35-4035-b7ca-f012c907575e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46731", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4d66bda9-dc9a-440e-8058-f3f4ce216574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46762", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d4bb46fc-15b8-4645-93b0-37e8be8ccc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46725", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "13a8bef6-cd51-4951-b688-30082261f989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46732", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "66f816ca-bd4e-44b2-9828-f2bcbd0922e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46752", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "ad84b9ef-6b39-4f9a-ab64-72e446b161b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46727", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f7ba8e05-d67a-41af-86f9-9a20293e6bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46774", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f0ef51ac-9ced-47c9-8e4e-e6ebe0112ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46860", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "dadc33f9-b77b-4877-a9a5-3c460336b1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46724", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1300a915-d014-4153-93bf-ecdc2c73ada1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46848", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "961c7008-ca11-4e7a-add2-0d508d6ad0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46754", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "229a7946-127f-4f79-961f-6574d1a63f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46808", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "61d1080d-d4dc-49c7-94eb-66e8e912a231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46773", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "53cb5632-b7dd-42f6-9a86-6e8085ddc3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46715", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "fd8bcc3e-eac5-4f8b-a360-8dc1a76890c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46834", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a6f7c30e-4d30-43fb-90d3-030278d5a814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46763", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "3ccdcd28-a131-4459-bc27-4b2d4546e89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46857", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "16d7f9e5-0249-4d7a-b7e5-1d234894ea34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46816", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "19fef8ad-4cd8-470b-9767-306bd36b2de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e67de34d-1cee-4ed0-a303-f5d6dd4ce37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46775", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "84c67aba-7c01-4ccd-afb5-804f5a4fef51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46707", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8ed8b6a5-c4a2-4416-8b69-86b3d5f50d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46728", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "192565ff-e4d8-460e-8dea-5f6e07349cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46772", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "53a052bb-8933-42e7-a8f2-d34f728a063c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46819", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "230fe3d1-908c-45e5-9ac2-66add85bade2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/aaa30339-107b-4cb3-8a1a-3e5d8398b429", "content": "", "creation_timestamp": "2024-11-07T17:04:54.853683Z"}, {"uuid": "9870f028-ef3d-420c-a1df-218e484bcceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46973", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c", "content": "", "creation_timestamp": "2025-02-03T19:33:09.293698Z"}, {"uuid": "4e3f9754-d4a5-4d6c-a44f-a96537407bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "95cd440b-cee9-4b45-a1c4-10c7757b39dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59804577-82ab-4a2d-ab2c-581cfad0f623", "content": "", "creation_timestamp": "2026-02-02T12:26:37.290721Z"}, {"uuid": "158c9a1f-2931-4602-9281-650885cff120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://gist.github.com/jrabenah/cac8452f2a62a8d34fcd45179775a11f", "content": "", "creation_timestamp": "2026-04-08T03:54:07.000000Z"}, {"uuid": "790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "published-proof-of-concept", "source": "Telegram/fKVTyseO1uYL9TllYOizt7PACaW5f67udAzHLYRojaAhnqE", "content": "", "creation_timestamp": "2025-12-28T03:00:05.000000Z"}, {"uuid": "7b2fba5e-a031-4a75-90ee-76de8f0e4091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4687", "type": "seen", "source": "Telegram/shO2tYvv6agwgrkf1z6vLAX6NC-Qf2uf6nX0Ft0QvfnOdWyW", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "af84f63c-9831-4f2a-a9c4-20630c382e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46830", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260408", "content": "", "creation_timestamp": "2026-04-07T18:00:00.000000Z"}, {"uuid": "6e823337-f385-453e-80fb-778da008df1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46777", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260408", "content": "", "creation_timestamp": "2026-04-07T18:00:00.000000Z"}, {"uuid": "30f95d45-fa59-4d88-9e72-c0cc851fdfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46759", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "37443a11-23b7-45df-8e3f-c440b1f784f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46830", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "d9d86001-55ea-416b-9ccb-ec3cd8a46840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46777", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "7c916057-9fc6-422f-8154-e7a2355e25f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46854", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "608a15fc-d07a-4348-8b50-88bee65f8f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "Telegram/Lw_uxGc7bEZFiGgkDUU_nHMS2zuxPzSITjp6mTUAJ7M8OdE", "content": "", "creation_timestamp": "2024-05-10T13:07:10.000000Z"}, {"uuid": "c040bccc-565e-407f-bb47-5f61ee64ef73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "Telegram/XlzyYYX-S5J04Xs76II1K9HeJ90V4bA4CbZQpSodqnTvgPs", "content": "", "creation_timestamp": "2025-06-15T20:52:39.000000Z"}, {"uuid": "2a5382a2-975b-4e40-9705-e56c8ec058d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4675", "type": "seen", "source": "Telegram/xsxzjjJOlt24r27jcgWLAbnH5tCsMoTPndyTdyo1-QSZQ8rO", "content": "", "creation_timestamp": "2025-02-19T19:14:02.000000Z"}, {"uuid": "bf4d583e-1ad3-48b9-b2dc-158db6889a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46663", "type": "seen", "source": "https://t.me/cvedetector/20098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46663 - Fortinet FortiMail Stack-Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46663 \nPublished : March 11, 2025, 3:15 p.m. | 1\u00a0hour ago \nDescription : A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T17:37:46.000000Z"}, {"uuid": "f68afc11-8411-4e6b-b0e7-05cf5c51c622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4685", "type": "seen", "source": "Telegram/eQlTGbpc-K6IjLYXZlLwoSEyC-W3D8RZOHjXmRFJE2LAQPTw", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "28fde4fe-9e42-49dd-bd15-17d598ad8b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4684", "type": "seen", "source": "Telegram/2g-ymLsVDtEPvz-syEE6M5Kg7EEgN-HyU6FbaFwEI7sGLG6a", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "2f37120f-fee2-4586-9477-916bb401ede1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13404", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46742\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()\n\nnull-ptr-deref will occur when (req_op_level == SMB2_OPLOCK_LEVEL_LEASE)\nand parse_lease_state() return NULL.\n\nFix this by check if 'lease_ctx_info' is NULL.\n\nAdditionally, remove the redundant parentheses in\nparse_durable_handle_context().\n\ud83d\udccf Published: 2024-09-18T07:12:03.251Z\n\ud83d\udccf Modified: 2025-04-25T10:06:38.414Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ec28c35029b7930f31117f9284874b63bea4f31b\n2. https://git.kernel.org/stable/c/07f384c5be1f8633b13f0a22616e227570450bc6\n3. https://git.kernel.org/stable/c/3b692794b81f2ecad69a4adbba687f3836824ada\n4. https://git.kernel.org/stable/c/4e8771a3666c8f216eefd6bd2fd50121c6c437db", "creation_timestamp": "2025-04-25T11:07:49.000000Z"}, {"uuid": "945d1d40-8cd5-45eb-a2c1-4a96f3d24460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46774", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13403", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46774\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()\n\nSmatch warns:\n\n  arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential\n  spectre issue 'args.args' [r] (local cap)\n\nThe 'nargs' and 'nret' locals come directly from a user-supplied\nbuffer and are used as indexes into a small stack-based array and as\ninputs to copy_to_user() after they are subject to bounds checks.\n\nUse array_index_nospec() after the bounds checks to clamp these values\nfor speculative execution.\n\ud83d\udccf Published: 2024-09-18T07:12:31.782Z\n\ud83d\udccf Modified: 2025-04-25T10:06:39.437Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b137af795399d8b657bad1646c18561530f35ed1\n2. https://git.kernel.org/stable/c/1f1feff02e9da0dd0cdb195c428c42b5f9b6c771\n3. https://git.kernel.org/stable/c/68d8156480940b79227d58865ec5d2947b9384a8\n4. https://git.kernel.org/stable/c/0974d03eb479384466d828d65637814bee6b26d7", "creation_timestamp": "2025-04-25T11:07:48.000000Z"}, {"uuid": "62c23347-d4c8-4b6a-b459-257622e83d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46816", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13402", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46816\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links\n\n[Why]\nCoverity report OVERRUN warning. There are\nonly max_links elements within dc->links. link\ncount could up to AMDGPU_DM_MAX_DISPLAY_INDEX 31.\n\n[How]\nMake sure link count less than max_links.\n\ud83d\udccf Published: 2024-09-27T12:35:57.742Z\n\ud83d\udccf Modified: 2025-04-25T10:06:40.529Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/13080d052c995aee14695a5b740c245121eb2bcc\n2. https://git.kernel.org/stable/c/c84632096722fd31251f0957fafc9e90d9a247fd\n3. https://git.kernel.org/stable/c/36c39a8dcce210649f2f45f252abaa09fcc1ae87\n4. https://git.kernel.org/stable/c/cf8b16857db702ceb8d52f9219a4613363e2b1cf", "creation_timestamp": "2025-04-25T11:07:47.000000Z"}, {"uuid": "2c694196-9a99-49a9-97d8-33b1497dbb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46975", "type": "seen", "source": "https://t.me/cvedetector/18734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46975 - VMware ESXi GPU Firmware Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-46975 \nPublished : Feb. 22, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T19:10:24.000000Z"}, {"uuid": "e8010ec6-8ee4-4946-be60-fe412daa2fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46954", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46646\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954.\n\ud83d\udccf Published: 2025-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-26T14:33:54.235Z\n\ud83d\udd17 References:\n1. https://bugs.ghostscript.com/show_bug.cgi?id=708311\n2. https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f", "creation_timestamp": "2025-04-26T15:08:05.000000Z"}, {"uuid": "89e79fd8-e5b7-477e-ab74-118212c5c033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46933", "type": "seen", "source": "https://t.me/cvedetector/18592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46933 - Atos Eviden BullSequana XH2140 BMC Privilege Escalation Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46933 \nPublished : Feb. 20, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05.0014. Some BullSequana XH products were shipped without proper hardware programming, leading to a potential denial-of-service with privileged access. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T20:41:29.000000Z"}, {"uuid": "e6bf1f90-75a0-474b-bdd0-ec820aacae36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46461", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/14455", "content": "\u200aVLC Media Player Update Needed: CVE-2024-46461 Discovered\n\nhttps://securityonline.info/vlc-media-player-update-needed-cve-2024-46461-discovered/", "creation_timestamp": "2024-09-27T18:12:52.000000Z"}, {"uuid": "0ae32b67-ceb4-40b8-abf0-874ed9f8a78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46627", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8595", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-46627 - Incorrect access control in BECN DATAGERRY v2.2 allows attackers to > execute arbitrary commands via crafted web requests.\nURL\uff1ahttps://github.com/d4lyw/CVE-2024-46627\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-09-25T10:36:54.000000Z"}, {"uuid": "6e925d2a-4c5a-490e-a074-0bc478a31676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8817", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPoC for CVE-2024-46538\nURL\uff1ahttps://github.com/EQSTLab/CVE-2024-46538\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-23T16:22:43.000000Z"}, {"uuid": "8b711d66-11f3-4afd-a86e-7991427affc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8772", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-46483\nURL\uff1ahttps://github.com/kn32/cve-2024-46483\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-18T11:47:32.000000Z"}, {"uuid": "2f246b22-3f1d-4cd9-a8e2-9c33862cdd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "Telegram/YnrXjW7DDI_WEWlhao3IfxIXMJoRX7WZclhhkalIebmTXIk", "content": "", "creation_timestamp": "2025-10-11T15:00:06.000000Z"}, {"uuid": "d6acc0e6-9654-44d5-af48-cf1cf4139a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8693", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC for CVE-2024-46310 For FXServer version's v9601 and prior\nURL\uff1ahttps://github.com/UwUtisum/FiveM-CVE-2024-46310-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-07T04:26:48.000000Z"}, {"uuid": "22d5e088-b500-4c2d-b47b-bf062b5d045d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8697", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aRuby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit\nURL\uff1ahttps://github.com/UwUtisum/CVE-2024-46310\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-07T13:11:38.000000Z"}, {"uuid": "259d20a9-fc33-4de1-9ad5-5a818f96627d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8724", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aSubversion CVE-2024-46901 PoC\nURL\uff1ahttps://github.com/devhaozi/CVE-2024-46901\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-10-11T13:37:59.000000Z"}, {"uuid": "d069ebf6-1649-4d3a-b1ba-aa33499517e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46226", "type": "seen", "source": "https://t.me/cvedetector/18949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46226 - HelpDeskZ Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46226 \nPublished : Feb. 26, 2025, 4:15 p.m. | 2\u00a0hours, 30\u00a0minutes ago \nDescription : A stored cross site scripting (XSS) vulnerability in HelpDeskZ < v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:27.000000Z"}, {"uuid": "1cd8fe2a-e587-4233-b778-f49c63866120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9417", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a The CVE-2024-46982 is cache poisoning of next_js some site have API to load their image\nURL\uff1ahttps://github.com/CodePontiff/next_js_poisoning\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-14T09:18:02.000000Z"}, {"uuid": "0363578a-fbe7-4fe1-aa77-d3bc9dce919d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46429", "type": "seen", "source": "https://t.me/cvedetector/17593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46429 - Tenda W18E Hardcoded Credentials Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46429 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:41.000000Z"}, {"uuid": "806523f4-2359-4e80-b08a-48b128f06c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46433", "type": "seen", "source": "https://t.me/cvedetector/17589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46433 - Tenda W18E Default Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46433 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:34.000000Z"}, {"uuid": "31547ab4-cfd3-412d-95a9-a5724b20e194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46435", "type": "seen", "source": "https://t.me/cvedetector/17591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46435 - Tenda W18E Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46435 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the delFacebookPic function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:39.000000Z"}, {"uuid": "1aef5c1d-9a57-4876-88f0-4511ad2b8c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46434", "type": "seen", "source": "https://t.me/cvedetector/17590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46434 - Tenda W18E Auth Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46434 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:38.000000Z"}, {"uuid": "5da64e67-f6a5-415b-95f0-1acef0013c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46432", "type": "seen", "source": "https://t.me/cvedetector/17588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46432 - Tenda W18E Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46432 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:34.000000Z"}, {"uuid": "96fd2401-872e-470c-b030-d7d4038231ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46431", "type": "seen", "source": "https://t.me/cvedetector/17587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46431 - Tenda W18E Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46431 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:33.000000Z"}, {"uuid": "e915bfab-7193-4e9f-9a1a-6e5b3a41ab21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46430", "type": "seen", "source": "https://t.me/cvedetector/17586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46430 - Tenda W18E Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46430 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassing the authentication mechanism. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:32.000000Z"}, {"uuid": "7b421ed4-c5e8-4706-a91e-52585cd07a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46437", "type": "seen", "source": "https://t.me/cvedetector/17583", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46437 - Tenda W18E Authentication Bypass Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46437 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a specially crafted HTTP POST request to the getQuickCfgWifiAndLogin function, bypassing authentication checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:27.000000Z"}, {"uuid": "87781abf-f956-4a4f-bcc0-0b59823db23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46436", "type": "seen", "source": "https://t.me/cvedetector/17582", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46436 - Tenda W18E Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46436 \nPublished : Feb. 10, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T21:16:26.000000Z"}, {"uuid": "b197d0f3-0c29-4f8e-932c-0c6a99ed3f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46383", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9031", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-46383\nURL\uff1ahttps://github.com/nitinronge91/Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-14T10:34:26.000000Z"}, {"uuid": "b5f82ea6-a903-4020-91cd-6d967d767a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46852", "type": "published-proof-of-concept", "source": "Telegram/gWkUE9xe2dPScHlQfoXfsBGlKjsipBetnUTIxo2bm8L_bds", "content": "", "creation_timestamp": "2025-09-23T05:59:31.000000Z"}, {"uuid": "9fb60691-79d9-4ee5-ae5f-913b894b55c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46601", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/970", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46601\n\ud83d\udd39 Description: Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-09T15:46:13.364764Z\n\ud83d\udd17 References:\n1. https://www.elspec-ltd.com/support/security-advisories/", "creation_timestamp": "2025-01-09T16:18:19.000000Z"}, {"uuid": "621169ec-acef-4c58-a9c3-52e6f5d49bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46852", "type": "published-proof-of-concept", "source": "Telegram/LO8zOBx6Y2YbT8-dWq1KfYtF1NLQgEtgfrnw-Bo2ZgsdOfo", "content": "", "creation_timestamp": "2025-09-22T18:09:54.000000Z"}, {"uuid": "5f2740e8-8b9b-4aa7-b26e-ac82f4667033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46852", "type": "published-proof-of-concept", "source": "Telegram/O-uS3G04tZg-tx6PegY9kLpCxX1ip2i-kmSdoXSya0c4dac", "content": "", "creation_timestamp": "2025-09-22T15:46:29.000000Z"}, {"uuid": "596fe9b4-93f1-4832-a4a4-659ae7b50d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46852", "type": "published-proof-of-concept", "source": "Telegram/0BhqX6sx4l22bH7ttwKI-E-0zPNMtLL1QU5PQtFC9AKCIXY", "content": "", "creation_timestamp": "2025-09-22T15:03:23.000000Z"}, {"uuid": "a95e9f8b-63fb-42b1-8f71-dabe20d8b9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4682", "type": "seen", "source": "Telegram/i-p0abFCA6j8Hd2-XwxEcZ5joTy836BHSdqa-H6iHUQ-nNs", "content": "", "creation_timestamp": "2025-08-16T11:27:31.000000Z"}, {"uuid": "6edf3aac-9b45-4f0d-a44c-298718419578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46602", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/969", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46602\n\ud83d\udd39 Description: An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) vulnerability may allow an attacker to cause a Denial of Service (DoS) via a crafted XML payload.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-09T15:46:52.022769Z\n\ud83d\udd17 References:\n1. https://www.elspec-ltd.com/support/security-advisories.", "creation_timestamp": "2025-01-09T16:18:10.000000Z"}, {"uuid": "59a2c6ff-d03e-44cc-bbf5-76c40d650f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46756", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/968", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46756\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-09-18T07:12:15.814Z\n\ud83d\udccf Modified: 2025-01-09T15:47:21.890Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-01-09T16:18:03.000000Z"}, {"uuid": "d0f9c4e1-56ec-406f-859b-068324926827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/itsec_news/4434", "content": "\u200b\u26a1\ufe0fCVE-2024-4947: Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0443 0day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u0443\u044e zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-4947 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 Type Confusion \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0438 WebAssembly.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u2014 \u0412\u0430\u0441\u0438\u043b\u0438\u0435\u043c \u0411\u0435\u0440\u0434\u043d\u0438\u043a\u043e\u0432\u044b\u043c \u0438 \u0411\u043e\u0440\u0438\u0441\u043e\u043c \u041b\u0430\u0440\u0438\u043d\u044b\u043c 13 \u043c\u0430\u044f 2024 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Type Confusion \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0441 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0442\u0438\u043f\u043e\u043c. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 (Memory Out-of-bounds), \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u042d\u0442\u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441\u0442\u0430\u043b \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 Google \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e, \u043f\u043e\u0441\u043b\u0435 CVE-2024-4671 \u0438 CVE-2024-4761. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2024-4947 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0421 \u0443\u0447\u0451\u0442\u043e\u043c CVE-2024-4947, \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome:\n\nCVE-2024-0519 \u2014 \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 V8;\nCVE-2024-2886 \u2014 Use-After-Free \u0432 WebCodecs;\nCVE-2024-2887 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 \u0442\u0438\u043f\u0430 confusion \u0432 WebAssembly;\nCVE-2024-3159 \u2014 \u0432\u044b\u0445\u043e\u0434 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 V8;\nCVE-2024-4671 \u2014 Use-After-Free \u0432 Visuals;\nCVE-2024-4761 \u2014 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0432 V8.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 125.0.6422.60/.61, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f, \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Edge, Brave, Opera \u0438 Vivaldi \u2014 \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0430\u0437\u0443, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-16T15:41:15.000000Z"}, {"uuid": "8a8cef5a-2066-4626-abfc-db0b345afdb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/pleyades_it/11087", "content": "", "creation_timestamp": "2026-07-13T00:00:39.056804Z"}, {"uuid": "463efa24-f25e-40e6-b950-28b2814f600f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/243", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46981\n\ud83d\udd39 Description: Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.\n\ud83d\udccf Published: 2025-01-06T21:11:51.687Z\n\ud83d\udccf Modified: 2025-01-06T21:11:51.687Z\n\ud83d\udd17 References:\n1. https://github.com/redis/redis/security/advisories/GHSA-39h2-x6c4-6w4c\n2. https://github.com/redis/redis/releases/tag/6.2.17\n3. https://github.com/redis/redis/releases/tag/7.2.7\n4. https://github.com/redis/redis/releases/tag/7.4.2", "creation_timestamp": "2025-01-06T21:37:03.000000Z"}, {"uuid": "12205bf1-1675-489d-b667-08d32b6b3878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46242", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/432", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46242\n\ud83d\udd39 Description: An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service (ReDoS) via supplying a crafted string as e-mail address during registration.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T15:17:12.319489\n\ud83d\udd17 References:\n1. http://ctfd.com\n2. https://gist.github.com/salvatore-abello/4f01f3fa54672febc0a492a11a26592c", "creation_timestamp": "2025-01-07T15:37:58.000000Z"}, {"uuid": "f683d286-8658-4499-ba9e-e9a37c56a4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46664", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46664\n\ud83d\udd39 Description: A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests.\n\ud83d\udccf Published: 2025-01-14T14:09:40.070Z\n\ud83d\udccf Modified: 2025-01-14T20:54:26.530Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-310", "creation_timestamp": "2025-01-14T21:12:04.000000Z"}, {"uuid": "f7a2f78a-6465-4f43-82f0-9e2369bce0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46603", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46603\n\ud83d\udd39 Description: An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows attackers to cause a Denial of Service (DoS) via a crafted XML payload.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T21:03:59.371Z\n\ud83d\udd17 References:\n1. http://elspec.com\n2. http://g5.com\n3. https://www.elspec-ltd.com/support/security-advisories/", "creation_timestamp": "2025-01-07T21:38:29.000000Z"}, {"uuid": "5d1e69e0-51cb-4f80-938a-4e3aa0a72e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46464", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1097", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46464\n\ud83d\udd39 Description: In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user access can be manipulated to render the host computer unavailable or to execute programs with an elevation of privilege.\n\ud83d\udccf Published: 2025-01-09T00:00:00\n\ud83d\udccf Modified: 2025-01-09T21:51:41.329479\n\ud83d\udd17 References:\n1. https://www.primx.eu/en/bulletins/security-bulletin-24931935/", "creation_timestamp": "2025-01-09T22:15:39.000000Z"}, {"uuid": "f513f213-22e4-4f9f-87fa-0df7c6100c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1060", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46505\n\ud83d\udd39 Description: Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities.\n\ud83d\udccf Published: 2025-01-09T00:00:00\n\ud83d\udccf Modified: 2025-01-09T19:37:32.925198\n\ud83d\udd17 References:\n1. https://jayaramyalla.medium.com/bloxone-business-logic-flaw-due-to-thick-client-vulnerabilities-cve-2024-46505-04a4f1966f4b", "creation_timestamp": "2025-01-09T20:17:35.000000Z"}, {"uuid": "016d0939-4b21-49ad-b9e9-803eaf735a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1156", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46210\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T15:50:09.331405\n\ud83d\udd17 References:\n1. https://github.com/h4ckr4v3n/research_redaxo_5_17_1.git\n2. https://gist.github.com/h4ckr4v3n/26eaa57d94f749b597ede8b404c234df", "creation_timestamp": "2025-01-10T16:03:10.000000Z"}, {"uuid": "9fb6e8fc-3df5-4699-96fa-4e8776914c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46896", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1315", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46896\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don't access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() 'job' in drm_sched_job_init()\")\naccessing job->base.sched can produce unexpected results as the initialisation\nof (*job)->base.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job->num_ibs is incremented. In this case,\namdgpu_ib_free(ring->adev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)\n\ud83d\udccf Published: 2025-01-11T12:35:34.351Z\n\ud83d\udccf Modified: 2025-01-11T12:35:34.351Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/65501a4fd84ecdc0af863dbb37759242aab9f2dd\n2. https://git.kernel.org/stable/c/da6b2c626ae73c303378ce9eaf6e3eaf16c9925a\n3. https://git.kernel.org/stable/c/67291d601f2b032062b1b2f60ffef1b63e10094c\n4. https://git.kernel.org/stable/c/a93b1020eb9386d7da11608477121b10079c076a", "creation_timestamp": "2025-01-11T13:06:52.000000Z"}, {"uuid": "a7dece3d-75d1-4bac-9ddb-97fe856803b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46919", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1376", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46919\n\ud83d\udd39 Description: An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers.\n\ud83d\udccf Published: 2025-01-13T00:00:00\n\ud83d\udccf Modified: 2025-01-13T19:41:00.570Z\n\ud83d\udd17 References:\n1. https://semiconductor.samsung.com/support/quality-support/product-security-updates/\n2. https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-46919/", "creation_timestamp": "2025-01-13T20:07:29.000000Z"}, {"uuid": "18d7fc9d-fb2c-4e56-9710-5091238c9dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46481", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46481\n\ud83d\udd39 Description: The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.\n\ud83d\udccf Published: 2025-01-13T00:00:00\n\ud83d\udccf Modified: 2025-01-13T19:54:57.232Z\n\ud83d\udd17 References:\n1. https://github.com/Lorenzo-de-Sa/Vulnerability-Research\n2. https://www.venki.com.br/ferramenta-bpm/supravizio/\n3. https://github.com/Lorenzo-de-Sa/Vulnerability-Research/blob/main/CVE-2024-46481.md", "creation_timestamp": "2025-01-13T20:07:14.000000Z"}, {"uuid": "dcbdbe70-810a-46b4-947c-6ac1a5e4cc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46480", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1372", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46480\n\ud83d\udd39 Description: An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.\n\ud83d\udccf Published: 2025-01-13T00:00:00\n\ud83d\udccf Modified: 2025-01-13T19:49:37.464Z\n\ud83d\udd17 References:\n1. https://github.com/Lorenzo-de-Sa/Vulnerability-Research\n2. https://www.venki.com.br/ferramenta-bpm/supravizio/\n3. https://github.com/Lorenzo-de-Sa/Vulnerability-Research/blob/main/CVE-2024-46480.md", "creation_timestamp": "2025-01-13T20:07:19.000000Z"}, {"uuid": "f999684a-8556-4ade-a05e-70b26bcbd312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46886", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1475", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46886\n\ud83d\udd39 Description: The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.\n\ud83d\udccf Published: 2024-10-08T08:40:41.244Z\n\ud83d\udccf Modified: 2025-01-14T10:30:06.676Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-876787.html", "creation_timestamp": "2025-01-14T11:08:25.000000Z"}, {"uuid": "ec421047-ba98-47ef-bdfe-466e8bffd4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46887", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1474", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46887\n\ud83d\udd39 Description: The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.\n\ud83d\udccf Published: 2024-10-08T08:40:43.510Z\n\ud83d\udccf Modified: 2025-01-14T10:30:09.314Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-054046.html", "creation_timestamp": "2025-01-14T11:08:23.000000Z"}, {"uuid": "d0f34a9f-ad8a-43aa-97b6-20d92a95f24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46668", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46668\n\ud83d\udd39 Description: An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads.\n\ud83d\udccf Published: 2025-01-14T14:08:59.162Z\n\ud83d\udccf Modified: 2025-01-14T20:55:43.639Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-219", "creation_timestamp": "2025-01-14T21:11:26.000000Z"}, {"uuid": "0ee92f21-1d1a-475c-b34d-a76fe0fec6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46669", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1605", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46669\n\ud83d\udd39 Description: An\u00a0Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service.\n\ud83d\udccf Published: 2025-01-14T14:08:37.297Z\n\ud83d\udccf Modified: 2025-01-14T20:56:51.902Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-267", "creation_timestamp": "2025-01-14T21:10:16.000000Z"}, {"uuid": "cbb07712-8123-4989-853f-94345c9b10a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46665", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46665\n\ud83d\udd39 Description: An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.\n\ud83d\udccf Published: 2025-01-14T14:08:26.784Z\n\ud83d\udccf Modified: 2025-01-14T20:57:35.579Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-326", "creation_timestamp": "2025-01-14T21:09:59.000000Z"}, {"uuid": "f42f269f-e6ee-4245-bdfc-74a6cd686e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1606", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46670\n\ud83d\udd39 Description: An\u00a0Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.\n\ud83d\udccf Published: 2025-01-14T14:08:41.759Z\n\ud83d\udccf Modified: 2025-01-14T20:56:44.074Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-266", "creation_timestamp": "2025-01-14T21:10:18.000000Z"}, {"uuid": "55020be9-44ba-4a11-afce-89216efcb87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46778", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1943", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46778\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Check UnboundedRequestEnabled's value\n\nCalculateSwathAndDETConfiguration_params_st's UnboundedRequestEnabled\nis a pointer (i.e. dml_bool_t *UnboundedRequestEnabled), and thus\nif (p->UnboundedRequestEnabled) checks its address, not bool value.\n\nThis fixes 1 REVERSE_INULL issue reported by Coverity.\n\ud83d\udccf Published: 2024-09-18T07:12:35.052Z\n\ud83d\udccf Modified: 2025-01-16T11:53:16.287Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/4e2b49a85e7974d21364798c5d4aa8070aa864d9\n2. https://git.kernel.org/stable/c/a7b38c7852093385d0605aa3c8a2efd6edd1edfd", "creation_timestamp": "2025-01-16T12:55:35.000000Z"}, {"uuid": "bd313139-9402-4b40-97a2-93d6778fefb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46836", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46836\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: aspeed_udc: validate endpoint index for ast udc\n\nWe should verify the bound of the array to assure that host\nmay not manipulate the index to point past endpoint array.\n\nFound by static analysis.\n\ud83d\udccf Published: 2024-09-27T12:39:32.432Z\n\ud83d\udccf Modified: 2025-01-16T11:53:17.433Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/31bd4fab49c0adc6228848357c1b1df9395858af\n2. https://git.kernel.org/stable/c/b2a50ffdd1a079869a62198a8d1441355c513c7c\n3. https://git.kernel.org/stable/c/6fe9ca2ca389114c8da66e534c18273497843e8a\n4. https://git.kernel.org/stable/c/ee0d382feb44ec0f445e2ad63786cd7f3f6a8199", "creation_timestamp": "2025-01-16T12:55:31.000000Z"}, {"uuid": "67b1ffba-063b-4d06-a839-629fece978e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46450", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46450\n\ud83d\udd39 Description: Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:08:01.010862\n\ud83d\udd17 References:\n1. https://pastebin.com/BXxTqsZk", "creation_timestamp": "2025-01-16T22:56:41.000000Z"}, {"uuid": "7a266406-0768-4318-8420-f8916e4097ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46881", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46881\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-26T07:15:08.947\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://security.gradle.com/advisory/2024-03", "creation_timestamp": "2025-01-26T09:14:38.000000Z"}, {"uuid": "df375779-3a38-49b1-9183-446c7578b65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46881", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-cw76-h7wr-rh77\n\ud83d\udd25 CVSS Score: N/A (CVSS_V3)\n\ud83d\udd39 Description: Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project-level access control configuration was introduced in Enterprise Config schema version 8. Migration functionality from schema version 8 to versions 9 and 10 (in affected vulnerable versions) does not include the projects section of the configuration. This leads to all of the project settings being reset to their defaults when the old schema is loaded. In the case of projects.enabled, the default is false. Thus, using an enterprise config v8 results in Project level access control being disabled, even if it was previously enabled, and previously restricted project information disclosed. Most commonly, this occurs when a Develocity instance is upgraded from an earlier version. Specifically, this occurs if: Develocity 2023.3.X is upgraded to 2023.4.X; Develocity 2023.3.X is upgraded to 2024.1.X up to and including 2024.1.7; or Develocity 2023.4.X is upgraded to 2024.1.X up to and including 2024.1.7. The flaw does not occur when upgrading to a fixed version. An upgrade can only be triggered via administrator access, and cannot be forced by an external attacker.\n\ud83d\udccf Published: 2025-01-26T09:30:32Z\n\ud83d\udccf Modified: 2025-01-26T09:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-46881\n2. https://security.gradle.com/advisory/2024-03", "creation_timestamp": "2025-01-26T10:06:15.000000Z"}, {"uuid": "0b6d0f4d-8ac7-4f53-a328-cc368f93943c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46974", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3562", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46974\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers.\n\ud83d\udccf Published: 2025-01-31T03:32:14Z\n\ud83d\udccf Modified: 2025-01-31T03:32:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-46974\n2. https://www.imaginationtech.com/gpu-driver-vulnerabilities", "creation_timestamp": "2025-01-31T04:12:50.000000Z"}, {"uuid": "ab73ac80-d558-464a-9a88-6f018a6dedf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4220", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46910\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An authenticated user can perform XSS and potentially impersonate another user.\n\nThis issue affects Apache Atlas versions\u00a02.3.0 and earlier.\n\nUsers are recommended to upgrade to version 2.4.0, which fixes the issue.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-46910\n2. https://lists.apache.org/thread/sqzp34l4cdk21zoq5g31qlsvr7jvb1fy\n3. http://www.openwall.com/lists/oss-security/2025/02/12/2", "creation_timestamp": "2025-02-13T10:08:55.000000Z"}, {"uuid": "f0f3d0bc-1c0c-441e-8896-a86a1a98aeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46923", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46923\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:39.347\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://semiconductor.samsung.com/support/quality-support/product-security-updates/", "creation_timestamp": "2025-02-12T23:10:11.000000Z"}, {"uuid": "4832f5db-72fe-4f49-9a6b-a49074c11207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46922", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46922\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:39.230\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://semiconductor.samsung.com/support/quality-support/product-security-updates/", "creation_timestamp": "2025-02-12T23:10:14.000000Z"}, {"uuid": "deea3798-d0dd-4e03-9f2b-e047674051b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46922", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4193", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46922\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-46922\n2. https://semiconductor.samsung.com/support/quality-support/product-security-updates", "creation_timestamp": "2025-02-13T01:10:07.000000Z"}, {"uuid": "21a339a8-b86f-44c6-8447-5e9921a66464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46923", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46923\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-46923\n2. https://semiconductor.samsung.com/support/quality-support/product-security-updates", "creation_timestamp": "2025-02-13T01:10:01.000000Z"}, {"uuid": "7527104f-1988-4e7f-9fb7-fd7d0fb747d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46975", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46975\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory.\n\ud83d\udccf Published: 2025-02-22T14:44:25.177Z\n\ud83d\udccf Modified: 2025-02-22T14:44:25.177Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-02-22T15:20:16.000000Z"}, {"uuid": "679d6a20-e481-4cd7-b9b3-1b247b56e534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46933", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4805", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46933\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AC:H/AV:N/A:H/C:N/I:H/PR:H/S:C/UI:N)\n\ud83d\udd39 Description: An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05.0014. Some BullSequana XH products were shipped without proper hardware programming, leading to a potential denial-of-service with privileged access.\n\ud83d\udccf Published: 2025-02-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-20T18:37:57.102Z\n\ud83d\udd17 References:\n1. https://eviden.com\n2. https://support.bull.com/ols/product/security/psirt/security-bulletins/ast2600-left-unconfigured-in-bullsequana-xh2140-psirt-270-tlp-clear-version-2-7-cve-2024-46933/view", "creation_timestamp": "2025-02-20T19:49:36.000000Z"}, {"uuid": "2467d3a3-8711-419d-9be7-3c39987ef47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46886", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46886\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C)\n\ud83d\udd39 Description: The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.\n\ud83d\udccf Published: 2024-10-08T08:40:41.244Z\n\ud83d\udccf Modified: 2025-03-11T09:47:53.656Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-876787.html", "creation_timestamp": "2025-03-11T10:39:08.000000Z"}, {"uuid": "b11ed183-4e65-48de-ba4e-597f312683e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46663", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46663\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C)\n\ud83d\udd39 Description: A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.\n\ud83d\udccf Published: 2025-03-11T14:54:31.928Z\n\ud83d\udccf Modified: 2025-03-12T04:00:58.832Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-331", "creation_timestamp": "2025-03-12T04:43:17.000000Z"}, {"uuid": "047c3512-5b5f-439d-8347-bcd4ed997249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46258", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46258\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h.\n\ud83d\udccf Published: 2024-10-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T15:30:41.157Z\n\ud83d\udd17 References:\n1. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15\n2. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/vulDescription.md\n3. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/poc\n4. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/poc/sample2.png\n5. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_load_png_mem-cute_png-1105c15/vulDescription.assets/image-20240527231514578.png", "creation_timestamp": "2025-03-14T15:43:34.000000Z"}, {"uuid": "606c30f9-5121-44e5-b1b3-e6c252399ff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46887", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46887\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C)\n\ud83d\udd39 Description: The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.\n\ud83d\udccf Published: 2024-10-08T08:40:43.510Z\n\ud83d\udccf Modified: 2025-03-11T09:47:55.985Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-054046.html", "creation_timestamp": "2025-03-11T10:39:07.000000Z"}, {"uuid": "97ab3515-d76a-4082-a6a5-42cc9ae79d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46593", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46593\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T17:33:18.485Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#f85d41a6875a4853be9a3c457bc81a33", "creation_timestamp": "2025-03-17T18:31:37.000000Z"}, {"uuid": "cd1e2999-7a08-47a3-83dc-5fce8c62c75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46588", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46588\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T19:29:21.781Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#7be91fa3afab4c9c978f7f6c1cc4c847", "creation_timestamp": "2025-03-13T19:42:45.000000Z"}, {"uuid": "658b6341-9331-46f6-b8d4-3a840ab13bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7547", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46276\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h.\n\ud83d\udccf Published: 2024-10-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T13:37:31.527Z\n\ud83d\udd17 References:\n1. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7\n2. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/vulDescription.md\n3. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/poc\n4. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/poc/sample7.png\n5. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r4-cp_chunk-cute_png-956c7/vulDescription.assets/image-20240527232923330.png", "creation_timestamp": "2025-03-14T13:47:12.000000Z"}, {"uuid": "5bb251e1-c612-43d0-b770-4f1d773499f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46918", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7419", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46918\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.\n\ud83d\udccf Published: 2024-09-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T14:35:06.415Z\n\ud83d\udd17 References:\n1. https://github.com/MISP/MISP/commit/3a5227d7b3d4518ac109af61979a00145a0de6fa\n2. https://github.com/MISP/MISP/compare/v2.4.197...v2.4.198", "creation_timestamp": "2025-03-13T14:45:31.000000Z"}, {"uuid": "4274bfde-98de-48fb-83b9-a28c1cddb87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46662", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7668", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46662\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C)\n\ud83d\udd39 Description: A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets\n\ud83d\udccf Published: 2025-03-14T15:03:27.830Z\n\ud83d\udccf Modified: 2025-03-15T03:55:27.259Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-222", "creation_timestamp": "2025-03-15T04:45:21.000000Z"}, {"uuid": "7af1687f-8f6f-443e-8de1-82925a94a6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46852", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7670", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46852\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndma-buf: heaps: Fix off-by-one in CMA heap fault handler\n\nUntil VM_DONTEXPAND was added in commit 1c1914d6e8c6 (\"dma-buf: heaps:\nDon't track CMA dma-buf pages under RssFile\") it was possible to obtain\na mapping larger than the buffer size via mremap and bypass the overflow\ncheck in dma_buf_mmap_internal. When using such a mapping to attempt to\nfault past the end of the buffer, the CMA heap fault handler also checks\nthe fault offset against the buffer size, but gets the boundary wrong by\n1. Fix the boundary check so that we don't read off the end of the pages\narray and insert an arbitrary page in the mapping.\n\ud83d\udccf Published: 2024-09-27T12:42:45.336Z\n\ud83d\udccf Modified: 2025-03-15T03:55:23.131Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/007180fcb6cc4a93211d4cc45fef3f5ccccd56ae\n2. https://git.kernel.org/stable/c/79cce5e81d20fa9ad553be439d665ac3302d3c95\n3. https://git.kernel.org/stable/c/84175dc5b2c932266a50c04e5ce342c30f817a2f\n4. https://git.kernel.org/stable/c/eb7fc8b65cea22f9038c52398c8b22849e9620ea\n5. https://git.kernel.org/stable/c/e79050882b857c37634baedbdcf7c2047c24cbff\n6. https://git.kernel.org/stable/c/ea5ff5d351b520524019f7ff7f9ce418de2dad87", "creation_timestamp": "2025-03-15T04:45:23.000000Z"}, {"uuid": "e56a3e99-f43e-444f-836d-d9354cb5ac0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46550", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46550\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T18:54:00.266Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#bffdd8897d944a77834b865d9326a1d7", "creation_timestamp": "2025-03-17T19:48:07.000000Z"}, {"uuid": "82cfaf3a-b277-4ef6-b094-761fcabb7fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46559", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46559\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T16:24:56.834Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#acee48e159494c479aecc1bfa87f0d83", "creation_timestamp": "2025-03-18T16:51:27.000000Z"}, {"uuid": "58a4ceb3-321b-405b-a9e7-e8a1a8d5828c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46552", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46552\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T19:50:44.348Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#53ad238cc1af41f7a32b29260f7274ec", "creation_timestamp": "2025-03-17T20:47:18.000000Z"}, {"uuid": "cd3cb3a2-95f3-44c7-9b31-996427091687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46263", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46263\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h.\n\ud83d\udccf Published: 2024-10-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T15:40:43.610Z\n\ud83d\udd17 References:\n1. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71\n2. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/vulDescription.md\n3. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc\n4. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/poc/sample15.png\n5. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/stkof-w1-cp_dynamic-cute_png-601c71/vulDescription.assets/image-20240527235936692.png", "creation_timestamp": "2025-03-18T15:49:59.000000Z"}, {"uuid": "2ac80002-fb21-4e59-91da-318d323cfb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46590", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7908", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46590\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T14:42:22.587Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#e0a960e24de649b3a67c21a63592d82f", "creation_timestamp": "2025-03-18T14:49:57.000000Z"}, {"uuid": "e787a40a-83b6-41d1-861e-939b755fbb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46259", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46259\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h.\n\ud83d\udccf Published: 2024-10-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T16:21:27.136Z\n\ud83d\udd17 References:\n1. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11\n2. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/vulDescription.md\n3. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/poc\n4. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/poc/sample6.png\n5. https://github.com/Helson-S/FuzzyTesting/blob/master/cute_headers/cute_png/heapof-r1-cp_unfilter-cute_png-1019c11/vulDescription.assets/image-20240527232602298.png", "creation_timestamp": "2025-03-18T16:51:33.000000Z"}, {"uuid": "75f57df5-3b31-41f8-83f0-090fe93fafe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46592", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7972", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46592\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T19:38:34.872Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#1fe94a7181d24f5fbe464a5f9417d084", "creation_timestamp": "2025-03-18T19:48:42.000000Z"}, {"uuid": "dc8c3d71-33b6-484a-9576-0856dbf726ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46558", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46558\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:40:10.598Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#43e2ae152385466180ebec957696ceaa", "creation_timestamp": "2025-03-18T20:48:15.000000Z"}, {"uuid": "4283aab2-c350-4000-ae4d-d64119fe1736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46566", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46566\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:27:38.592Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#fed8e44f6b1e44fa9432a8359c36906a", "creation_timestamp": "2025-03-18T20:48:25.000000Z"}, {"uuid": "0d2a5081-d66a-4c2f-a018-0eb4b5d2c54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46564", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8051", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46564\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2024-09-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T13:57:59.581Z\n\ud83d\udd17 References:\n1. https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#4ebd20d478124581b01338b89622363a", "creation_timestamp": "2025-03-19T14:16:44.000000Z"}, {"uuid": "52e37cd0-4076-4b01-a52a-04182811a306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46974", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46974\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers.\n\ud83d\udccf Published: 2025-01-31T03:07:15.179Z\n\ud83d\udccf Modified: 2025-03-20T14:32:48.723Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-20T15:18:32.000000Z"}, {"uuid": "55a46e37-b459-4c34-b484-4ca88893cc7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4622", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9137", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4622\n\ud83d\udd25 CVSS Score: 8.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface \nprotected by authentication. If the default credentials are not changed,\n an attacker can use public knowledge to access the device as an \nadministrator.\n\ud83d\udccf Published: 2024-05-15T16:54:08.150Z\n\ud83d\udccf Modified: 2025-03-27T16:07:24.605Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-24-130-02", "creation_timestamp": "2025-03-27T16:27:03.000000Z"}, {"uuid": "8ab4263d-f965-4a17-a9eb-dde8afeb5ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46340", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10243", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46340\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TL-WR845N(UN)_V4_201214, TP-Link TL-WR845N(UN)_V4_200909, and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset.\n\ud83d\udccf Published: 2024-12-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:26:32.282Z\n\ud83d\udd17 References:\n1. https://security.iiita.ac.in/iot/factory-reset.docx", "creation_timestamp": "2025-04-03T15:34:54.000000Z"}, {"uuid": "aaa474ca-933c-4725-8349-f278c73ee0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46772", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10685", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46772\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Check denominator crb_pipes before used\n\n[WHAT & HOW]\nA denominator cannot be 0, and is checked before used.\n\nThis fixes 2 DIVIDE_BY_ZERO issues reported by Coverity.\n\ud83d\udccf Published: 2024-09-18T07:12:30.177Z\n\ud83d\udccf Modified: 2025-04-07T08:36:52.748Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/04805efe8623f8721f3c01182ea73d68e88c62d8\n2. https://git.kernel.org/stable/c/b9264aa24f628eba5779d1c916441e0cedde9b3d\n3. https://git.kernel.org/stable/c/ede06d23392529b039cf7ac11b5875b047900f1c\n4. https://git.kernel.org/stable/c/ea79068d4073bf303f8203f2625af7d9185a1bc6", "creation_timestamp": "2025-04-07T08:44:51.000000Z"}, {"uuid": "c41e4ac6-00f7-4e39-9306-92f42218c529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46494", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10763", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46494\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article.\n\ud83d\udccf Published: 2025-04-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:38:23.153Z\n\ud83d\udd17 References:\n1. https://h40vv3n.github.io/2024/09/05/typecho-xss/", "creation_timestamp": "2025-04-07T19:45:27.000000Z"}, {"uuid": "2629b0f4-847a-4aac-88dc-23fda061469a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46886", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10876", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46886\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C)\n\ud83d\udd39 Description: The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.\n\ud83d\udccf Published: 2024-10-08T08:40:41.244Z\n\ud83d\udccf Modified: 2025-04-08T08:22:17.262Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-876787.html", "creation_timestamp": "2025-04-08T08:46:39.000000Z"}, {"uuid": "a65260bd-0e13-4cad-9e2a-362339b7ae93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46887", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10875", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46887\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C)\n\ud83d\udd39 Description: The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.\n\ud83d\udccf Published: 2024-10-08T08:40:43.510Z\n\ud83d\udccf Modified: 2025-04-08T08:22:19.997Z\n\ud83d\udd17 References:\n1. https://cert-portal.siemens.com/productcert/html/ssa-054046.html", "creation_timestamp": "2025-04-08T08:46:39.000000Z"}, {"uuid": "25d0bbe2-f175-4669-af31-dad17cfd96ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46671", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10915", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46671\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H/E:P/RL:U/RC:R)\n\ud83d\udd39 Description: An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests.\n\ud83d\udccf Published: 2025-04-08T14:02:59.350Z\n\ud83d\udccf Modified: 2025-04-08T14:30:24.831Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-184", "creation_timestamp": "2025-04-08T14:47:05.000000Z"}, {"uuid": "01f316af-21ae-44ac-9c76-9f85623f8822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11566", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46901\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.\n\nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.\n\nRepositories served via other access methods are not affected.\n\ud83d\udccf Published: 2024-12-09T09:36:52.445Z\n\ud83d\udccf Modified: 2025-04-13T21:02:57.347Z\n\ud83d\udd17 References:\n1. https://subversion.apache.org/security/CVE-2024-46901-advisory.txt", "creation_timestamp": "2025-04-13T21:53:29.000000Z"}, {"uuid": "d0239563-14b3-428f-b95f-7747255ea6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46899", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12803", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46899\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04.\n\ud83d\udccf Published: 2025-04-22T04:12:56.387Z\n\ud83d\udccf Modified: 2025-04-22T04:12:56.387Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-111/index.html", "creation_timestamp": "2025-04-22T05:03:17.000000Z"}, {"uuid": "d56c3402-0aee-475f-8de2-c90c5ff79b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46546", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12854", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46546\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.\n\ud83d\udccf Published: 2025-04-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:29:11.721Z\n\ud83d\udd17 References:\n1. https://ez-net.co.kr/new_2012/customer/download_view.php?cid=&sid=&goods=&cate=&q=&seq=233\n2. https://ez-net.co.kr/new_2012/product/view.php?cid=461&sid=467&q=%C7%C3%B7%B9%C5%B8&seq=3479&page=\n3. https://gist.github.com/laskdjlaskdj12/5b29b8b68f8a2279c9294708f080496b", "creation_timestamp": "2025-04-22T14:03:50.000000Z"}, {"uuid": "c9c8e895-31d4-4044-a07b-a7c60612067c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/16212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46506\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.\n\ud83d\udccf Published: 2025-05-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T19:09:51.072Z\n\ud83d\udd17 References:\n1. https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/", "creation_timestamp": "2025-05-13T19:31:09.000000Z"}, {"uuid": "9952bf50-540b-4a57-815f-26fc0db37251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46987", "type": "published-proof-of-concept", "source": "Telegram/XKmDxZOMvrUD-_NSGAnB8A_hjkfWi1lu0xhYRKJFu8oupFE", "content": "", "creation_timestamp": "2026-04-17T23:00:19.000000Z"}, {"uuid": "366f0563-c1e3-45b1-8e31-60574cb83ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16137", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48766\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal. This is related to components/logs.php.\n\ud83d\udccf Published: 2025-05-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T15:18:55.980Z\n\ud83d\udd17 References:\n1. https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/", "creation_timestamp": "2025-05-13T15:31:10.000000Z"}, {"uuid": "03179845-893b-4ed3-bbb6-596010f00950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46895", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46895\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Uncontrolled search path for some Intel(R) Arc\u2122 & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\ud83d\udccf Published: 2025-05-13T21:03:16.840Z\n\ud83d\udccf Modified: 2025-05-13T21:03:16.840Z\n\ud83d\udd17 References:\n1. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html", "creation_timestamp": "2025-05-13T21:31:01.000000Z"}, {"uuid": "f6cfecd1-247d-4d77-a161-94d8af0f1866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4665", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4665\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The EventPrime  WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing users to change/cancel bookings for other users. Additionally, the feature is lacking a nonce.\n\ud83d\udccf Published: 2025-05-15T20:09:45.830Z\n\ud83d\udccf Modified: 2025-05-15T20:09:45.830Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/50b78cac-cad1-4526-9655-ae0440739796/", "creation_timestamp": "2025-05-15T20:33:39.000000Z"}, {"uuid": "27c8986c-1571-4839-9257-d1ffc7df73a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46855", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46855\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_socket: fix sk refcount leaks\n\nWe must put 'sk' reference before returning.\n\ud83d\udccf Published: 2024-09-27T12:42:47.281Z\n\ud83d\udccf Modified: 2025-06-27T10:21:11.807Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/076d281e90aaf4192799ecb9a1ed82321e133ecd\n2. https://git.kernel.org/stable/c/6572440f78b724c46070841a68254ebc534cde24\n3. https://git.kernel.org/stable/c/ddc7c423c4a5386bf865474c694b48178efd311a\n4. https://git.kernel.org/stable/c/33c2258bf8cb17fba9e58b111d4c4f4cf43a4896\n5. https://git.kernel.org/stable/c/83e6fb59040e8964888afcaa5612cc1243736715\n6. https://git.kernel.org/stable/c/1f68e097e20d3c695281a9c6433acc37be47fe11\n7. https://git.kernel.org/stable/c/8b26ff7af8c32cb4148b3e147c52f9e4c695209c", "creation_timestamp": "2025-06-27T10:49:56.000000Z"}, {"uuid": "4d8770fc-33cb-43ff-9cdc-24dcf3a4e76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46452", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17769", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46452\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL.\n\ud83d\udccf Published: 2025-06-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T19:48:08.036Z\n\ud83d\udd17 References:\n1. https://github.com/codervivek5/VigyBag\n2. https://www.vigybag.com\n3. https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2024-46452", "creation_timestamp": "2025-06-09T20:31:24.000000Z"}, {"uuid": "57adca54-cf69-44ac-9563-4d780f877eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46636", "type": "published-proof-of-concept", "source": "Telegram/s-aEaA57pf2NB0HZPPLWH_P4Y_hw-dX3wmzrDGItJzVg73M", "content": "", "creation_timestamp": "2026-04-22T11:00:11.000000Z"}, {"uuid": "e1138ec7-8c1a-44cc-980c-9303953070b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46636", "type": "published-proof-of-concept", "source": "Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU", "content": "", "creation_timestamp": "2026-04-22T15:00:07.000000Z"}, {"uuid": "36c7bf09-bb58-4a77-ad81-1eb4279301a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46992", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-46992\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 30.0.0-alpha.1 to before 30.0.5 and 31.0.0-alpha.1 to before 31.0.0-beta.1, Electron is vulnerable to an ASAR Integrity bypass. This only impacts apps that have the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses enabled. Apps without these fuses enabled are not impacted. This issue is specific to Windows, apps using these fuses on macOS are not impacted. Specifically this issue can only be exploited if the app is launched from a filesystem the attacker has write access too. i.e. the ability to edit files inside the .app bundle on macOS which these fuses are supposed to protect against. This issue has been patched in versions 30.0.5 and 31.0.0-beta.1. There are no workarounds for this issue.\n\ud83d\udccf Published: 2025-07-01T01:43:13.767Z\n\ud83d\udccf Modified: 2025-07-01T01:43:13.767Z\n\ud83d\udd17 References:\n1. https://github.com/electron/electron/security/advisories/GHSA-xw5q-g62x-2qjc\n2. https://www.electronjs.org/docs/latest/tutorial/fuses", "creation_timestamp": "2025-07-01T02:07:40.000000Z"}, {"uuid": "56312578-72d4-452b-9664-8b0fd09dcc27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "https://t.me/cvedetector/17991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46910 - Apache Atlas Cross-Site Scripting (XSS) and Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46910 \nPublished : Feb. 13, 2025, 9:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : An authenticated user can perform XSS and potentially impersonate another user.  \n  \nThis issue affects Apache Atlas versions\u00a02.3.0 and earlier.  \n  \nUsers are recommended to upgrade to version 2.4.0, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T12:58:57.000000Z"}, {"uuid": "d34b2a2a-3ff9-4ba3-b9bd-13e97ceaa70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://t.me/CyberBulletin/1991", "content": "\u26a1\ufe0fCVE-2024-51741 and CVE-2024-46981: Redis Flaws Expose Millions to DoS and RCE Risks.\n\n#CyberBulletin", "creation_timestamp": "2025-01-07T08:15:41.000000Z"}, {"uuid": "0c6cb0e5-0a97-406f-99e8-88f64cda943e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46923", "type": "seen", "source": "https://t.me/cvedetector/17944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46923 - Samsung Exynos Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46923 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_ib_fill in the Xclipse Driver. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:26:04.000000Z"}, {"uuid": "91fc9226-f0b2-4bd5-ab84-b845724ba348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46922", "type": "seen", "source": "https://t.me/cvedetector/17948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46922 - Samsung Xclipse Driver Null Pointer Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46922 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The absence of a null check leads to a Denial of Service at amdgpu_cs_parser_bos in the Xclipse Driver. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:26:10.000000Z"}, {"uuid": "822ccdab-757c-4dea-9bc8-bc547b468b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/231", "content": "\ud83d\udea8 Next.js + WAF Bypass + SXSS via Cookie Reordering \ud83d\udea8\n\n\ud83e\udde0 Attack Summary:\nYou\u2019re dealing with:\n\n\ud83d\udd0d A Next.js app\n\n\u26a0\ufe0f Two reflected cookies in pageProps\n\u26a0\ufe0f A WAF blocking your initial attempts\n\n\ud83e\uddea Observations:\n\ud83e\udde8 Single payload \u2192 403 Forbidden\n\n\ud83e\udde8 Split payload across two cookies \u2192 Still 403\n\n\ud83e\udde8 Reorder the cookie fragments \u2192 200 OK \u2705\n\n\ud83d\udc40 That\u2019s your in! Reversing the order bypasses the WAF inspection logic \ud83d\udd04\n\n\u26a0\ufe0f Now chain it with:\n\n\ud83e\uddeb CVE-2024-46982 (Elixir Stale SSR template injection)\n\ud83d\udd17 https://github.com/masch1/CVE-2024-46982\n\n\u27a1\ufe0f This allows CP (Client-side Prototype Pollution) \u2192 Stored XSS (SXSS) in Next.js apps.\n\n\ud83d\udca3 Exploit Flow:\n    \ud83d\udc8e Bypass WAF via cookie reordering\n    \ud83d\udc8e Inject CP payload using stale Elixir template vuln\n    \ud83d\udc8e Achieve SXSS across all visiting users!\n\n\ud83d\udee1 Mitigation Tips:\n    \u2705 Sanitize cookie inputs server-side\n    \u2705 Audit template engines for unsafe parsing\n    \u2705 Patch Elixir if in stack (see CVE-2024-46982)\n\n\ud83d\udd0d Keep hunting clever chains like this. WAFs aren\u2019t invincible!\n\ud83d\udce2 Follow @cybersecplayground for more wild bug chains, PoCs, and bypass tricks\n\ud83d\udc4d Like & \ud83d\udd01 Share to help others learn!\n\n#bugbounty #nextjs #xss #sxss #wafbypass #infosec #cybersecurity #cve2024_46982", "creation_timestamp": "2025-06-15T20:52:28.000000Z"}, {"uuid": "5d2e986e-4b26-4693-829c-db2e06faac5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/freeosint/2030", "content": "Google: \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f iOS \u0438 Android \u043e\u0442 NSO. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Threat Analysis Group (TAG) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 APT29: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u043a\u043e\u0431\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0420\u043e\u0441\u0441\u0438\u0435\u0439, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NSO Group \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS \u0438 Android.\n\u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u0438\u044e\u043b\u044c 2023-\u0433\u043e. \u041a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438 \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\nAPT29, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c Midnight Blizzard, \u0432 \u043f\u043e\u0448\u043b\u043e\u043c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 Microsoft, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0421\u0428\u0410. \u0422\u0435\u043f\u0435\u0440\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u0437\u044f\u043b\u0430\u0441\u044c \u0437\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u041c\u043e\u043d\u0433\u043e\u043b\u0438\u0438.\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 Google Threat Analysis Group, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-41993, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WebKit \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.\n\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 CVE-2023-41991 \u0438 CVE-2023-41992.\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, APT29 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0430\u0439\u0442\u044b mfa.gov[.]mn \u0438 cabinet.gov[.]mn \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u043e\u0434 \u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 iframe. \u0421\u0445\u0435\u043c\u0430 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u0430 \u0442\u0430\u043a:\n\u00a0\n\u0422\u0430\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c cookies \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 iPhone, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 16.6.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041e\u0421.\n\u0423\u0436\u0435 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u0442\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f CVE-2024-5274 \u0438 CVE-2024-4671, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Google Chrome, \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 mga.gov[.]mn.", "creation_timestamp": "2024-10-21T16:49:20.000000Z"}, {"uuid": "7b3f47c1-b7f5-43c0-9832-9a4c299f8b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "Telegram/yaRRF354Ygu4wAwdZLiZFlJ3d4I86LY0KmRJv0c9BGXTfSM", "content": "", "creation_timestamp": "2025-02-24T15:51:22.000000Z"}, {"uuid": "2036a37a-d3a0-4cb9-8528-6b93f0a03f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46974", "type": "seen", "source": "https://t.me/cvedetector/16880", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46974 - VMware DMA Buffer Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46974 \nPublished : Jan. 31, 2025, 3:15 a.m. | 2\u00a0hours, 24\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA buffers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T07:00:21.000000Z"}, {"uuid": "26fbadc5-5483-42a2-9d1e-d187995ebbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/alexmakus/5291", "content": "\u041d\u0435 \u0437\u0430\u0431\u0443\u0434\u044c\u0442\u0435 \u043f\u0440\u043e\u0430\u043f\u0434\u0435\u0439\u0442\u0438\u0442\u044c \u0425\u0440\u043e\u043c\n\nhttps://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html\n\nhttps://nvd.nist.gov/vuln/detail/cve-2024-0519\n\nGoogle is aware that an exploit for CVE-2024-4671 exists in the wild.", "creation_timestamp": "2024-05-11T12:20:02.000000Z"}, {"uuid": "152954ca-5196-4dce-a4a3-4bc3ca1f6120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46049", "type": "seen", "source": "https://t.me/cyber_hsecurity/1615", "content": "\u0627\u0644\u0645\u0635\u062f\u0631 \u0648\u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644:\n- \u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u0627\u0644\u0625\u0635\u0644\u0627\u062d\u060c \u064a\u0645\u0643\u0646 \u0627\u0644\u0627\u0637\u0644\u0627\u0639 \u0639\u0644\u0649 [\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u064a GitHub](https://github.com/discourse/discourse/commit/188cb58daa833839c54c266ce22db150a3f3a210).\n\nALSED404:\nGG CISCO\n\u0627\u0633\u062a\u063a\u0644\u062a \u0645\u062c\u0645\u0648\u0639\u0629 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0627\u0644\u0635\u064a\u0646\u060c Velvet Ant\u060c \u200b\u200b\u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 (CVE-2024-20399) \u0641\u064a \u0645\u0641\u0627\u062a\u064a\u062d Cisco \u0628\u0627\u0639\u062a\u0628\u0627\u0631\u0647\u0627 \u064a\u0648\u0645\u064b\u0627 \u0635\u0641\u0631\u064a\u064b\u0627 \u0644\u0644\u0633\u064a\u0637\u0631\u0629 \u0648\u0627\u0644\u062a\u0647\u0631\u0628 \u0645\u0646 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641.\n\u0627\u0642\u0631\u0623: https://thehackernews.com/2024/08/chinese-hackers-exploit-zero-day-cisco.html\n\nPayload:\nsite.tld/xyz/xyz/xyz/?path=../../../../../../../../../etc/passwd\n============================\n#ALSED404\n\n\u0643\u0634\u0641\u062a \u0634\u0631\u0643\u0629 \u062c\u0648\u062c\u0644 \u0639\u0646 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0643\u0631\u0648\u0645\u060c CVE-2024-7965\u060c \u0648\u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u0635\u062d\u064a\u062d\u0647\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a.\n\n\u0642\u062f \u064a\u0624\u062f\u064a \u0647\u0630\u0627 \u0627\u0644\u062e\u0644\u0644 \u0641\u064a \u0645\u062d\u0631\u0643 V8 \u0627\u0644\u062e\u0627\u0635 \u0628\u0645\u062a\u0635\u0641\u062d Chrome \u0625\u0644\u0649 \u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0639\u0646 \u0628\u0639\u062f.\n\u0644\u0645\u0639\u0631\u0641\u0629 \u0627\u0644\u0645\u0632\u064a\u062f: https://thehackernews.com/2024/08/google-warns-of-cve-2024-7965-chrome.html\n\u062a\u0623\u0643\u062f \u0645\u0646 \u062a\u062d\u062f\u064a\u062b \u0645\u062a\u0635\u0641\u062d\u0643 \u0625\u0644\u0649 \u0627\u0644\u0625\u0635\u062f\u0627\u0631 \u0627\u0644\u0623\u062d\u062f\u062b.\n\nThe Smart Shadow:\n\ud83c\udd98CVE -2024-41109\n\u062a\u0648\u0641\u0631 \u062d\u0632\u0645\u0629 Admin Classic Bundle \u0645\u0646 Pimcore \u0648\u0627\u062c\u0647\u0629 \u0645\u0633\u062a\u062e\u062f\u0645 \u062e\u0644\u0641\u064a\u0629 \u0644\u0628\u0631\u0646\u0627\u0645\u062c Pimcore. \u064a\u0624\u062f\u064a \u0627\u0644\u0627\u0646\u062a\u0642\u0627\u0644 \u0625\u0644\u0649 /admin/index/statistics \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0633\u062a\u062e\u062f\u0645 Pimcore \u0645\u0633\u062c\u0644 \u0627\u0644\u062f\u062e\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u062a\u062b\u0628\u064a\u062a Pimcore \u0648\u0625\u0635\u062f\u0627\u0631 PHP \u0648\u0625\u0635\u062f\u0627\u0631 MYSQL \u0648\u0627\u0644\u062d\u0632\u0645 \u0627\u0644\u0645\u062b\u0628\u062a\u0629 \u0648\u062c\u0645\u064a\u0639 \u062c\u062f\u0627\u0648\u0644 \u0642\u0627\u0639\u062f\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0639\u062f\u062f \u0635\u0641\u0648\u0641\u0647\u0627 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645. \u062a\u0645 \u0625\u0635\u0644\u0627\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a 1.5.2 \u06481.4.6 \u06481.3.10.\n\n\ud83c\udd98CVE -2024-4188\n\u0642\u062f \u062a\u0633\u0645\u062d \u062b\u063a\u0631\u0629 \u0627\u0644\u0646\u0642\u0644 \u063a\u064a\u0631 \u0627\u0644\u0645\u062d\u0645\u064a \u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0627\u0639\u062a\u0645\u0627\u062f \u0641\u064a OpenText\u2122 Documentum\u2122 Server \u0628\u062d\u0634\u0648 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0627\u0639\u062a\u0645\u0627\u062f. \u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0639\u0644\u0649 Documentum\u2122 Server: \u0645\u0646 16.7 \u0625\u0644\u0649 23.4.\n\n\ud83d\udea8CVE -2024-34149\n\u0641\u064a Bitcoin Core \u062d\u062a\u0649 27.0 \u0648Bitcoin Knots \u0642\u0628\u0644 25.1.knots20231115\u060c \u064a\u0641\u062a\u0642\u0631 tapscript \u0625\u0644\u0649 \u0641\u062d\u0635 \u062d\u062f \u062d\u062c\u0645 \u0627\u0644\u0633\u064a\u0627\u0633\u0629\u060c \u0648\u0647\u064a \u0645\u0634\u0643\u0644\u0629 \u0645\u062e\u062a\u0644\u0641\u0629 \u0639\u0646 CVE-2023-50428. \u0645\u0644\u0627\u062d\u0638\u0629: \u062a\u0639\u0627\u0631\u0636 \u0628\u0639\u0636 \u0627\u0644\u0623\u0637\u0631\u0627\u0641 \u0641\u062d\u0635 \u0627\u0644\u062d\u062f \u0627\u0644\u062c\u062f\u064a\u062f \u0647\u0630\u0627 (\u0639\u0644\u0649 \u0633\u0628\u064a\u0644 \u0627\u0644\u0645\u062b\u0627\u0644\u060c \u0644\u0623\u0646\u0647\u0645 \u064a\u062a\u0641\u0642\u0648\u0646 \u0645\u0639 \u0627\u0644\u0647\u062f\u0641 \u0644\u0643\u0646\u0647\u0645 \u064a\u062e\u062a\u0644\u0641\u0648\u0646 \u0645\u0639 \u0627\u0644\u0622\u0644\u064a\u0629 \u0627\u0644\u0641\u0646\u064a\u0629\u060c \u0623\u0648 \u0644\u0623\u0646 \u0644\u062f\u064a\u0647\u0645 \u0647\u062f\u0641\u064b\u0627 \u0645\u062e\u062a\u0644\u0641\u064b\u0627).\n\n\ud83d\udea8CVE -2024-6904\n\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u062a\u0645 \u062a\u0635\u0646\u064a\u0641\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u062d\u0631\u062c\u0629 \u0641\u064a SourceCodester Record Management System 1.0. \u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u062c\u0632\u0621 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641 \u0645\u0646 \u0627\u0644\u0645\u0644\u0641 sort2_user.php. \u064a\u0624\u062f\u064a \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u062a\u0623\u0647\u064a\u0644 \u0627\u0644\u0648\u0633\u064a\u0637\u0629 \u0625\u0644\u0649 \u062d\u0642\u0646 SQL. \u0645\u0646 \u0627\u0644\u0645\u0645\u0643\u0646 \u0628\u062f\u0621 \u0627\u0644\u0647\u062c\u0648\u0645 \u0639\u0646 \u0628\u0639\u062f. \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0639\u0627\u0645\u0629 \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627. \u062a\u0645 \u062a\u0639\u064a\u064a\u0646 \u0627\u0644\u0645\u0639\u0631\u0641 VDB-271929 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629.\n\nALSED404:\n\u062a\u0633\u062a\u063a\u0644 \u0645\u062c\u0645\u0648\u0639\u0629 Mustang Panda APT \u0628\u0631\u0646\u0627\u0645\u062c VS Code \u0644\u0627\u0633\u062a\u0647\u062f\u0627\u0641 \u062d\u0643\u0648\u0645\u0627\u062a \u062c\u0646\u0648\u0628 \u0634\u0631\u0642 \u0622\u0633\u064a\u0627. \u0648\u064a\u0633\u0645\u062d \u0647\u0630\u0627 \u0644\u0644\u0645\u062a\u0633\u0644\u0644\u064a\u0646 \u0628\u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0623\u0648\u0627\u0645\u0631 \u0648\u0633\u0631\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0646\u0634\u0631 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0639\u0628\u0631 \u0648\u0627\u062c\u0647\u0629 VS Code \u0627\u0644\u0639\u0643\u0633\u064a\u0629.\n\u0627\u0642\u0631\u0623 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644: https://thehackernews.com/2024/09/chinese-hackers-exploit-visual-studio.html\n\u0642\u0645 \u0628\u062a\u0639\u0632\u064a\u0632 \u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a \u0627\u0644\u0622\u0646 - \u0631\u0627\u0642\u0628 \u0647\u0630\u0647 \u0627\u0644\u062a\u0643\u062a\u064a\u0643\u0627\u062a!\n\nThe Smart Shadow:\n\ud83d\udea8CVE -2024-6904\n\u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u062a\u0645 \u062a\u0635\u0646\u064a\u0641\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u062d\u0631\u062c\u0629 \u0641\u064a SourceCodester Record Management System 1.0. \u062a\u0624\u062b\u0631 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0639\u0644\u0649 \u062c\u0632\u0621 \u063a\u064a\u0631 \u0645\u0639\u0631\u0648\u0641 \u0645\u0646 \u0627\u0644\u0645\u0644\u0641 sort2_user.php. \u064a\u0624\u062f\u064a \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0628\u062a\u0623\u0647\u064a\u0644 \u0627\u0644\u0648\u0633\u064a\u0637\u0629 \u0625\u0644\u0649 \u062d\u0642\u0646 SQL. \u0645\u0646 \u0627\u0644\u0645\u0645\u0643\u0646 \u0628\u062f\u0621 \u0627\u0644\u0647\u062c\u0648\u0645 \u0639\u0646 \u0628\u0639\u062f. \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0644\u0644\u0639\u0627\u0645\u0629 \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627. \u062a\u0645 \u062a\u0639\u064a\u064a\u0646 \u0627\u0644\u0645\u0639\u0631\u0641 VDB-271929 \u0644\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629.\n\n\u062a\u0640\u0640\u0634\u0640\u0640\u0627\u0631\u0648\u0646\u1d9c\u02b0\u1d43\u02b3\u1d52\u207f\ud81a\udd54\u0f04:\n- CVE-2024-46049 - Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function.\n\n- CVE-2024-46049 - \u064a\u062d\u062a\u0648\u064a \u0627\u0644\u0628\u0631\u0646\u0627\u0645\u062c \u0627\u0644\u062b\u0627\u0628\u062a Tenda O6 V3.0 V1.0.0.7(2054) \u0639\u0644\u0649 \u062b\u063a\u0631\u0629 \u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u0643\u062f\u0633 \u0641\u064a \u0648\u0638\u064a\u0641\u0629 formexeCommand.\n\nALSED404:\nCVE-2023-26324: \u062b\u063a\u0631\u0629 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0641\u064a \u062a\u0637\u0628\u064a\u0642 XiaomiGetApps\n\u0645\u0627 \u0647\u064a \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062e\u0637\u064a\u0631\u0629 \u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 XiaomiGetApps\u060c \u0648\u0647\u0648 \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u0627\u0644\u0631\u0633\u0645\u064a \u0644\u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0639\u0644\u0649 \u0647\u0648\u0627\u062a\u0641 \u0634\u0627\u0648\u0645\u064a. \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u0646\u0641\u064a\u0630 \u0623\u064a \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0639\u0644\u0649 \u062c\u0647\u0627\u0632 \u0627\u0644\u0636\u062d\u064a\u0629\u060c \u0645\u0645\u0627 \u064a\u0639\u0637\u064a\u0647\u0645 \u0633\u064a\u0637\u0631\u0629 \u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u064a\u0647.\n\u0643\u064a\u0641 \u062a\u0639\u0645\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u062a\u062d\u062f\u062b \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u0633\u0628\u0628 \u0648\u062c\u0648\u062f \u062e\u0644\u0644 \u0641\u064a \u0622\u0644\u064a\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u062d\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u062a\u062d\u0645\u064a\u0644\u0647\u0627 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u062a\u0637\u0628\u064a\u0642. \u0647\u0630\u0627 \u0627\u0644\u062e\u0644\u0644 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u0636\u0645\u064a\u0646 \u0643\u0648\u062f \u0636\u0627\u0631 \u062f\u0627\u062e\u0644 \u062d\u0632\u0645\u0629 \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u0648\u0639\u0646\u062f\u0645\u0627 \u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0628\u062a\u062b\u0628\u064a\u062a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u060c \u064a\u062a\u0645 \u062a\u0646\u0641\u064a\u0630 \u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \u0627\u0644\u0636\u0627\u0631.\n\u0645\u0627 \u0647\u064a \u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0646\u0627\u062a\u062c\u0629 \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n * \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062d\u0633\u0627\u0633\u0629: \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u062c\u0645\u064a\u0639 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0648\u062c\u0648\u062f\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632\u060c \u0645\u062b\u0644 \u0627\u0644\u0635\u0648\u0631 \u0648\u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0648\u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0634\u062e\u0635\u064a\u0629.\n * \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632: \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0639\u0646 \u0628\u0639\u062f\u060c \u0648\u062a\u062b\u0628\u064a\u062a \u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0623\u062e\u0631\u0649\u060c \u0648\u062a\u063a\u064a\u064a\u0631 \u0627\u0644\u0625\u0639\u062f\u0627\u062f\u0627\u062a\u060c \u0648\u062d\u062a\u0649 \u062d\u0630\u0641 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a.", "creation_timestamp": "2024-12-13T19:00:23.000000Z"}, {"uuid": "2618a513-d903-4e5d-80f8-b7fa56c0d29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/kasperskyb2b/1256", "content": "\u0421\u043d\u043e\u0432\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u2014 \u0442\u0440\u0435\u0442\u0438\u0439 0day \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \ud83d\ude33\n\nGoogle \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.0.6422.60/.61 \u0434\u043b\u044f Windows \u0438 125.0.6422.60 \u0434\u043b\u044f Linux.\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2024-4947 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u041e \u043d\u0435\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u0438 \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0412\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f!\n\n\u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0441\u044f \ud83d\udc7f, \u0437\u0430\u043e\u0434\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 0day, \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u0440\u0430\u043d\u0435\u0435:  CVE-2024-4671 \u0438 CVE-2024-4761.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2024-05-16T16:16:04.000000Z"}, {"uuid": "87355076-8ee6-423c-b797-74514f5e7ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46089", "type": "seen", "source": "https://t.me/cvedetector/23328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46089 - 74cms Background Interface RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46089 \nPublished : April 18, 2025, 1:15 p.m. | 3\u00a0hours, 25\u00a0minutes ago \nDescription : 74cms <=3.33\nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T19:05:14.000000Z"}, {"uuid": "16c15ed5-4944-4927-bd53-8504cfc24a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "exploited", "source": "https://t.me/cvedetector/25213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46506 - NetAlertX Unauthenticated Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46506 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:43:57.000000Z"}, {"uuid": "8fb1c360-ba8f-4d53-87f1-6a9c1d54a1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46881", "type": "seen", "source": "https://t.me/cvedetector/16405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46881 - Develocity Gradle Enterprise Incorrect Access Control\", \n  \"Content\": \"CVE ID : CVE-2024-46881 \nPublished : Jan. 26, 2025, 7:15 a.m. | 37\u00a0minutes ago \nDescription : Develocity (formerly Gradle Enterprise) before 2024.1.8 has Incorrect Access Control. Project-level access control configuration was introduced in Enterprise Config schema version 8. Migration functionality from schema version 8 to versions 9 and 10 (in affected vulnerable versions) does not include the projects section of the configuration. This leads to all of the project settings being reset to their defaults when the old schema is loaded. In the case of projects.enabled, the default is false. Thus, using an enterprise config v8 results in Project level access control being disabled, even if it was previously enabled, and previously restricted project information disclosed. Most commonly, this occurs when a Develocity instance is upgraded from an earlier version. Specifically, this occurs if: Develocity 2023.3.X is upgraded to 2023.4.X; Develocity 2023.3.X is upgraded to 2024.1.X up to and including 2024.1.7; or Develocity 2023.4.X is upgraded to 2024.1.X up to and including 2024.1.7. The flaw does not occur when upgrading to a fixed version. An upgrade can only be triggered via administrator access, and cannot be forced by an external attacker. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T09:03:11.000000Z"}, {"uuid": "cb19bdb4-3700-427d-98d7-f3ebbff8b841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/1303", "content": "\u26a1\ufe0fCVE-2024-46483 (CVSS 9.8): Xlight FTP Server Flaw Leaves Users Exposed to Remote Attacks, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-10-29T05:02:14.000000Z"}, {"uuid": "6b03a4c9-661a-44ef-bdcd-6764ef29a63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46954", "type": "seen", "source": "https://t.me/cvedetector/23805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46646 - Ghostscript UTF-8 Encoding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46646 \nPublished : April 26, 2025, 3:15 p.m. | 30\u00a0minutes ago \nDescription : In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-26T18:35:28.000000Z"}, {"uuid": "de4ea3e6-d70b-4283-93ed-c757feeafa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46546", "type": "seen", "source": "https://t.me/cvedetector/23526", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46546 - NEXTU FLETA AX1500 WIFI6 Router Stack Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46546 \nPublished : April 22, 2025, 2:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T18:24:20.000000Z"}, {"uuid": "5fa86187-f3dd-4d72-8c99-c69aff3e6fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46899", "type": "seen", "source": "https://t.me/cvedetector/23481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46899 - Hitachi Ops Center Analyzer Viewpoint OVF Authentication Credentials Leakage Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46899 \nPublished : April 22, 2025, 5:15 a.m. | 36\u00a0minutes ago \nDescription : Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops Center Common Services: from 10.0.0-00 before 11.0.0-04; Hitachi Ops Center Analyzer viewpoint OVF: from 10.0.0-00 before 11.0.0-04. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T08:22:14.000000Z"}, {"uuid": "8aceaf92-794b-4e1a-9f25-2bc28bf49610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46494", "type": "seen", "source": "https://t.me/cvedetector/22351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46494 - Typecho XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46494 \nPublished : April 7, 2025, 8:15 p.m. | 35\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T22:55:55.000000Z"}, {"uuid": "58bafc4e-7f22-47c1-9aaf-1df4d2a044a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46671", "type": "seen", "source": "https://t.me/cvedetector/22468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46671 - FortiWeb User Management Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46671 \nPublished : April 8, 2025, 2:15 p.m. | 1\u00a0hour, 12\u00a0minutes ago \nDescription : An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T18:11:02.000000Z"}, {"uuid": "40d3581f-d0bf-45dd-a6f5-5ed2122daf56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46662", "type": "seen", "source": "https://t.me/cvedetector/20291", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46662 - Fortinet FortiManager Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46662 \nPublished : March 14, 2025, 3:15 p.m. | 15\u00a0minutes ago \nDescription : A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T16:42:22.000000Z"}, {"uuid": "6983d165-9b96-456c-8708-c59e8c6e27ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46276", "type": "seen", "source": "https://t.me/cvedetector/6748", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46276 - Cute_PNG Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46276 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_chunk() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:27.000000Z"}, {"uuid": "1b7eda2f-dd2e-47e1-b070-a0e9d8c01085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/630", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\nhttps://github.com/tandasat/CVE-2024-21305", "creation_timestamp": "2024-10-25T04:45:13.000000Z"}, {"uuid": "345a080d-1f6b-4752-a958-072788266a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46670", "type": "seen", "source": "https://t.me/cvedetector/15263", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46670 - \"FortiOS FortiSASE Out-of-bounds Read Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46670 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : An\u00a0Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:48.000000Z"}, {"uuid": "2ee9f50b-15ad-4686-9a5e-87767289d4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46669", "type": "seen", "source": "https://t.me/cvedetector/15262", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46669 - FortiSASE IKE Service Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46669 \nPublished : Jan. 14, 2025, 2:15 p.m. | 21\u00a0minutes ago \nDescription : An\u00a0Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated attacker to crash the IPsec tunnel via crafted requests, resulting in potential denial of service. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T15:39:47.000000Z"}, {"uuid": "5ac3b2ca-1e57-415a-8c8a-153be10823ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46450", "type": "seen", "source": "https://t.me/cvedetector/15658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46450 - Tenda AC1200 Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46450 \nPublished : Jan. 16, 2025, 10:15 p.m. | 28\u00a0minutes ago \nDescription : Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attackers to bypass authentication via a crafted web request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T23:46:32.000000Z"}, {"uuid": "abe3787f-7b8c-4833-adeb-4918a48a1e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "seen", "source": "https://t.me/cvedetector/14421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46981 - Redis Lua Scripting Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46981 \nPublished : Jan. 6, 2025, 10:15 p.m. | 42\u00a0minutes ago \nDescription : Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T00:28:37.000000Z"}, {"uuid": "b1fec044-3888-478f-9bad-390791c5260b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46209", "type": "seen", "source": "https://t.me/cvedetector/14404", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46209 - REDAXO CMS Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46209 \nPublished : Jan. 6, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T21:07:52.000000Z"}, {"uuid": "7035293e-8fc1-455a-bfbe-17d5fec32dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46622", "type": "seen", "source": "https://t.me/cvedetector/14400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46622 - SecureAge Security Suite Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46622 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : An Escalation of Privilege security vulnerability was found in SecureAge Security Suite software 7.0.x before 7.0.38, 7.1.x before 7.1.11, 8.0.x before 8.0.18, and 8.1.x before 8.1.18 that allows arbitrary file creation, modification and deletion. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:40.000000Z"}, {"uuid": "c3f18695-5a3a-496a-ac38-bd54d8ba4002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46073", "type": "seen", "source": "https://t.me/cvedetector/14399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46073 - IceHRM Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-46073 \nPublished : Jan. 6, 2025, 6:15 p.m. | 44\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability exists in the login page of IceHRM v32.4.0.OS. The vulnerability is due to improper sanitization of the \"next\" parameter, which is included in the application's response without adequate escaping. An attacker can exploit this flaw by tricking a user into visiting a specially crafted URL, causing the execution of arbitrary JavaScript code in the context of the victim's browser. The issue occurs even though the application has sanitization mechanisms in place. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T20:17:39.000000Z"}, {"uuid": "bda8fdd0-0fb0-4780-b9c0-64b24eaa9a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "seen", "source": "https://t.me/cvedetector/14971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46210 - Redaxo CMS File Upload Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46210 \nPublished : Jan. 10, 2025, 4:15 p.m. | 38\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T18:00:55.000000Z"}, {"uuid": "05a6c2bc-a463-4de6-8575-3405b049ee65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46464", "type": "seen", "source": "https://t.me/cvedetector/14943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46464 - PRIMX ZED Enterprise Local File Manipulation Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46464 \nPublished : Jan. 9, 2025, 10:15 p.m. | 19\u00a0minutes ago \nDescription : In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user access can be manipulated to render the host computer unavailable or to execute programs with an elevation of privilege. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T23:38:27.000000Z"}, {"uuid": "55330fa3-4670-4f47-b18f-faee8aa9e71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46505", "type": "seen", "source": "https://t.me/cvedetector/14907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46505 - Infoblox BloxOne Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-46505 \nPublished : Jan. 9, 2025, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T21:57:26.000000Z"}, {"uuid": "6cb13b9a-4ce3-4ef9-8934-f56da9588c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46310", "type": "seen", "source": "https://t.me/cvedetector/15168", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46310 - Cfx.re FXServer Information Disclosure and Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46310 \nPublished : Jan. 13, 2025, 7:15 p.m. | 43\u00a0minutes ago \nDescription : Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T21:15:28.000000Z"}, {"uuid": "c3de4089-f58e-4886-9aab-f71b2885c12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46919", "type": "seen", "source": "https://t.me/cvedetector/15162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46919 - Samsung Mobile Processor Exynos Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46919 \nPublished : Jan. 13, 2025, 5:15 p.m. | 20\u00a0minutes ago \nDescription : An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadOutputBuffers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T18:45:06.000000Z"}, {"uuid": "6b8faade-41ec-4426-ac12-3f31c31ee683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46481", "type": "seen", "source": "https://t.me/cvedetector/15175", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46481 - Venki Supravizio BPM Open Redirect and Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-46481 \nPublished : Jan. 13, 2025, 8:15 p.m. | 43\u00a0minutes ago \nDescription : The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T22:05:45.000000Z"}, {"uuid": "e5377cd8-3642-443e-a8ae-574e901c5c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46480", "type": "seen", "source": "https://t.me/cvedetector/15174", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46480 - Venki Supravizio BPM NTLM Hash Leak Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46480 \nPublished : Jan. 13, 2025, 8:15 p.m. | 43\u00a0minutes ago \nDescription : An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T22:05:41.000000Z"}, {"uuid": "8bdcecc0-1dd0-4665-9d5b-a5f967cf0fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46921", "type": "seen", "source": "https://t.me/cvedetector/15169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46921 - Samsung Exynos Denial of Service (Battery-Drain) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46921 \nPublished : Jan. 13, 2025, 7:15 p.m. | 43\u00a0minutes ago \nDescription : An issue was discovered in Samsung Mobile Processor and Modem Exynos 9820, 9825, 980, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W1000, Modem 5123, Modem 5300, Modem 5400. UE does not limit the number of attempts for the RRC Setup procedure in the 5G SA, leading to a denial of service (battery-drain attack). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T21:15:29.000000Z"}, {"uuid": "fcdd64ee-0d4f-4726-8c74-e5d35c44c46a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46920", "type": "seen", "source": "https://t.me/cvedetector/15166", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46920 - Samsung Mobile Processor Exynos Out-of-Bounds Write\", \n  \"Content\": \"CVE ID : CVE-2024-46920 \nPublished : Jan. 13, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a length check leads to a stack out-of-bounds write at loadInputBuffers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T20:25:23.000000Z"}, {"uuid": "4f1f0768-b0e8-4b88-b02b-f95b5b51c52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46479", "type": "seen", "source": "https://t.me/cvedetector/15165", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46479 - Venki Supravizio BPM Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46479 \nPublished : Jan. 13, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T20:25:22.000000Z"}, {"uuid": "ed650bcd-4e16-489e-99c1-fd700165e43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46972", "type": "seen", "source": "https://t.me/cvedetector/13811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46972 - Apache Hadoop Graphics Use-After-Free Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46972 \nPublished : Dec. 28, 2024, 5:15 a.m. | 42\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T07:04:43.000000Z"}, {"uuid": "fc6da2d1-df6c-4a0e-a068-7a0d4e98fecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46973", "type": "seen", "source": "https://t.me/cvedetector/13810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46973 - Microsoft Windows GPU.sys Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46973 \nPublished : Dec. 28, 2024, 5:15 a.m. | 42\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T07:04:42.000000Z"}, {"uuid": "65683693-3a73-4b0e-9b1c-f2152b228335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46455", "type": "seen", "source": "https://t.me/cvedetector/12449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46455 - \"Unstructured XMLParser XXE Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46455 \nPublished : Dec. 9, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : unstructured v.0.14.2 and before is vulnerable to XML External Entity (XXE) via the XMLParser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:04:28.000000Z"}, {"uuid": "3cbb2c9a-a094-4126-99ad-9a6b964c37e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46873", "type": "seen", "source": "https://t.me/cvedetector/13524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46873 - SHARP Router Debug Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46873 \nPublished : Dec. 23, 2024, 1:15 a.m. | 41\u00a0minutes ago \nDescription : Multiple SHARP routers leave the hidden debug function enabled. An arbitrary OS command may be executed with the root privilege by a remote unauthenticated attacker. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T03:17:12.000000Z"}, {"uuid": "15b7a054-8345-49cd-9173-c080d179f137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46874", "type": "seen", "source": "https://t.me/cvedetector/12273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46874 - Ruijie Reyee OS versions 2.206.x up to but not inc\", \n  \"Content\": \"CVE ID : CVE-2024-46874 \nPublished : Dec. 6, 2024, 7:15 p.m. | 19\u00a0minutes ago \nDescription : Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow MQTT clients connecting with device credentials to send messages to some topics. Attackers with device credentials could issue commands to other devices on behalf of Ruijie's cloud. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T20:38:59.000000Z"}, {"uuid": "11385f4d-2fde-458a-9639-d7c494afe40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46547", "type": "seen", "source": "https://t.me/cvedetector/12440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46547 - Wampserver PHP Info Page Sensitive Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46547 \nPublished : Dec. 9, 2024, 7:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in Romain Bourdon Wampserver all versions (discovered in v3.2.3 and v3.2.6) where unauthorized users could access sensitive information due to improper access control validation via PHP Info Page. This issue can lead to data leaks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T21:24:02.000000Z"}, {"uuid": "7a986086-d387-4683-a34c-f095809eb965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46901", "type": "seen", "source": "https://t.me/cvedetector/12368", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46901 - Apache Subversion mod_dav_svn Name Filing Array Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-46901 \nPublished : Dec. 9, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : Insufficient validation of filenames against control characters in Apache Subversion repositories served via mod_dav_svn allows authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository.  \n  \nAll versions of Subversion up to and including Subversion 1.14.4 are affected if serving repositories via mod_dav_svn. Users are recommended to upgrade to version 1.14.5, which fixes this issue.  \n  \nRepositories served via other access methods are not affected. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T12:10:57.000000Z"}, {"uuid": "4b0b9dda-d386-4d19-807d-9d2bc68a1dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46921", "type": "seen", "source": "Telegram/zApC_q6kSpituDPWt5ZZDurCdI72sWd3DhRijh1mXAou9nxM", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "4ac15c06-7e8e-4102-8f3d-822f294ebedf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46542", "type": "seen", "source": "https://t.me/cvedetector/13947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46542 - Veritas Arctera Data Insight SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46542 \nPublished : Dec. 30, 2024, 6:15 p.m. | 36\u00a0minutes ago \nDescription : Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T20:08:51.000000Z"}, {"uuid": "8fee45e9-a2ca-4924-8fa3-d078f0e74c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46971", "type": "seen", "source": "https://t.me/cvedetector/12901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46971 - Nvidia GPU Driver Physical Memory Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46971 \nPublished : Dec. 13, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T19:57:37.000000Z"}, {"uuid": "a4a1131a-71a9-482b-81fd-9f69fefb6fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46341", "type": "seen", "source": "https://t.me/cvedetector/12570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46341 - TP-Link TL-WR845N Weak Authentication Credentials Transmission\", \n  \"Content\": \"CVE ID : CVE-2024-46341 \nPublished : Dec. 10, 2024, 8:15 p.m. | 22\u00a0minutes ago \nDescription : TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T21:40:14.000000Z"}, {"uuid": "1cd54ecb-340d-44ac-833f-cd13e0617a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46340", "type": "seen", "source": "https://t.me/cvedetector/12569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46340 - TP-Link TL-WR845N Plaintext Credentials Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-46340 \nPublished : Dec. 10, 2024, 8:15 p.m. | 22\u00a0minutes ago \nDescription : TP-Link TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to transmit user credentials in plaintext after executing a factory reset. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T21:40:13.000000Z"}, {"uuid": "2b6613e5-c15d-44ab-8e0b-d000b15133d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46657", "type": "seen", "source": "https://t.me/cvedetector/12528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46657 - Artifex Software Mupdf PDF Extraction Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46657 \nPublished : Dec. 10, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:08:58.000000Z"}, {"uuid": "60b3f25c-678a-4e30-b1aa-78dbc837ed3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46442", "type": "seen", "source": "https://t.me/cvedetector/12550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46442 - BYD Dilink Headunit System Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46442 \nPublished : Dec. 10, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in the BYD Dilink Headunit System v3.0 to v4.0 allows attackers to bypass authentication via a bruteforce attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T20:49:40.000000Z"}, {"uuid": "b52bacdf-d49e-4193-8cdc-d67d74ba924a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "https://t.me/cvedetector/11791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46905 - SolarWinds WhatsUp Gold SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46905 \nPublished : Dec. 2, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user (at least Network Manager permissions required) to achieve privilege escalation to the admin account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T17:05:13.000000Z"}, {"uuid": "142c6e48-2b96-4d9e-ac37-2b403bf7bbcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46624", "type": "seen", "source": "https://t.me/cvedetector/11922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46624 - An issue in InfoDom Performa 365 v4.0.1 allows aut\", \n  \"Content\": \"CVE ID : CVE-2024-46624 \nPublished : Dec. 3, 2024, 11:15 p.m. | 28\u00a0minutes ago \nDescription : An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T00:51:38.000000Z"}, {"uuid": "70a06e86-3162-42b5-bcdd-59be2d9510b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46625", "type": "seen", "source": "https://t.me/cvedetector/11921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46625 - An authenticated arbitrary file upload vulnerabili\", \n  \"Content\": \"CVE ID : CVE-2024-46625 \nPublished : Dec. 3, 2024, 10:15 p.m. | 41\u00a0minutes ago \nDescription : An authenticated arbitrary file upload vulnerability in the /documentCache/upload endpoint of InfoDom Performa 365 v4.0.1 allows attackers to execute arbitrary code via uploading a crafted SVG file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T00:01:30.000000Z"}, {"uuid": "bb5f7721-c228-47e3-a4a1-efc515905d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46908", "type": "seen", "source": "https://t.me/cvedetector/11794", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46908 - In WhatsUp Gold versions released before 2024.0.1,\", \n  \"Content\": \"CVE ID : CVE-2024-46908 \nPublished : Dec. 2, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required)  \n  \n to achieve privilege escalation to the admin account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T17:05:15.000000Z"}, {"uuid": "fa95e4be-55d1-4ae9-acc3-725280f7d121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46907", "type": "seen", "source": "https://t.me/cvedetector/11793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46907 - SolarWinds WhatsUp Gold SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46907 \nPublished : Dec. 2, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T17:05:15.000000Z"}, {"uuid": "07652e8a-d4f9-411a-ac36-b9f60ad409cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46906", "type": "seen", "source": "https://t.me/cvedetector/11792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46906 - WhatsUp Gold SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46906 \nPublished : Dec. 2, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required)  to achieve privilege escalation to the admin account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T17:05:14.000000Z"}, {"uuid": "6c345a87-bc04-4e94-87a2-3ec6c2bdc385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46909", "type": "seen", "source": "https://t.me/cvedetector/11786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46909 - SolarWinds WhatsUp Gold Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46909 \nPublished : Dec. 2, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.1, a\u00a0remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T17:05:06.000000Z"}, {"uuid": "9525888d-c5d6-4b73-aff2-446eadd53200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46894", "type": "seen", "source": "https://t.me/cvedetector/10608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46894 - SINEC INS Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46894 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the \"/api/sftp/users\" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured users of the SFTP service and also modify that configuration. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:44.000000Z"}, {"uuid": "30c6e30e-c6e7-4aa0-97aa-8ab18bd23207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46964", "type": "seen", "source": "https://t.me/cvedetector/10546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46964 - All Video Downloader Arbitrary JavaScript Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46964 \nPublished : Nov. 11, 2024, 9:15 p.m. | 27\u00a0minutes ago \nDescription : The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to execute arbitrary JavaScript code via the com.video.downloader.all.StartActivity component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T22:48:06.000000Z"}, {"uuid": "3ce385cf-4100-41fb-8f2b-416aebd1a24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46888", "type": "seen", "source": "https://t.me/cvedetector/10615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46888 - SINEC INS SFTP Path Manipulation Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46888 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:53.000000Z"}, {"uuid": "2ad67b04-5972-4d56-8b8d-25c90247c34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46892", "type": "seen", "source": "https://t.me/cvedetector/10613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46892 - SINEC INS Session Token Invalidation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46892 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly invalidate sessions when the associated user is deleted or disabled or their permissions are modified. This could allow an authenticated attacker to continue performing malicious actions even after their user account has been disabled. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:51.000000Z"}, {"uuid": "3e5172c4-937e-4be5-97bc-a6882ccdebbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46891", "type": "seen", "source": "https://t.me/cvedetector/10612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46891 - SINEC INS Denial of Service Log File Exhaustion\", \n  \"Content\": \"CVE ID : CVE-2024-46891 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial of service condition. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:50.000000Z"}, {"uuid": "79d2653c-c290-4283-b44d-ad454b103870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46890", "type": "seen", "source": "https://t.me/cvedetector/10611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46890 - SINEC INS Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-46890 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying OS. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:50.000000Z"}, {"uuid": "4a8d8fd2-e107-4b4d-8229-a1fbc1c0813c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46889", "type": "seen", "source": "https://t.me/cvedetector/10610", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46889 - SINEC INS Crypto Key Material Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46889 \nPublished : Nov. 12, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the application binary and decrypt arbitrary backup files. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T14:41:46.000000Z"}, {"uuid": "80e5ef6c-75eb-4e68-b210-a0a80957d499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46963", "type": "seen", "source": "https://t.me/cvedetector/10545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46963 - Android Super Unlimited Video Downloader Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46963 \nPublished : Nov. 11, 2024, 9:15 p.m. | 27\u00a0minutes ago \nDescription : The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for Android allows an attacker to execute arbitrary JavaScript code via the com.bluesky.browser.ui.BrowserMainActivity component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T22:48:03.000000Z"}, {"uuid": "aa764215-1498-4cf5-b21d-76aa07a93cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46962", "type": "seen", "source": "https://t.me/cvedetector/10544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46962 - Master Video Downloader Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46962 \nPublished : Nov. 11, 2024, 9:15 p.m. | 27\u00a0minutes ago \nDescription : The SYQ com.downloader.video.fast (aka Master Video Downloader) application through 2.0 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.video.fast.SpeedMainAct component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T22:48:02.000000Z"}, {"uuid": "677e2aae-5e54-4c31-899b-fe0b57d0c356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46966", "type": "seen", "source": "https://t.me/cvedetector/10542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46966 - Video Downloader Pro & Browser Arbitrary JavaScript Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46966 \nPublished : Nov. 11, 2024, 9:15 p.m. | 27\u00a0minutes ago \nDescription : The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T22:48:00.000000Z"}, {"uuid": "d6500547-8ee6-4e2b-a4d9-6d09fce359d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46956", "type": "seen", "source": "https://t.me/cvedetector/10437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46956 - Ghostscript Arbitary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-46956 \nPublished : Nov. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T00:12:28.000000Z"}, {"uuid": "65a14239-c93e-4bb6-8b94-158a6c7e1a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46955", "type": "seen", "source": "https://t.me/cvedetector/10436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46955 - Ghostscript Indexed Color Space Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46955 \nPublished : Nov. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T00:12:28.000000Z"}, {"uuid": "6cdd5241-d05d-4703-8ad2-1143acd98a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46613", "type": "seen", "source": "https://t.me/cvedetector/10432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46613 - WeeChat Integer Overflow Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46613 \nPublished : Nov. 10, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-10T23:22:16.000000Z"}, {"uuid": "e0901d93-fb66-453a-9b60-8467514c2229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46951", "type": "seen", "source": "https://t.me/cvedetector/10431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46951 - Ghostscript Unchecked Implementation Pointer Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46951 \nPublished : Nov. 10, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-10T23:22:15.000000Z"}, {"uuid": "5b855677-22cb-4665-9a69-e10670a5122f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46954", "type": "seen", "source": "https://t.me/cvedetector/10435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46954 - Ghostscript UTF-8 Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46954 \nPublished : Nov. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T00:12:27.000000Z"}, {"uuid": "c8edd082-a74f-4880-be73-b9b7f1262f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46953", "type": "seen", "source": "https://t.me/cvedetector/10434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46953 - Ghostscript Filename Format String Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46953 \nPublished : Nov. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T00:12:26.000000Z"}, {"uuid": "0b0a8708-19a8-4225-8707-5d4e78292d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46952", "type": "seen", "source": "https://t.me/cvedetector/10433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46952 - Ghostscript PDF XRef Stream Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46952 \nPublished : Nov. 10, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T00:12:26.000000Z"}, {"uuid": "b1087207-f9e9-4e4b-b3c7-b38d7f98fc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46466", "type": "seen", "source": "https://t.me/cvedetector/11145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46466 - \"ZONECENTRAL Windows Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46466 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 (ANSSI qualification submission) can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONECENTRAL has to be modified to prevent this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:26.000000Z"}, {"uuid": "c9d89b1d-f628-4a57-8a9b-e257d487ec1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46462", "type": "seen", "source": "https://t.me/cvedetector/11144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46462 - Zedmail Windows Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46462 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZEDMAIL has to be modified to prevent this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:22.000000Z"}, {"uuid": "5544c8cf-c542-485f-87b1-1a2b13b13859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46467", "type": "seen", "source": "https://t.me/cvedetector/11140", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46467 - ZonePoint Windows Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46467 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONEPOINT has to be modified to prevent this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:19.000000Z"}, {"uuid": "d5a2dbc7-444d-4d38-b23a-28f76ea0aa9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46465", "type": "seen", "source": "https://t.me/cvedetector/11139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46465 - \"IBM CRYHOD Windows Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-46465 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : By default, dedicated folders of CRYHOD for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of CRYHOD has to be modified to prevent this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:15.000000Z"}, {"uuid": "34ca840b-cc2d-44b1-81bd-57ce1382bdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46463", "type": "seen", "source": "https://t.me/cvedetector/11138", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46463 - Orizon Windows PrivilegeEscalation\", \n  \"Content\": \"CVE ID : CVE-2024-46463 \nPublished : Nov. 15, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ORIZON has to be modified to prevent this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:58:14.000000Z"}, {"uuid": "3951ec0a-d1a1-43ea-a2a3-dcb87cd7a696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46531", "type": "seen", "source": "https://t.me/cvedetector/9457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46531 - phpgurukul Vehicle Record Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-46531 \nPublished : Oct. 30, 2024, 7:15 p.m. | 32\u00a0minutes ago \nDescription : phpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchinputdata parameter at /index.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-30T20:53:18.000000Z"}, {"uuid": "bc236e7a-6c56-4f0f-b811-9e6d4a2a2af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46872", "type": "seen", "source": "https://t.me/cvedetector/9272", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46872 - Mattermost CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46872 \nPublished : Oct. 29, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : Mattermost versions 9.10.x <=<=<=\nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T10:35:21.000000Z"}, {"uuid": "d97f8800-de65-4711-bdb5-659a0a690177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46948", "type": "seen", "source": "https://t.me/cvedetector/10201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46948 - Northern.tech Mender Incorrect Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46948 \nPublished : Nov. 8, 2024, 4:15 p.m. | 41\u00a0minutes ago \nDescription : Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T18:02:41.000000Z"}, {"uuid": "540571f8-11b9-4674-a38f-72cb436fa55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46897", "type": "seen", "source": "https://t.me/cvedetector/8292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46897 - Exment Unauthenticated Table Management Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46897 \nPublished : Oct. 18, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and/or alter the information of the unauthorized table. \nSeverity: 3.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T09:23:23.000000Z"}, {"uuid": "bafe2377-2e22-4346-8339-6749850e8080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46947", "type": "seen", "source": "https://t.me/cvedetector/10205", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46947 - Northern.tech Mender SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46947 \nPublished : Nov. 8, 2024, 4:15 p.m. | 41\u00a0minutes ago \nDescription : Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T18:02:47.000000Z"}, {"uuid": "47bb6e25-824f-46d5-92f0-784fe6a994c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46961", "type": "seen", "source": "https://t.me/cvedetector/10145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46961 - \"Inshot XDownloader Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46961 \nPublished : Nov. 7, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through 1.3.5 for Android allows an attacker to execute arbitrary JavaScript code via the com.downloader.privatebrowser.activity.PrivateMainActivity component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T23:38:02.000000Z"}, {"uuid": "79a1c74f-e13f-483e-a3b8-4f6804a03a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46960", "type": "seen", "source": "https://t.me/cvedetector/10144", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46960 - Asd Rocks Video Downloader Android XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46960 \nPublished : Nov. 7, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : The ASD com.rocks.video.downloader (aka HD Video Downloader All Format) application through 7.0.129 for Android allows an attacker to execute arbitrary JavaScript code via the com.rocks.video.downloader.MainBrowserActivity component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-07T23:38:01.000000Z"}, {"uuid": "b73b6170-5e61-4145-91fd-bf09c57be010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46478", "type": "seen", "source": "https://t.me/cvedetector/8826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46478 - \"HTMLDOC Buffer Overflow Vulnerability in parse_pre function\"\", \n  \"Content\": \"CVE ID : CVE-2024-46478 \nPublished : Oct. 24, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T21:00:19.000000Z"}, {"uuid": "4ffba1b5-3c70-445a-b86f-9d8f17c5a366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/cvedetector/8638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46538 - Pfsense XSS Permit\", \n  \"Content\": \"CVE ID : CVE-2024-46538 \nPublished : Oct. 22, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at interfaces_groups_edit.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T20:28:40.000000Z"}, {"uuid": "97e35268-69fe-41b8-8789-587b19e1e8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46239", "type": "seen", "source": "https://t.me/cvedetector/8544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46239 - PHPGurukul Hospital Management System Cross-Site Scripting Vulnearbility\", \n  \"Content\": \"CVE ID : CVE-2024-46239 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : Multiple cross-site scripting vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /doctor/edit-profile.php and adminremark parameter in /admin/query-details.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:51.000000Z"}, {"uuid": "cba8e7f1-cd6a-4794-bbdd-7ea451616455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46238", "type": "seen", "source": "https://t.me/cvedetector/8543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46238 - PHPGurukul Hospital Management System Multiple Cross Site Scripting (XSS) Vulnerabilities\", \n  \"Content\": \"CVE ID : CVE-2024-46238 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : Multiple Cross Site Scripting (XSS) vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:50.000000Z"}, {"uuid": "4856ebc3-c5e1-4e6d-b984-4d6f42d0b6c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "seen", "source": "https://t.me/cvedetector/8655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46483 - Xlight FTP Server SFTP Heap Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46483 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Xlight FTP Server <3.9.4.3\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:39:51.000000Z"}, {"uuid": "cd3def01-414d-4e8a-b2ac-61cff2ad030e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46482", "type": "seen", "source": "https://t.me/cvedetector/8654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46482 - Ladybird Faveo-Helpdesk File Upload Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46482 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:39:47.000000Z"}, {"uuid": "f34a2cac-22bd-4a6c-bd38-d22da618c6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46903", "type": "seen", "source": "https://t.me/cvedetector/8646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46903 - Trend Micro Deep Discovery Inspector (DDI) Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46903 \nPublished : Oct. 22, 2024, 7:15 p.m. | 47\u00a0minutes ago \nDescription : A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations.  \n  \nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T22:09:10.000000Z"}, {"uuid": "a044e727-7409-4db7-a26d-f37fdbfd18a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46902", "type": "seen", "source": "https://t.me/cvedetector/8640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46902 - Trend Micro Deep Discovery Inspector Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46902 \nPublished : Oct. 22, 2024, 7:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose sensitive information affected installations.  \n  \nPlease note: an attacker must first obtain the ability to execute high-privileged code (admin user rights) on the target system in order to exploit this vulnerability. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T22:09:01.000000Z"}, {"uuid": "37319a9a-d995-4b9b-a1a0-f055ef56c206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46240", "type": "seen", "source": "https://t.me/cvedetector/8621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46240 - Collabtive Cross-site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46240 \nPublished : Oct. 22, 2024, 4:15 p.m. | 32\u00a0minutes ago \nDescription : Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-22T18:48:01.000000Z"}, {"uuid": "6c336ec7-61b6-47a2-a492-89293953f632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46236", "type": "seen", "source": "https://t.me/cvedetector/8542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46236 - CodeAstro Membership Management System XSS in Address Input\", \n  \"Content\": \"CVE ID : CVE-2024-46236 \nPublished : Oct. 21, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-21T21:52:49.000000Z"}, {"uuid": "f62b0b85-9ea3-44d7-8947-04c85041d659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46887", "type": "seen", "source": "https://t.me/cvedetector/7342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46887 - Eaton Power Xplorer Unauthenticated Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46887 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:20.000000Z"}, {"uuid": "fdfda214-f6e4-4a3a-a593-ac489f9f857a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46886", "type": "seen", "source": "https://t.me/cvedetector/7341", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46886 - \"WordPress Open Redirect Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46886 \nPublished : Oct. 8, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : The web server of affected devices does not properly validate input that is used for a user redirection. This could allow an attacker to make the server redirect the legitimate user to an attacker-chosen URL. For a successful exploit, the legitimate user must actively click on an attacker-crafted link. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T12:02:17.000000Z"}, {"uuid": "66919c74-411b-4bef-be99-355fe39292b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46076", "type": "seen", "source": "https://t.me/cvedetector/7255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46076 - RuoYi SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-46076 \nPublished : Oct. 7, 2024, 6:15 p.m. | 39\u00a0minutes ago \nDescription : RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T20:58:57.000000Z"}, {"uuid": "4ebc2445-66f3-4b1b-b14f-dcb346cd4e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46300", "type": "seen", "source": "https://t.me/cvedetector/7253", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46300 - itsourcecode Placement Management System XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46300 \nPublished : Oct. 7, 2024, 5:15 p.m. | 39\u00a0minutes ago \nDescription : itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T20:08:51.000000Z"}, {"uuid": "7240f243-b003-4c08-87ca-177f986b76d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46278", "type": "seen", "source": "https://t.me/cvedetector/7250", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46278 - Teedy Management Console XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46278 \nPublished : Oct. 7, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T19:18:42.000000Z"}, {"uuid": "3728bb58-b0f0-4b11-b1d5-65978ca0c97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46041", "type": "seen", "source": "https://t.me/cvedetector/7249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46041 - IoT Haat Smart Plug Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46041 \nPublished : Oct. 7, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T19:18:41.000000Z"}, {"uuid": "2c71c45e-b61f-4f9a-8297-8dbd728eddb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46040", "type": "seen", "source": "https://t.me/cvedetector/7248", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46040 - IoT Haat Smart Plug Insufficient Session Expiration Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46040 \nPublished : Oct. 7, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after the authentication token has expired. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T19:18:37.000000Z"}, {"uuid": "1fe998a7-9782-4aaf-9598-7372a2acedbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46446", "type": "seen", "source": "https://t.me/cvedetector/7245", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46446 - Mecha CMS Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46446 \nPublished : Oct. 7, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identity checks. Parameters can then be passed through the POST method, resulting in the Deletion of Arbitrary Files or Website Takeover. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T19:18:35.000000Z"}, {"uuid": "4c27f15e-fe56-474f-a433-754f90ad0f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46528", "type": "seen", "source": "https://t.me/cvedetector/7857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46528 - KubeSphere IDOR Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46528 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere v3.4.1 and v4.1.1 allows low-privileged authenticated attackers to access sensitive resources without proper authorization checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:58.000000Z"}, {"uuid": "1ba8dc6d-1839-4c9d-8b1b-83e46357bf9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46307", "type": "seen", "source": "https://t.me/cvedetector/7513", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46307 - Sparkshop Unvalidated Input Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46307 \nPublished : Oct. 9, 2024, 5:15 p.m. | 28\u00a0minutes ago \nDescription : A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T19:50:29.000000Z"}, {"uuid": "3a343a55-7bd2-4649-b241-21546e2a7f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46998", "type": "seen", "source": "https://t.me/cvedetector/8842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46998 - \"BaserCMS Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46998 \nPublished : Oct. 24, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T21:50:50.000000Z"}, {"uuid": "a5d46411-d16d-47b8-90a8-794eecf067be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46980", "type": "seen", "source": "https://t.me/cvedetector/7855", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46980 - Tuleap Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46980 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, a site administrator could create an artifact link type with a forward label allowing them to execute uncontrolled code (or at least achieve content injection) in a mail client. Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:57.000000Z"}, {"uuid": "944e94f9-b451-4340-b72d-b53c0e1dd141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46994", "type": "seen", "source": "https://t.me/cvedetector/8845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46994 - baserCMS Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-46994 \nPublished : Oct. 24, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T21:50:53.000000Z"}, {"uuid": "c926d4e9-607c-49ca-abe7-596abd4452ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46995", "type": "seen", "source": "https://t.me/cvedetector/8844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46995 - BaserCMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46995 \nPublished : Oct. 24, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T21:50:52.000000Z"}, {"uuid": "a2409672-42b9-4db4-878d-b5b53e9e21e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46996", "type": "seen", "source": "https://t.me/cvedetector/8841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46996 - BaserCMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46996 \nPublished : Oct. 24, 2024, 7:15 p.m. | 33\u00a0minutes ago \nDescription : baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-24T21:50:47.000000Z"}, {"uuid": "702ed07e-38ed-40da-920d-6bc938afe983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46898", "type": "seen", "source": "https://t.me/cvedetector/7885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46898 - SHIRASAGI HTTP Request Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-46898 \nPublished : Oct. 15, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T10:14:46.000000Z"}, {"uuid": "24d44b81-cb31-48d6-8481-32e01847a737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46988", "type": "seen", "source": "https://t.me/cvedetector/7851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46988 - Tuleap Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46988 \nPublished : Oct. 14, 2024, 6:15 p.m. | 30\u00a0minutes ago \nDescription : Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, users might receive email notification with information they should not have access to. Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:51:50.000000Z"}, {"uuid": "298732ab-5a46-403d-a92e-03bdd1cac7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46535", "type": "seen", "source": "https://t.me/cvedetector/7828", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46535 - Jepaas SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46535 \nPublished : Oct. 14, 2024, 5:15 p.m. | 38\u00a0minutes ago \nDescription : Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T20:01:12.000000Z"}, {"uuid": "c6fa6375-4875-4de6-b8d0-df1c981e0a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46468", "type": "seen", "source": "https://t.me/cvedetector/7746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46468 - Apache JPress SSRF Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46468 \nPublished : Oct. 11, 2024, 9:15 p.m. | 23\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) vulnerability exists in the jpress <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T23:45:05.000000Z"}, {"uuid": "2dd6ed7b-2c63-4aaa-9649-ed944651f50b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46911", "type": "seen", "source": "https://t.me/cvedetector/7804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46911 - Apache Roller CSRF Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46911 \nPublished : Oct. 14, 2024, 9:15 a.m. | 15\u00a0minutes ago \nDescription : Cross-site Resource Forgery (CSRF), Privilege escalation vulnerability in Apache Roller. On multi-blog/user Roller websites, by default weblog owners are trusted to publish arbitrary weblog content and this combined with a deficiency in Roller's CSRF protections allowed an escalation of privileges attack. This issue affects Apache Roller before 6.1.4.  \n  \nRoller users who run multi-blog/user Roller websites are recommended to upgrade to version 6.1.4, which fixes the issue.  \n  \nRoller 6.1.4 release announcement:\u00a0  \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-14T11:39:02.000000Z"}, {"uuid": "0fe3c1b4-2d52-41d2-b6b6-befd3c05d32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46532", "type": "seen", "source": "https://t.me/cvedetector/7722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46532 - OpenHIS SQL Injection Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-46532 \nPublished : Oct. 11, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T21:13:56.000000Z"}, {"uuid": "96093e75-d45f-442a-8f5e-a6481e1d216b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46215", "type": "seen", "source": "https://t.me/cvedetector/7714", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46215 - GoAhead Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46215 \nPublished : Oct. 11, 2024, 5:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-11T19:33:25.000000Z"}, {"uuid": "e2006f99-99b1-4504-81d4-02ccf683c08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46328", "type": "seen", "source": "https://t.me/cvedetector/6412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46328 - Vonets VAP11G-300 Privileged Account Hardcoding\", \n  \"Content\": \"CVE ID : CVE-2024-46328 \nPublished : Sept. 26, 2024, 2:15 p.m. | 41\u00a0minutes ago \nDescription : VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T17:09:40.000000Z"}, {"uuid": "66b37357-f18c-4dec-a05f-995ab092f1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4658", "type": "seen", "source": "https://t.me/cvedetector/7608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4658 - TE Informatics Nova CMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4658 \nPublished : Oct. 10, 2024, 2:15 p.m. | 22\u00a0minutes ago \nDescription : SQL Injection: Hibernate vulnerability in TE Informatics Nova CMS allows SQL Injection.This issue affects Nova CMS: before 5.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T16:46:37.000000Z"}, {"uuid": "7bb488fd-60ab-415d-a1e0-6de68772f41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46327", "type": "seen", "source": "https://t.me/cvedetector/6411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46327 - VONETS VAP11G-300 File Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46327 \nPublished : Sept. 26, 2024, 2:15 p.m. | 41\u00a0minutes ago \nDescription : An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a directory traversal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T17:09:39.000000Z"}, {"uuid": "3995fe9a-ab0a-47ce-9761-19c4bac76fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46871", "type": "seen", "source": "https://t.me/cvedetector/7467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46871 - \"AMDGPU_DMUB_NOTIFICATION_MAX Array Out-of-Bounds Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46871 \nPublished : Oct. 9, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX  \n  \n[Why & How]  \nIt actually exposes '6' types in enum dmub_notification_type. Not 5. Using smaller  \nnumber to create array dmub_callback & dmub_thread_offload has potential to access  \nitem out of array bound. Fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T17:19:10.000000Z"}, {"uuid": "f42ed494-c75a-44a2-bbe3-dbe37cb18946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46316", "type": "seen", "source": "https://t.me/cvedetector/7502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46316 - DrayTek Vigor3900 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46316 \nPublished : Oct. 9, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T19:00:07.000000Z"}, {"uuid": "3d543fbe-c6a1-402b-b187-b299a55e61f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46304", "type": "seen", "source": "https://t.me/cvedetector/7501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46304 - CoAP Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46304 \nPublished : Oct. 9, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : A Buffer Overflow vulnerability in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T19:00:06.000000Z"}, {"uuid": "ce8ee8dd-59fc-436a-90b3-4a5343cfe2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46292", "type": "seen", "source": "https://t.me/cvedetector/7500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46292 - Apache Modsecurity Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46292 \nPublished : Oct. 9, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : A buffer overflow in modsecurity v3.0.12 allows attackers to cause a Denial of Service (DoS) via a crafted input inserted into the name parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T19:00:05.000000Z"}, {"uuid": "040778aa-c4ba-403a-bad1-a95b5913c32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46237", "type": "seen", "source": "https://t.me/cvedetector/7466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46237 - PHPGurukul Hospital Management System Cross Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46237 \nPublished : Oct. 9, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting (XSS) via the patname, pataddress, and medhis parameters in doctor/add-patient.php and doctor/edit-patient.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T17:19:09.000000Z"}, {"uuid": "025ae1af-efc9-444a-a8f1-293c249ee309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46870", "type": "seen", "source": "https://t.me/cvedetector/7465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46870 - \"Linux Kernel AMD Display System Hang/Crash Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46870 \nPublished : Oct. 9, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Disable DMCUB timeout for DCN35  \n  \n[Why]  \nDMCUB can intermittently take longer than expected to process commands.  \n  \nOld ASIC policy was to continue while logging a diagnostic error - which  \nworks fine for ASIC without IPS, but with IPS this could lead to a race  \ncondition where we attempt to access DCN state while it's inaccessible,  \nleading to a system hang when the NIU port is not disabled or register  \naccesses that timeout and the display configuration in an undefined  \nstate.  \n  \n[How]  \nWe need to investigate why these accesses take longer than expected, but  \nfor now we should disable the timeout on DCN35 to avoid this race  \ncondition. Since the waits happen only at lower interrupt levels the  \nrisk of taking too long at higher IRQ and causing a system watchdog  \ntimeout are minimal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-09T17:19:08.000000Z"}, {"uuid": "b3e65d08-f28b-4da5-8b4c-be9ede07db6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46461", "type": "seen", "source": "https://t.me/cvedetector/6323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46461 - VLC Media Player MMS Heap Based Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46461 \nPublished : Sept. 25, 2024, 3:15 p.m. | 22\u00a0minutes ago \nDescription : VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger either a crash of VLC or an arbitrary code execution with the target user's privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T17:41:10.000000Z"}, {"uuid": "978aeed5-58e0-497f-8ba3-d5ccac5454cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46274", "type": "seen", "source": "https://t.me/cvedetector/6747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46274 - Cute PNG Heap Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46274 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_stored() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:27.000000Z"}, {"uuid": "608449e6-ed15-4410-bf1f-e2de8a2f15df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46539", "type": "seen", "source": "https://t.me/cvedetector/7396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46539 - Fire-Boltt Artillery Smart Watch Bluetooth Low Energy Insecure Permissions Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46539 \nPublished : Oct. 8, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow attackers to cause a Denial of Service (DoS). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T21:14:15.000000Z"}, {"uuid": "e0c8e6f5-b9a9-4fa2-8d8f-3f9a039ca1dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46410", "type": "seen", "source": "https://t.me/cvedetector/7395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46410 - PublicCMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46410 \nPublished : Oct. 8, 2024, 6:15 p.m. | 41\u00a0minutes ago \nDescription : PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-08T21:14:15.000000Z"}, {"uuid": "7f25c0b0-d55c-4379-b78e-6aefe56bca2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46627", "type": "seen", "source": "https://t.me/cvedetector/6430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46627 - BECN DATAGERRY Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46627 \nPublished : Sept. 26, 2024, 5:15 p.m. | 22\u00a0minutes ago \nDescription : Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T19:40:32.000000Z"}, {"uuid": "de5cec38-d731-4807-93da-c07ba82d06de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46632", "type": "seen", "source": "https://t.me/cvedetector/6425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46632 - Assimp Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46632 \nPublished : Sept. 26, 2024, 4:15 p.m. | 32\u00a0minutes ago \nDescription : Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T18:50:16.000000Z"}, {"uuid": "25735be9-5295-4e9a-b086-78b1434b5061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46330", "type": "seen", "source": "https://t.me/cvedetector/6414", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46330 - VONETS VAP11G-300 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46330 \nPublished : Sept. 26, 2024, 2:15 p.m. | 41\u00a0minutes ago \nDescription : VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T17:09:42.000000Z"}, {"uuid": "8d7a1470-b102-4977-88b7-cb0a6e22811d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46329", "type": "seen", "source": "https://t.me/cvedetector/6413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46329 - VONETS VAP11G-300 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46329 \nPublished : Sept. 26, 2024, 2:15 p.m. | 41\u00a0minutes ago \nDescription : VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T17:09:41.000000Z"}, {"uuid": "5f49c432-e8b5-4479-9622-1b7ec3a59368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46600", "type": "seen", "source": "https://t.me/cvedetector/6330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46600 - Dingfanzu CMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46600 \nPublished : Sept. 25, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T19:21:34.000000Z"}, {"uuid": "cb9d2da8-6e4f-4115-a1a2-ba4ea5d30f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46485", "type": "seen", "source": "https://t.me/cvedetector/6329", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46485 - Dingfanzu CMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46485 \nPublished : Sept. 25, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T19:21:34.000000Z"}, {"uuid": "caf06321-924b-446a-b5a6-013a31c5fddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46655", "type": "seen", "source": "https://t.me/cvedetector/6357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46655 - Ellevo Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46655 \nPublished : Sept. 25, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload or URL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T21:03:42.000000Z"}, {"uuid": "696e5080-c9b5-4ce0-976a-38df27784546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4657", "type": "seen", "source": "https://t.me/cvedetector/6313", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4657 - \"Talent Software BAP Automation Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-4657 \nPublished : Sept. 25, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software BAP Automation allows Stored XSS.This issue affects BAP Automation: before 30840. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T15:59:48.000000Z"}, {"uuid": "21d6cddf-a521-40cf-9e58-6773a36c4e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46489", "type": "seen", "source": "https://t.me/cvedetector/6356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46489 - Promptr RCE\", \n  \"Content\": \"CVE ID : CVE-2024-46489 \nPublished : Sept. 25, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T21:03:40.000000Z"}, {"uuid": "6951155b-7d75-48e6-a3a0-00fba8ead311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46488", "type": "seen", "source": "https://t.me/cvedetector/6353", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46488 - SQLite Heap Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46488 \nPublished : Sept. 25, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T21:03:37.000000Z"}, {"uuid": "fcae524e-8095-4db3-9916-f0804b2f6c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46486", "type": "seen", "source": "https://t.me/cvedetector/6994", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46486 - TP-LINK TL-WDR5620 HTTP Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-46486 \nPublished : Oct. 4, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution (RCE) vulnerability via the httpProcDataSrv function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T20:12:59.000000Z"}, {"uuid": "03b36eec-e35c-4429-83f0-652c4ebc0ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46212", "type": "seen", "source": "https://t.me/cvedetector/8129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46212 - REDAXO CMS Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-46212 \nPublished : Oct. 16, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : An issue in the component /index.php?page=backup/export of REDAXO CMS v5.17.1 allows attackers to execute a directory traversal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:55:22.000000Z"}, {"uuid": "ef9f0eec-a25b-4bb5-a9f9-fb778cc2c2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46213", "type": "seen", "source": "https://t.me/cvedetector/8130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46213 - REDAXO CMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46213 \nPublished : Oct. 16, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : REDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T23:55:23.000000Z"}, {"uuid": "bea680d2-3572-447c-8f89-8b315cc73c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4690", "type": "seen", "source": "https://t.me/cvedetector/8101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4690 - OpenText Application Automation Tools XML External Entity Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-4690 \nPublished : Oct. 16, 2024, 5:15 p.m. | 26\u00a0minutes ago \nDescription : Improper Restriction of XML External Entity Reference vulnerability in OpenText Application Automation Tools allows DTD Injection.This issue affects OpenText Application Automation Tools: 24.1.0 and below. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T19:44:14.000000Z"}, {"uuid": "e31710c3-8cb0-4b27-bddb-e62a8ebb3d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46606", "type": "seen", "source": "https://t.me/cvedetector/8097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46606 - Piwigo Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46606 \nPublished : Oct. 16, 2024, 5:15 p.m. | 26\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T19:44:08.000000Z"}, {"uuid": "91bd8792-77d1-4d6b-9d9c-e30ad6fa9e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46605", "type": "seen", "source": "https://t.me/cvedetector/8096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46605 - Piwigo Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46605 \nPublished : Oct. 16, 2024, 5:15 p.m. | 26\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the component /admin.php?page=album of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T19:44:07.000000Z"}, {"uuid": "1f80025b-02c8-41b8-86db-3576ee4735b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4692", "type": "seen", "source": "https://t.me/cvedetector/8095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4692 - OpenText Application Automation Tools:EDURE Validationlias\", \n  \"Content\": \"CVE ID : CVE-2024-4692 \nPublished : Oct. 16, 2024, 5:15 p.m. | 26\u00a0minutes ago \nDescription : Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.  \n  \n  \nMultiple missing permission checks - Service Virtualization config has been discovered in in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate Service Virtualization server names.  \n  \nThis issue affects OpenText Application Automation Tools: 24.1.0 and below. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T19:44:06.000000Z"}, {"uuid": "b91ad4dd-3067-48c0-a7d4-116188746783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/6134", "content": "\ud83d\udea8PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538", "creation_timestamp": "2024-10-30T17:28:32.000000Z"}, {"uuid": "29a06b12-da88-42a7-8176-0e55b0c973ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46267", "type": "seen", "source": "https://t.me/cvedetector/6746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46267 - Cute PNG Heap Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46267 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:26.000000Z"}, {"uuid": "4806fc18-707b-40e7-a604-13e29ae2dcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46084", "type": "seen", "source": "https://t.me/cvedetector/6801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46084 - Scriptcase Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46084 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : Scriptcase 9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_unzip function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:38:07.000000Z"}, {"uuid": "d2bb1b7c-1833-4148-b3de-853c4004e686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46082", "type": "seen", "source": "https://t.me/cvedetector/6800", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46082 - Scriptcase CSS XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46082 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:38:04.000000Z"}, {"uuid": "b550ba75-27b5-4dfe-a4b4-d9483c856482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46080", "type": "seen", "source": "https://t.me/cvedetector/6799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46080 - Scriptcase Zip File RCE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46080 \nPublished : Oct. 1, 2024, 9:15 p.m. | 22\u00a0minutes ago \nDescription : Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T23:38:03.000000Z"}, {"uuid": "8577786d-dc52-4cf7-bf0c-fc3a5a8f38e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46409", "type": "seen", "source": "https://t.me/cvedetector/6993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46409 - SeedDMS Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46409 \nPublished : Oct. 4, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in SeedDMS v6.0.28 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter in the Calendar page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T20:12:58.000000Z"}, {"uuid": "a29332dc-95d6-4d01-9dda-e107959b4028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46259", "type": "seen", "source": "https://t.me/cvedetector/6752", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46259 - CutePNG Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46259 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:34.000000Z"}, {"uuid": "bcf60b06-0ab6-442a-b29d-e88e64d67f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46258", "type": "seen", "source": "https://t.me/cvedetector/6751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46258 - CutePNG Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46258 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:33.000000Z"}, {"uuid": "d921c381-064f-44ea-9e12-567eacb28d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46658", "type": "seen", "source": "https://t.me/cvedetector/6937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46658 - Syrotech SY-GOPON-8OLT-L3 Authenticated Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-46658 \nPublished : Oct. 3, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T00:08:51.000000Z"}, {"uuid": "43ebd139-0d42-4b42-b279-8b062b8bcfe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46264", "type": "seen", "source": "https://t.me/cvedetector/6745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46264 - Cute PNG Heap Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46264 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:25.000000Z"}, {"uuid": "66f80d7e-7368-4fc8-ac69-77cb90e168d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46658", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/4303", "content": "\ud83d\udea8PoC CVE-2024-46658 - Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629\n\nhttps://darkwebinformer.com/poc-cve-2024-46658-syrotech-sy-gopon-8olt-l3-v1-6-0_240629/", "creation_timestamp": "2024-10-03T21:25:46.000000Z"}, {"uuid": "f9a4c5d6-75d5-44f7-afd5-bc390fff92b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46977", "type": "seen", "source": "https://t.me/cvedetector/6879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46977 - OpenC3 COSMOS Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46977 \nPublished : Oct. 2, 2024, 8:15 p.m. | 43\u00a0minutes ago \nDescription : OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's open_local_file method allows an authenticated user with adequate permissions to download any .txt via the ScreensController#show on the web server COSMOS is running on (depending on the file permissions). This vulnerability is fixed in 5.19.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T23:03:32.000000Z"}, {"uuid": "063eeda1-5409-4713-bcef-ec1fb7669741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46626", "type": "seen", "source": "https://t.me/cvedetector/6843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46626 - OpenSIS-Classic SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46626 \nPublished : Oct. 2, 2024, 5:15 p.m. | 23\u00a0minutes ago \nDescription : OS4ED openSIS-Classic v9.1 was discovered to contain a SQL injection vulnerability via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-02T19:42:27.000000Z"}, {"uuid": "7f0256c3-f0a1-4593-ac00-8c5fe1350bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46263", "type": "seen", "source": "https://t.me/cvedetector/6754", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46263 - \"Cute PNG Stack Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-46263 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:36.000000Z"}, {"uuid": "d841d94e-ed66-4c27-a462-00e4aa93709e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46081", "type": "seen", "source": "https://t.me/cvedetector/6786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46081 - Scriptcase Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46081 \nPublished : Oct. 1, 2024, 7:15 p.m. | 39\u00a0minutes ago \nDescription : Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T21:57:36.000000Z"}, {"uuid": "051c03e2-7d65-4fe7-97b9-3f26a64e1336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46079", "type": "seen", "source": "https://t.me/cvedetector/6785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46079 - Scriptcase XSS.Redirect sito Through Description\", \n  \"Content\": \"CVE ID : CVE-2024-46079 \nPublished : Oct. 1, 2024, 7:15 p.m. | 39\u00a0minutes ago \nDescription : Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T21:57:35.000000Z"}, {"uuid": "1dfef541-03bd-44c5-8dfb-e91de9225d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46083", "type": "seen", "source": "https://t.me/cvedetector/6782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46083 - Scriptcase Cross-Site Scripting (XSS) as Administrator Impersonator\", \n  \"Content\": \"CVE ID : CVE-2024-46083 \nPublished : Oct. 1, 2024, 7:15 p.m. | 39\u00a0minutes ago \nDescription : Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T21:57:32.000000Z"}, {"uuid": "dece4f19-bc89-4d1c-82b3-8617b532219a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46261", "type": "seen", "source": "https://t.me/cvedetector/6753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46261 - Cute_PNG Heap Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46261 \nPublished : Oct. 1, 2024, 2:15 p.m. | 30\u00a0minutes ago \nDescription : cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T16:55:35.000000Z"}, {"uuid": "feced302-2542-40be-836f-7b9e81fb9408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46937", "type": "seen", "source": "https://t.me/cvedetector/5722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46937 - MFASOFT Secure Authentication Server (SAS) IDOR Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46937 \nPublished : Sept. 16, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : An improper access control (IDOR) vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server (SAS) 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the serial parameter by number identifier: GA00001, GA00002, GA00003, etc. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T16:11:41.000000Z"}, {"uuid": "696dfb4d-1ffa-489f-abb3-3872034914ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46451", "type": "seen", "source": "https://t.me/cvedetector/5721", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46451 - TOTOLINK AC1200 T8 Buffer Overflow Vulnerability in setWiFiAclRules\", \n  \"Content\": \"CVE ID : CVE-2024-46451 \nPublished : Sept. 16, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWiFiAclRules function via the desc parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T16:11:40.000000Z"}, {"uuid": "bd2f7b48-8ff9-4821-9532-959ab8deffe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46424", "type": "seen", "source": "https://t.me/cvedetector/5720", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46424 - TOTOLINK AC1200 T8 Buffer Overflow Vulnerability (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-46424 \nPublished : Sept. 16, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which allows attackers to cause a Denial of Service (DoS) via the File parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T16:11:39.000000Z"}, {"uuid": "76ec5f6d-f5e6-449a-a1a7-3dced0225fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46970", "type": "seen", "source": "https://t.me/cvedetector/5718", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46970 - JetBrains IntelliJ IDEA HTML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46970 \nPublished : Sept. 16, 2024, 11:15 a.m. | 23\u00a0minutes ago \nDescription : In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T13:41:06.000000Z"}, {"uuid": "3957d904-a047-47c0-a973-df9f9aeaa7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46503", "type": "seen", "source": "https://t.me/cvedetector/6686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46503 - Apache Simple-Spellchecker File Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46503 \nPublished : Sept. 30, 2024, 9:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in the _readFileSync function of Simple-Spellchecker v1.0.2 allows attackers to read arbitrary files via a directory traversal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T00:11:24.000000Z"}, {"uuid": "e78f7ab6-347c-4c35-8a16-1331ecf3d1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46511", "type": "seen", "source": "https://t.me/cvedetector/6673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46511 - LoadZilla LLC LoadLogic Insecure Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46511 \nPublished : Sept. 30, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attacker to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T20:50:26.000000Z"}, {"uuid": "0ad0cafb-13c5-4682-8c99-34c04dc06146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46549", "type": "seen", "source": "https://t.me/cvedetector/6672", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46549 - \"TP-Link Kasa KP125M Impersonation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46549 \nPublished : Sept. 30, 2024, 5:15 p.m. | 37\u00a0minutes ago \nDescription : An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T20:00:24.000000Z"}, {"uuid": "02ebcc96-10f5-4d63-9723-912d784f13fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46635", "type": "seen", "source": "https://t.me/cvedetector/6674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46635 - INROAD API Endpoint remote information disclosure vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46635 \nPublished : Sept. 30, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T20:50:27.000000Z"}, {"uuid": "bf85ecbe-021a-43d7-9714-cbb4dc0d69a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46548", "type": "seen", "source": "https://t.me/cvedetector/6671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46548 - TP-Link Tapo P125M and Kasa KP125M SSL/TLS Fingerprinting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46548 \nPublished : Sept. 30, 2024, 5:15 p.m. | 37\u00a0minutes ago \nDescription : TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communications and access sensitive information via a man-in-the-middle attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T20:00:23.000000Z"}, {"uuid": "713d3c68-b018-4d7a-b54d-3f99ee2d70cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46540", "type": "seen", "source": "https://t.me/cvedetector/6670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46540 - Emlog Pro Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-46540 \nPublished : Sept. 30, 2024, 5:15 p.m. | 37\u00a0minutes ago \nDescription : A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T20:00:22.000000Z"}, {"uuid": "27011cb6-da5f-49ca-bc77-0e59da45be9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46510", "type": "seen", "source": "https://t.me/cvedetector/6662", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46510 - ESAFENET CDG SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-46510 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:02.000000Z"}, {"uuid": "40ff810e-0b3b-4c52-b4ce-8ef23c441b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46869", "type": "seen", "source": "https://t.me/cvedetector/6661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46869 - Linux Bluetooth - Memory Allocation Bug\", \n  \"Content\": \"CVE ID : CVE-2024-46869 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: btintel_pcie: Allocate memory for driver private data  \n  \nFix driver not allocating memory for struct btintel_data which is used  \nto store internal data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:10:01.000000Z"}, {"uuid": "2568a17c-4d1d-4e6d-aeaa-7cb7be781b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46475", "type": "seen", "source": "https://t.me/cvedetector/6659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46475 - Metronic Admin Dashboard Template Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-46475 \nPublished : Sept. 30, 2024, 4:15 p.m. | 38\u00a0minutes ago \nDescription : A reflected cross-site scripting (XSS) vulnerability on the homepage of Metronic Admin Dashboard Template v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T19:09:59.000000Z"}, {"uuid": "30457688-400d-49b6-9e8b-b0ef401f6583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46313", "type": "seen", "source": "https://t.me/cvedetector/6655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46313 - TP-Link WR941ND Rogue Stack Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46313 \nPublished : Sept. 30, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T18:19:46.000000Z"}, {"uuid": "f3b4313c-5be1-474b-8eb8-6016ebb86231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46293", "type": "seen", "source": "https://t.me/cvedetector/6654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46293 - Sourcecodester Online Medicine Ordering System Admin Session Token Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46293 \nPublished : Sept. 30, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level actions without possessing a valid session token. The application does not verify whether the user is logged in as an admin or even check for a session token at all. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T18:19:45.000000Z"}, {"uuid": "457856e0-0506-4026-b888-2768c864e624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46280", "type": "seen", "source": "https://t.me/cvedetector/6652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46280 - PIX-LINK LV-WR22 RE3002-P1-01 TELNET Root Account Access Control Deserialization\", \n  \"Content\": \"CVE ID : CVE-2024-46280 \nPublished : Sept. 30, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-30T18:19:44.000000Z"}, {"uuid": "99c72323-ac8e-47ec-b703-f8553796f915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46472", "type": "seen", "source": "https://t.me/cvedetector/6543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46472 - CodeAstro Membership Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46472 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:22.000000Z"}, {"uuid": "2d107eef-4e4d-448d-859f-866e95fe1fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46672", "type": "seen", "source": "https://t.me/cvedetector/5371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46672 - \"Qualcomm Wi-Fi brcmfmac NULL Pointer Dereference\"\", \n  \"Content\": \"CVE ID : CVE-2024-46672 \nPublished : Sept. 11, 2024, 4:15 p.m. | 16\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion  \n  \nwpa_supplicant 2.11 sends since 1efdba5fdc2c (\"Handle PMKSA flush in the  \ndriver for SAE/OWE offload cases\") SSID based PMKSA del commands.  \nbrcmfmac is not prepared and tries to dereference the NULL bssid and  \npmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based  \nupdates so copy the SSID. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T18:41:26.000000Z"}, {"uuid": "c2b32ec2-ebd4-4399-b99f-533a00a9e8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46453", "type": "seen", "source": "https://t.me/cvedetector/6581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46453 - Iq3xcite XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46453 \nPublished : Sept. 27, 2024, 9:15 p.m. | 36\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-28T00:16:12.000000Z"}, {"uuid": "37fd432a-9111-4540-9f0c-69de53130bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46257", "type": "seen", "source": "https://t.me/cvedetector/6566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46257 - NginxProxyManager Command Injection Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-46257 \nPublished : Sept. 27, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attacker to achieve remote code execution via Add Let's Encrypt Certificate. NOTE: this is not part of any NGINX software shipped by F5. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:55:14.000000Z"}, {"uuid": "82f31c22-c9dc-45ff-b1e4-a1e4cc6617ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46868", "type": "seen", "source": "https://t.me/cvedetector/6510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46868 - Android Linux Kernel Firmware Deadlock\", \n  \"Content\": \"CVE ID : CVE-2024-46868 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfirmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()  \n  \nIf the __qcuefi pointer is not set, then in the original code, we would  \nhold onto the lock.  That means that if we tried to set it later, then  \nit would cause a deadlock.  Drop the lock on the error path.  That's  \nwhat all the callers are expecting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:12.000000Z"}, {"uuid": "897be0cf-6427-4a22-bbe6-5a3c1af45a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46256", "type": "seen", "source": "https://t.me/cvedetector/6570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46256 - NginxProxyManager Command Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-46256 \nPublished : Sept. 27, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add Let's Encrypt Certificate. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:55:20.000000Z"}, {"uuid": "31bd4c50-d15f-4e69-af98-89307387dfa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46097", "type": "seen", "source": "https://t.me/cvedetector/6569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46097 - TestLink Incorrect Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46097 \nPublished : Sept. 27, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:55:16.000000Z"}, {"uuid": "4df5cacc-52ae-43db-856d-888b2fdb414a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46855", "type": "seen", "source": "https://t.me/cvedetector/6513", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46855 - Linux Kernel Netfilter NFT Socket Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46855 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nft_socket: fix sk refcount leaks  \n  \nWe must put 'sk' reference before returning. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:14.000000Z"}, {"uuid": "726a5b9d-a4d3-44fc-95c4-ef0f3fcc6130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46367", "type": "seen", "source": "https://t.me/cvedetector/6560", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46367 - Webkul Krayin CRM Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-46367 \nPublished : Sept. 27, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within the username field. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:04:56.000000Z"}, {"uuid": "acafc19a-922d-4e9a-a040-37a2022b6a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46366", "type": "seen", "source": "https://t.me/cvedetector/6559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46366 - Webkul Krayin CRM Client-Side Template Injection\", \n  \"Content\": \"CVE ID : CVE-2024-46366 \nPublished : Sept. 27, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:04:56.000000Z"}, {"uuid": "706cf10f-2fa9-4530-847b-e352fc6cf7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46848", "type": "seen", "source": "https://t.me/cvedetector/6528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46848 - Intel Haswell perf/x86 Linux Kernel PMU Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46848 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nperf/x86/intel: Limit the period on Haswell  \n  \nRunning the ltp test cve-2015-3290 concurrently reports the following  \nwarnings.  \n  \nperfevents: irq loop stuck!  \n  WARNING: CPU: 31 PID: 32438 at arch/x86/events/intel/core.c:3174  \n  intel_pmu_handle_irq+0x285/0x370  \n  Call Trace:  \n     \n   ? __warn+0xa4/0x220  \n   ? intel_pmu_handle_irq+0x285/0x370  \n   ? __report_bug+0x123/0x130  \n   ? intel_pmu_handle_irq+0x285/0x370  \n   ? __report_bug+0x123/0x130  \n   ? intel_pmu_handle_irq+0x285/0x370  \n   ? report_bug+0x3e/0xa0  \n   ? handle_bug+0x3c/0x70  \n   ? exc_invalid_op+0x18/0x50  \n   ? asm_exc_invalid_op+0x1a/0x20  \n   ? irq_work_claim+0x1e/0x40  \n   ? intel_pmu_handle_irq+0x285/0x370  \n   perf_event_nmi_handler+0x3d/0x60  \n   nmi_handle+0x104/0x330  \n  \nThanks to Thomas Gleixner's analysis, the issue is caused by the low  \ninitial period (1) of the frequency estimation algorithm, which triggers  \nthe defects of the HW, specifically erratum HSW11 and HSW143. (For the  \ndetails, please refer )  \n  \nThe HSW11 requires a period larger than 100 for the INST_RETIRED.ALL  \nevent, but the initial period in the freq mode is 1. The erratum is the  \nsame as the BDM11, which has been supported in the kernel. A minimum  \nperiod of 128 is enforced as well on HSW.  \n  \nHSW143 is regarding that the fixed counter 1 may overcount 32 with the  \nHyper-Threading is enabled. However, based on the test, the hardware  \nhas more issues than it tells. Besides the fixed counter 1, the message  \n'interrupt took too long' can be observed on any counter which was armed  \nwith a period < 32 and two events expired in the same NMI. A minimum  \nperiod of 32 is enforced for the rest of the events.  \nThe recommended workaround code of the HSW143 is not implemented.  \nBecause it only addresses the issue for the fixed counter. It brings  \nextra overhead through extra MSR writing. No related overcounting issue  \nhas been reported so far. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:36.000000Z"}, {"uuid": "9bdaef63-0ec6-4550-9e94-262e77358bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46471", "type": "seen", "source": "https://t.me/cvedetector/6542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46471 - CodeAstro Membership Management System Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46471 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:18.000000Z"}, {"uuid": "ea8dcdb4-7f85-4b8f-a65c-56de59758401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46470", "type": "seen", "source": "https://t.me/cvedetector/6541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46470 - CodeAstro Membership Management System CSRF/XXE\", \n  \"Content\": \"CVE ID : CVE-2024-46470 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:18.000000Z"}, {"uuid": "da99910f-ba0e-4064-9265-56d19287554d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46331", "type": "seen", "source": "https://t.me/cvedetector/6539", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46331 - ModStartCMS Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46331 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. This vulnerability allows attackers to redirect users to an arbitrary website via a crafted URL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:16.000000Z"}, {"uuid": "3251ae6d-a6a5-4bb2-adb1-599eab19cfe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46847", "type": "seen", "source": "https://t.me/cvedetector/6529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46847 - Linux Kernel: Out-of-Bounds Access Vulnerability in vmalloc Module\", \n  \"Content\": \"CVE ID : CVE-2024-46847 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm: vmalloc: ensure vmap_block is initialised before adding to queue  \n  \nCommit 8c61291fd850 (\"mm: fix incorrect vbq reference in  \npurge_fragmented_block\") extended the 'vmap_block' structure to contain a  \n'cpu' field which is set at allocation time to the id of the initialising  \nCPU.  \n  \nWhen a new 'vmap_block' is being instantiated by new_vmap_block(), the  \npartially initialised structure is added to the local 'vmap_block_queue'  \nxarray before the 'cpu' field has been initialised.  If another CPU is  \nconcurrently walking the xarray (e.g.  via vm_unmap_aliases()), then it  \nmay perform an out-of-bounds access to the remote queue thanks to an  \nuninitialised index.  \n  \nThis has been observed as UBSAN errors in Android:  \n  \n | Internal error: UBSAN: array index out of bounds: 00000000f2005512 [#1] PREEMPT SMP  \n |  \n | Call trace:  \n |  purge_fragmented_block+0x204/0x21c  \n |  _vm_unmap_aliases+0x170/0x378  \n |  vm_unmap_aliases+0x1c/0x28  \n |  change_memory_common+0x1dc/0x26c  \n |  set_memory_ro+0x18/0x24  \n |  module_enable_ro+0x98/0x238  \n |  do_init_module+0x1b0/0x310  \n  \nMove the initialisation of 'vb->cpu' in new_vmap_block() ahead of the  \naddition to the xarray. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:37.000000Z"}, {"uuid": "c0bab13c-b62e-40c6-9b4d-db28215afbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46858", "type": "seen", "source": "https://t.me/cvedetector/6526", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46858 - Linux MPTCP Uninitialized Pointer Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46858 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmptcp: pm: Fix uaf in __timer_delete_sync  \n  \nThere are two paths to access mptcp_pm_del_add_timer, result in a race  \ncondition:  \n  \n     CPU1    CPU2  \n     ====                               ====  \n     net_rx_action  \n     napi_poll                          netlink_sendmsg  \n     __napi_poll                        netlink_unicast  \n     process_backlog                    netlink_unicast_kernel  \n     __netif_receive_skb                genl_rcv  \n     __netif_receive_skb_one_core       netlink_rcv_skb  \n     NF_HOOK                            genl_rcv_msg  \n     ip_local_deliver_finish            genl_family_rcv_msg  \n     ip_protocol_deliver_rcu            genl_family_rcv_msg_doit  \n     tcp_v4_rcv                         mptcp_pm_nl_flush_addrs_doit  \n     tcp_v4_do_rcv                      mptcp_nl_remove_addrs_list  \n     tcp_rcv_established                mptcp_pm_remove_addrs_and_subflows  \n     tcp_data_queue                     remove_anno_list_by_saddr  \n     mptcp_incoming_options             mptcp_pm_del_add_timer  \n     mptcp_pm_del_add_timer             kfree(entry)  \n  \nIn remove_anno_list_by_saddr(running on CPU2), after leaving the critical  \nzone protected by \"pm.lock\", the entry will be released, which leads to the  \noccurrence of uaf in the mptcp_pm_del_add_timer(running on CPU1).  \n  \nKeeping a reference to add_timer inside the lock, and calling  \nsk_stop_timer_sync() with this reference, instead of \"entry->add_timer\".  \n  \nMove list_del(&entry->list) to mptcp_pm_del_add_timer and inside the pm lock,  \ndo not directly access any members of the entry outside the pm lock, which  \ncan avoid similar \"entry->x\" uaf. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:34.000000Z"}, {"uuid": "1b37c67b-1aa8-424a-8a66-135c734b2463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46854", "type": "seen", "source": "https://t.me/cvedetector/6525", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46854 - VMware vSphere Linux Kernel Buffer Leak\", \n  \"Content\": \"CVE ID : CVE-2024-46854 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: dpaa: Pad packets to ETH_ZLEN  \n  \nWhen sending packets under 60 bytes, up to three bytes of the buffer  \nfollowing the data may be leaked. Avoid this by extending all packets to  \nETH_ZLEN, ensuring nothing is leaked in the padding. This bug can be  \nreproduced by running  \n  \n $ ping -s 11 destination \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:34.000000Z"}, {"uuid": "89314fad-152a-419f-9e92-223c86ad9730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46333", "type": "seen", "source": "https://t.me/cvedetector/6540", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46333 - Piwigo Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-46333 \nPublished : Sept. 27, 2024, 3:15 p.m. | 38\u00a0minutes ago \nDescription : An authenticated cross-site scripting (XSS) vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Album Name parameter under the Add Album function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T18:24:17.000000Z"}, {"uuid": "f0f6f5bf-5c28-4283-8f8b-ae7eba05d743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46867", "type": "seen", "source": "https://t.me/cvedetector/6524", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46867 - Linux Kernel X.Org drm Atomic Sleeping Lock Deadlock\", \n  \"Content\": \"CVE ID : CVE-2024-46867 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/xe/client: fix deadlock in show_meminfo()  \n  \nThere is a real deadlock as well as sleeping in atomic() bug in here, if  \nthe bo put happens to be the last ref, since bo destruction wants to  \ngrab the same spinlock and sleeping locks.  Fix that by dropping the ref  \nusing xe_bo_put_deferred(), and moving the final commit outside of the  \nlock. Dropping the lock around the put is tricky since the bo can go  \nout of scope and delete itself from the list, making it difficult to  \nnavigate to the next list entry.  \n  \n(cherry picked from commit 0083b8e6f11d7662283a267d4ce7c966812ffd8a) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:30.000000Z"}, {"uuid": "83b74e83-7c91-4b55-97fb-29fcfeed5434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46866", "type": "seen", "source": "https://t.me/cvedetector/6523", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46866 - \"AMD drm Linux Kernel Phabricated Prioritized Confusion\"\", \n  \"Content\": \"CVE ID : CVE-2024-46866 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/xe/client: add missing bo locking in show_meminfo()  \n  \nbo_meminfo() wants to inspect bo state like tt and the ttm resource,  \nhowever this state can change at any point leading to stuff like NPD and  \nUAF, if the bo lock is not held. Grab the bo lock when calling  \nbo_meminfo(), ensuring we drop any spinlocks first. In the case of  \nobject_idr we now also need to hold a ref.  \n  \nv2 (MattB)  \n  - Also add xe_bo_assert_held()  \n  \n(cherry picked from commit 4f63d712fa104c3ebefcb289d1e733e86d8698c7) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:29.000000Z"}, {"uuid": "001963ca-d820-4fc3-9c43-eb54f02c423e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46865", "type": "seen", "source": "https://t.me/cvedetector/6522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46865 - Linux Kernel Fou Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-46865 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfou: fix initialization of grc  \n  \nThe grc must be initialize first. There can be a condition where if  \nfou is NULL, goto out will be executed and grc would be used  \nuninitialized. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:28.000000Z"}, {"uuid": "91728044-e050-4130-bebd-748ba64e6d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46864", "type": "seen", "source": "https://t.me/cvedetector/6521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46864 - Windows Hyper-V Hypervisor Kexec Crash Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46864 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nx86/hyperv: fix kexec crash due to VP assist page corruption  \n  \ncommit 9636be85cc5b (\"x86/hyperv: Fix hyperv_pcpu_input_arg handling when  \nCPUs go online/offline\") introduces a new cpuhp state for hyperv  \ninitialization.  \n  \ncpuhp_setup_state() returns the state number if state is  \nCPUHP_AP_ONLINE_DYN or CPUHP_BP_PREPARE_DYN and 0 for all other states.  \nFor the hyperv case, since a new cpuhp state was introduced it would  \nreturn 0. However, in hv_machine_shutdown(), the cpuhp_remove_state() call  \nis conditioned upon \"hyperv_init_cpuhp > 0\". This will never be true and  \nso hv_cpu_die() won't be called on all CPUs. This means the VP assist page  \nwon't be reset. When the kexec kernel tries to setup the VP assist page  \nagain, the hypervisor corrupts the memory region of the old VP assist page  \ncausing a panic in case the kexec kernel is using that memory elsewhere.  \nThis was originally fixed in commit dfe94d4086e4 (\"x86/hyperv: Fix kexec  \npanic/hang issues\").  \n  \nGet rid of hyperv_init_cpuhp entirely since we are no longer using a  \ndynamic cpuhp state and use CPUHP_AP_HYPERV_ONLINE directly with  \ncpuhp_remove_state(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:27.000000Z"}, {"uuid": "76f942d3-8635-480c-a809-856f758d945f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46863", "type": "seen", "source": "https://t.me/cvedetector/6520", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46863 - Intel ASoC Soc-ACPI-lnl-Empty-Item-Class Lack\", \n  \"Content\": \"CVE ID : CVE-2024-46863 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item  \n  \nThere is no links_num in struct snd_soc_acpi_mach {}, and we test  \n!link->num_adr as a condition to end the loop in hda_sdw_machine_select().  \nSo an empty item in struct snd_soc_acpi_link_adr array is required. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:26.000000Z"}, {"uuid": "48980997-6e75-4f72-85d8-855aa78ac764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46862", "type": "seen", "source": "https://t.me/cvedetector/6519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46862 - Intel ASoC Linux Kernel Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46862 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: Intel: soc-acpi-intel-mtl-match: add missing empty item  \n  \nThere is no links_num in struct snd_soc_acpi_mach {}, and we test  \n!link->num_adr as a condition to end the loop in hda_sdw_machine_select().  \nSo an empty item in struct snd_soc_acpi_link_adr array is required. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:22.000000Z"}, {"uuid": "474061db-a88e-4ee6-9252-f347629c89ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46861", "type": "seen", "source": "https://t.me/cvedetector/6518", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46861 - Linux usbnet ipheth RX Callback Failure Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46861 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusbnet: ipheth: do not stop RX on failing RX callback  \n  \nRX callbacks can fail for multiple reasons:  \n  \n* Payload too short  \n* Payload formatted incorrecly (e.g. bad NCM framing)  \n* Lack of memory  \n  \nNone of these should cause the driver to seize up.  \n  \nMake such failures non-critical and continue processing further  \nincoming URBs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:22.000000Z"}, {"uuid": "052b7232-3639-4875-ae99-96cc61f88e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46860", "type": "seen", "source": "https://t.me/cvedetector/6517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46860 - Marvell Wifi mt76 NULL Pointer Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46860 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change  \n  \nWhen disabling wifi mt7921_ipv6_addr_change() is called as a notifier.  \nAt this point mvif->phy is already NULL so we cannot use it here. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:21.000000Z"}, {"uuid": "d12d3ab1-151c-45a7-a35f-b2c67137385a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46859", "type": "seen", "source": "https://t.me/cvedetector/6516", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46859 - Panasonic Laptop Array Index Out-of-Bounds Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46859 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nplatform/x86: panasonic-laptop: Fix SINF array out of bounds accesses  \n  \nThe panasonic laptop code in various places uses the SINF array with index  \nvalues of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SINF array  \nis big enough.  \n  \nNot all panasonic laptops have this many SINF array entries, for example  \nthe Toughbook CF-18 model only has 10 SINF array entries. So it only  \nsupports the AC+DC brightness entries and mute.  \n  \nCheck that the SINF array has a minimum size which covers all AC+DC  \nbrightness entries and refuse to load if the SINF array is smaller.  \n  \nFor higher SINF indexes hide the sysfs attributes when the SINF array  \ndoes not contain an entry for that attribute, avoiding show()/store()  \naccessing the array out of bounds and add bounds checking to the probe()  \nand resume() code accessing these. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:20.000000Z"}, {"uuid": "3a5cad47-c720-42fb-936e-d04ae9d82304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46846", "type": "seen", "source": "https://t.me/cvedetector/6527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46846 - Rockchip spi unbalanced Power Management\", \n  \"Content\": \"CVE ID : CVE-2024-46846 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nspi: rockchip: Resolve unbalanced runtime PM / system PM handling  \n  \nCommit e882575efc77 (\"spi: rockchip: Suspend and resume the bus during  \nNOIRQ_SYSTEM_SLEEP_PM ops\") stopped respecting runtime PM status and  \nsimply disabled clocks unconditionally when suspending the system. This  \ncauses problems when the device is already runtime suspended when we go  \nto sleep -- in which case we double-disable clocks and produce a  \nWARNing.  \n  \nSwitch back to pm_runtime_force_{suspend,resume}(), because that still  \nseems like the right thing to do, and the aforementioned commit makes no  \nexplanation why it stopped using it.  \n  \nAlso, refactor some of the resume() error handling, because it's not  \nactually a good idea to re-disable clocks on failure. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:35.000000Z"}, {"uuid": "15e27733-7f5c-4316-9813-53c6903cbfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46857", "type": "seen", "source": "https://t.me/cvedetector/6515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46857 - Intel Mellanox mlx5 Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46857 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/mlx5: Fix bridge mode operations when there are no VFs  \n  \nCurrently, trying to set the bridge mode attribute when numvfs=0 leads to a  \ncrash:  \n  \nbridge link set dev eth2 hwmode vepa  \n  \n[  168.967392] BUG: kernel NULL pointer dereference, address: 0000000000000030  \n[...]  \n[  168.969989] RIP: 0010:mlx5_add_flow_rules+0x1f/0x300 [mlx5_core]  \n[...]  \n[  168.976037] Call Trace:  \n[  168.976188]    \n[  168.978620]  _mlx5_eswitch_set_vepa_locked+0x113/0x230 [mlx5_core]  \n[  168.979074]  mlx5_eswitch_set_vepa+0x7f/0xa0 [mlx5_core]  \n[  168.979471]  rtnl_bridge_setlink+0xe9/0x1f0  \n[  168.979714]  rtnetlink_rcv_msg+0x159/0x400  \n[  168.980451]  netlink_rcv_skb+0x54/0x100  \n[  168.980675]  netlink_unicast+0x241/0x360  \n[  168.980918]  netlink_sendmsg+0x1f6/0x430  \n[  168.981162]  ____sys_sendmsg+0x3bb/0x3f0  \n[  168.982155]  ___sys_sendmsg+0x88/0xd0  \n[  168.985036]  __sys_sendmsg+0x59/0xa0  \n[  168.985477]  do_syscall_64+0x79/0x150  \n[  168.987273]  entry_SYSCALL_64_after_hwframe+0x76/0x7e  \n[  168.987773] RIP: 0033:0x7f8f7950f917  \n  \n(esw->fdb_table.legacy.vepa_fdb is null)  \n  \nThe bridge mode is only relevant when there are multiple functions per  \nport. Therefore, prevent setting and getting this setting when there are no  \nVFs.  \n  \nNote that after this change, there are no settings to change on the PF  \ninterface using `bridge link` when there are no VFs, so the interface no  \nlonger appears in the `bridge link` output. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:19.000000Z"}, {"uuid": "996fe2b5-127b-4521-8500-6ba38e251259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46856", "type": "seen", "source": "https://t.me/cvedetector/6514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46856 - \"DP83822/DP83825 Net Phy Null Pointer Dereference\"\", \n  \"Content\": \"CVE ID : CVE-2024-46856 \nPublished : Sept. 27, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: phy: dp83822: Fix NULL pointer dereference on DP83825 devices  \n  \nThe probe() function is only used for DP83822 and DP83826 PHY,  \nleaving the private data pointer uninitialized for the DP83825 models  \nwhich causes a NULL pointer dereference in the recently introduced/changed  \nfunctions dp8382x_config_init() and dp83822_set_wol().  \n  \nAdd the dp8382x_probe() function, so all PHY models will have a valid  \nprivate data pointer to fix this issue and also prevent similar issues  \nin the future. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T15:53:15.000000Z"}, {"uuid": "d9d10718-6ebe-4a43-86c4-f8f36d596aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46628", "type": "seen", "source": "https://t.me/cvedetector/6459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46628 - Tenda G3 Router Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46628 \nPublished : Sept. 26, 2024, 8:15 p.m. | 46\u00a0minutes ago \nDescription : Tenda G3 Router firmware v15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T23:01:43.000000Z"}, {"uuid": "a0965dc4-53e3-45fd-b03b-2f10300b21d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46419", "type": "seen", "source": "https://t.me/cvedetector/5723", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46419 - TOTOLINK AC1200 T8 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46419 \nPublished : Sept. 16, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T17:01:52.000000Z"}, {"uuid": "dffe1c24-9dde-498e-849a-0da762010eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46325", "type": "seen", "source": "https://t.me/cvedetector/7214", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46325 - TP-Link WR740N Stack Overflow via SSID Parameter\", \n  \"Content\": \"CVE ID : CVE-2024-46325 \nPublished : Oct. 7, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-07T15:57:39.000000Z"}, {"uuid": "d825ebd6-00c8-4c43-9fd5-73dacbdf28a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46800", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/5939", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46800 - Linux Kernel - Netem Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46800 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsch/netem: fix use after free in netem_dequeue  \n  \nIf netem_dequeue() enqueues packet to inner qdisc and that qdisc  \nreturns __NET_XMIT_STOLEN. The packet is dropped but  \nqdisc_tree_reduce_backlog() is not called to update the parent's  \nq.qlen, leading to the similar use-after-free as Commit  \ne04991a48dbaf382 (\"netem: fix return value if duplicate enqueue  \nfails\")  \n  \nCommands to trigger KASAN UaF:  \n  \nip link add type dummy  \nip link set lo up  \nip link set dummy0 up  \ntc qdisc add dev lo parent root handle 1: drr  \ntc filter add dev lo parent 1: basic classid 1:1  \ntc class add dev lo classid 1:1 drr  \ntc qdisc add dev lo parent 1:1 handle 2: netem  \ntc qdisc add dev lo parent 2: handle 3: drr  \ntc filter add dev lo parent 3: basic classid 3:1 action mirred egress  \nredirect dev dummy0  \ntc class add dev lo classid 3:1 drr  \nping -c1 -W0.01 localhost # Trigger bug  \ntc class del dev lo classid 1:1  \ntc class add dev lo classid 1:1 drr  \nping -c1 -W0.01 localhost # UaF \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:40.000000Z"}, {"uuid": "3414d4af-4617-4a55-bf75-2e69f18d7bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46801", "type": "seen", "source": "https://t.me/cvedetector/5938", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46801 - Linux Kernel Race Condition/CUse-After-Free (UAF)\", \n  \"Content\": \"CVE ID : CVE-2024-46801 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nlibfs: fix get_stashed_dentry()  \n  \nget_stashed_dentry() tries to optimistically retrieve a stashed dentry  \nfrom a provided location.  It needs to ensure to hold rcu lock before it  \ndereference the stashed location to prevent UAF issues.  Use  \nrcu_dereference() instead of READ_ONCE() it's effectively equivalent  \nwith some lockdep bells and whistles and it communicates clearly that  \nthis expects rcu protection. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:40.000000Z"}, {"uuid": "2bd894da-afcd-45e2-b7c3-b9b90926bc8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46790", "type": "seen", "source": "https://t.me/cvedetector/5936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46790 - Linux Kernel hwpoison_inject alloc_tag Warning\", \n  \"Content\": \"CVE ID : CVE-2024-46790 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncodetag: debug: mark codetags for poisoned page as empty  \n  \nWhen PG_hwpoison pages are freed they are treated differently in  \nfree_pages_prepare() and instead of being released they are isolated.  \n  \nPage allocation tag counters are decremented at this point since the page  \nis considered not in use.  Later on when such pages are released by  \nunpoison_memory(), the allocation tag counters will be decremented again  \nand the following warning gets reported:  \n  \n[  113.930443][ T3282] ------------[ cut here ]------------  \n[  113.931105][ T3282] alloc_tag was not set  \n[  113.931576][ T3282] WARNING: CPU: 2 PID: 3282 at ./include/linux/alloc_tag.h:130 pgalloc_tag_sub.part.66+0x154/0x164  \n[  113.932866][ T3282] Modules linked in: hwpoison_inject fuse ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 ipt_REJECT nf_reject_ipv4 xt_conntrack ebtable_nat ebtable_broute ip6table_nat ip6table_man4  \n[  113.941638][ T3282] CPU: 2 UID: 0 PID: 3282 Comm: madvise11 Kdump: loaded Tainted: G        W          6.11.0-rc4-dirty #18  \n[  113.943003][ T3282] Tainted: [W]=WARN  \n[  113.943453][ T3282] Hardware name: QEMU KVM Virtual Machine, BIOS unknown 2/2/2022  \n[  113.944378][ T3282] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \n[  113.945319][ T3282] pc : pgalloc_tag_sub.part.66+0x154/0x164  \n[  113.946016][ T3282] lr : pgalloc_tag_sub.part.66+0x154/0x164  \n[  113.946706][ T3282] sp : ffff800087093a10  \n[  113.947197][ T3282] x29: ffff800087093a10 x28: ffff0000d7a9d400 x27: ffff80008249f0a0  \n[  113.948165][ T3282] x26: 0000000000000000 x25: ffff80008249f2b0 x24: 0000000000000000  \n[  113.949134][ T3282] x23: 0000000000000001 x22: 0000000000000001 x21: 0000000000000000  \n[  113.950597][ T3282] x20: ffff0000c08fcad8 x19: ffff80008251e000 x18: ffffffffffffffff  \n[  113.952207][ T3282] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800081746210  \n[  113.953161][ T3282] x14: 0000000000000000 x13: 205d323832335420 x12: 5b5d353031313339  \n[  113.954120][ T3282] x11: ffff800087093500 x10: 000000000000005d x9 : 00000000ffffffd0  \n[  113.955078][ T3282] x8 : 7f7f7f7f7f7f7f7f x7 : ffff80008236ba90 x6 : c0000000ffff7fff  \n[  113.956036][ T3282] x5 : ffff000b34bf4dc8 x4 : ffff8000820aba90 x3 : 0000000000000001  \n[  113.956994][ T3282] x2 : ffff800ab320f000 x1 : 841d1e35ac932e00 x0 : 0000000000000000  \n[  113.957962][ T3282] Call trace:  \n[  113.958350][ T3282]  pgalloc_tag_sub.part.66+0x154/0x164  \n[  113.959000][ T3282]  pgalloc_tag_sub+0x14/0x1c  \n[  113.959539][ T3282]  free_unref_page+0xf4/0x4b8  \n[  113.960096][ T3282]  __folio_put+0xd4/0x120  \n[  113.960614][ T3282]  folio_put+0x24/0x50  \n[  113.961103][ T3282]  unpoison_memory+0x4f0/0x5b0  \n[  113.961678][ T3282]  hwpoison_unpoison+0x30/0x48 [hwpoison_inject]  \n[  113.962436][ T3282]  simple_attr_write_xsigned.isra.34+0xec/0x1cc  \n[  113.963183][ T3282]  simple_attr_write+0x38/0x48  \n[  113.963750][ T3282]  debugfs_attr_write+0x54/0x80  \n[  113.964330][ T3282]  full_proxy_write+0x68/0x98  \n[  113.964880][ T3282]  vfs_write+0xdc/0x4d0  \n[  113.965372][ T3282]  ksys_write+0x78/0x100  \n[  113.965875][ T3282]  __arm64_sys_write+0x24/0x30  \n[  113.966440][ T3282]  invoke_syscall+0x7c/0x104  \n[  113.966984][ T3282]  el0_svc_common.constprop.1+0x88/0x104  \n[  113.967652][ T3282]  do_el0_svc+0x2c/0x38  \n[  113.968893][ T3282]  el0_svc+0x3c/0x1b8  \n[  113.969379][ T3282]  el0t_64_sync_handler+0x98/0xbc  \n[  113.969980][ T3282]  el0t_64_sync+0x19c/0x1a0  \n[  113.970511][ T3282] ---[ end trace 0000000000000000 ]---  \n  \nTo fix this, clear the page tag reference after the page got isolated  \nand accounted for. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"1[...]", "creation_timestamp": "2024-09-18T10:52:38.000000Z"}, {"uuid": "f65e551f-2d40-4af5-9cb8-97e97d58e681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46794", "type": "seen", "source": "https://t.me/cvedetector/5926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46794 - Linux Kernel TDX x86 Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-46794 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nx86/tdx: Fix data leak in mmio_read()  \n  \nThe mmio_read() function makes a TDVMCALL to retrieve MMIO data for an  \naddress from the VMM.  \n  \nSean noticed that mmio_read() unintentionally exposes the value of an  \ninitialized variable (val) on the stack to the VMM.  \n  \nThis variable is only needed as an output value. It did not need to be  \npassed to the VMM in the first place.  \n  \nDo not send the original value of *val to the VMM.  \n  \n[ dhansen: clarify what 'val' is used for. ] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:23.000000Z"}, {"uuid": "28131013-7218-444a-87c9-37086529cc73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46779", "type": "seen", "source": "https://t.me/cvedetector/5940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46779 - Imagination DRM Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2024-46779 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/imagination: Free pvr_vm_gpuva after unlink  \n  \nThis caused a measurable memory leak. Although the individual  \nallocations are small, the leaks occurs in a high-usage codepath  \n(remapping or unmapping device memory) so they add up quickly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:44.000000Z"}, {"uuid": "44668d9f-c805-4f3f-aab4-fb1a5e209293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46784", "type": "seen", "source": "https://t.me/cvedetector/5946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46784 - Intel Mana NAPI Race Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46784 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup  \n  \nCurrently napi_disable() gets called during rxq and txq cleanup,  \neven before napi is enabled and hrtimer is initialized. It causes  \nkernel panic.  \n  \n? page_fault_oops+0x136/0x2b0  \n  ? page_counter_cancel+0x2e/0x80  \n  ? do_user_addr_fault+0x2f2/0x640  \n  ? refill_obj_stock+0xc4/0x110  \n  ? exc_page_fault+0x71/0x160  \n  ? asm_exc_page_fault+0x27/0x30  \n  ? __mmdrop+0x10/0x180  \n  ? __mmdrop+0xec/0x180  \n  ? hrtimer_active+0xd/0x50  \n  hrtimer_try_to_cancel+0x2c/0xf0  \n  hrtimer_cancel+0x15/0x30  \n  napi_disable+0x65/0x90  \n  mana_destroy_rxq+0x4c/0x2f0  \n  mana_create_rxq.isra.0+0x56c/0x6d0  \n  ? mana_uncfg_vport+0x50/0x50  \n  mana_alloc_queues+0x21b/0x320  \n  ? skb_dequeue+0x5f/0x80 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:53:24.000000Z"}, {"uuid": "4ec01b9f-f7f2-4427-8130-e577133170ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46783", "type": "seen", "source": "https://t.me/cvedetector/5945", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46783 - Linux tcp_bpf Send Message Buffer Overflow ( SEGFAULT )\", \n  \"Content\": \"CVE ID : CVE-2024-46783 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntcp_bpf: fix return value of tcp_bpf_sendmsg()  \n  \nWhen we cork messages in psock->cork, the last message triggers the  \nflushing will result in sending a sk_msg larger than the current  \nmessage size. In this case, in tcp_bpf_send_verdict(), 'copied' becomes  \nnegative at least in the following case:  \n  \n468         case __SK_DROP:  \n469         default:  \n470                 sk_msg_free_partial(sk, msg, tosend);  \n471                 sk_msg_apply_bytes(psock, tosend);  \n472                 *copied -= (tosend + delta); // <====\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:53:23.000000Z"}, {"uuid": "9d218992-be86-4396-b11f-645885861715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46782", "type": "seen", "source": "https://t.me/cvedetector/5943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46782 - Here is the title: \"IPv6 ILA Rhashtable Use-After-Free Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46782 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nila: call nf_unregister_net_hooks() sooner  \n  \nsyzbot found an use-after-free Read in ila_nf_input [1]  \n  \nIssue here is that ila_xlat_exit_net() frees the rhashtable,  \nthen call nf_unregister_net_hooks().  \n  \nIt should be done in the reverse way, with a synchronize_rcu().  \n  \nThis is a good match for a pre_exit() method.  \n  \n[1]  \n BUG: KASAN: use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline]  \n BUG: KASAN: use-after-free in __rhashtable_lookup include/linux/rhashtable.h:604 [inline]  \n BUG: KASAN: use-after-free in rhashtable_lookup include/linux/rhashtable.h:646 [inline]  \n BUG: KASAN: use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672  \nRead of size 4 at addr ffff888064620008 by task ksoftirqd/0/16  \n  \nCPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc4-syzkaller-00238-g2ad6d23f465a #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024  \nCall Trace:  \n   \n  __dump_stack lib/dump_stack.c:93 [inline]  \n  dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119  \n  print_address_description mm/kasan/report.c:377 [inline]  \n  print_report+0x169/0x550 mm/kasan/report.c:488  \n  kasan_report+0x143/0x180 mm/kasan/report.c:601  \n  rht_key_hashfn include/linux/rhashtable.h:159 [inline]  \n  __rhashtable_lookup include/linux/rhashtable.h:604 [inline]  \n  rhashtable_lookup include/linux/rhashtable.h:646 [inline]  \n  rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672  \n  ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:132 [inline]  \n  ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline]  \n  ila_nf_input+0x1fe/0x3c0 net/ipv6/ila/ila_xlat.c:190  \n  nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]  \n  nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626  \n  nf_hook include/linux/netfilter.h:269 [inline]  \n  NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312  \n  __netif_receive_skb_one_core net/core/dev.c:5661 [inline]  \n  __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775  \n  process_backlog+0x662/0x15b0 net/core/dev.c:6108  \n  __napi_poll+0xcb/0x490 net/core/dev.c:6772  \n  napi_poll net/core/dev.c:6841 [inline]  \n  net_rx_action+0x89b/0x1240 net/core/dev.c:6963  \n  handle_softirqs+0x2c4/0x970 kernel/softirq.c:554  \n  run_ksoftirqd+0xca/0x130 kernel/softirq.c:928  \n  smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164  \n  kthread+0x2f0/0x390 kernel/kthread.c:389  \n  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147  \n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244  \n   \n  \nThe buggy address belongs to the physical page:  \npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64620  \nflags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)  \npage_type: 0xbfffffff(buddy)  \nraw: 00fff00000000000 ffffea0000959608 ffffea00019d9408 0000000000000000  \nraw: 0000000000000000 0000000000000003 00000000bfffffff 0000000000000000  \npage dumped because: kasan: bad access detected  \npage_owner tracks the page as freed  \npage last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5242, tgid 5242 (syz-executor), ts 73611328570, free_ts 618981657187  \n  set_page_owner include/linux/page_owner.h:32 [inline]  \n  post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1493  \n  prep_new_page mm/page_alloc.c:1501 [inline]  \n  get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439  \n  __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695  \n  __alloc_pages_node_noprof include/linux/gfp.h:269 [inline]  \n  alloc_pages_node_noprof include/linux/gfp.h:296 [inline]  \n  ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4103  \n  __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4130  \n  __do_kmalloc_node m[...]", "creation_timestamp": "2024-09-18T10:52:47.000000Z"}, {"uuid": "fb43f439-e76c-4b16-87de-a10a0091ed98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46078", "type": "seen", "source": "https://t.me/cvedetector/7015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46078 - itsourcecode Sports Management System SQL Injection - Delete Category Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46078 \nPublished : Oct. 4, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : itsourcecode Sports Management System Project 1.0 is vulnerable to SQL Injection in the function delete_category of the file sports_scheduling/player.php via the argument id. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T21:53:30.000000Z"}, {"uuid": "ea5fc106-87df-4f45-bb5b-434413832959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46077", "type": "seen", "source": "https://t.me/cvedetector/7016", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46077 - itsourcecode Online Tours and Travels Management System XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46077 \nPublished : Oct. 4, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T21:53:31.000000Z"}, {"uuid": "27d2509a-1752-4495-be4d-288178750957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46785", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/5947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46785 - Linux Eventfs Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46785 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \neventfs: Use list_del_rcu() for SRCU protected list variable  \n  \nChi Zhiling reported:  \n  \n  We found a null pointer accessing in tracefs[1], the reason is that the  \n  variable 'ei_child' is set to LIST_POISON1, that means the list was  \n  removed in eventfs_remove_rec. so when access the ei_child->is_freed, the  \n  panic triggered.  \n  \n  by the way, the following script can reproduce this panic  \n  \n  loop1 (){  \n      while true  \n      do  \n          echo \"p:kp submit_bio\" > /sys/kernel/debug/tracing/kprobe_events  \n          echo \"\" > /sys/kernel/debug/tracing/kprobe_events  \n      done  \n  }  \n  loop2 (){  \n      while true  \n      do  \n          tree /sys/kernel/debug/tracing/events/kprobes/  \n      done  \n  }  \n  loop1 &  \n  loop2  \n  \n  [1]:  \n  [ 1147.959632][T17331] Unable to handle kernel paging request at virtual address dead000000000150  \n  [ 1147.968239][T17331] Mem abort info:  \n  [ 1147.971739][T17331]   ESR = 0x0000000096000004  \n  [ 1147.976172][T17331]   EC = 0x25: DABT (current EL), IL = 32 bits  \n  [ 1147.982171][T17331]   SET = 0, FnV = 0  \n  [ 1147.985906][T17331]   EA = 0, S1PTW = 0  \n  [ 1147.989734][T17331]   FSC = 0x04: level 0 translation fault  \n  [ 1147.995292][T17331] Data abort info:  \n  [ 1147.998858][T17331]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000  \n  [ 1148.005023][T17331]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0  \n  [ 1148.010759][T17331]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0  \n  [ 1148.016752][T17331] [dead000000000150] address between user and kernel address ranges  \n  [ 1148.024571][T17331] Internal error: Oops: 0000000096000004 [#1] SMP  \n  [ 1148.030825][T17331] Modules linked in: team_mode_loadbalance team nlmon act_gact cls_flower sch_ingress bonding tls macvlan dummy ib_core bridge stp llc veth amdgpu amdxcp mfd_core gpu_sched drm_exec drm_buddy radeon crct10dif_ce video drm_suballoc_helper ghash_ce drm_ttm_helper sha2_ce ttm sha256_arm64 i2c_algo_bit sha1_ce sbsa_gwdt cp210x drm_display_helper cec sr_mod cdrom drm_kms_helper binfmt_misc sg loop fuse drm dm_mod nfnetlink ip_tables autofs4 [last unloaded: tls]  \n  [ 1148.072808][T17331] CPU: 3 PID: 17331 Comm: ls Tainted: G        W         ------- ----  6.6.43 #2  \n  [ 1148.081751][T17331] Source Version: 21b3b386e948bedd29369af66f3e98ab01b1c650  \n  [ 1148.088783][T17331] Hardware name: Greatwall GW-001M1A-FTF/GW-001M1A-FTF, BIOS KunLun BIOS V4.0 07/16/2020  \n  [ 1148.098419][T17331] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \n  [ 1148.106060][T17331] pc : eventfs_iterate+0x2c0/0x398  \n  [ 1148.111017][T17331] lr : eventfs_iterate+0x2fc/0x398  \n  [ 1148.115969][T17331] sp : ffff80008d56bbd0  \n  [ 1148.119964][T17331] x29: ffff80008d56bbf0 x28: ffff001ff5be2600 x27: 0000000000000000  \n  [ 1148.127781][T17331] x26: ffff001ff52ca4e0 x25: 0000000000009977 x24: dead000000000100  \n  [ 1148.135598][T17331] x23: 0000000000000000 x22: 000000000000000b x21: ffff800082645f10  \n  [ 1148.143415][T17331] x20: ffff001fddf87c70 x19: ffff80008d56bc90 x18: 0000000000000000  \n  [ 1148.151231][T17331] x17: 0000000000000000 x16: 0000000000000000 x15: ffff001ff52ca4e0  \n  [ 1148.159048][T17331] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000  \n  [ 1148.166864][T17331] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000804391d0  \n  [ 1148.174680][T17331] x8 : 0000000180000000 x7 : 0000000000000018 x6 : 0000aaab04b92862  \n  [ 1148.182498][T17331] x5 : 0000aaab04b92862 x4 : 0000000080000000 x3 : 0000000000000068  \n  [ 1148.190314][T17331] x2 : 000000000000000f x1 : 0000000000007ea8 x0 : 0000000000000001  \n  [ 1148.198131][T17331] Call trace:  \n  [ 1148.201259][T17331]  eventfs_iterate+0x2c0/0x398  \n  [ 1148.205864][T17331]  iterate_dir+0x98/0x188  \n  [ 1[...]", "creation_timestamp": "2024-09-18T10:53:25.000000Z"}, {"uuid": "1317c13c-ef8d-436b-b776-bad0a7148d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46596", "type": "seen", "source": "https://t.me/cvedetector/5983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46596 - Draytek Vigor 3910 Buffer Overflow Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46596 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:13.000000Z"}, {"uuid": "ccd7ca34-f79a-4d11-a663-fc528561471d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46593", "type": "seen", "source": "https://t.me/cvedetector/5982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46593 - Draytek Vigor 3910 Buffer Overflow DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46593 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:09.000000Z"}, {"uuid": "c2a4496b-4282-4604-bfd6-5b5619e1fc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46594", "type": "seen", "source": "https://t.me/cvedetector/5981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46594 - Draytek Vigor 3910 Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46594 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:08.000000Z"}, {"uuid": "11829b6e-c0e8-4feb-bc73-7a38a8712135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46592", "type": "seen", "source": "https://t.me/cvedetector/5979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46592 - Draytek Vigor 3910 Denial of Service Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46592 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:06.000000Z"}, {"uuid": "8dddbc17-7549-4284-8028-4586d3cdac68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46590", "type": "seen", "source": "https://t.me/cvedetector/5978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46590 - Draytek Vigor 3910 Denial of Service Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46590 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:05.000000Z"}, {"uuid": "0b3bef4e-37a8-4e45-b396-41c804d38e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46726", "type": "seen", "source": "https://t.me/cvedetector/5922", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46726 - \"AMD Display Integer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-46726 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Ensure index calculation will not overflow  \n  \n[WHY & HOW]  \nMake sure vmid0p72_idx, vnom0p8_idx and vmax0p9_idx calculation will  \nnever overflow and exceess array size.  \n  \nThis fixes 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:41.000000Z"}, {"uuid": "025d1fe6-1314-447d-a825-c2fccfd3dfe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46718", "type": "seen", "source": "https://t.me/cvedetector/5921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46718 - AMD Ryzen Linux Graphics Hardware corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46718 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/xe: Don't overmap identity VRAM mapping  \n  \nOvermapping the identity VRAM mapping is triggering hardware bugs on  \ncertain platforms. Use 2M pages for the last unaligned (to 1G) VRAM  \nchunk.  \n  \nv2:  \n - Always use 2M pages for last chunk (Fei Yang)  \n - break loop when 2M pages are used  \n - Add assert for usable_size being 2M aligned  \nv3:  \n - Fix checkpatch \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:40.000000Z"}, {"uuid": "36c429c9-0564-4fc5-895f-4483f3ef1677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46786", "type": "seen", "source": "https://t.me/cvedetector/5949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46786 - Apache Linux fscache Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46786 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF  \n  \nThe fscache_cookie_lru_timer is initialized when the fscache module  \nis inserted, but is not deleted when the fscache module is removed.  \nIf timer_reduce() is called before removing the fscache module,  \nthe fscache_cookie_lru_timer will be added to the timer list of  \nthe current cpu. Afterwards, a use-after-free will be triggered  \nin the softIRQ after removing the fscache module, as follows:  \n  \n==================================================================  \nBUG: unable to handle page fault for address: fffffbfff803c9e9  \n PF: supervisor read access in kernel mode  \n PF: error_code(0x0000) - not-present page  \nPGD 21ffea067 P4D 21ffea067 PUD 21ffe6067 PMD 110a7c067 PTE 0  \nOops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI  \nCPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.11.0-rc3 #855  \nTainted: [W]=WARN  \nRIP: 0010:__run_timer_base.part.0+0x254/0x8a0  \nCall Trace:  \n   \n tmigr_handle_remote_up+0x627/0x810  \n __walk_groups.isra.0+0x47/0x140  \n tmigr_handle_remote+0x1fa/0x2f0  \n handle_softirqs+0x180/0x590  \n irq_exit_rcu+0x84/0xb0  \n sysvec_apic_timer_interrupt+0x6e/0x90  \n   \n   \n asm_sysvec_apic_timer_interrupt+0x1a/0x20  \nRIP: 0010:default_idle+0xf/0x20  \n default_idle_call+0x38/0x60  \n do_idle+0x2b5/0x300  \n cpu_startup_entry+0x54/0x60  \n start_secondary+0x20d/0x280  \n common_startup_64+0x13e/0x148  \n   \nModules linked in: [last unloaded: netfs]  \n==================================================================  \n  \nTherefore delete fscache_cookie_lru_timer when removing the fscahe module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:53:27.000000Z"}, {"uuid": "6f91f5bf-4924-4f02-9931-6dce5867f2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46781", "type": "seen", "source": "https://t.me/cvedetector/5942", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46781 - \"Linux Kernel Nilfs2 UAF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46781 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnilfs2: fix missing cleanup on rollforward recovery error  \n  \nIn an error injection test of a routine for mount-time recovery, KASAN  \nfound a use-after-free bug.  \n  \nIt turned out that if data recovery was performed using partial logs  \ncreated by dsync writes, but an error occurred before starting the log  \nwriter to create a recovered checkpoint, the inodes whose data had been  \nrecovered were left in the ns_dirty_files list of the nilfs object and  \nwere not freed.  \n  \nFix this issue by cleaning up inodes that have read the recovery data if  \nthe recovery routine fails midway before the log writer starts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:46.000000Z"}, {"uuid": "b6479510-5074-47fc-9456-76d99e6696db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46780", "type": "seen", "source": "https://t.me/cvedetector/5941", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46780 - \"Linux Nilfs2 Sysfs Attribute Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46780 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnilfs2: protect references to superblock parameters exposed in sysfs  \n  \nThe superblock buffers of nilfs2 can not only be overwritten at runtime  \nfor modifications/repairs, but they are also regularly swapped, replaced  \nduring resizing, and even abandoned when degrading to one side due to  \nbacking device issues.  So, accessing them requires mutual exclusion using  \nthe reader/writer semaphore \"nilfs->ns_sem\".  \n  \nSome sysfs attribute show methods read this superblock buffer without the  \nnecessary mutual exclusion, which can cause problems with pointer  \ndereferencing and memory access, so fix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:45.000000Z"}, {"uuid": "a84f03d5-80eb-4b3a-b8e0-8becf42ea677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46791", "type": "seen", "source": "https://t.me/cvedetector/5935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46791 - Linux MCP251X Interrupt Handler Deadlock in Mutex Acquisition\", \n  \"Content\": \"CVE ID : CVE-2024-46791 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncan: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open  \n  \nThe mcp251x_hw_wake() function is called with the mpc_lock mutex held and  \ndisables the interrupt handler so that no interrupts can be processed while  \nwaking the device. If an interrupt has already occurred then waiting for  \nthe interrupt handler to complete will deadlock because it will be trying  \nto acquire the same mutex.  \n  \nCPU0                           CPU1  \n----                           ----  \nmcp251x_open()  \n mutex_lock(&priv->mcp_lock)  \n  request_threaded_irq()  \n                                 \n                               mcp251x_can_ist()  \n                                mutex_lock(&priv->mcp_lock)  \n  mcp251x_hw_wake()  \n   disable_irq() <--\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:37.000000Z"}, {"uuid": "866e23a8-fcab-4693-8250-0511a042ca40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46799", "type": "seen", "source": "https://t.me/cvedetector/5934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46799 - Ti Am65 CPSW NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46799 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: ethernet: ti: am65-cpsw: Fix NULL dereference on XDP_TX  \n  \nIf number of TX queues are set to 1 we get a NULL pointer  \ndereference during XDP_TX.  \n  \n~# ethtool -L eth0 tx 1  \n~# ./xdp-trafficgen udp -A  -a  eth0 -t 2  \nTransmitting on eth0 (ifindex 2)  \n[  241.135257] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000030  \n  \nFix this by using actual TX queues instead of max TX queues  \nwhen picking the TX channel in am65_cpsw_ndo_xdp_xmit(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:33.000000Z"}, {"uuid": "d39995b4-4de8-4a19-b977-5fd6015e2ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46719", "type": "seen", "source": "https://t.me/cvedetector/5920", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46719 - Linux Kernel usb AlterMode Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-46719 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: typec: ucsi: Fix null pointer dereference in trace  \n  \nucsi_register_altmode checks IS_ERR for the alt pointer and treats  \nNULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled,  \nucsi_register_displayport returns NULL which causes a NULL pointer  \ndereference in trace. Rather than return NULL, call  \ntypec_port_register_altmode to register DisplayPort alternate mode  \nas a non-controllable mode when CONFIG_TYPEC_DP_ALTMODE is not enabled. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:39.000000Z"}, {"uuid": "4a6f4863-616e-4232-b3d3-c62c637fbc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46729", "type": "seen", "source": "https://t.me/cvedetector/5919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46729 - AMD Display Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46729 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Fix incorrect size calculation for loop  \n  \n[WHY]  \nfe_clk_en has size of 5 but sizeof(fe_clk_en) has byte size 20 which is  \nlager than the array size.  \n  \n[HOW]  \nDivide byte size 20 by its element size.  \n  \nThis fixes 2 OVERRUN issues reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:38.000000Z"}, {"uuid": "22f3b60d-626c-4e46-9579-19ed186b4b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46728", "type": "seen", "source": "https://t.me/cvedetector/5918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46728 - AMD Display Integer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46728 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Check index for aux_rd_interval before using  \n  \naux_rd_interval has size of 7 and should be checked.  \n  \nThis fixes 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:35.000000Z"}, {"uuid": "89cb3efb-556c-47bd-ad68-40b7eba5c58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46727", "type": "seen", "source": "https://t.me/cvedetector/5917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46727 - AMD Display NULL Return Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46727 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update  \n  \n[Why]  \nCoverity reports NULL_RETURN warning.  \n  \n[How]  \nAdd otg_master NULL check. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:34.000000Z"}, {"uuid": "79c3870e-0d90-41e4-a4ac-f60f6af59221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46717", "type": "seen", "source": "https://t.me/cvedetector/5916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46717 - Apache NetMLX5e Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46717 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/mlx5e: SHAMPO, Fix incorrect page release  \n  \nUnder the following conditions:  \n1) No skb created yet  \n2) header_size == 0 (no SHAMPO header)  \n3) header_index + 1 % MLX5E_SHAMPO_WQ_HEADER_PER_PAGE == 0 (this is the  \n   last page fragment of a SHAMPO header page)  \n  \na new skb is formed with a page that is NOT a SHAMPO header page (it  \nis a regular data page). Further down in the same function  \n(mlx5e_handle_rx_cqe_mpwrq_shampo()), a SHAMPO header page from  \nheader_index is released. This is wrong and it leads to SHAMPO header  \npages being released more than once. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:33.000000Z"}, {"uuid": "b99bcfe0-fac2-4347-87ef-22cbfa4e8294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46798", "type": "seen", "source": "https://t.me/cvedetector/5933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46798 - \"Audiofine Linux Kernel Use-After-Free\"\", \n  \"Content\": \"CVE ID : CVE-2024-46798 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: dapm: Fix UAF for snd_soc_pcm_runtime object  \n  \nWhen using kernel with the following extra config,  \n  \n  - CONFIG_KASAN=y  \n  - CONFIG_KASAN_GENERIC=y  \n  - CONFIG_KASAN_INLINE=y  \n  - CONFIG_KASAN_VMALLOC=y  \n  - CONFIG_FRAME_WARN=4096  \n  \nkernel detects that snd_pcm_suspend_all() access a freed  \n'snd_soc_pcm_runtime' object when the system is suspended, which  \nleads to a use-after-free bug:  \n  \n[   52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270  \n[   52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330  \n  \n[   52.047785] Call trace:  \n[   52.047787]  dump_backtrace+0x0/0x3c0  \n[   52.047794]  show_stack+0x34/0x50  \n[   52.047797]  dump_stack_lvl+0x68/0x8c  \n[   52.047802]  print_address_description.constprop.0+0x74/0x2c0  \n[   52.047809]  kasan_report+0x210/0x230  \n[   52.047815]  __asan_report_load1_noabort+0x3c/0x50  \n[   52.047820]  snd_pcm_suspend_all+0x1a8/0x270  \n[   52.047824]  snd_soc_suspend+0x19c/0x4e0  \n  \nThe snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before  \nmaking any access. So we need to always set 'substream->runtime' to NULL  \neverytime we kfree() it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:32.000000Z"}, {"uuid": "ab64f09b-267b-48ef-a0e8-24ad40de55f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46797", "type": "seen", "source": "https://t.me/cvedetector/5931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46797 - IBM Powerpc qspinlock Deadlock\", \n  \"Content\": \"CVE ID : CVE-2024-46797 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npowerpc/qspinlock: Fix deadlock in MCS queue  \n  \nIf an interrupt occurs in queued_spin_lock_slowpath() after we increment  \nqnodesp->count and before node->lock is initialized, another CPU might  \nsee stale lock values in get_tail_qnode(). If the stale lock value happens  \nto match the lock on that CPU, then we write to the \"next\" pointer of  \nthe wrong qnode. This causes a deadlock as the former CPU, once it becomes  \nthe head of the MCS queue, will spin indefinitely until it's \"next\" pointer  \nis set by its successor in the queue.  \n  \nRunning stress-ng on a 16 core (16EC/16VP) shared LPAR, results in  \noccasional lockups similar to the following:  \n  \n   $ stress-ng --all 128 --vm-bytes 80% --aggressive \\  \n               --maximize --oomable --verify  --syslog \\  \n               --metrics  --times  --timeout 5m  \n  \n   watchdog: CPU 15 Hard LOCKUP  \n   ......  \n   NIP [c0000000000b78f4] queued_spin_lock_slowpath+0x1184/0x1490  \n   LR [c000000001037c5c] _raw_spin_lock+0x6c/0x90  \n   Call Trace:  \n    0xc000002cfffa3bf0 (unreliable)  \n    _raw_spin_lock+0x6c/0x90  \n    raw_spin_rq_lock_nested.part.135+0x4c/0xd0  \n    sched_ttwu_pending+0x60/0x1f0  \n    __flush_smp_call_function_queue+0x1dc/0x670  \n    smp_ipi_demux_relaxed+0xa4/0x100  \n    xive_muxed_ipi_action+0x20/0x40  \n    __handle_irq_event_percpu+0x80/0x240  \n    handle_irq_event_percpu+0x2c/0x80  \n    handle_percpu_irq+0x84/0xd0  \n    generic_handle_irq+0x54/0x80  \n    __do_irq+0xac/0x210  \n    __do_IRQ+0x74/0xd0  \n    0x0  \n    do_IRQ+0x8c/0x170  \n    hardware_interrupt_common_virt+0x29c/0x2a0  \n   --- interrupt: 500 at queued_spin_lock_slowpath+0x4b8/0x1490  \n   ......  \n   NIP [c0000000000b6c28] queued_spin_lock_slowpath+0x4b8/0x1490  \n   LR [c000000001037c5c] _raw_spin_lock+0x6c/0x90  \n   --- interrupt: 500  \n    0xc0000029c1a41d00 (unreliable)  \n    _raw_spin_lock+0x6c/0x90  \n    futex_wake+0x100/0x260  \n    do_futex+0x21c/0x2a0  \n    sys_futex+0x98/0x270  \n    system_call_exception+0x14c/0x2f0  \n    system_call_vectored_common+0x15c/0x2ec  \n  \nThe following code flow illustrates how the deadlock occurs.  \nFor the sake of brevity, assume that both locks (A and B) are  \ncontended and we call the queued_spin_lock_slowpath() function.  \n  \n        CPU0                                   CPU1  \n        ----                                   ----  \n  spin_lock_irqsave(A)                          |  \n  spin_unlock_irqrestore(A)                     |  \n    spin_lock(B)                                |  \n         |                                      |  \n         \u25bc                                      |  \n   id = qnodesp->count++;                       |  \n  (Note that nodes[0].lock == A)                |  \n         |                                      |  \n         \u25bc                                      |  \n      Interrupt                                 |  \n  (happens before \"nodes[0].lock = B\")          |  \n         |                                      |  \n         \u25bc                                      |  \n  spin_lock_irqsave(A)                          |  \n         |                                      |  \n         \u25bc                                      |  \n   id = qnodesp->count++                        |  \n   nodes[1].lock = A                            |  \n         |                                      |  \n         \u25bc                                      |  \n  Tail of MCS queue                             |  \n         |                             spin_lock_irqsave(A)  \n         \u25bc                                      |  \n  Head of MCS queue                             \u25bc  \n         |                             CPU0 is previous tail  \n         \u25bc                                      |  \n   Spin indefinitely                            \u25bc  \n  ([...]", "creation_timestamp": "2024-09-18T10:52:30.000000Z"}, {"uuid": "50033320-f3f3-4fd6-b151-c9c809ea2380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46795", "type": "seen", "source": "https://t.me/cvedetector/5930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46795 - Lenovo ksmbd Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46795 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nksmbd: unset the binding mark of a reused connection  \n  \nSteve French reported null pointer dereference error from sha256 lib.  \ncifs.ko can send session setup requests on reused connection.  \nIf reused connection is used for binding session, conn->binding can  \nstill remain true and generate_preauth_hash() will not set  \nsess->Preauth_HashValue and it will be NULL.  \nIt is used as a material to create an encryption key in  \nksmbd_gen_smb311_encryptionkey. ->Preauth_HashValue cause null pointer  \ndereference error from crypto_shash_update().  \n  \nBUG: kernel NULL pointer dereference, address: 0000000000000000  \n#PF: supervisor read access in kernel mode  \n#PF: error_code(0x0000) - not-present page  \nPGD 0 P4D 0  \nOops: 0000 [#1] PREEMPT SMP PTI  \nCPU: 8 PID: 429254 Comm: kworker/8:39  \nHardware name: LENOVO 20MAS08500/20MAS08500, BIOS N2CET69W (1.52 )  \nWorkqueue: ksmbd-io handle_ksmbd_work [ksmbd]  \nRIP: 0010:lib_sha256_base_do_update.isra.0+0x11e/0x1d0 [sha256_ssse3]  \n  \n? show_regs+0x6d/0x80  \n? __die+0x24/0x80  \n? page_fault_oops+0x99/0x1b0  \n? do_user_addr_fault+0x2ee/0x6b0  \n? exc_page_fault+0x83/0x1b0  \n? asm_exc_page_fault+0x27/0x30  \n? __pfx_sha256_transform_rorx+0x10/0x10 [sha256_ssse3]  \n? lib_sha256_base_do_update.isra.0+0x11e/0x1d0 [sha256_ssse3]  \n? __pfx_sha256_transform_rorx+0x10/0x10 [sha256_ssse3]  \n? __pfx_sha256_transform_rorx+0x10/0x10 [sha256_ssse3]  \n_sha256_update+0x77/0xa0 [sha256_ssse3]  \nsha256_avx2_update+0x15/0x30 [sha256_ssse3]  \ncrypto_shash_update+0x1e/0x40  \nhmac_update+0x12/0x20  \ncrypto_shash_update+0x1e/0x40  \ngenerate_key+0x234/0x380 [ksmbd]  \ngenerate_smb3encryptionkey+0x40/0x1c0 [ksmbd]  \nksmbd_gen_smb311_encryptionkey+0x72/0xa0 [ksmbd]  \nntlm_authenticate.isra.0+0x423/0x5d0 [ksmbd]  \nsmb2_sess_setup+0x952/0xaa0 [ksmbd]  \n__process_request+0xa3/0x1d0 [ksmbd]  \n__handle_ksmbd_work+0x1c4/0x2f0 [ksmbd]  \nhandle_ksmbd_work+0x2d/0xa0 [ksmbd]  \nprocess_one_work+0x16c/0x350  \nworker_thread+0x306/0x440  \n? __pfx_worker_thread+0x10/0x10  \nkthread+0xef/0x120  \n? __pfx_kthread+0x10/0x10  \nret_from_fork+0x44/0x70  \n? __pfx_kthread+0x10/0x10  \nret_from_fork_asm+0x1b/0x30 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:29.000000Z"}, {"uuid": "9661d1d4-a253-4473-9da9-df3a6753510e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46796", "type": "seen", "source": "https://t.me/cvedetector/5928", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46796 - Linux CIFS smb2_set_path_size Double Put Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46796 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsmb: client: fix double put of @cfile in smb2_set_path_size()  \n  \nIf smb2_compound_op() is called with a valid @cfile and returned  \n-EINVAL, we need to call cifs_get_writable_path() before retrying it  \nas the reference of @cfile was already dropped by previous call.  \n  \nThis fixes the following KASAN splat when running fstests generic/013  \nagainst Windows Server 2022:  \n  \n  CIFS: Attempting to mount //w22-fs0/scratch  \n  run fstests generic/013 at 2024-09-02 19:48:59  \n  ==================================================================  \n  BUG: KASAN: slab-use-after-free in detach_if_pending+0xab/0x200  \n  Write of size 8 at addr ffff88811f1a3730 by task kworker/3:2/176  \n  \n  CPU: 3 UID: 0 PID: 176 Comm: kworker/3:2 Not tainted 6.11.0-rc6 #2  \n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40  \n  04/01/2014  \n  Workqueue: cifsoplockd cifs_oplock_break [cifs]  \n  Call Trace:  \n     \n   dump_stack_lvl+0x5d/0x80  \n   ? detach_if_pending+0xab/0x200  \n   print_report+0x156/0x4d9  \n   ? detach_if_pending+0xab/0x200  \n   ? __virt_addr_valid+0x145/0x300  \n   ? __phys_addr+0x46/0x90  \n   ? detach_if_pending+0xab/0x200  \n   kasan_report+0xda/0x110  \n   ? detach_if_pending+0xab/0x200  \n   detach_if_pending+0xab/0x200  \n   timer_delete+0x96/0xe0  \n   ? __pfx_timer_delete+0x10/0x10  \n   ? rcu_is_watching+0x20/0x50  \n   try_to_grab_pending+0x46/0x3b0  \n   __cancel_work+0x89/0x1b0  \n   ? __pfx___cancel_work+0x10/0x10  \n   ? kasan_save_track+0x14/0x30  \n   cifs_close_deferred_file+0x110/0x2c0 [cifs]  \n   ? __pfx_cifs_close_deferred_file+0x10/0x10 [cifs]  \n   ? __pfx_down_read+0x10/0x10  \n   cifs_oplock_break+0x4c1/0xa50 [cifs]  \n   ? __pfx_cifs_oplock_break+0x10/0x10 [cifs]  \n   ? lock_is_held_type+0x85/0xf0  \n   ? mark_held_locks+0x1a/0x90  \n   process_one_work+0x4c6/0x9f0  \n   ? find_held_lock+0x8a/0xa0  \n   ? __pfx_process_one_work+0x10/0x10  \n   ? lock_acquired+0x220/0x550  \n   ? __list_add_valid_or_report+0x37/0x100  \n   worker_thread+0x2e4/0x570  \n   ? __kthread_parkme+0xd1/0xf0  \n   ? __pfx_worker_thread+0x10/0x10  \n   kthread+0x17f/0x1c0  \n   ? kthread+0xda/0x1c0  \n   ? __pfx_kthread+0x10/0x10  \n   ret_from_fork+0x31/0x60  \n   ? __pfx_kthread+0x10/0x10  \n   ret_from_fork_asm+0x1a/0x30  \n     \n  \n  Allocated by task 1118:  \n   kasan_save_stack+0x30/0x50  \n   kasan_save_track+0x14/0x30  \n   __kasan_kmalloc+0xaa/0xb0  \n   cifs_new_fileinfo+0xc8/0x9d0 [cifs]  \n   cifs_atomic_open+0x467/0x770 [cifs]  \n   lookup_open.isra.0+0x665/0x8b0  \n   path_openat+0x4c3/0x1380  \n   do_filp_open+0x167/0x270  \n   do_sys_openat2+0x129/0x160  \n   __x64_sys_creat+0xad/0xe0  \n   do_syscall_64+0xbb/0x1d0  \n   entry_SYSCALL_64_after_hwframe+0x77/0x7f  \n  \n  Freed by task 83:  \n   kasan_save_stack+0x30/0x50  \n   kasan_save_track+0x14/0x30  \n   kasan_save_free_info+0x3b/0x70  \n   poison_slab_object+0xe9/0x160  \n   __kasan_slab_free+0x32/0x50  \n   kfree+0xf2/0x300  \n   process_one_work+0x4c6/0x9f0  \n   worker_thread+0x2e4/0x570  \n   kthread+0x17f/0x1c0  \n   ret_from_fork+0x31/0x60  \n   ret_from_fork_asm+0x1a/0x30  \n  \n  Last potentially related work creation:  \n   kasan_save_stack+0x30/0x50  \n   __kasan_record_aux_stack+0xad/0xc0  \n   insert_work+0x29/0xe0  \n   __queue_work+0x5ea/0x760  \n   queue_work_on+0x6d/0x90  \n   _cifsFileInfo_put+0x3f6/0x770 [cifs]  \n   smb2_compound_op+0x911/0x3940 [cifs]  \n   smb2_set_path_size+0x228/0x270 [cifs]  \n   cifs_set_file_size+0x197/0x460 [cifs]  \n   cifs_setattr+0xd9c/0x14b0 [cifs]  \n   notify_change+0x4e3/0x740  \n   do_truncate+0xfa/0x180  \n   vfs_truncate+0x195/0x200  \n   __x64_sys_truncate+0x109/0x150  \n   do_syscall_64+0xbb/0x1d0  \n   entry_SYSCALL_64_after_hwframe+0x77/0x7f \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details[...]", "creation_timestamp": "2024-09-18T10:52:25.000000Z"}, {"uuid": "b87aca23-7a1a-4b1f-8bec-dba2c21f042f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46793", "type": "seen", "source": "https://t.me/cvedetector/5927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46793 - Intel ASoC Linux Kernel NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46793 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder  \n  \nSince commit 13f58267cda3 (\"ASoC: soc.h: don't create dummy Component  \nvia COMP_DUMMY()\") dummy codecs declared like this:  \n  \nSND_SOC_DAILINK_DEF(dummy,  \n        DAILINK_COMP_ARRAY(COMP_DUMMY()));  \n  \nexpand to:  \n  \nstatic struct snd_soc_dai_link_component dummy[] = {  \n};  \n  \nWhich means that dummy is a zero sized array and thus dais[i].codecs should  \nnot be dereferenced *at all* since it points to the address of the next  \nvariable stored in the data section as the \"dummy\" variable has an address  \nbut no size, so even dereferencing dais[0] is already an out of bounds  \narray reference.  \n  \nWhich means that the if (dais[i].codecs->name) check added in  \ncommit 7d99a70b6595 (\"ASoC: Intel: Boards: Fix NULL pointer deref  \nin BYT/CHT boards\") relies on that the part of the next variable which  \nthe name member maps to just happens to be NULL.  \n  \nWhich apparently so far it usually is, except when it isn't  \nand then it results in crashes like this one:  \n  \n[   28.795659] BUG: unable to handle page fault for address: 0000000000030011  \n...  \n[   28.795780] Call Trace:  \n[   28.795787]    \n...  \n[   28.795862]  ? strcmp+0x18/0x40  \n[   28.795872]  0xffffffffc150c605  \n[   28.795887]  platform_probe+0x40/0xa0  \n...  \n[   28.795979]  ? __pfx_init_module+0x10/0x10 [snd_soc_sst_bytcr_wm5102]  \n  \nReally fix things this time around by checking dais.num_codecs != 0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:24.000000Z"}, {"uuid": "05a4146f-955b-4380-a564-bb09902ca890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46792", "type": "seen", "source": "https://t.me/cvedetector/5925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46792 - Linux Kernel RISC-V Kernel Memory Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46792 \nPublished : Sept. 18, 2024, 8:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nriscv: misaligned: Restrict user access to kernel memory  \n  \nraw_copy_{to,from}_user() do not call access_ok(), so this code allowed  \nuserspace to access any virtual memory address. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:52:22.000000Z"}, {"uuid": "fbd13d15-d259-46b2-802d-e68403332ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46716", "type": "seen", "source": "https://t.me/cvedetector/5923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46716 - Altera MSGDMA Linux Kernel DMA Engine Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46716 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor  \n  \nRemove list_del call in msgdma_chan_desc_cleanup, this should be the role  \nof msgdma_free_descriptor. In consequence replace list_add_tail with  \nlist_move_tail in msgdma_free_descriptor.  \n  \nThis fixes the path:  \n   msgdma_free_chan_resources -> msgdma_free_descriptors ->  \n   msgdma_free_desc_list -> msgdma_free_descriptor  \n  \nwhich does not correctly free the descriptors as first nodes were not  \nremoved from the list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:42.000000Z"}, {"uuid": "958986ee-4daf-46aa-b0f6-9f9072000285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46725", "type": "seen", "source": "https://t.me/cvedetector/5924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46725 - AMD GPU Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46725 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: Fix out-of-bounds write warning  \n  \nCheck the ring type value to fix the out-of-bounds  \nwrite warning \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:02:18.000000Z"}, {"uuid": "54383796-8907-4db5-a330-ab19e57880aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46715", "type": "seen", "source": "https://t.me/cvedetector/5915", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46715 - \"Linux IIO Driver Kernel Oops Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46715 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndriver: iio: add missing checks on iio_info's callback access  \n  \nSome callbacks from iio_info structure are accessed without any check, so  \nif a driver doesn't implement them trying to access the corresponding  \nsysfs entries produce a kernel oops such as:  \n  \n[ 2203.527791] Unable to handle kernel NULL pointer dereference at virtual address 00000000 when execute  \n[...]  \n[ 2203.783416] Call trace:  \n[ 2203.783429]  iio_read_channel_info_avail from dev_attr_show+0x18/0x48  \n[ 2203.789807]  dev_attr_show from sysfs_kf_seq_show+0x90/0x120  \n[ 2203.794181]  sysfs_kf_seq_show from seq_read_iter+0xd0/0x4e4  \n[ 2203.798555]  seq_read_iter from vfs_read+0x238/0x2a0  \n[ 2203.802236]  vfs_read from ksys_read+0xa4/0xd4  \n[ 2203.805385]  ksys_read from ret_fast_syscall+0x0/0x54  \n[ 2203.809135] Exception stack(0xe0badfa8 to 0xe0badff0)  \n[ 2203.812880] dfa0:                   00000003 b6f10f80 00000003 b6eab000 00020000 00000000  \n[ 2203.819746] dfc0: 00000003 b6f10f80 7ff00000 00000003 00000003 00000000 00020000 00000000  \n[ 2203.826619] dfe0: b6e1bc88 bed80958 b6e1bc94 b6e1bcb0  \n[ 2203.830363] Code: bad PC value  \n[ 2203.832695] ---[ end trace 0000000000000000 ]--- \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:32.000000Z"}, {"uuid": "2741708c-c95d-408e-a857-30d57f1c647d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46722", "type": "seen", "source": "https://t.me/cvedetector/5913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46722 - AMDGPU Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46722 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: fix mc_data out-of-bounds read warning  \n  \nClear warning that read mc_data[i-1] may out-of-bounds. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:28.000000Z"}, {"uuid": "1774e59a-be91-43e5-bd20-3a031b72b99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46721", "type": "seen", "source": "https://t.me/cvedetector/5911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46721 - Linux AppArmor Kernel NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46721 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \napparmor: fix possible NULL pointer dereference  \n  \nprofile->parent->dents[AAFS_PROF_DIR] could be NULL only if its parent is made  \nfrom __create_missing_ancestors(..) and 'ent->old' is NULL in  \naa_replace_profiles(..).  \nIn that case, it must return an error code and the code, -ENOENT represents  \nits state that the path of its parent is not existed yet.  \n  \nBUG: kernel NULL pointer dereference, address: 0000000000000030  \nPGD 0 P4D 0  \nPREEMPT SMP PTI  \nCPU: 4 PID: 3362 Comm: apparmor_parser Not tainted 6.8.0-24-generic #24  \nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014  \nRIP: 0010:aafs_create.constprop.0+0x7f/0x130  \nCode: 4c 63 e0 48 83 c4 18 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 c3 cc cc cc cc <4d8b 55 30 4d 8d ba a0 00 00 00 4c 89 55 c0 4c 89 ff e8 7a 6a ae  \nRSP: 0018:ffffc9000b2c7c98 EFLAGS: 00010246  \nRAX: 0000000000000000 RBX: 00000000000041ed RCX: 0000000000000000  \nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000  \nRBP: ffffc9000b2c7cd8 R08: 0000000000000000 R09: 0000000000000000  \nR10: 0000000000000000 R11: 0000000000000000 R12: ffffffff82baac10  \nR13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000  \nFS:  00007be9f22cf740(0000) GS:ffff88817bc00000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 0000000000000030 CR3: 0000000134b08000 CR4: 00000000000006f0  \nCall Trace:  \n   \n ? show_regs+0x6d/0x80  \n ? __die+0x24/0x80  \n ? page_fault_oops+0x99/0x1b0  \n ? kernelmode_fixup_or_oops+0xb2/0x140  \n ? __bad_area_nosemaphore+0x1a5/0x2c0  \n ? find_vma+0x34/0x60  \n ? bad_area_nosemaphore+0x16/0x30  \n ? do_user_addr_fault+0x2a2/0x6b0  \n ? exc_page_fault+0x83/0x1b0  \n ? asm_exc_page_fault+0x27/0x30  \n ? aafs_create.constprop.0+0x7f/0x130  \n ? aafs_create.constprop.0+0x51/0x130  \n __aafs_profile_mkdir+0x3d6/0x480  \n aa_replace_profiles+0x83f/0x1270  \n policy_update+0xe3/0x180  \n profile_load+0xbc/0x150  \n ? rw_verify_area+0x47/0x140  \n vfs_write+0x100/0x480  \n ? __x64_sys_openat+0x55/0xa0  \n ? syscall_exit_to_user_mode+0x86/0x260  \n ksys_write+0x73/0x100  \n __x64_sys_write+0x19/0x30  \n x64_sys_call+0x7e/0x25c0  \n do_syscall_64+0x7f/0x180  \n entry_SYSCALL_64_after_hwframe+0x78/0x80  \nRIP: 0033:0x7be9f211c574  \nCode: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d d5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <483d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89  \nRSP: 002b:00007ffd26f2b8c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001  \nRAX: ffffffffffffffda RBX: 00005d504415e200 RCX: 00007be9f211c574  \nRDX: 0000000000001fc1 RSI: 00005d504418bc80 RDI: 0000000000000004  \nRBP: 0000000000001fc1 R08: 0000000000001fc1 R09: 0000000080000000  \nR10: 0000000000000000 R11: 0000000000000202 R12: 00005d504418bc80  \nR13: 0000000000000004 R14: 00007ffd26f2b9b0 R15: 00007ffd26f2ba30  \n   \nModules linked in: snd_seq_dummy snd_hrtimer qrtr snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_timer i2c_smbus qxl snd soundcore drm_ttm_helper lpc_ich ttm joydev input_leds serio_raw mac_hid binfmt_misc msr parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs qemu_fw_cfg ip_tables x_tables autofs4 hid_generic usbhid hid ahci libahci psmouse virtio_rng xhci_pci xhci_pci_renesas  \nCR2: 0000000000000030  \n---[ end trace 0000000000000000 ]---  \nRIP: 0010:aafs_create.constprop.0+0x7f/0x130  \nCode: 4c 63 e0 48 83 c4 18 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 c3 cc cc cc cc <4d8b 55 30 4d 8d ba a0 00 00 00 [...]", "creation_timestamp": "2024-09-18T10:01:26.000000Z"}, {"uuid": "3d0d3118-730c-455f-bce2-382e9a885fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46720", "type": "seen", "source": "https://t.me/cvedetector/5910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46720 - AMD GPU Dereference After Null Check Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46720 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: fix dereference after null check  \n  \ncheck the pointer hive before use. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:25.000000Z"}, {"uuid": "859b09da-fadc-4016-8710-9ccf59267506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46733", "type": "seen", "source": "https://t.me/cvedetector/5908", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46733 - Btrfs qgroup Reserve Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46733 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: fix qgroup reserve leaks in cow_file_range  \n  \nIn the buffered write path, the dirty page owns the qgroup reserve until  \nit creates an ordered_extent.  \n  \nTherefore, any errors that occur before the ordered_extent is created  \nmust free that reservation, or else the space is leaked. The fstest  \ngeneric/475 exercises various IO error paths, and is able to trigger  \nerrors in cow_file_range where we fail to get to allocating the ordered  \nextent. Note that because we *do* clear delalloc, we are likely to  \nremove the inode from the delalloc list, so the inodes/pages to not have  \ninvalidate/launder called on them in the commit abort path.  \n  \nThis results in failures at the unmount stage of the test that look like:  \n  \n  BTRFS: error (device dm-8 state EA) in cleanup_transaction:2018: errno=-5 IO failure  \n  BTRFS: error (device dm-8 state EA) in btrfs_replace_file_extents:2416: errno=-5 IO failure  \n  BTRFS warning (device dm-8 state EA): qgroup 0/5 has unreleased space, type 0 rsv 28672  \n  ------------[ cut here ]------------  \n  WARNING: CPU: 3 PID: 22588 at fs/btrfs/disk-io.c:4333 close_ctree+0x222/0x4d0 [btrfs]  \n  Modules linked in: btrfs blake2b_generic libcrc32c xor zstd_compress raid6_pq  \n  CPU: 3 PID: 22588 Comm: umount Kdump: loaded Tainted: G W          6.10.0-rc7-gab56fde445b8 #21  \n  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014  \n  RIP: 0010:close_ctree+0x222/0x4d0 [btrfs]  \n  RSP: 0018:ffffb4465283be00 EFLAGS: 00010202  \n  RAX: 0000000000000001 RBX: ffffa1a1818e1000 RCX: 0000000000000001  \n  RDX: 0000000000000000 RSI: ffffb4465283bbe0 RDI: ffffa1a19374fcb8  \n  RBP: ffffa1a1818e13c0 R08: 0000000100028b16 R09: 0000000000000000  \n  R10: 0000000000000003 R11: 0000000000000003 R12: ffffa1a18ad7972c  \n  R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000  \n  FS:  00007f9168312b80(0000) GS:ffffa1a4afcc0000(0000) knlGS:0000000000000000  \n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n  CR2: 00007f91683c9140 CR3: 000000010acaa000 CR4: 00000000000006f0  \n  Call Trace:  \n     \n   ? close_ctree+0x222/0x4d0 [btrfs]  \n   ? __warn.cold+0x8e/0xea  \n   ? close_ctree+0x222/0x4d0 [btrfs]  \n   ? report_bug+0xff/0x140  \n   ? handle_bug+0x3b/0x70  \n   ? exc_invalid_op+0x17/0x70  \n   ? asm_exc_invalid_op+0x1a/0x20  \n   ? close_ctree+0x222/0x4d0 [btrfs]  \n   generic_shutdown_super+0x70/0x160  \n   kill_anon_super+0x11/0x40  \n   btrfs_kill_super+0x11/0x20 [btrfs]  \n   deactivate_locked_super+0x2e/0xa0  \n   cleanup_mnt+0xb5/0x150  \n   task_work_run+0x57/0x80  \n   syscall_exit_to_user_mode+0x121/0x130  \n   do_syscall_64+0xab/0x1a0  \n   entry_SYSCALL_64_after_hwframe+0x77/0x7f  \n  RIP: 0033:0x7f916847a887  \n  ---[ end trace 0000000000000000 ]---  \n  BTRFS error (device dm-8 state EA): qgroup reserved space leaked  \n  \nCases 2 and 3 in the out_reserve path both pertain to this type of leak  \nand must free the reserved qgroup data. Because it is already an error  \npath, I opted not to handle the possible errors in  \nbtrfs_free_qgroup_data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:20.000000Z"}, {"uuid": "17b420f9-39d4-4af6-b011-97bb447fad4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46732", "type": "seen", "source": "https://t.me/cvedetector/5907", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46732 - AMD Display Divide by Zero Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46732 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Assign linear_pitch_alignment even for VM  \n  \n[Description]  \nAssign linear_pitch_alignment so we don't cause a divide by 0  \nerror in VM environments \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:19.000000Z"}, {"uuid": "67f70c89-a384-4828-a4d6-283350eea193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46731", "type": "seen", "source": "https://t.me/cvedetector/5906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46731 - AMD Linux Kernel Out-of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-46731 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/pm: fix the Out-of-bounds read warning  \n  \nusing index i - 1U may beyond element index  \nfor mc_data[] when i = 0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:18.000000Z"}, {"uuid": "7fb6b0fa-f5db-4d7f-b025-18401550abc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46730", "type": "seen", "source": "https://t.me/cvedetector/5904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46730 - AMD Display Array Index Out-of-Bounds\", \n  \"Content\": \"CVE ID : CVE-2024-46730 \nPublished : Sept. 18, 2024, 7:15 a.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Ensure array index tg_inst won't be -1  \n  \n[WHY & HOW]  \ntg_inst will be a negative if timing_generator_count equals 0, which  \nshould be checked before used.  \n  \nThis fixes 2 OVERRUN issues reported by Coverity. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T10:01:16.000000Z"}, {"uuid": "30a03631-c33a-427a-996b-6309d9d6ab51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46362", "type": "seen", "source": "https://t.me/cvedetector/5810", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46362 - FrogCMS CSRF Web Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46362 \nPublished : Sept. 17, 2024, 1:15 p.m. | 18\u00a0minutes ago \nDescription : FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/create_directory \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T15:36:32.000000Z"}, {"uuid": "1a55a0bc-b93e-410d-8099-ad8632949095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46085", "type": "seen", "source": "https://t.me/cvedetector/5809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46085 - FrogCMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46085 \nPublished : Sept. 17, 2024, 1:15 p.m. | 18\u00a0minutes ago \nDescription : FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/rename \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T15:36:31.000000Z"}, {"uuid": "b275e59d-c0ec-445f-bd7a-f7f8133022c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46918", "type": "seen", "source": "https://t.me/cvedetector/5697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46918 - MISP Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46918 \nPublished : Sept. 15, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-15T22:38:11.000000Z"}, {"uuid": "13759f3d-d007-4e27-8dd1-847bca65a87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "seen", "source": "https://t.me/cvedetector/5863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46982 - Next.js Pages Server-Side Rendered Cache Poisoning Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46982 \nPublished : Sept. 17, 2024, 10:15 p.m. | 25\u00a0minutes ago \nDescription : Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a route that is meant to not be cached and send a `Cache-Control: s-maxage=1, stale-while-revalidate` header which some upstream CDNs may cache as well. To be potentially affected all of the following must apply: 1. Next.js between 13.5.1 and 14.2.9, 2. Using pages router, & 3. Using non-dynamic server-side rendered routes e.g. `pages/dashboard.tsx` not `pages/blog/[slug].tsx`. This vulnerability was resolved in Next.js v13.5.7, v14.2.10, and later. We recommend upgrading regardless of whether you can reproduce the issue or not. There are no official or recommended workarounds for this issue, we recommend that users patch to a safe version. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T00:49:08.000000Z"}, {"uuid": "4a9ad22b-bb42-4b91-8f63-0ee5319bb08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46976", "type": "seen", "source": "https://t.me/cvedetector/5861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46976 - \"Backstage Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-46976 \nPublished : Sept. 17, 2024, 9:15 p.m. | 33\u00a0minutes ago \nDescription : Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content that will be executed in the victim's browser when browsing documentation or navigating to an attacker provided link. This has been fixed in the 1.10.13 release of the `@backstage/plugin-techdocs-backend` package. users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T23:58:56.000000Z"}, {"uuid": "34928649-66ef-4f6f-b375-193fee304889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46938", "type": "seen", "source": "https://t.me/cvedetector/5700", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46938 - Sitecore File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46938 \nPublished : Sept. 15, 2024, 10:15 p.m. | 43\u00a0minutes ago \nDescription : An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T01:08:32.000000Z"}, {"uuid": "90c287dc-cafc-4367-9bd3-5263799c22a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46711", "type": "seen", "source": "https://t.me/cvedetector/5567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46711 - MPTCP pm Linux Kernel Double Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46711 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmptcp: pm: fix ID 0 endp usage after multiple re-creations  \n  \n'local_addr_used' and 'add_addr_accepted' are decremented for addresses  \nnot related to the initial subflow (ID0), because the source and  \ndestination addresses of the initial subflows are known from the  \nbeginning: they don't count as \"additional local address being used\" or  \n\"ADD_ADDR being accepted\".  \n  \nIt is then required not to increment them when the entrypoint used by  \nthe initial subflow is removed and re-added during a connection. Without  \nthis modification, this entrypoint cannot be removed and re-added more  \nthan once. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:08.000000Z"}, {"uuid": "d45507aa-271e-4a23-a3f1-bd8a3e77fbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46958", "type": "seen", "source": "https://t.me/cvedetector/5704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46958 - Nextcloud Desktop Client File Permission Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46958 \nPublished : Sept. 16, 2024, 2:15 a.m. | 38\u00a0minutes ago \nDescription : In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files (between the server and client) may become world writable or world readable. This is fixed in 3.13.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T05:19:18.000000Z"}, {"uuid": "210c421a-5092-46a2-ae46-3776f52e3cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46943", "type": "seen", "source": "https://t.me/cvedetector/5702", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46943 - OpenDaylight AAA Cluster Impersonation Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-46943 \nPublished : Sept. 15, 2024, 11:15 p.m. | 32\u00a0minutes ago \nDescription : An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T01:58:40.000000Z"}, {"uuid": "b0cb9f25-ab6a-4bb5-b4a1-1dc53c6515f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46942", "type": "seen", "source": "https://t.me/cvedetector/5701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46942 - OpenDaylight MD-SAL Controller Configuration Flow Entry Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-46942 \nPublished : Sept. 15, 2024, 11:15 p.m. | 32\u00a0minutes ago \nDescription : In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T01:58:39.000000Z"}, {"uuid": "eed92caf-4877-4931-b8d7-be756582fd5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46696", "type": "seen", "source": "https://t.me/cvedetector/5543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46696 - Linux NFSd Uninitialized Memory Access\", \n  \"Content\": \"CVE ID : CVE-2024-46696 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfsd: fix potential UAF in nfsd4_cb_getattr_release  \n  \nOnce we drop the delegation reference, the fields embedded in it are no  \nlonger safe to access. Do that last. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:36.000000Z"}, {"uuid": "02bd3543-61b1-4c6e-a8c2-0ead2d41eaa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46699", "type": "seen", "source": "https://t.me/cvedetector/5545", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46699 - AMD v3d Preemption Enablement Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46699 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/v3d: Disable preemption while updating GPU stats  \n  \nWe forgot to disable preemption around the write_seqcount_begin/end() pair  \nwhile updating GPU stats:  \n  \n  [ ] WARNING: CPU: 2 PID: 12 at include/linux/seqlock.h:221 __seqprop_assert.isra.0+0x128/0x150 [v3d]  \n  [ ] Workqueue: v3d_bin drm_sched_run_job_work [gpu_sched] <...snip...[ ] Call trace:  \n  [ ]  __seqprop_assert.isra.0+0x128/0x150 [v3d]  \n  [ ]  v3d_job_start_stats.isra.0+0x90/0x218 [v3d]  \n  [ ]  v3d_bin_job_run+0x23c/0x388 [v3d]  \n  [ ]  drm_sched_run_job_work+0x520/0x6d0 [gpu_sched]  \n  [ ]  process_one_work+0x62c/0xb48  \n  [ ]  worker_thread+0x468/0x5b0  \n  [ ]  kthread+0x1c4/0x1e0  \n  [ ]  ret_from_fork+0x10/0x20  \n  \nFix it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:41.000000Z"}, {"uuid": "22c2613b-612a-460c-9625-52a0c7bddda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "seen", "source": "https://t.me/cvedetector/5616", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46713 - Apache Linux Kernel Mutex Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46713 \nPublished : Sept. 13, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nperf/aux: Fix AUX buffer serialization  \n  \nOle reported that event->mmap_mutex is strictly insufficient to  \nserialize the AUX buffer, add a per RB mutex to fully serialize it.  \n  \nNote that in the lock order comment the perf_event::mmap_mutex order  \nwas already wrong, that is, it nesting under mmap_lock is not new with  \nthis patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T17:58:03.000000Z"}, {"uuid": "f850620d-e51f-48af-9238-12bcbfb4cd52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46044", "type": "seen", "source": "https://t.me/cvedetector/5600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46044 - Oracle Networking Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46044 \nPublished : Sept. 13, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the fromqossetting function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T16:42:33.000000Z"}, {"uuid": "4c916a16-5582-47ea-bd99-68ebb7c2c307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46049", "type": "seen", "source": "https://t.me/cvedetector/5599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46049 - \"Tenda O6 Stack Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46049 \nPublished : Sept. 13, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overflow vulnerability in the formexeCommand function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T16:42:29.000000Z"}, {"uuid": "a9ce6d2d-0b7b-41b6-9b08-b6121ecbba2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46048", "type": "seen", "source": "https://t.me/cvedetector/5598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46048 - Tenda Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46048 \nPublished : Sept. 13, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : Tenda FH451 v1.0.0.9 has a command injection vulnerability in the formexeCommand function i \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T16:42:28.000000Z"}, {"uuid": "cc2078df-054c-4b53-bdec-7d1aaa8b039e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46047", "type": "seen", "source": "https://t.me/cvedetector/5597", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46047 - \"Vulnerability in Tenda FH451 Stack Overflow in fromDhcpListClient\"\", \n  \"Content\": \"CVE ID : CVE-2024-46047 \nPublished : Sept. 13, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in the fromDhcpListClient function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T16:42:27.000000Z"}, {"uuid": "82f4d74c-df24-4f2a-b3fd-3d84fb408763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46046", "type": "seen", "source": "https://t.me/cvedetector/5596", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46046 - Tenda FH451 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46046 \nPublished : Sept. 13, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda FH451 v1.0.0.9 has a stack overflow vulnerability located in the RouteStatic function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T16:42:27.000000Z"}, {"uuid": "bd853f7d-b6ac-4098-8232-6fb58bdb36a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46045", "type": "seen", "source": "https://t.me/cvedetector/5595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46045 - Tenda CH22 Stack Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46045 \nPublished : Sept. 13, 2024, 2:15 p.m. | 27\u00a0minutes ago \nDescription : Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability located in the frmL7PlotForm function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T16:42:26.000000Z"}, {"uuid": "6c77079a-497a-4bd5-a667-7f53ed46f1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46706", "type": "seen", "source": "https://t.me/cvedetector/5571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46706 - \"Freescale FSL LPUART UARTSTAT Hang on Linux Console Boot\"\", \n  \"Content\": \"CVE ID : CVE-2024-46706 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntty: serial: fsl_lpuart: mark last busy before uart_add_one_port  \n  \nWith \"earlycon initcall_debug=1 loglevel=8\" in bootargs, kernel  \nsometimes boot hang. It is because normal console still is not ready,  \nbut runtime suspend is called, so early console putchar will hang  \nin waiting TRDE set in UARTSTAT.  \n  \nThe lpuart driver has auto suspend delay set to 3000ms, but during  \nuart_add_one_port, a child device serial ctrl will added and probed with  \nits pm runtime enabled(see serial_ctrl.c).  \nThe runtime suspend call path is:  \ndevice_add  \n     |-> bus_probe_device  \n           |->device_initial_probe  \n            |->__device_attach  \n                         |-> pm_runtime_get_sync(dev->parent);  \n    |-> pm_request_idle(dev);  \n    |-> pm_runtime_put(dev->parent);  \n  \nSo in the end, before normal console ready, the lpuart get runtime  \nsuspended. And earlycon putchar will hang.  \n  \nTo address the issue, mark last busy just after pm_runtime_enable,  \nthree seconds is long enough to switch from bootconsole to normal  \nconsole. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:14.000000Z"}, {"uuid": "7fb037f0-2d7a-494a-92a4-bf5a0e623f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46710", "type": "seen", "source": "https://t.me/cvedetector/5570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46710 - VMware vMWGFX Unmapped Active Read Buffer Race Condition\", \n  \"Content\": \"CVE ID : CVE-2024-46710 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/vmwgfx: Prevent unmapping active read buffers  \n  \nThe kms paths keep a persistent map active to read and compare the cursor  \nbuffer. These maps can race with each other in simple scenario where:  \na) buffer \"a\" mapped for update  \nb) buffer \"a\" mapped for compare  \nc) do the compare  \nd) unmap \"a\" for compare  \ne) update the cursor  \nf) unmap \"a\" for update  \nAt step \"e\" the buffer has been unmapped and the read contents is bogus.  \n  \nPrevent unmapping of active read buffers by simply keeping a count of  \nhow many paths have currently active maps and unmap only when the count  \nreaches 0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:13.000000Z"}, {"uuid": "635acde8-7f3a-447a-84fa-1b3bff709fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46702", "type": "seen", "source": "https://t.me/cvedetector/5569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46702 - Thunderbolt XDomain Unlocking Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46702 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nthunderbolt: Mark XDomain as unplugged when router is removed  \n  \nI noticed that when we do discrete host router NVM upgrade and it gets  \nhot-removed from the PCIe side as a result of NVM firmware authentication,  \nif there is another host connected with enabled paths we hang in tearing  \nthem down. This is due to fact that the Thunderbolt networking driver  \nalso tries to cleanup the paths and ends up blocking in  \ntb_disconnect_xdomain_paths() waiting for the domain lock.  \n  \nHowever, at this point we already cleaned the paths in tb_stop() so  \nthere is really no need for tb_disconnect_xdomain_paths() to do that  \nanymore. Furthermore it already checks if the XDomain is unplugged and  \nbails out early so take advantage of that and mark the XDomain as  \nunplugged when we remove the parent router. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:13.000000Z"}, {"uuid": "079e0037-dd5b-4763-9ced-5bf56ed352d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46703", "type": "seen", "source": "https://t.me/cvedetector/5568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46703 - Linux Kernel PM Domain Crash Vulnerability in 8250 OMAP Serial Driver.\", \n  \"Content\": \"CVE ID : CVE-2024-46703 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRevert \"serial: 8250_omap: Set the console genpd always on if no console suspend\"  \n  \nThis reverts commit 68e6939ea9ec3d6579eadeab16060339cdeaf940.  \n  \nKevin reported that this causes a crash during suspend on platforms that  \ndont use PM domains. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:09.000000Z"}, {"uuid": "19c0c89d-a82b-4105-a7ef-5c6f6da94f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46701", "type": "seen", "source": "https://t.me/cvedetector/5566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46701 - \"tmpfs Infinite Directory Read Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46701 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nlibfs: fix infinite directory reads for offset dir  \n  \nAfter we switch tmpfs dir operations from simple_dir_operations to  \nsimple_offset_dir_operations, every rename happened will fill new dentry  \nto dest dir's maple tree(&SHMEM_I(inode)->dir_offsets->mt) with a free  \nkey starting with octx->newx_offset, and then set newx_offset equals to  \nfree key + 1. This will lead to infinite readdir combine with rename  \nhappened at the same time, which fail generic/736 in xfstests(detail show  \nas below).  \n  \n1. create 5000 files(1 2 3...) under one dir  \n2. call readdir(man 3 readdir) once, and get one entry  \n3. rename(entry, \"TEMPFILE\"), then rename(\"TEMPFILE\", entry)  \n4. loop 2~3, until readdir return nothing or we loop too many  \n   times(tmpfs break test with the second condition)  \n  \nWe choose the same logic what commit 9b378f6ad48cf (\"btrfs: fix infinite  \ndirectory reads\") to fix it, record the last_index when we open dir, and  \ndo not emit the entry which index >= last_index. The file->private_data  \nnow used in offset dir can use directly to do this, and we also update  \nthe last_index when we llseek the dir file.  \n  \n[brauner: only update last_index after seek when offset is zero like Jan suggested] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:07.000000Z"}, {"uuid": "04fb47d7-b6df-4e73-ad25-f475f771e7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46709", "type": "seen", "source": "https://t.me/cvedetector/5565", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46709 - VMWare Graphics Driver Direct Memory Mapping Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46709 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/vmwgfx: Fix prime with external buffers  \n  \nMake sure that for external buffers mapping goes through the dma_buf  \ninterface instead of trying to access pages directly.  \n  \nExternal buffers might not provide direct access to readable/writable  \npages so to make sure the bo's created from external dma_bufs can be  \nread dma_buf interface has to be used.  \n  \nFixes crashes in IGT's kms_prime with vgem. Regular desktop usage won't  \ntrigger this due to the fact that virtual machines will not have  \nmultiple GPUs but it enables better test coverage in IGT. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:06.000000Z"}, {"uuid": "bec8e605-2dad-4667-86ed-b2186daf0e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46708", "type": "seen", "source": "https://t.me/cvedetector/5564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46708 - QCOM Linux Kernel Pin Control Offset Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46708 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: qcom: x1e80100: Fix special pin offsets  \n  \nRemove the erroneus 0x100000 offset to prevent the boards from crashing  \non pin state setting, as well as for the intended state changes to take  \neffect. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:06.000000Z"}, {"uuid": "6649c70c-f4c3-4e9d-b596-c2611328eabc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46707", "type": "seen", "source": "https://t.me/cvedetector/5563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46707 - KVM VMware Hypervisor Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46707 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nKVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3  \n  \nOn a system with a GICv3, if a guest hasn't been configured with  \nGICv3 and that the host is not capable of GICv2 emulation,  \na write to any of the ICC_*SGI*_EL1 registers is trapped to EL2.  \n  \nWe therefore try to emulate the SGI access, only to hit a NULL  \npointer as no private interrupt is allocated (no GIC, remember?).  \n  \nThe obvious fix is to give the guest what it deserves, in the  \nshape of a UNDEF exception. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:02.000000Z"}, {"uuid": "15660fae-88ae-4f33-b590-220323186f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46705", "type": "seen", "source": "https://t.me/cvedetector/5562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46705 - Vulnerability Title: Intel Xeon Edge Linux Kernel Memory Mapping Unauthorized Access\", \n  \"Content\": \"CVE ID : CVE-2024-46705 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/xe: reset mmio mappings with devm  \n  \nSet our various mmio mappings to NULL. This should make it easier to  \ncatch something rogue trying to mess with mmio after device removal. For  \nexample, we might unmap everything and then start hitting some mmio  \naddress which has already been unmamped by us and then remapped by  \nsomething else, causing all kinds of carnage. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:01.000000Z"}, {"uuid": "1aefc983-c48d-48c2-b27e-1eaa0e76a523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46704", "type": "seen", "source": "https://t.me/cvedetector/5561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46704 - Linux Kernel Workqueue: Data Race Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46704 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nworkqueue: Fix spruious data race in __flush_work()  \n  \nWhen flushing a work item for cancellation, __flush_work() knows that it  \nexclusively owns the work item through its PENDING bit. 134874e2eee9  \n(\"workqueue: Allow cancel_work_sync() and disable_work() from atomic  \ncontexts on BH work items\") added a read of @work->data to determine whether  \nto use busy wait for BH work items that are being canceled. While the read  \nis safe when @from_cancel, @work->data was read before testing @from_cancel  \nto simplify code structure:  \n  \n data = *work_data_bits(work);  \n if (from_cancel &&  \n     !WARN_ON_ONCE(data & WORK_STRUCT_PWQ) && (data & WORK_OFFQ_BH)) {  \n  \nWhile the read data was never used if !@from_cancel, this could trigger  \nKCSAN data race detection spuriously:  \n  \n  ==================================================================  \n  BUG: KCSAN: data-race in __flush_work / __flush_work  \n  \n  write to 0xffff8881223aa3e8 of 8 bytes by task 3998 on cpu 0:  \n   instrument_write include/linux/instrumented.h:41 [inline]  \n   ___set_bit include/asm-generic/bitops/instrumented-non-atomic.h:28 [inline]  \n   insert_wq_barrier kernel/workqueue.c:3790 [inline]  \n   start_flush_work kernel/workqueue.c:4142 [inline]  \n   __flush_work+0x30b/0x570 kernel/workqueue.c:4178  \n   flush_work kernel/workqueue.c:4229 [inline]  \n   ...  \n  \n  read to 0xffff8881223aa3e8 of 8 bytes by task 50 on cpu 1:  \n   __flush_work+0x42a/0x570 kernel/workqueue.c:4188  \n   flush_work kernel/workqueue.c:4229 [inline]  \n   flush_delayed_work+0x66/0x70 kernel/workqueue.c:4251  \n   ...  \n  \n  value changed: 0x0000000000400000 -> 0xffff88810006c00d  \n  \nReorganize the code so that @from_cancel is tested before @work->data is  \naccessed. The only problem is triggering KCSAN detection spuriously. This  \nshouldn't need READ_ONCE() or other access qualifiers.  \n  \nNo functional changes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:36:00.000000Z"}, {"uuid": "a551c634-8dec-49bb-964d-df63e5d5998b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46997", "type": "seen", "source": "https://t.me/cvedetector/6190", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46997 - DataEase Remote Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46997 \nPublished : Sept. 23, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by adding a carefully constructed h2 data source connection string. The vulnerability has been fixed in v2.10.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T18:49:36.000000Z"}, {"uuid": "377c17c9-c8a1-4670-b4f5-c196220f3213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46985", "type": "seen", "source": "https://t.me/cvedetector/6189", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46985 - DataEase XML External Entity Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46985 \nPublished : Sept. 23, 2024, 4:15 p.m. | 27\u00a0minutes ago \nDescription : DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, there is an XML external entity injection vulnerability in the static resource upload interface of DataEase. An attacker can construct a payload to implement intranet detection and file reading. The vulnerability has been fixed in v2.10.1. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T18:49:35.000000Z"}, {"uuid": "8d1434f1-4303-4908-b6a5-aa827c8f3e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46712", "type": "seen", "source": "https://t.me/cvedetector/5558", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46712 - VMware drm Driver: Unauthenticated Coherent Dumb Buffer Disable Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46712 \nPublished : Sept. 13, 2024, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/vmwgfx: Disable coherent dumb buffers without 3d  \n  \nCoherent surfaces make only sense if the host renders to them using  \naccelerated apis. Without 3d the entire content of dumb buffers stays  \nin the guest making all of the extra work they're doing to synchronize  \nbetween guest and host useless.  \n  \nConfigurations without 3d also tend to run with very low graphics  \nmemory limits. The pinned console fb, mob cursors and graphical login  \nmanager tend to run out of 16MB graphics memory that those guests use.  \n  \nFix it by making sure the coherent dumb buffers are only used on  \nconfigs with 3d enabled. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T09:35:55.000000Z"}, {"uuid": "6a3e61fe-5a0a-462f-a435-8aa27e565c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46685", "type": "seen", "source": "https://t.me/cvedetector/5553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46685 - Linux kernel pinctrl Single NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-46685 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: single: fix potential NULL dereference in pcs_get_function()  \n  \npinmux_generic_get_function() can return NULL and the pointer 'function'  \nwas dereferenced without checking against NULL. Add checking of pointer  \n'function' in pcs_get_function().  \n  \nFound by code review. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:50.000000Z"}, {"uuid": "943e99bc-c4ce-4df3-8bd6-ecb5ee35e4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46686", "type": "seen", "source": "https://t.me/cvedetector/5552", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46686 - NetApp SMB RDMA NULL Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-46686 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsmb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()  \n  \nThis happens when called from SMB2_read() while using rdma  \nand reaching the rdma_readwrite_threshold. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:49.000000Z"}, {"uuid": "ccf7aa37-8d60-46e3-8c23-6e39cb014ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46697", "type": "seen", "source": "https://t.me/cvedetector/5551", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46697 - NFSd Use-After-Free Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46697 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfsd: ensure that nfsd4_fattr_args.context is zeroed out  \n  \nIf nfsd4_encode_fattr4 ends up doing a \"goto out\" before we get to  \nchecking for the security label, then args.context will be set to  \nuninitialized junk on the stack, which we'll then try to free.  \nInitialize it early. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T13:10:59.000000Z"}, {"uuid": "02ee1300-735c-4e84-a8ab-c8f70b776486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46693", "type": "seen", "source": "https://t.me/cvedetector/5549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46693 - Qualcomm QCOM Linux Kernel NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-46693 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsoc: qcom: pmic_glink: Fix race during initialization  \n  \nAs pointed out by Stephen Boyd it is possible that during initialization  \nof the pmic_glink child drivers, the protection-domain notifiers fires,  \nand the associated work is scheduled, before the client registration  \nreturns and as a result the local \"client\" pointer has been initialized.  \n  \nThe outcome of this is a NULL pointer dereference as the \"client\"  \npointer is blindly dereferenced.  \n  \nTimeline provided by Stephen:  \n CPU0                               CPU1  \n ----                               ----  \n ucsi->client = NULL;  \n devm_pmic_glink_register_client()  \n  client->pdr_notify(client->priv, pg->client_state)  \n   pmic_glink_ucsi_pdr_notify()  \n    schedule_work(&ucsi->register_work)  \n      \n                                    pmic_glink_ucsi_register()  \n                                     ucsi_register()  \n                                      pmic_glink_ucsi_read_version()  \n                                       pmic_glink_ucsi_read()  \n                                        pmic_glink_ucsi_read()  \n                                         pmic_glink_send(ucsi->client)  \n                                           \n ucsi->client = client // Too late!  \n  \nThis code is identical across the altmode, battery manager and usci  \nchild drivers.  \n  \nResolve this by splitting the allocation of the \"client\" object and the  \nregistration thereof into two operations.  \n  \nThis only happens if the protection domain registry is populated at the  \ntime of registration, which by the introduction of commit '1ebcde047c54  \n(\"soc: qcom: add pd-mapper implementation\")' became much more likely. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:47.000000Z"}, {"uuid": "3a65b895-cd81-4e0f-9a2f-c47ae143a44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46694", "type": "seen", "source": "https://t.me/cvedetector/5548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46694 - AMD Display Null Object Pointer Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46694 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: avoid using null object of framebuffer  \n  \nInstead of using state->fb->obj[0] directly, get object from framebuffer  \nby calling drm_gem_fb_get_obj() and return error code when object is  \nnull to avoid using null object of framebuffer.  \n  \n(cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:43.000000Z"}, {"uuid": "9d0ca2ad-a389-41c9-a7b3-5d39f8404f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46692", "type": "seen", "source": "https://t.me/cvedetector/5547", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46692 - Qualcomm qcom Firmware Atomic Sleep Mode Deadlock\", \n  \"Content\": \"CVE ID : CVE-2024-46692 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfirmware: qcom: scm: Mark get_wq_ctx() as atomic call  \n  \nCurrently get_wq_ctx() is wrongly configured as a standard call. When two  \nSMC calls are in sleep and one SMC wakes up, it calls get_wq_ctx() to  \nresume the corresponding sleeping thread. But if get_wq_ctx() is  \ninterrupted, goes to sleep and another SMC call is waiting to be allocated  \na waitq context, it leads to a deadlock.  \n  \nTo avoid this get_wq_ctx() must be an atomic call and can't be a standard  \nSMC call. Hence mark get_wq_ctx() as a fast call. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:42.000000Z"}, {"uuid": "81f8ad9c-90b3-4f80-9678-115e4c86bb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46700", "type": "seen", "source": "https://t.me/cvedetector/5546", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46700 - AMDGPU Linux Kernel Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46700 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu/mes: fix mes ring buffer overflow  \n  \nwait memory room until enough before writing mes packets  \nto avoid ring buffer overflow.  \n  \nv2: squash in sched_hw_submission fix  \n  \n(cherry picked from commit 34e087e8920e635c62e2ed6a758b0cd27f836d13) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:41.000000Z"}, {"uuid": "b2dd91d4-2d33-4cfd-b561-c8835419efc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46698", "type": "seen", "source": "https://t.me/cvedetector/5544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46698 - Cisco Linux Kernel Video NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-46698 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvideo/aperture: optionally match the device in sysfb_disable()  \n  \nIn aperture_remove_conflicting_pci_devices(), we currently only  \ncall sysfb_disable() on vga class devices.  This leads to the  \nfollowing problem when the pimary device is not VGA compatible:  \n  \n1. A PCI device with a non-VGA class is the boot display  \n2. That device is probed first and it is not a VGA device so  \n   sysfb_disable() is not called, but the device resources  \n   are freed by aperture_detach_platform_device()  \n3. Non-primary GPU has a VGA class and it ends up calling sysfb_disable()  \n4. NULL pointer dereference via sysfb_disable() since the resources  \n   have already been freed by aperture_detach_platform_device() when  \n   it was called by the other device.  \n  \nFix this by passing a device pointer to sysfb_disable() and checking  \nthe device to determine if we should execute it or not.  \n  \nv2: Fix build when CONFIG_SCREEN_INFO is not set  \nv3: Move device check into the mutex  \n    Drop primary variable in aperture_remove_conflicting_pci_devices()  \n    Drop __init on pci sysfb_pci_dev_is_enabled() \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:40.000000Z"}, {"uuid": "e5190e5d-4205-47c5-bf40-83d24dedc96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46695", "type": "seen", "source": "https://t.me/cvedetector/5542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46695 - \"NFS SELinux Smack: Root Squashing Permission Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-46695 \nPublished : Sept. 13, 2024, 6:15 a.m. | 29\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nselinux,smack: don't bypass permissions check in inode_setsecctx hook  \n  \nMarek Gresko reports that the root user on an NFS client is able to  \nchange the security labels on files on an NFS filesystem that is  \nexported with root squashing enabled.  \n  \nThe end of the kerneldoc comment for __vfs_setxattr_noperm() states:  \n  \n *  This function requires the caller to lock the inode's i_mutex before it  \n *  is executed. It also assumes that the caller will make the appropriate  \n *  permission checks.  \n  \nnfsd_setattr() does do permissions checking via fh_verify() and  \nnfsd_permission(), but those don't do all the same permissions checks  \nthat are done by security_inode_setxattr() and its related LSM hooks do.  \n  \nSince nfsd_setattr() is the only consumer of security_inode_setsecctx(),  \nsimplest solution appears to be to replace the call to  \n__vfs_setxattr_noperm() with a call to __vfs_setxattr_locked().  This  \nfixes the above issue and has the added benefit of causing nfsd to  \nrecall conflicting delegations on a file when a client tries to change  \nits security label. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T08:45:35.000000Z"}, {"uuid": "a164125b-ce0c-45a1-b09a-091d6ab1a78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4660", "type": "seen", "source": "https://t.me/cvedetector/5504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4660 - \"GitLab EE Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-4660 \nPublished : Sept. 12, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T19:48:10.000000Z"}, {"uuid": "5540ad53-c80e-4d89-8492-8f88b8da78fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4612", "type": "seen", "source": "https://t.me/cvedetector/5503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4612 - GitLab OAuth Open Redirectumping\", \n  \"Content\": \"CVE ID : CVE-2024-4612 \nPublished : Sept. 12, 2024, 5:15 p.m. | 32\u00a0minutes ago \nDescription : An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T19:48:09.000000Z"}, {"uuid": "bbac9893-c512-4611-b6c0-355faa57dd55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46645", "type": "seen", "source": "https://t.me/cvedetector/6134", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46645 - eNMS Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46645 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:15.000000Z"}, {"uuid": "3944d508-d28c-499f-9f11-db0677154699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46375", "type": "seen", "source": "https://t.me/cvedetector/6028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46375 - Best House Rental Management System PHP File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46375 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:55.000000Z"}, {"uuid": "8fd2b665-212c-4ab9-aa08-3f4e88c447cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46373", "type": "seen", "source": "https://t.me/cvedetector/6027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46373 - \"Dedecms File Upload RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-46373 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:55.000000Z"}, {"uuid": "59992fa3-cbb7-4802-afbd-80a9149ba302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46374", "type": "seen", "source": "https://t.me/cvedetector/6026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46374 - Best House Rental Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46374 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:51.000000Z"}, {"uuid": "ec1ba4ae-384e-46b0-a895-cc0047a3ff07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46639", "type": "seen", "source": "https://t.me/cvedetector/6209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46639 - HelpDeskZ Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46639 \nPublished : Sept. 23, 2024, 8:15 p.m. | 39\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in HelpDeskZ v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field of Custom Fields message box. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T23:00:40.000000Z"}, {"uuid": "f3389d9a-e26c-462e-ac5b-21ca7135503a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46241", "type": "seen", "source": "https://t.me/cvedetector/6183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46241 - PHPGurukul Dairy Farm Shop Management System XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46241 \nPublished : Sept. 23, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting (XSS) via the pname parameter in add_product.php and edit_product.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T16:19:03.000000Z"}, {"uuid": "6484564b-e147-405f-a026-e4555a8f91ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46544", "type": "seen", "source": "https://t.me/cvedetector/6180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46544 - Apache Tomcat Connectors Shared Memory Permission Tampering\", \n  \"Content\": \"CVE ID : CVE-2024-46544 \nPublished : Sept. 23, 2024, 11:15 a.m. | 30\u00a0minutes ago \nDescription : Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.  \n  \nThis issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.  \n  \nUsers are recommended to upgrade to version 1.2.50, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T13:48:30.000000Z"}, {"uuid": "3f428b2f-f19f-422c-9021-2f98ade4500c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46654", "type": "seen", "source": "https://t.me/cvedetector/6121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46654 - Maccms10 Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-46654 \nPublished : Sept. 20, 2024, 7:15 p.m. | 37\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T22:15:43.000000Z"}, {"uuid": "e944ca36-4503-4bc4-bb62-357ab872fe23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46644", "type": "seen", "source": "https://t.me/cvedetector/6133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46644 - eNMS Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46644 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:14.000000Z"}, {"uuid": "ca2ac451-7461-4933-88f0-5b552acfd5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46640", "type": "seen", "source": "https://t.me/cvedetector/6132", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46640 - SeaCMS MySQL Severe Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-46640 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:13.000000Z"}, {"uuid": "da6e4df9-a2f2-47c7-8cd3-ecb6b85b76f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46103", "type": "seen", "source": "https://t.me/cvedetector/6131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46103 - \"SEMCMS SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46103 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:10.000000Z"}, {"uuid": "bdb4ea38-b394-42fc-aa98-1d02facecf32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46646", "type": "seen", "source": "https://t.me/cvedetector/6135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46646 - eNMS Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-46646 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:16.000000Z"}, {"uuid": "4a75b7e2-d516-4103-bf37-9ccb780e3002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46101", "type": "seen", "source": "https://t.me/cvedetector/6130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46101 - GDidees CMS File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46101 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : GDidees CMS <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:09.000000Z"}, {"uuid": "edd45c05-4e26-42d6-8747-ae76a947060b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46649", "type": "seen", "source": "https://t.me/cvedetector/6129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46649 - \"eNMS Directory Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-46649 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:08.000000Z"}, {"uuid": "8e607d6b-0e09-4b5f-bf88-ef1224ce1b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46648", "type": "seen", "source": "https://t.me/cvedetector/6128", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46648 - eNMS Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46648 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:07.000000Z"}, {"uuid": "23496603-0ee8-49ba-a796-d287d4bdcc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46647", "type": "seen", "source": "https://t.me/cvedetector/6127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46647 - eNMS Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46647 \nPublished : Sept. 20, 2024, 9:15 p.m. | 39\u00a0minutes ago \nDescription : eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T23:56:06.000000Z"}, {"uuid": "4b8f1c72-e93e-4a4f-a337-ec4eb72d74d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46591", "type": "seen", "source": "https://t.me/cvedetector/5991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46591 - Draytek Vigor 3910 denial-of-service buffer overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46591 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:23.000000Z"}, {"uuid": "27aa06c1-a60b-4105-a91f-0066b4d90fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46589", "type": "seen", "source": "https://t.me/cvedetector/5990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46589 - Draytek Vigor 3910 Buffer Overflow Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2024-46589 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:22.000000Z"}, {"uuid": "a4920948-dff2-418c-81f4-b773ed5d1c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46989", "type": "seen", "source": "https://t.me/cvedetector/6007", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46989 - Spicedb Permission Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46989 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the same relation can result in no permission being returned when permission is expected. If the resource has multiple groups, and each group is caveated, it is possible for the returned permission to be \"no permission\" when permission is expected. Permission is returned as NO_PERMISSION when PERMISSION is expected on the CheckPermission API. This issue has been addressed in release version 1.35.3. Users are advised to upgrade. Users unable to upgrade should not use caveats or avoid the use of caveats on an indirect subject type with multiple entries. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:55:57.000000Z"}, {"uuid": "fdd22fba-3f39-465d-8f35-2d36b03c92d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46986", "type": "seen", "source": "https://t.me/cvedetector/6006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46986 - Camaleon CMS Ruby on Rails File Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46986 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on (depending on the permissions of the underlying filesystem). E.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:55:56.000000Z"}, {"uuid": "2aa27d2d-c2f1-40c2-9c4f-e32405318141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46987", "type": "seen", "source": "https://t.me/cvedetector/6005", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46987 - Camaleon CMS MediaController Path Traversal Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-46987 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's download_private_file method allows authenticated users to download any file on the web server Camaleon CMS is running on (depending on the file permissions). This issue may lead to Information Disclosure. This issue has been addressed in release version 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:55:55.000000Z"}, {"uuid": "304db10a-6cb2-413a-8a01-fa3cc31cc44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46652", "type": "seen", "source": "https://t.me/cvedetector/6110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46652 - Tenda AC8 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46652 \nPublished : Sept. 20, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T18:54:58.000000Z"}, {"uuid": "eaaee3e2-a2ba-44c9-96e4-e200cd4e4f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46999", "type": "seen", "source": "https://t.me/cvedetector/6091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46999 - Zitadel Deactivated User Grant Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-46999 \nPublished : Sept. 20, 2024, 12:15 a.m. | 41\u00a0minutes ago \nDescription : Zitadel is an open source identity management platform. ZITADEL's user grants deactivation mechanism did not work correctly. Deactivated user grants were still provided in token, which could lead to unauthorized access to applications and resources. Additionally, the management and auth API always returned the state as active or did not provide any information about the state. Versions 2.62.1, 2.61.1, 2.60.2, 2.59.3, 2.58.5, 2.57.5, 2.56.6, 2.55.8, and 2.54.10 have been released which address this issue. Users are advised to upgrade. Users unable to upgrade may explicitly remove the user grants to make sure the user does not get access anymore. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T03:01:56.000000Z"}, {"uuid": "2bbd76c7-69ac-4aee-9bdb-88df16f3c095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46983", "type": "seen", "source": "https://t.me/cvedetector/6088", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46983 - SOFA Hessian Deserialize Gadget Chain RCE\", \n  \"Content\": \"CVE ID : CVE-2024-46983 \nPublished : Sept. 19, 2024, 11:15 p.m. | 41\u00a0minutes ago \nDescription : sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd. The SOFA Hessian protocol uses a blacklist mechanism to restrict deserialization of potentially dangerous classes for security protection. But there is a gadget chain that can bypass the SOFA Hessian blacklist protection mechanism, and this gadget chain only relies on JDK and does not rely on any third-party components. This issue is fixed by an update to the blacklist, users can upgrade to sofahessian version 3.5.5 to avoid this issue. Users unable to upgrade may maintain a blacklist themselves in the directory `external/serialize.blacklist`. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T02:11:48.000000Z"}, {"uuid": "691dcdc0-594f-45ef-a29e-4834fdb2bfcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46394", "type": "seen", "source": "https://t.me/cvedetector/6052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46394 - FrogCMS CSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-46394 \nPublished : Sept. 19, 2024, 2:15 p.m. | 42\u00a0minutes ago \nDescription : FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/?/user/add \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T16:59:40.000000Z"}, {"uuid": "b4907e9c-a95b-4496-ba18-fdf2c0468b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46382", "type": "seen", "source": "https://t.me/cvedetector/6051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46382 - Litemall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46382 \nPublished : Sept. 19, 2024, 1:15 p.m. | 43\u00a0minutes ago \nDescription : A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminGoodscontroller.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T16:09:32.000000Z"}, {"uuid": "2d05cb7a-ebb8-4652-83cc-cee2462dc1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46984", "type": "seen", "source": "https://t.me/cvedetector/6081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46984 - Woodstox WstxInputFactory XML External Entity Server-Side Request Forgery in Referencevalidator\", \n  \"Content\": \"CVE ID : CVE-2024-46984 \nPublished : Sept. 19, 2024, 11:15 p.m. | 41\u00a0minutes ago \nDescription : The reference validator is a tool to perform advanced validation of FHIR resources for TI applications and interoperability standards. The profile location routine in the referencevalidator commons package is vulnerable to `XML External Entities` attack due to insecure defaults of the used Woodstox WstxInputFactory. A malicious XML resource can lead to network requests issued by referencevalidator and thus to a `Server Side Request Forgery` attack. The vulnerability impacts applications which use referencevalidator to process XML resources from untrusted sources. The problem has been patched with the 2.5.1 version of the referencevalidator. Users are strongly recommended to update to this version or a more recent one. A pre-processing or manual analysis of input XML resources on existence of DTD definitions or external entities can mitigate the problem. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-20T02:11:40.000000Z"}, {"uuid": "351e283e-9add-4606-9cbd-58b1c80a866c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46946", "type": "seen", "source": "https://t.me/cvedetector/6041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46946 - LangChain Experimental Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46946 \nPublished : Sept. 19, 2024, 5:15 a.m. | 28\u00a0minutes ago \nDescription : langchain_experimental (aka LangChain Experimental) 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify (which uses eval) in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 (2023-10-05). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T07:47:57.000000Z"}, {"uuid": "f9c7f7bc-1737-4eb6-9757-0b5bf1d2c34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46377", "type": "seen", "source": "https://t.me/cvedetector/6030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46377 - Best House Rental Management System Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46377 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:57.000000Z"}, {"uuid": "7450f5e5-c738-47c2-a8f4-8966d7a51f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46376", "type": "seen", "source": "https://t.me/cvedetector/6029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46376 - Best House Rental Management System Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46376 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:56.000000Z"}, {"uuid": "13981fc9-5652-49f4-9823-cbb4fa287c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46372", "type": "seen", "source": "https://t.me/cvedetector/6024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46372 - DedeCMS Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-46372 \nPublished : Sept. 18, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T00:16:49.000000Z"}, {"uuid": "01300f49-72b1-4174-93a2-17185d83633b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46990", "type": "seen", "source": "https://t.me/cvedetector/6000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46990 - Directus Localhost Bypass via Loopback Devices\", \n  \"Content\": \"CVE ID : CVE-2024-46990 \nPublished : Sept. 18, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.0.0` filter a user may bypass this block by using other registered loopback devices (like `127.0.0.2` - `127.127.127.127`). This issue has been addressed in release versions 10.13.3 and 11.1.0. Users are advised to upgrade. Users unable to upgrade may block this bypass by manually adding the `127.0.0.0/8` CIDR range which will block access to any `127.X.X.X` ip instead of just `127.0.0.1`. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:05:48.000000Z"}, {"uuid": "a16479be-1865-43d7-87f9-38bee2f07718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46086", "type": "seen", "source": "https://t.me/cvedetector/5998", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46086 - FrogCMS CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-46086 \nPublished : Sept. 18, 2024, 4:15 p.m. | 41\u00a0minutes ago \nDescription : FrogCMS V0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/plugin/file_manager/delete/123 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T19:15:42.000000Z"}, {"uuid": "73fc691f-46d6-431c-a6af-eb843f0710b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46581", "type": "seen", "source": "https://t.me/cvedetector/5997", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46581 - Draytek Vigor 3910 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46581 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:32.000000Z"}, {"uuid": "e32c8490-6b31-4506-8da6-b4e984d577d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46582", "type": "seen", "source": "https://t.me/cvedetector/5996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46582 - Draytek Vigor 3910 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46582 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:31.000000Z"}, {"uuid": "01ab846a-4443-4373-82ea-d688729be213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46978", "type": "seen", "source": "https://t.me/cvedetector/6012", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46978 - XWiki Platform Notification Filter Preference Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46978 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible for any user knowing the ID of a notification filter preference of another user, to enable/disable it or even delete it. The impact is that the target user might start loosing notifications on some pages because of this. This vulnerability is present in XWiki since 13.2-rc-1. This vulnerability has been patched in XWiki 14.10.21, 15.5.5, 15.10.1, 16.0-rc-1. The patch consists in checking properly the rights of the user before performing any action on the filters. Users are advised to upgrade. It's possible to fix manually the vulnerability by editing the document `XWiki.Notifications.Code.NotificationPreferenceService` to apply the changes performed in commit e8acc9d8e6af7dfbfe70716ded431642ae4a6dd4. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:56:04.000000Z"}, {"uuid": "03d2f553-b21a-4188-a109-efe8b1f72dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46959", "type": "seen", "source": "https://t.me/cvedetector/6011", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46959 - Runofast Indoor Security Camera Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-46959 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account. This allows access to the /stream1 URI via the rtsp:// protocol to receive the video and audio stream. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:56:03.000000Z"}, {"uuid": "db559d52-f11f-4f3a-8d3d-f5657a20add9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46979", "type": "seen", "source": "https://t.me/cvedetector/6004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46979 - XWiki Platform Public User Notification Filter Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-46979 \nPublished : Sept. 18, 2024, 6:15 p.m. | 31\u00a0minutes ago \nDescription : XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to get access to notification filters of any user by using a URL such as `xwiki/bin/get/XWiki/Notifications/Code/NotificationFilterPreferenceLivetableResults?outputSyntax=plain&type=custom&user=`. This vulnerability impacts all versions of XWiki since 13.2-rc-1. The filters do not provide much information (they mainly contain references which are public data in XWiki), though some info could be used in combination with other vulnerabilities. This vulnerability has been patched in XWiki 14.10.21, 15.5.5, 15.10.1, 16.0RC1.  The patch consists in checking the rights of the user when sending the data. Users are advised to upgrade. It's possible to workaround the vulnerability by applying manually the patch: it's possible for an administrator to edit directly the document `XWiki.Notifications.Code.NotificationFilterPreferenceLivetableResults` to apply the same changes as in the patch. See commit c8c6545f9bde6f5aade994aa5b5903a67b5c2582. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T20:55:54.000000Z"}, {"uuid": "656928e6-e7c1-4d88-a8f6-2aac97413f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46571", "type": "seen", "source": "https://t.me/cvedetector/5995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46571 - Draytek Vigor 3910 Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46571 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:30.000000Z"}, {"uuid": "19efa61b-24b6-4eb9-9ec2-d6469dea8201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46580", "type": "seen", "source": "https://t.me/cvedetector/5994", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46580 - Draytek Vigor 3910 Denial of Service Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-46580 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:29.000000Z"}, {"uuid": "0a1f32f6-ddcf-4401-a48f-8f6efc8ed14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46568", "type": "seen", "source": "https://t.me/cvedetector/5993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46568 - Draytek Vigor 3910 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46568 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:28.000000Z"}, {"uuid": "0cca88e2-9645-4ea4-89f6-690726f3e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46597", "type": "seen", "source": "https://t.me/cvedetector/5986", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46597 - Draytek Vigor 3910 Buffer Overflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-46597 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:15.000000Z"}, {"uuid": "e245978c-0126-490b-ac3f-05df66c51f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46598", "type": "seen", "source": "https://t.me/cvedetector/5985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46598 - Draytek Vigor 3910 CGI Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46598 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:14.000000Z"}, {"uuid": "799adf9c-0593-4c9c-b45c-8b99415a7021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46595", "type": "seen", "source": "https://t.me/cvedetector/5984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-46595 - Draytek Vigor 3910 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-46595 \nPublished : Sept. 18, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T17:35:13.000000Z"}, {"uuid": "84328b62-4443-4ae5-a0e2-bc133f77ad52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4629", "type": "seen", "source": "https://t.me/cvedetector/4721", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4629 - Keycloak Brute Force Protection Timing Attack\", \n  \"Content\": \"CVE ID : CVE-2024-4629 \nPublished : Sept. 3, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts before the system locks them out. This timing loophole enables attackers to make more guesses at passwords than intended, potentially compromising account security on affected systems. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-03T23:19:55.000000Z"}, {"uuid": "38b02fbc-d0bb-492f-aebd-51ba8c115b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4607", "type": "seen", "source": "https://t.me/cvedetector/2443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4607 - Arm Ltd Bifrost/Valhall/5th Gen GPU Architecture Kernel Driver After Free Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-4607 \nPublished : Aug. 5, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p0; Valhall GPU Kernel Driver: from r41p0 through r49p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T14:44:33.000000Z"}, {"uuid": "70a53ee2-518e-4973-afe4-259687237b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4643", "type": "seen", "source": "https://t.me/cvedetector/2339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4643 - Elementor WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-4643 \nPublished : Aug. 2, 2024, 10:16 a.m. | 36\u00a0minutes ago \nDescription : The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018end_redirect_link\u2019 parameter in versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T13:11:06.000000Z"}, {"uuid": "fb289028-391a-45f7-b9f8-1ddf5998e803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4655", "type": "seen", "source": "https://t.me/cvedetector/634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4655 - The Ultimate Blocks WordPress plugin before 3.1.9\", \n  \"Content\": \"CVE ID : CVE-2024-4655 \nPublished : July 11, 2024, 6:15 a.m. | 25\u00a0minutes ago \nDescription : The Ultimate Blocks  WordPress plugin before 3.1.9 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T08:42:00.000000Z"}, {"uuid": "cae16636-69fc-4e27-bf4d-11683656b5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4667", "type": "seen", "source": "https://t.me/cvedetector/240", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-4667 - The Blog, Posts and Category Filter for Elementor\", \n  \"Content\": \"CVE ID : CVE-2024-4667 \nPublished : July 9, 2024, 5:15 a.m. | 19\u00a0minutes ago \nDescription : The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post and Category Filter widget in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied 'post_types' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T07:38:22.000000Z"}, {"uuid": "704c2f56-edd5-442b-b36e-f5ea1f570591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/610", "content": "https://github.com/EQSTLab/CVE-2024-46538\n\nPoC for CVE-2024-46538\n#github #exploit", "creation_timestamp": "2024-10-23T19:29:44.000000Z"}, {"uuid": "7cdbaa99-5d72-4185-b237-d062f1432d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "Telegram/6v1ahh7hPWOW8Ok3Sp4hG59yOTfaaNgCSzOLDB2lcLZIb_Y", "content": "", "creation_timestamp": "2024-06-11T09:49:31.000000Z"}, {"uuid": "c2a5a316-fbab-4035-8cd0-7f330d642a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "Telegram/Gy-PjQ30H5In3KQFQWu48dRn8GaaxLEn9ildKOKlVmOoqw", "content": "", "creation_timestamp": "2024-06-11T12:42:42.000000Z"}, {"uuid": "a275f017-4e47-4d44-a8ef-32207a77e19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "Telegram/GTKtdYTDyuOd6aTR8KEUH3wVg4Xp-AugjRw4cZQ2t3lBPA", "content": "", "creation_timestamp": "2024-09-27T19:59:02.000000Z"}, {"uuid": "41c3b8c0-1797-46ff-94ff-11294b059057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "Telegram/WZQMfdH3O2w4ic7Pd6kvNx9r1ozt2ogB1cGcre0430Zsxg", "content": "", "creation_timestamp": "2024-05-10T15:53:15.000000Z"}, {"uuid": "4a7251b4-f1f5-47e3-a30c-f9aec28d4ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "Telegram/tU5p0bmXLikUG-iGebO8QMPEYdKoIsGSWKogBTjvVQ1ilA", "content": "", "creation_timestamp": "2024-11-04T19:03:25.000000Z"}, {"uuid": "11c26885-4bb7-4a57-8a5b-258672421532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "Telegram/ADvpftAyE2yYUF4YBSKpoW_jzQ0stDge7A6EXiw6E5UBsQ", "content": "", "creation_timestamp": "2024-11-03T17:41:00.000000Z"}, {"uuid": "3939c49e-b7a4-4a9e-9c82-06180a854896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/13535", "content": "\u200aNext.js Vulnerability CVE-2024-46982: Cache Poisoning Exploit Threatens Deployments\n\nhttps://securityonline.info/next-js-vulnerability-cve-2024-46982-cache-poisoning-exploit-threatens-deployments/", "creation_timestamp": "2024-09-19T13:17:00.000000Z"}, {"uuid": "6dd9f77e-7ee2-4e6e-bded-86553937c68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/20384", "content": "https://github.com/kn32/cve-2024-46483\n\nPre-Authentication Heap Overflow in Xlight SFTP server <= 3.9.4.2\n#github #poc #exploit", "creation_timestamp": "2024-11-03T17:41:16.000000Z"}, {"uuid": "3ad54009-6f93-4365-8458-d15603351197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/HackingInsights/1986", "content": "\u200aCVE-2024-4610 \u2013 Arm Mali GPU Zero-Day Under Active Exploit: Millions of Devices at Risk\n\nhttps://securityonline.info/cve-2024-4610-arm-mali-gpu-zero-day-under-active-exploit-millions-of-devices-at-risk/", "creation_timestamp": "2024-06-09T12:23:00.000000Z"}, {"uuid": "f9138daa-70bc-46dd-a51d-9d04955b9bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4611", "type": "seen", "source": "https://t.me/HackingInsights/1075", "content": "\ud83d\udea8 CVE-2024-4611\nThe AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they previously used the login via the plugin API. This can only be exploited if the 'openssl' php extension is not loaded on the server.", "creation_timestamp": "2024-05-29T08:16:23.000000Z"}, {"uuid": "cb37986f-0c57-492a-8740-49d071790446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46990", "type": "published-proof-of-concept", "source": "https://t.me/jj_8tl/56", "content": "Short explanation of my CVE-2024-46990 \ud83d\udd25\nThe team of Directus mitigated SSRF by filtering out 127.0.0.1 and localhost. But using CIDR of 127.0.0.0/8 I was able to bypass it and get full SSRF!\nSee my SSRF payloads in the images below \ud83c\udfaf", "creation_timestamp": "2024-11-24T14:15:18.000000Z"}, {"uuid": "fd4e6eff-5cdc-4ff4-b919-745094ff21f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4688", "type": "seen", "source": "Telegram/wLTEsbk-i3gdE-bTC8ToFixpb3eKiE1svUJWQcpaLRWfqoxA", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "2b9a93bd-c567-4880-bf39-5c6a9b7125a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4686", "type": "seen", "source": "Telegram/k8Bduzb4Su_Gx_jeNQZ8NpCxkb6ZqwHtYnfi715qw88lGWKf", "content": "", "creation_timestamp": "2025-02-19T22:21:29.000000Z"}, {"uuid": "4aa48c12-9cf1-4a69-afb5-e6fec2d144cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4674", "type": "seen", "source": "Telegram/B8dzfxE0CDZcnYAJg7NUWn0Hwlr4zqWGCF2h2O34KHoo7VG5", "content": "", "creation_timestamp": "2025-02-19T19:14:02.000000Z"}, {"uuid": "caf50c4e-f3ba-44db-bee0-de5f0adf1ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4648", "type": "seen", "source": "Telegram/kIaNLUvKjRPtGQFB9JLl8PrTBjclExTrVXwDBXDf-HrsN3TU", "content": "", "creation_timestamp": "2025-02-19T19:14:02.000000Z"}, {"uuid": "a6232321-aea7-41d6-bc37-769cae180b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4649", "type": "seen", "source": "Telegram/M910QfYbDwFQ8Vu1PqGJKDnExhhLKSQ_cbFGEi-C955JB2lQ", "content": "", "creation_timestamp": "2025-02-19T19:14:02.000000Z"}, {"uuid": "5de9e974-585d-4da7-917c-28cebc65d2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4647", "type": "seen", "source": "Telegram/iJ5TTHatIMBvDs1Ju3jKgMw7tjcdMSJqKvNOBAPCkOcdN71P", "content": "", "creation_timestamp": "2025-02-19T19:14:02.000000Z"}, {"uuid": "12821fbe-58d8-4279-aaa6-0a8bf011c9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4646", "type": "seen", "source": "Telegram/SAR12NtYIdEQ-8bAwUTDiV0Q6nkS2D6kNJIj13qpbCQV0ANu", "content": "", "creation_timestamp": "2025-02-19T19:14:01.000000Z"}, {"uuid": "35389843-e1ac-43d0-b100-390e95f7c8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "Telegram/7ecHkQQ4WylH0zXdrwP9apXDx0lGqJG_Y3KFaR_YyjZgghsl", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"}, {"uuid": "9edcb100-8da0-4ddd-b25e-b2e7b987fd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46910", "type": "seen", "source": "Telegram/TGCu3oKCdenAtJp7fTVqGFIYcVnoeAtPRVSfpkIwFErD8ciZ", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "590c9915-a441-41ed-811a-591ab912e153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46210", "type": "seen", "source": "Telegram/wsaXIxRsU7yBfD_LA237E5si2wcQZeBPtIyK9ygUc8-Q4QMN", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "a0202da9-d11a-457a-9498-ded9fe2fc942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46664", "type": "seen", "source": "Telegram/VjmOjnrpPzFOvRh42vxDCCziIZZBbiRjfCsnRLqmjaWalFPQ", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "82b26e3d-7829-4cb6-8a74-b7e3b9c5c295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46049", "type": "seen", "source": "Telegram/ab6jlzxo4Kl2HZA4yYp3da36gM56Uyj3TZeh1xnhH4LWJx1M", "content": "", "creation_timestamp": "2024-09-20T03:26:06.000000Z"}, {"uuid": "bcec5680-818c-4cd3-b737-1fe15c9838eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/11374", "content": "The Hacker News\nArm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers\n\nArm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.\nTracked as CVE-2024-4610, the use-after-free issue impacts the following products -\n\nBifrost GPU Kernel Driver (all versions from r34p0 to r40p0)\nValhall GPU Kernel Driver (all versions from r34p0 to r40p0)\n\n\"A local non-privileged user can make improper GPU memory", "creation_timestamp": "2024-06-11T12:42:43.000000Z"}, {"uuid": "a413dc64-02a6-4fe1-a3bd-2fa0d692bb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/22111", "content": "The Hacker News\nProgress Software Releases Patches for 6 Flaws in WhatsUp Gold \u2013 Patch Now\n\nProgress Software has released another round of updates to address six security flaws in WhatsUp Gold, including two critical vulnerabilities.\nThe issues, the company said, have been resolved in version 24.0.1 released on September 20, 2024. The company has yet to release any details about what the flaws are other than listing their CVE identifiers -\n\nCVE-2024-46905 (CVSS score: 8.8) ", "creation_timestamp": "2024-09-27T19:59:04.000000Z"}, {"uuid": "19df15f6-216d-4902-8c66-80e99e79dc3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/7311", "content": "The Hacker News\nChrome Zero-Day Alert \u2014 Update Your Browser to Patch New Vulnerability\n\nGoogle on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild.\nTracked as CVE-2024-4671, the high-severity vulnerability has been described as a case of use-after-free in the Visuals component. It was reported by an anonymous researcher on May 7, 2024.\nUse-after-free bugs, which arise when a program", "creation_timestamp": "2024-05-10T15:53:16.000000Z"}, {"uuid": "d3a22e84-5276-4277-97d0-b3aae1d98e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "Telegram/68zPlps8tvxT6sG-LGfBPim39uemFxJOQ8ICBNO1fUMJ0g", "content": "", "creation_timestamp": "2024-05-10T14:47:55.000000Z"}, {"uuid": "e876d8dc-dd91-429b-8a99-9e211e2c433e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "Telegram/P2KZ4xwaxXthRQckXNP7zHd22OAEdq9VUL7kJeUEWd4vWA", "content": "", "creation_timestamp": "2024-09-27T22:47:13.000000Z"}, {"uuid": "60e2dd7d-d6c2-47b4-a45b-299fa2235a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46906", "type": "seen", "source": "https://t.me/ZeroDay_ru/334", "content": "\u203c\ufe0f CVE-2024-46906 \u203c\ufe0f\n\nIn WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lowprivileged user at least Report Viewer permissions required  to achieve privilege escalation to the admin account.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"National Vulnerability Database\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity_CVEs", "creation_timestamp": "2024-12-02T18:25:11.000000Z"}, {"uuid": "4102bde6-0251-4a7b-a4ae-c19745858fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "Telegram/f6e414AbFLwEVijKDOZQ5Pf200IjGJSmvaDYCXo7QecyAQ", "content": "", "creation_timestamp": "2024-06-11T10:16:16.000000Z"}, {"uuid": "cd13ad01-5b70-48cf-8d40-c55a80a927fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1216", "content": "Tools - Hackers Factory \n\nProof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow\n\nhttps://github.com/0xHossam/KernelCallbackTable-Injection-PoC\n\n#DFIR\nhttps://github.com/OMENScan/OMENS\n\nGenerate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily\n\nhttps://github.com/Galeax/CVE2CAPEC\n\n#exploit\n\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\n\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380 DLL Hijacking\n\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-15T04:10:10.000000Z"}, {"uuid": "eb81cf1a-a1b4-4d33-a2ae-7ed60dc4c771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1195", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-09T03:34:05.000000Z"}, {"uuid": "b1c63213-92f8-4601-a216-217521b883fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1134", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:23:04.000000Z"}, {"uuid": "e8013d95-3c08-4cd9-b22d-9c461cd38447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1130", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "creation_timestamp": "2024-10-31T10:46:57.000000Z"}, {"uuid": "f0b2d0ef-6e52-4518-b11f-f8ac1da33445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1119", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "creation_timestamp": "2024-10-28T04:16:04.000000Z"}, {"uuid": "c9685031-afce-40c7-911f-e6f577c46c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/934", "content": "Tools - Hackers Factory \n\nThis a adaption of tomnomnom's kxss tool with a different output format.\n\nhttps://github.com/Emoe/kxss\n\nIdentify and extract files from container formats using.\n\nhttps://github.com/Vector35/blob_extractor\n\n(CVE-2024-46740)[binder ]fix UAF caused by offsets overwrite\n\nhttps://github.com/torvalds/linux/commit/4df153652cc46545722879415937582028c18af5\n\nSmall tip for those who use xsshunter express as their blind xss framework: If you want to use import() function for your payloads (which is pretty good for some filter bypasses), you need to change the line 197 of probe.js file \n\nhttps://github.com/mandatoryprogrammer/xsshunter-express/blob/main/probe.js#L197 \n\nDump Kerberos tickets from the KCM database of SSSD.\n\nhttps://github.com/synacktiv/kcmdump\n\nGenerate AES128 and AES256 Kerberos keys from a given username, password, and realm\n\nhttps://github.com/seriotonctf/kerberos_aes_key\n\nConfuserEx2 String Decryptor & Full Deobfuscation Guide\n\nhttps://github.com/Dump-GUY/ConfuserEx2_String_Decryptor\n\nConverted and added a C BOF version of \n\nhttps://github.com/rotarydrone/GlobalUnProtect to the TrustedSec BOF repo at \n\nhttps://github.com/trustedsec/CS-Remote-OPs-BOF/tree/main\n\nSubOwner - A Simple tool check for subdomain takeovers\n\nhttps://github.com/ifconfig-me/subowner\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-21T11:27:17.000000Z"}, {"uuid": "0208739d-cfca-4c09-a274-fd11696e2418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/4684", "content": "The Hacker News\nProgress Software Releases Patches for 6 Flaws in WhatsUp Gold \u2013 Patch Now\n\nProgress Software has released another round of updates to address six security flaws in WhatsUp Gold, including two critical vulnerabilities.\nThe issues, the company said, have been resolved in version 24.0.1 released on September 20, 2024. The company has yet to release any details about what the flaws are other than listing their CVE identifiers -\n\nCVE-2024-46905 (CVSS score: 8.8) ", "creation_timestamp": "2024-09-27T19:59:04.000000Z"}, {"uuid": "be89b663-52ba-4695-a401-ddc8d19821c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/2245", "content": "The Hacker News\nArm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers\n\nArm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.\nTracked as CVE-2024-4610, the use-after-free issue impacts the following products -\n\nBifrost GPU Kernel Driver (all versions from r34p0 to r40p0)\nValhall GPU Kernel Driver (all versions from r34p0 to r40p0)\n\n\"A local non-privileged user can make improper GPU memory", "creation_timestamp": "2024-06-11T12:42:43.000000Z"}, {"uuid": "ccd2a51d-c5d7-4457-9698-a73c5c9d469a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/1372", "content": "The Hacker News\nChrome Zero-Day Alert \u2014 Update Your Browser to Patch New Vulnerability\n\nGoogle on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild.\nTracked as CVE-2024-4671, the high-severity vulnerability has been described as a case of use-after-free in the Visuals component. It was reported by an anonymous researcher on May 7, 2024.\nUse-after-free bugs, which arise when a program", "creation_timestamp": "2024-05-10T15:53:16.000000Z"}, {"uuid": "9d85b9e8-7db2-4d20-a6fa-8bf7f8d5cad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "published-proof-of-concept", "source": "Telegram/82a2CCv2PPefBAywwzeR-yS_ueYglGvjGZeFL5Nia0p4qd8", "content": "", "creation_timestamp": "2025-03-22T08:00:11.000000Z"}, {"uuid": "aabc8b16-2618-43f0-bce0-39ac7702ad2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/KomunitiSiber/2085", "content": "Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers\nhttps://thehackernews.com/2024/06/arm-warns-of-actively-exploited-zero.html\n\nArm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild.\nTracked as CVE-2024-4610, the use-after-free issue impacts the following products -\n\nBifrost GPU Kernel Driver (all versions from r34p0 to r40p0)\nValhall GPU Kernel Driver (all versions from r34p0 to r40p0)\n\n\"A local non-privileged user can make improper GPU memory", "creation_timestamp": "2024-06-11T11:06:03.000000Z"}, {"uuid": "de7a66d1-f38a-4b81-853d-54305c4edd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46905", "type": "seen", "source": "https://t.me/KomunitiSiber/2645", "content": "Progress Software Releases Patches for 6 Flaws in WhatsUp Gold \u2013 Patch Now\nhttps://thehackernews.com/2024/09/progress-software-releases-patches-for.html\n\nProgress Software has released another round of updates to address six security flaws in WhatsUp Gold, including two critical vulnerabilities.\nThe issues, the company said, have been resolved in version 24.0.1 released on September 20, 2024. The company has yet to release any details about what the flaws are other than listing their CVE identifiers -\n\nCVE-2024-46905 (CVSS score: 8.8)\u00a0", "creation_timestamp": "2024-09-27T19:54:31.000000Z"}, {"uuid": "0bdd1929-d194-4d80-88f0-1135be21507a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/KomunitiSiber/1923", "content": "Chrome Zero-Day Alert \u2014 Update Your Browser to Patch New Vulnerability\nhttps://thehackernews.com/2024/05/chrome-zero-day-alert-update-your.html\n\nGoogle on Thursday released security updates to address a zero-day flaw in Chrome that it said has been actively exploited in the wild.\nTracked as\u00a0CVE-2024-4671, the high-severity vulnerability has\u00a0been described\u00a0as a case of use-after-free in the Visuals component.\u00a0It was reported by an anonymous researcher on May 7, 2024.\nUse-after-free bugs, which arise when a program", "creation_timestamp": "2024-05-10T15:10:11.000000Z"}, {"uuid": "a39b74ec-17db-4f53-b1b5-9be07c077477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "published-proof-of-concept", "source": "Telegram/pSW96i48zX6NP99CfOkIgHqpdLy2hZyXX1e5O2PACcNGgvo", "content": "", "creation_timestamp": "2025-04-19T05:00:07.000000Z"}, {"uuid": "4aba55be-7931-44ad-93aa-4c3ec75605b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "published-proof-of-concept", "source": "Telegram/oYmpRnsP0n5l9UoNVnmi0Tqagk8hdqptE5SM8rliaeN2ddE", "content": "", "creation_timestamp": "2025-04-19T13:00:06.000000Z"}, {"uuid": "abb3ddef-ee39-407a-afa1-60197db11718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "Telegram/Gemw3RrJFIPDqFzRq7yj6f3Kyuq6tzqcwwbjCA9pS3gUpTc", "content": "", "creation_timestamp": "2025-01-23T10:00:06.000000Z"}, {"uuid": "17bbc96a-9100-4b18-96a0-c71386de811c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "Telegram/cacBQ5bN-vmwnt3DR7dLi1PlBkYQLfgr4qnQira8PDCN7qo", "content": "", "creation_timestamp": "2025-01-23T20:00:07.000000Z"}, {"uuid": "da046da8-ff28-45b5-aa45-35d25651a098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46981", "type": "published-proof-of-concept", "source": "Telegram/wxPlXSOJmOg_5y5nJfJJE99NGjR3EJoFxQ8BUywaYHAl5Iw", "content": "", "creation_timestamp": "2025-03-21T20:00:10.000000Z"}, {"uuid": "c4b4a6fe-7837-4519-9c6c-c8594b5e4cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8928", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "creation_timestamp": "2024-10-28T04:16:24.000000Z"}, {"uuid": "4d59f1f6-c405-4718-a1a2-a8aad4ebccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/9017", "content": "Tools - Hackers Factory \n\nProof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow\n\nhttps://github.com/0xHossam/KernelCallbackTable-Injection-PoC\n\n#DFIR\nhttps://github.com/OMENScan/OMENS\n\nGenerate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily\n\nhttps://github.com/Galeax/CVE2CAPEC\n\n#exploit\n\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\n\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380 DLL Hijacking\n\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-15T05:24:21.000000Z"}, {"uuid": "7fcc95ff-e5a6-427c-af9a-0c3eb26fc3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8992", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-09T04:45:10.000000Z"}, {"uuid": "8f8ecc60-5602-4892-9db9-8ecbbaaa16fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8943", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:04.000000Z"}, {"uuid": "ec8c9111-9275-40c0-a834-34fbfe82e573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24431", "content": "Tools - Hackers Factory \n\nProof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow\n\nhttps://github.com/0xHossam/KernelCallbackTable-Injection-PoC\n\n#DFIR\nhttps://github.com/OMENScan/OMENS\n\nGenerate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily\n\nhttps://github.com/Galeax/CVE2CAPEC\n\n#exploit\n\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\n\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380 DLL Hijacking\n\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-15T05:24:25.000000Z"}, {"uuid": "f1da19a8-d333-496d-9f87-6261a4f0d741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8939", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "creation_timestamp": "2024-10-31T12:33:38.000000Z"}, {"uuid": "247cdfab-7b74-4cfd-96d6-9b3b1c3515a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8781", "content": "Tools - Hackers Factory \n\nThis a adaption of tomnomnom's kxss tool with a different output format.\n\nhttps://github.com/Emoe/kxss\n\nIdentify and extract files from container formats using.\n\nhttps://github.com/Vector35/blob_extractor\n\n(CVE-2024-46740)[binder ]fix UAF caused by offsets overwrite\n\nhttps://github.com/torvalds/linux/commit/4df153652cc46545722879415937582028c18af5\n\nSmall tip for those who use xsshunter express as their blind xss framework: If you want to use import() function for your payloads (which is pretty good for some filter bypasses), you need to change the line 197 of probe.js file \n\nhttps://github.com/mandatoryprogrammer/xsshunter-express/blob/main/probe.js#L197 \n\nDump Kerberos tickets from the KCM database of SSSD.\n\nhttps://github.com/synacktiv/kcmdump\n\nGenerate AES128 and AES256 Kerberos keys from a given username, password, and realm\n\nhttps://github.com/seriotonctf/kerberos_aes_key\n\nConfuserEx2 String Decryptor & Full Deobfuscation Guide\n\nhttps://github.com/Dump-GUY/ConfuserEx2_String_Decryptor\n\nConverted and added a C BOF version of \n\nhttps://github.com/rotarydrone/GlobalUnProtect to the TrustedSec BOF repo at \n\nhttps://github.com/trustedsec/CS-Remote-OPs-BOF/tree/main\n\nSubOwner - A Simple tool check for subdomain takeovers\n\nhttps://github.com/ifconfig-me/subowner\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-21T10:52:16.000000Z"}, {"uuid": "1f0d1b6d-5da3-4444-98db-a8ff32b88874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24315", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-09T04:45:16.000000Z"}, {"uuid": "dd841fb9-e926-44a7-8943-050d33194154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24248", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:11.000000Z"}, {"uuid": "c29fff91-e3c1-4a52-8fed-a3f5124e1f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24238", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "creation_timestamp": "2024-10-31T12:33:48.000000Z"}, {"uuid": "fda935c2-9e55-437d-a65a-3834b7fa43f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/24219", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "creation_timestamp": "2024-10-29T12:21:04.000000Z"}, {"uuid": "157ff7ee-95a8-4260-a5a3-7e994e35c58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/23832", "content": "Tools - Hackers Factory \n\nThis a adaption of tomnomnom's kxss tool with a different output format.\n\nhttps://github.com/Emoe/kxss\n\nIdentify and extract files from container formats using.\n\nhttps://github.com/Vector35/blob_extractor\n\n(CVE-2024-46740)[binder ]fix UAF caused by offsets overwrite\n\nhttps://github.com/torvalds/linux/commit/4df153652cc46545722879415937582028c18af5\n\nSmall tip for those who use xsshunter express as their blind xss framework: If you want to use import() function for your payloads (which is pretty good for some filter bypasses), you need to change the line 197 of probe.js file \n\nhttps://github.com/mandatoryprogrammer/xsshunter-express/blob/main/probe.js#L197 \n\nDump Kerberos tickets from the KCM database of SSSD.\n\nhttps://github.com/synacktiv/kcmdump\n\nGenerate AES128 and AES256 Kerberos keys from a given username, password, and realm\n\nhttps://github.com/seriotonctf/kerberos_aes_key\n\nConfuserEx2 String Decryptor & Full Deobfuscation Guide\n\nhttps://github.com/Dump-GUY/ConfuserEx2_String_Decryptor\n\nConverted and added a C BOF version of \n\nhttps://github.com/rotarydrone/GlobalUnProtect to the TrustedSec BOF repo at \n\nhttps://github.com/trustedsec/CS-Remote-OPs-BOF/tree/main\n\nSubOwner - A Simple tool check for subdomain takeovers\n\nhttps://github.com/ifconfig-me/subowner\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-21T10:52:31.000000Z"}, {"uuid": "fbe30695-e1a9-4266-be4c-99073bd405b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "Telegram/hXBVtq_vQALtVQeIFAgKK-S2hj8k3D51My4YiCPF4vPfe-M", "content": "", "creation_timestamp": "2024-05-14T22:53:21.000000Z"}, {"uuid": "4269cfc3-2cb1-4972-8204-f31071e500d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3901", "content": "Tools - Hackers Factory \n\nProof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow\n\nhttps://github.com/0xHossam/KernelCallbackTable-Injection-PoC\n\n#DFIR\n\nhttps://github.com/OMENScan/OMENS\n\nGenerate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily\n\nhttps://github.com/Galeax/CVE2CAPEC\n\n#exploit\n\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\n\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380 DLL Hijacking\n\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-15T04:10:09.000000Z"}, {"uuid": "48209d64-1bf2-49ff-abef-97efce84f0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3888", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-09T03:35:05.000000Z"}, {"uuid": "97104d46-f202-459a-8662-a1ac60f5923b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3840", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T05:23:04.000000Z"}, {"uuid": "4c88e9ce-04e1-4cf2-b3d7-86225ccafb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3837", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "creation_timestamp": "2024-10-31T12:33:29.000000Z"}, {"uuid": "5ef1e288-4cc6-44a5-85ac-cec8e37cb24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3827", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "creation_timestamp": "2024-10-29T04:16:04.000000Z"}, {"uuid": "ab0b2146-db9c-492d-b594-3cb4e3f0c71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3744", "content": "Tools - Hackers Factory \n\nThis a adaption of tomnomnom's kxss tool with a different output format.\n\nhttps://github.com/Emoe/kxss\n\nIdentify and extract files from container formats using.\n\nhttps://github.com/Vector35/blob_extractor\n\n(CVE-2024-46740)[binder ]fix UAF caused by offsets overwrite\n\nhttps://github.com/torvalds/linux/commit/4df153652cc46545722879415937582028c18af5\n\nSmall tip for those who use xsshunter express as their blind xss framework: If you want to use import() function for your payloads (which is pretty good for some filter bypasses), you need to change the line 197 of probe.js file \n\nhttps://github.com/mandatoryprogrammer/xsshunter-express/blob/main/probe.js#L197 \n\nDump Kerberos tickets from the KCM database of SSSD.\n\nhttps://github.com/synacktiv/kcmdump\n\nGenerate AES128 and AES256 Kerberos keys from a given username, password, and realm\n\nhttps://github.com/seriotonctf/kerberos_aes_key\n\nConfuserEx2 String Decryptor & Full Deobfuscation Guide\n\nhttps://github.com/Dump-GUY/ConfuserEx2_String_Decryptor\n\nConverted and added a C BOF version of \n\nhttps://github.com/rotarydrone/GlobalUnProtect to the TrustedSec BOF repo at \n\nhttps://github.com/trustedsec/CS-Remote-OPs-BOF/tree/main\n\nSubOwner - A Simple tool check for subdomain takeovers\n\nhttps://github.com/ifconfig-me/subowner\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-21T11:03:26.000000Z"}, {"uuid": "756998a0-5372-46e5-aab4-722f453753ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2323", "content": "CVE-2024-46538\n*\nPfSense Stored XSS lead to RCE\n*\nPOC exploit", "creation_timestamp": "2024-10-23T17:44:48.000000Z"}, {"uuid": "a0f71abc-a503-4ece-95b5-caa8fb0f40ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7565", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "creation_timestamp": "2024-10-31T12:33:38.000000Z"}, {"uuid": "d518c8f9-8b78-4cde-81f3-06b1fa46662e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7554", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "creation_timestamp": "2024-10-28T04:16:24.000000Z"}, {"uuid": "553e79fa-9d95-4239-a3c1-9dcd777b0dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7569", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:04.000000Z"}, {"uuid": "d6fd0ceb-84f9-4e9c-9036-d791ec9b90a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7442", "content": "Tools - Hackers Factory \n\nThis a adaption of tomnomnom's kxss tool with a different output format.\n\nhttps://github.com/Emoe/kxss\n\nIdentify and extract files from container formats using.\n\nhttps://github.com/Vector35/blob_extractor\n\n(CVE-2024-46740)[binder ]fix UAF caused by offsets overwrite\n\nhttps://github.com/torvalds/linux/commit/4df153652cc46545722879415937582028c18af5\n\nSmall tip for those who use xsshunter express as their blind xss framework: If you want to use import() function for your payloads (which is pretty good for some filter bypasses), you need to change the line 197 of probe.js file \n\nhttps://github.com/mandatoryprogrammer/xsshunter-express/blob/main/probe.js#L197 \n\nDump Kerberos tickets from the KCM database of SSSD.\n\nhttps://github.com/synacktiv/kcmdump\n\nGenerate AES128 and AES256 Kerberos keys from a given username, password, and realm\n\nhttps://github.com/seriotonctf/kerberos_aes_key\n\nConfuserEx2 String Decryptor & Full Deobfuscation Guide\n\nhttps://github.com/Dump-GUY/ConfuserEx2_String_Decryptor\n\nConverted and added a C BOF version of \n\nhttps://github.com/rotarydrone/GlobalUnProtect to the TrustedSec BOF repo at \n\nhttps://github.com/trustedsec/CS-Remote-OPs-BOF/tree/main\n\nSubOwner - A Simple tool check for subdomain takeovers\n\nhttps://github.com/ifconfig-me/subowner\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-21T10:52:16.000000Z"}, {"uuid": "d24a63ba-055d-4ec1-b6f7-a0eeefc01445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7636", "content": "Tools - Hackers Factory \n\nProof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow\n\nhttps://github.com/0xHossam/KernelCallbackTable-Injection-PoC\n\n#DFIR\nhttps://github.com/OMENScan/OMENS\n\nGenerate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily\n\nhttps://github.com/Galeax/CVE2CAPEC\n\n#exploit\n\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\n\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380 DLL Hijacking\n\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-15T05:24:21.000000Z"}, {"uuid": "5a5c572d-b626-4634-8076-841bf8558d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7617", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-09T04:45:10.000000Z"}, {"uuid": "2af432f0-24ea-49c3-ad1d-eda1c8b81244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/CyberSecurityIL/44812", "content": "\u05d7\u05d5\u05dc\u05e9\u05ea Zero-Day \u05d7\u05de\u05d9\u05e9\u05d9\u05ea \u05de\u05ea\u05d7\u05d9\u05dc\u05ea \u05d4\u05e9\u05e0\u05d4 - \u05d2\u05d5\u05d2\u05dc \u05de\u05e9\u05d7\u05e8\u05e8\u05ea \u05e2\u05d3\u05db\u05d5\u05df \u05dc\u05db\u05e8\u05d5\u05dd \u05d4\u05e1\u05d5\u05d2\u05e8 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2024-4671 \u05ea\u05d5\u05e7\u05e0\u05d4 \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05d1\u05d0\u05d5\u05ea:\n\n- 124.0.6367.201/.202 for Mac and Windows\n- 124.0.6367.201 for Linux\n\nhttps://t.me/CyberSecurityIL/5122\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-05-10T12:35:38.000000Z"}, {"uuid": "65943c9f-19b2-4a77-be24-2ee9b35a705f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/true_secator/5729", "content": "\u041d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0438 \u043d\u0435\u0434\u0435\u043b\u0438, \u043a\u0430\u043a Chrome \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0439 0-day, \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u0442\u0440\u0438 \u0434\u043d\u044f \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u043f\u044f\u0442\u044b\u043c \u043d\u0443\u043b\u0435\u043c CVE-2024-4671 \u0432 Visuals \u0441\u043f\u0438\u0441\u043e\u043a \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u0448\u0435\u0441\u0442\u044b\u043c CVE-2024-4761. \u041d\u043e\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript Chrome V8 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0438\u043b\u0438 \u0431\u0443\u0444\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u0441\u0431\u043e\u044f\u043c.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u0434\u043b\u044f CVE-2024-4761, \u043d\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 124.0.6367.207/.208 \u0434\u043b\u044f Mac/Windows \u0438 124.0.6367.207 \u0434\u043b\u044f Linux. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0443\u0434\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438.", "creation_timestamp": "2024-05-14T12:13:04.000000Z"}, {"uuid": "2898879c-64bb-434f-bc74-bb9aaeaf300b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/true_secator/5720", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u044f\u0442\u043e\u0439 \u0437\u0430 \u044d\u0442\u043e\u0442 \u0433\u043e\u0434 0-day \u0432 Chrome 124, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2024-4671\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 use-after-free \u0432 Visuals, \u043d\u0430\u0431\u043e\u0440\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c.\n\n\u041e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e 7 \u043c\u0430\u044f 2024 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0442 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0443\u0448\u043b\u043e \u0432\u0441\u0435\u0433\u043e \u0434\u0432\u0430 \u0434\u043d\u044f.\n\n\u0412 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Google \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u043d\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441\u043e spyware.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 124.0.6367.201/.202 \u0434\u043b\u044f Windows \u0438 macOS \u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 124.0.6367.201 \u0434\u043b\u044f Linux \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437.", "creation_timestamp": "2024-05-13T13:29:53.000000Z"}, {"uuid": "c6db0524-0197-444e-9677-855346aa30d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/ctinow/217058", "content": "https://ift.tt/hdtaLGT\nGet Weekends Back: Put Chrome CVEs like CVE-2024-4671 on Auto-Patching", "creation_timestamp": "2024-05-11T02:09:56.000000Z"}, {"uuid": "a58181a4-e326-446e-9759-4e83f4c045bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46987", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkp3tisqgq2z", "content": "", "creation_timestamp": "2026-04-30T07:31:14.158061Z"}, {"uuid": "07bb9b69-4c03-48de-a53f-284a96bc4d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46986", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53596", "content": "CVE-2024-46986 \u2013 Arbitrary File Write in Camaleon CMS Leading to RCE\nhttps://www.offsec.com/blog/cve-2024-46986/\n\nA vulnerability was discovered in Camaleon CMS authenticating attackers to write files on the file system which enabled them to execut remote code under certain conditions.\nThe post CVE-2024-46986 \u2013 Arbitrary File Write in Camaleon CMS Leading to RCE (https://www.offsec.com/blog/cve-2024-46986/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-05-22T22:16:05.000000Z"}, {"uuid": "abe3885e-ef4e-499c-a291-7410312f726a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/CyberBulletin/26247", "content": "\u26a1\ufe0fCVE-2024-46483 (CVSS 9.8): Xlight FTP Server Flaw Leaves Users Exposed to Remote Attacks, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2024-10-29T05:02:14.000000Z"}, {"uuid": "c9b3cbe0-839e-473b-a898-31ccc06d9860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/information_security_channel/52356", "content": "Arm Warns of Exploited Kernel Driver Vulnerability\nhttps://www.securityweek.com/arm-warns-of-exploited-kernel-driver-vulnerability/\n\nArm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.\nThe post Arm Warns of Exploited Kernel Driver Vulnerability (https://www.securityweek.com/arm-warns-of-exploited-kernel-driver-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2024-06-11T13:50:33.000000Z"}, {"uuid": "b2b3cc15-3196-4491-8129-cce02b9ff550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/thehackernews/4938", "content": "WARNING: Using Chrome or any Chromium-based browsers? Don't wait\u2014update your browser ASAP! \n \nGoogle has just released an update to patch a new zero-day flaw, CVE-2024-4671, which hackers are actively exploiting in the wild. \n \nDetails https://thehackernews.com/2024/05/chrome-zero-day-alert-update-your.html", "creation_timestamp": "2024-05-10T12:50:53.000000Z"}, {"uuid": "2f05a771-a17c-4345-a868-c0d8a20e0d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4619", "type": "seen", "source": "https://t.me/cultofwire/1294", "content": "Every XSS is a site takeover\n\n\u0412\u0440\u043e\u0434\u0435 \u0431\u044b \u0438 \u0434\u0430, \u043d\u043e \u0432\u0440\u043e\u0434\u0435 \u0431\u044b \u0438 \u043d\u0435\u0442. WordPress \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 CMS, \u0438 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u041d\u043e \u0432\u043e\u0442 \u0441 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u0414\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0432\u0441\u0435 \u0441\u0447\u0438\u0442\u0430\u044e\u0442 XSS \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 WordPress \u0432\u0441\u0451 \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0430\u0447\u0435. \n\nWordfence \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0431\u0430\u0433-\u0431\u0430\u0443\u043d\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u044b\u043f\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0438\u0437 \u0440\u043e\u0433\u0430 \u0438\u0437\u043e\u0431\u0438\u043b\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 XSS:\nCVE-2024-4619 - Elementor - DOM Based - Medium\nCVE-2023-6701 - ACF - Stored - Medium\nCVE-2023-47777 - WooCommerce - Medium\nYoast SEO <= 20.2 - Stored - Medium\n\n\u0412\u0440\u043e\u0434\u0435 \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0433\u043e, \u043d\u043e \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0432\u0435\u0440\u0445\u0443\u0448\u043a\u0430 \u0430\u0439\u0441\u0431\u0435\u0440\u0433\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c. \u0412 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430.\n\n\u0410 \u0435\u0449\u0451 \u0443 WordPress \u0432\u043e\u043e\u0431\u0449\u0435 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0442\u0440\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f CVE. \u0413\u0434\u0435-\u0442\u043e \u0447\u0442\u043e-\u0442\u043e \u0435\u0441\u0442\u044c, \u043d\u043e \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435\u0442. \u0415\u0449\u0451 \u0431\u044b\u043b\u0438 \u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432 <=6.41, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e \u0441 XSS \u0438 \u0441\u0442\u0430\u0442\u044c\u0451\u0439, \u0434\u0430 \u0438 \u0442\u043e\u043b\u043a\u043e\u043c \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u043f\u043e \u043d\u0438\u043c \u043d\u0435\u0447\u0435\u0433\u043e.", "creation_timestamp": "2024-06-22T22:28:25.000000Z"}, {"uuid": "cdf91936-bc29-41d5-bd98-f770658d0532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46506", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9588", "content": "CVE-2024-46506: Unauthenticated RCE in NetAlertx - Rhino Security Labs\n\nhttps://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/", "creation_timestamp": "2025-01-31T01:26:08.000000Z"}, {"uuid": "29da78dc-7daf-4a21-b047-716f709b17f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "seen", "source": "https://t.me/CyberBulletin/25649", "content": "\u26a1\ufe0fNext.js Vulnerability CVE-2024-46982: Cache Poisoning Exploit Threatens Deployments.\n\n#CyberBulletin", "creation_timestamp": "2024-09-21T02:15:41.000000Z"}, {"uuid": "e672f12c-8742-4922-a1f8-98207d552427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3354", "content": "https://github.com/EQSTLab/CVE-2024-46538\n\nPoC for CVE-2024-46538\n#github #exploit", "creation_timestamp": "2024-10-23T17:46:21.000000Z"}, {"uuid": "1bcb9484-6fd3-4b98-87e3-c54fa553c204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3389", "content": "https://github.com/kn32/cve-2024-46483\n\nPre-Authentication Heap Overflow in Xlight SFTP server <= 3.9.4.2\n#github #poc #exploit", "creation_timestamp": "2024-11-03T17:31:48.000000Z"}, {"uuid": "ab50f28f-0729-4e84-8a1d-b680ccac6da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/597", "content": "PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n#CyberDilara", "creation_timestamp": "2024-10-31T12:33:50.000000Z"}, {"uuid": "64ae2f77-220f-4720-a9a6-abbb9fb69257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11333", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\nhttps://github.com/tandasat/CVE-2024-21305", "creation_timestamp": "2024-10-24T23:42:45.000000Z"}, {"uuid": "53378bd7-c070-4160-91eb-ab20dd553b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11381", "content": "#exploit\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\nhttps://blog.sonicwall.com/en-us/2024/10/vmware-vcenter-server-cve-2024-38812-dcerpc-vulnerability\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380\u00a0DLL Hijacking\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC", "creation_timestamp": "2024-11-04T17:28:48.000000Z"}, {"uuid": "c65bfb39-86cb-4af0-ad26-cf90ffffa92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46713", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11448", "content": "#exploit\n#Kernel_Security\nCVE-2024-46713:\nRace conditions in Linux Kernel perf events\nhttps://binarygecko.com/race-conditions-in-linux-kernel-perf-events\n]-> https://u1f383.github.io/linux/2024/11/15/a-quick-note-for-perf-cve-2024-46713.html", "creation_timestamp": "2024-11-20T18:54:01.000000Z"}, {"uuid": "082ff62f-7043-41a2-bb37-c0dbaec4505e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11522", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS\nhttps://github.com/LauLeysen/CVE-2024-46538\n\n2. CVE-2024-35286/41713:\nMitel MiCollab SQLI / Path Traversal\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day\n\n3. CVE-2023-6200:\nLinux Kernel ICMPv6 Race Condtion\nhttps://u1f383.github.io/linux/2024/12/04/linux-kernel-icmpv6-and-cve-2023-6200.html", "creation_timestamp": "2024-12-06T11:00:37.000000Z"}, {"uuid": "1c9d6a9a-5570-4c07-b8d2-1097069bf161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11757", "content": "#exploit \n1. CVE-2024-12847:\nExposing an Old Netgear Vulnerability Still Active in 2025\n\n2. RCE in Lightning AI-development platform\n\n3. CVE-2024-41710:\nMitel phones Argument Injection\n\n3. CVE-2024-46507:\nYETI platform SSTI", "creation_timestamp": "2025-03-18T12:15:38.000000Z"}, {"uuid": "2f91e687-f43d-4f4b-ba7f-6a24072b9f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/ZerodayAlert/253", "content": "", "creation_timestamp": "2026-07-06T11:00:06.026433Z"}, {"uuid": "0a0faedf-da4b-4bc6-be07-7ea65e062aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/587", "content": "Exploit\n\n1. CVE-2024-46538:\nPfSense Stored XSS lead to RCE\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\n2. CVE-2024-8353:\nGiveWP PHP Object Injection\n\nhttps://github.com/EQSTLab/CVE-2024-8353\n\n3. CVE-2024-21305:\nHypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability\n\nhttps://github.com/tandasat/CVE-2024-21305\n\n#CyberDilara", "creation_timestamp": "2024-10-29T12:21:04.000000Z"}, {"uuid": "87cf2f88-b9c9-42d8-a04b-b80e8395ab85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/651", "content": "Tools - Hackers Factory \n\nFrida Script Runner v1.3 is a versatile web-based tool designed for Android and iOS penetration testing purposes.\n\nhttps://github.com/z3n70/Frida-Script-Runner\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nEMBA v1.5.0 - SBOMdorado\n\nhttps://github.com/e-m-b-a/emba/releases/tag/v1.5.0-SBOMdorado\n\nCSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT)\n\nhttps://github.com/doyensec/CSPTPlayground\n\nCVE_2024_26926_Analysis.pdf\n\nhttps://github.com/MaherAzzouzi/LinuxKernel-nday/blob/main/CVE-2024-26926/CVE_2024_26926_Analysis.pdf\n\nDeobfuscate obfuscator.io, unminify and unpack bundled javascript\n\nhttps://github.com/j4k0xb/webcrack\n\nFree, open-source no-code web data extraction platform. Build custom robots to automate data scraping\n\nhttps://github.com/getmaxun/maxun\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-09T04:45:17.000000Z"}, {"uuid": "eb113b4d-ec76-49bb-941f-b367eeb2f5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/690", "content": "Tools - Hackers Factory \n\nProof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow\n\nhttps://github.com/0xHossam/KernelCallbackTable-Injection-PoC\n\n#DFIR\nhttps://github.com/OMENScan/OMENS\n\nGenerate a MITRE ATT&CK Navigator based on a list of CVEs. Database with CVE, CWE, CAPEC, and MITRE ATT&CK Techniques data is updated daily\n\nhttps://github.com/Galeax/CVE2CAPEC\n\n#exploit\n\n1. CVE-2024-46483:\nPre-Auth Heap Overflow in Xlight SFTP server\n\nhttps://github.com/kn32/cve-2024-46483\n\n2. CVE-2024-38812:\nVMWare vCenter Server DCERPC\n\n3. CVE-2024-6473:\nYandex Browser <24.7.1.380 DLL Hijacking\n\nhttps://github.com/12345qwert123456/CVE-2024-6473-PoC\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-15T05:24:26.000000Z"}, {"uuid": "478c10f4-d706-49fe-8e38-e00e65841d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46740", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/335", "content": "Tools - Hackers Factory \n\nThis a adaption of tomnomnom's kxss tool with a different output format.\n\nhttps://github.com/Emoe/kxss\n\nIdentify and extract files from container formats using.\n\nhttps://github.com/Vector35/blob_extractor\n\n(CVE-2024-46740)[binder ]fix UAF caused by offsets overwrite\n\nhttps://github.com/torvalds/linux/commit/4df153652cc46545722879415937582028c18af5\n\nSmall tip for those who use xsshunter express as their blind xss framework: If you want to use import() function for your payloads (which is pretty good for some filter bypasses), you need to change the line 197 of probe.js file \n\nhttps://github.com/mandatoryprogrammer/xsshunter-express/blob/main/probe.js#L197 \n\nDump Kerberos tickets from the KCM database of SSSD.\n\nhttps://github.com/synacktiv/kcmdump\n\nGenerate AES128 and AES256 Kerberos keys from a given username, password, and realm\n\nhttps://github.com/seriotonctf/kerberos_aes_key\n\nConfuserEx2 String Decryptor & Full Deobfuscation Guide\n\nhttps://github.com/Dump-GUY/ConfuserEx2_String_Decryptor\n\nConverted and added a C BOF version of \n\nhttps://github.com/rotarydrone/GlobalUnProtect to the TrustedSec BOF repo at \n\nhttps://github.com/trustedsec/CS-Remote-OPs-BOF/tree/main\n\nSubOwner - A Simple tool check for subdomain takeovers\n\nhttps://github.com/ifconfig-me/subowner\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-09-21T10:52:32.000000Z"}, {"uuid": "2a8043bd-3f0a-415a-90df-6d2108fbf170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/InfoSecInsider/601", "content": "Tools - Hackers Factory \n\nLTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper \n\nhttps://github.com/SysSec-KAIST/LTESniffer\n\nA POC exploit for CVE-2024-5836 and CVE-2024-6778, allowing for a sandbox escape from a Chrome extension : \n\nhttps://github.com/ading2210/CVE-2024-6778-POC\n\nRecoverPy : Recover overwritten or deleted data : \n\nhttps://github.com/PabloLec/RecoverPy\n\nProjects for security students\n\nhttps://github.com/kurogai/100-redteam-projects\n\nIn-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.\n\nhttps://github.com/The-Osint-Toolbox/Telegram-OSINT\n\nGet Active Directory ports with PowerShell\n\nhttps://4sysops.com/archives/get-active-directory-ports-with-powershell/\n\nProof-of-Concept for CVE-2024-46538\n\nhttps://github.com/EQSTLab/CVE-2024-46538\n\nBeginners intro to Linux kernel exploitation (CTF challenge)\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\n#CyberDilara \nhttps://t.me/CyberDilara", "creation_timestamp": "2024-11-01T04:43:11.000000Z"}, {"uuid": "28ca37a7-a898-4833-8b12-f76bed78c811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/5389", "content": "#exploit\n1. CVE-2024-46538:\nPfSense Stored XSS\nhttps://github.com/LauLeysen/CVE-2024-46538\n\n2. CVE-2024-35286/41713:\nMitel MiCollab SQLI / Path Traversal\nhttps://labs.watchtowr.com/where-theres-smoke-theres-fire-mitel-micollab-cve-2024-35286-cve-2024-41713-and-an-0day\n\n3. CVE-2023-6200:\nLinux Kernel ICMPv6 Race Condtion\nhttps://u1f383.github.io/linux/2024/12/04/linux-kernel-icmpv6-and-cve-2023-6200.html", "creation_timestamp": "2024-12-06T10:12:49.000000Z"}, {"uuid": "dee09495-f694-4104-93f1-03d12b4835b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/132", "content": "https://github.com/LauLeysen/CVE-2024-46538\n\nCVE-2024-46538 : PfSense Stored XSS Vulnerability\n#github #exploit #xss", "creation_timestamp": "2024-12-21T15:55:06.000000Z"}, {"uuid": "294ad6f8-b4ec-4c77-8ac2-051966fd5a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46982", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/55013", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aComprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2024-46982 patch.\nURL\uff1ahttps://github.com/hidesec/CVE-2025-32421\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-11T07:26:50.000000Z"}, {"uuid": "063f6ae1-6455-4e4b-af56-0f96b6349cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlddsdd4p72e", "content": "", "creation_timestamp": "2026-05-08T08:46:59.345596Z"}, {"uuid": "b4c6dc59-22ae-474e-a462-918c31912250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k", "content": "", "creation_timestamp": "2026-05-08T09:10:43.357225Z"}, {"uuid": "cf0a4476-24ce-4f26-8843-d9574ec30a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46333", "type": "seen", "source": "https://bsky.app/profile/gltch.io/post/3mmk6nxrcuw2x", "content": "", "creation_timestamp": "2026-05-23T19:28:55.119212Z"}, {"uuid": "b68d7fdb-e77a-4502-a401-be6087686841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46461", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05", "content": "", "creation_timestamp": "2026-05-26T05:00:00.000000Z"}, {"uuid": "334d6ddb-7a41-4eab-aa28-3713dba3b824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46613", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3motnfrrwtc2a", "content": "", "creation_timestamp": "2026-06-22T00:37:06.412289Z"}, {"uuid": "6fd3c428-93c3-47ef-a5dc-cd7b52279038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46446", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3movs56sr522j", "content": "", "creation_timestamp": "2026-06-22T21:07:06.803117Z"}, {"uuid": "ac83b1e7-4e57-42b1-a84a-01ee3e1a1466", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46938", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/96feac0b-fb61-48f8-8942-943f8ba8383a", "content": "", "creation_timestamp": "2026-06-23T11:12:07.628495Z"}, {"uuid": "0f938b3f-12d5-46c2-a685-4640167ec8ab", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2d62430f-74f2-4a2a-86ae-ef47f83a69af", "content": "", "creation_timestamp": "2026-06-23T11:14:21.218195Z"}, {"uuid": "9010ad83-ed81-491e-acb9-166fb78c0526", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/cbd7f6dd-c011-4110-aca8-50da8fbae77a", "content": "", "creation_timestamp": "2026-06-23T11:14:21.989572Z"}, {"uuid": "2aee9b49-227c-4dc9-a409-12f040f88ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46890", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpbmys3lvd2n", "content": "", "creation_timestamp": "2026-06-27T14:07:06.649748Z"}, {"uuid": "c5e80c21-a609-45b2-b1b2-c3242e4d6dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46888", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpboogaktf2k", "content": "", "creation_timestamp": "2026-06-27T14:37:06.341505Z"}, {"uuid": "a1059948-e797-44b7-b595-1a79632238e3", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-46938", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b760a7d4-aaa1-4ae8-82d1-7962782a14aa", "content": "", "creation_timestamp": "2026-07-01T05:54:03.486266Z"}, {"uuid": "de5f7b04-c955-477e-80f1-1f6c5da69957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/ZerodayAlert/253", "content": "", "creation_timestamp": "2026-07-07T00:00:11.121230Z"}, {"uuid": "680caa4e-958f-43b1-9bd5-6c048037973e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46483", "type": "seen", "source": "https://t.me/brutsecurity/1039", "content": "", "creation_timestamp": "2026-07-09T03:00:12.154688Z"}, {"uuid": "6039ba46-5f2b-40d5-b1d7-ca84724c8844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/ZerodayAlert/253", "content": "", "creation_timestamp": "2026-07-11T23:00:04.827589Z"}, {"uuid": "3cf13a68-3906-40c8-9a58-d0b40d7d5769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1039", "content": "", "creation_timestamp": "2026-07-11T17:00:04.586310Z"}, {"uuid": "4381f77f-4045-4492-a488-d893e2bab09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46483", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1039", "content": "", "creation_timestamp": "2026-07-12T00:00:45.404801Z"}, {"uuid": "3c1d96c8-c8b7-4307-b780-fca97eea6b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/securixy_kz/1032", "content": "", "creation_timestamp": "2026-07-13T01:00:07.290780Z"}, {"uuid": "c46ce177-c36a-456a-bc70-c9fb2335a26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1032", "content": "", "creation_timestamp": "2026-07-14T00:01:00.873929Z"}, {"uuid": "50dc922c-b275-4204-8b86-bd98f3ddbb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/pleyades_it/11087", "content": "", "creation_timestamp": "2026-07-14T00:00:52.921833Z"}, {"uuid": "6eee67a6-9809-4803-8ff0-fc725f0f8904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46902", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqs5dcfvkc2s", "content": "", "creation_timestamp": "2026-07-16T21:07:06.925572Z"}, {"uuid": "a457570f-ce50-4c29-b435-79260f792c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/linuxkalii/859", "content": "", "creation_timestamp": "2026-07-26T00:00:13.341961Z"}, {"uuid": "921697e4-c6a8-43f4-9760-008823108bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/linuxkalii/938", "content": "", "creation_timestamp": "2026-07-26T00:00:12.858081Z"}, {"uuid": "acb159f5-98af-4c4c-a27e-d96ec126997a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/EchelonEyes/2751", "content": "", "creation_timestamp": "2026-07-26T02:02:09.816312Z"}, {"uuid": "70b07027-a1a7-4d6d-aee2-f404199df366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/EchelonEyes/2839", "content": "", "creation_timestamp": "2026-07-26T02:02:09.292691Z"}, {"uuid": "3573ca93-1af0-437a-aff9-536698790f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "seen", "source": "https://t.me/EchelonEyes/2751", "content": "", "creation_timestamp": "2026-07-27T00:00:48.104006Z"}, {"uuid": "db68ce88-6b56-4b07-b5f2-17b56d7c5418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/EchelonEyes/2839", "content": "", "creation_timestamp": "2026-07-27T00:00:47.551016Z"}, {"uuid": "a15c1f23-dc67-447c-9165-4b41e93cb348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "seen", "source": "https://t.me/EchelonEyes/2839", "content": "", "creation_timestamp": "2026-07-28T00:00:41.946742Z"}, {"uuid": "b1a6ca3b-f3a6-4d2f-8bfe-8dd497b37dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/EchelonEyes/2751", "content": "", "creation_timestamp": "2026-07-28T00:00:40.462047Z"}, {"uuid": "cb4dc3dc-4089-4304-abfb-21b9e76d219c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46786", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:15:32.879413Z"}, {"uuid": "c12f813a-6225-4d5a-8fe8-1ee250129ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/sysadm_in_up/2274", "content": "", "creation_timestamp": "2026-07-29T12:03:16.805418Z"}, {"uuid": "0df9c0b0-030c-4d82-875e-526a74dea128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "", "creation_timestamp": "2026-07-29T12:02:04.852771Z"}, {"uuid": "141af571-b640-4a44-b629-77c64baaa724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/sdnv_funkhole/1395", "content": "", "creation_timestamp": "2026-07-29T12:01:57.555504Z"}, {"uuid": "be54bd28-3b47-4695-a940-ba656574739e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "", "creation_timestamp": "2026-07-30T00:02:15.898875Z"}, {"uuid": "4f7845cd-e727-48cd-baf2-7c3a8da8f331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/sdnv_funkhole/1395", "content": "", "creation_timestamp": "2026-07-30T00:02:09.422182Z"}, {"uuid": "52ffdb06-4a31-4aed-9dec-c5b338c1c89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "seen", "source": "https://t.me/sysadm_in_up/2274", "content": "", "creation_timestamp": "2026-07-30T00:03:02.376697Z"}, {"uuid": "708f01cd-97de-4c0a-92a9-2213d02cf3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/sdnv_funkhole/1395", "content": "", "creation_timestamp": "2026-08-01T20:00:06.151078Z"}, {"uuid": "fb2c9536-1df7-4875-b84c-f5cc239fcbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/sdnv_funkhole/1395", "content": "", "creation_timestamp": "2026-08-02T00:00:22.299882Z"}, {"uuid": "8253db83-02a5-4985-83a9-fd744dbec835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "", "creation_timestamp": "2026-08-02T03:00:04.677749Z"}, {"uuid": "4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "", "creation_timestamp": "2026-08-03T02:14:00.846511Z"}, {"uuid": "785d04ab-18eb-40bb-be0e-e1b799cc9bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46715", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T04:48:37.032479Z"}, {"uuid": "c8a7e1e5-1bc4-4ed9-a39f-941648b37794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46770", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T05:16:13.328854Z"}, {"uuid": "67c96f39-3fb9-4270-ad2a-e9dce82ee867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-46538", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2274", "content": "", "creation_timestamp": "2026-08-04T00:00:05.799296Z"}, {"uuid": "2ed302e2-894e-4efc-b2ba-4a4b711bc13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/linuxkalii/938", "content": "", "creation_timestamp": "2026-08-06T03:00:04.576599Z"}, {"uuid": "8b7f8b79-1a0b-4260-aa3a-a783b054fdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/linuxkalii/859", "content": "", "creation_timestamp": "2026-08-06T03:00:04.050670Z"}, {"uuid": "220650dd-5379-4e0b-a98b-21253df3f07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4610", "type": "exploited", "source": "https://t.me/linuxkalii/938", "content": "", "creation_timestamp": "2026-08-07T00:44:14.495904Z"}, {"uuid": "964b2ce6-0e31-4707-ad30-decf2dcf09e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-4671", "type": "exploited", "source": "https://t.me/linuxkalii/859", "content": "", "creation_timestamp": "2026-08-07T00:40:12.209666Z"}]}